@voltro/runtime 0.9.0 → 0.11.0

package/dist/index.js

@@ -1,24 +1,24 @@
-import { ENCRYPTED_PREFIX as e, and as t, attachEagerLoads as n, boolean as r, clearRetentions as i, collectSubqueries as a, contains as o, decryptFieldsOnRead as s, deserializeArraysOnRead as c, encryptFieldsForWrite as l, eq as u, evaluatePredicate as d, generateId as f, getRelations as p, getTable as m, gt as h, gte as g, hasEagerLoads as _, id as v, inSet as y, integer as b, isEncrypted as x, isNull as S, json as C, listRetentions as ee, lt as w, lte as te, neq as T, or as ne, queryFor as re, registerRetention as ie, requireTable as ae, retentionTtlMsFromEnv as oe, serializeArraysForWrite as se, sweepRetention as ce, table as E, text as D, timestamp as O, walkLeaves as le } from "@voltro/database";
-import { createCipheriv as ue, createDecipheriv as de, createHash as fe, randomBytes as pe, randomUUID as me, scryptSync as he } from "node:crypto";
-import { EventEmitter as ge } from "node:events";
-import { ADMIN_SCOPE as _e, ConnectionHandshakeFailed as k, ConnectionInfo as ve, ConnectionKindMismatch as ye, ConnectionNotDeclared as be, ConnectionSubjectRequired as xe, SubjectService as Se, UndoConflict as Ce, UndoForbidden as we, UndoNotFound as Te, WorkflowRunHandleSchema as Ee, checkGuardsEffect as De, diffRows as Oe, effectiveScopes as ke, hasEffectiveScope as Ae, isIdKeyed as je, publishServerError as Me, requireScope as Ne, setPolicyGuardResolver as Pe, systemSubject as Fe, tsMs as Ie } from "@voltro/protocol";
-import { createLogger as A } from "@voltro/logger";
-import { Cause as j, Clock as Le, Context as Re, Cron as ze, Deferred as Be, Duration as Ve, Effect as M, Either as He, Exit as Ue, Layer as N, ManagedRuntime as We, Metric as P, MetricBoundaries as Ge, MetricState as Ke, Option as F, Ref as I, Schedule as qe, Schema as L, Stream as R, Tracer as Je } from "effect";
-import * as Ye from "node:http";
-import { createServer as Xe } from "node:http";
-import { HttpClient as Ze, HttpClientRequest as Qe, HttpLayerRouter as z, HttpServer as $e, HttpServerRequest as et, HttpServerResponse as B } from "@effect/platform";
-import { NodeContext as tt, NodeHttpServer as nt, NodeRuntime as rt } from "@effect/platform-node";
-import { Rpc as it, RpcSerialization as at, RpcServer as ot } from "@effect/rpc";
-import { defineRestRoute as st, dispatchSharedPath as ct, requireScope as lt } from "@voltro/protocol/rest";
-import { AsyncLocalStorage as ut } from "node:async_hooks";
-import { SpanKind as dt, SpanStatusCode as ft } from "@opentelemetry/api";
-import { Kv as pt, KvError as mt, KvStore as ht, layerConnections as gt, layerMemory as _t, layerRedis as vt } from "@voltro/kv";
-import { apiKeyStrategy as yt } from "@voltro/protocol/apikey";
-import { getCurrentWorkflowExecutionId as bt, inspectWorkflow as xt } from "@voltro/workflow";
-import { ArrayFormatter as St } from "effect/ParseResult";
-import { spawn as Ct } from "node:child_process";
+import { ENCRYPTED_PREFIX as e, and as t, attachEagerLoads as n, boolean as r, clearRetentions as i, collectSubqueries as a, contains as o, decryptFieldsOnRead as s, deserializeArraysOnRead as c, encryptFieldsForWrite as l, eq as u, evaluatePredicate as d, generateId as f, getRelations as p, getTable as m, gt as h, gte as g, hasEagerLoads as _, id as v, inSet as y, integer as b, isEncrypted as x, isNull as S, json as C, listRetentions as ee, lt as te, lte as ne, neq as w, or as re, queryFor as ie, raiseChangeListenerCeiling as ae, registerRetention as oe, requireTable as se, retentionTtlMsFromEnv as ce, serializeArraysForWrite as le, stampGeneratedId as ue, sweepRetention as de, table as T, text as E, timestamp as D, walkLeaves as fe } from "@voltro/database";
+import { createCipheriv as pe, createDecipheriv as me, createHash as he, randomBytes as ge, randomUUID as _e, scryptSync as ve } from "node:crypto";
+import { EventEmitter as ye } from "node:events";
+import { ADMIN_SCOPE as be, ConnectionHandshakeFailed as O, ConnectionInfo as xe, ConnectionKindMismatch as Se, ConnectionNotDeclared as Ce, ConnectionSubjectRequired as we, SubjectService as Te, UndoConflict as Ee, UndoForbidden as De, UndoNotFound as Oe, WorkflowRunHandleSchema as ke, checkGuardsEffect as Ae, diffRows as je, effectiveScopes as Me, hasEffectiveScope as Ne, isIdKeyed as Pe, publishServerError as Fe, requireScope as Ie, setPolicyGuardResolver as Le, systemSubject as Re, tsMs as ze } from "@voltro/protocol";
+import { createLogger as k } from "@voltro/logger";
+import { Cause as A, Clock as Be, Context as Ve, Cron as j, Deferred as He, Duration as Ue, Effect as M, Either as We, Exit as Ge, Layer as N, ManagedRuntime as Ke, Metric as P, MetricBoundaries as qe, MetricState as Je, Option as F, Ref as I, Schedule as Ye, Schema as L, Stream as R, Tracer as Xe } from "effect";
+import * as Ze from "node:http";
+import { createServer as Qe } from "node:http";
+import { HttpClient as $e, HttpClientRequest as et, HttpLayerRouter as z, HttpServer as tt, HttpServerRequest as nt, HttpServerResponse as B } from "@effect/platform";
+import { NodeContext as rt, NodeHttpServer as it, NodeRuntime as at } from "@effect/platform-node";
+import { Rpc as ot, RpcSerialization as st, RpcServer as ct } from "@effect/rpc";
+import { defineRestRoute as lt, dispatchSharedPath as ut, requireScope as dt } from "@voltro/protocol/rest";
+import { AsyncLocalStorage as ft } from "node:async_hooks";
+import { SpanKind as pt, SpanStatusCode as mt } from "@opentelemetry/api";
+import { Kv as ht, KvError as gt, KvStore as _t, layerConnections as vt, layerMemory as yt, layerRedis as bt } from "@voltro/kv";
+import { apiKeyStrategy as xt } from "@voltro/protocol/apikey";
+import { getCurrentWorkflowExecutionId as St, inspectWorkflow as Ct } from "@voltro/workflow";
+import { ArrayFormatter as wt } from "effect/ParseResult";
+import { spawn as Tt } from "node:child_process";
 //#region src/matcher.ts
-var wt = class {
+var Et = class {
 	byTable = /* @__PURE__ */ new Map();
 	register(e) {
 		let t = this.byTable.get(e.table);
@@ -59,9 +59,9 @@ var wt = class {
 		});
 		return { perTable: e };
 	}
-}, Tt = (e) => {
+}, Dt = (e) => {
 	let t = [];
-	for (let n of le(e)) n.conjunctive && n.path === void 0 && (n.op === "eq" && t.push({
+	for (let n of fe(e)) n.conjunctive && n.path === void 0 && (n.op === "eq" && t.push({
 		column: n.column,
 		values: [n.value]
 	}), n.op === "in" && t.push({
@@ -69,18 +69,18 @@ var wt = class {
 		values: n.value
 	}));
 	return t;
-}, Et = (e) => {
+}, Ot = (e) => {
 	let t = [];
-	for (let n of le(e)) n.conjunctive && n.path === void 0 && (n.op === "gt" || n.op === "gte" || n.op === "lt" || n.op === "lte") && t.push({
+	for (let n of fe(e)) n.conjunctive && n.path === void 0 && (n.op === "gt" || n.op === "gte" || n.op === "lt" || n.op === "lte") && t.push({
 		column: n.column,
 		op: n.op,
 		threshold: n.value
 	});
 	return t;
-}, Dt = (e, t) => {
-	for (let n of le(e)) if (n.conjunctive && n.path === void 0 && n.op === "eq" && n.column === t) return n.value;
+}, kt = (e, t) => {
+	for (let n of fe(e)) if (n.conjunctive && n.path === void 0 && n.op === "eq" && n.column === t) return n.value;
 	return null;
-}, Ot = (e, t) => {
+}, At = (e, t) => {
 	let n = [];
 	for (let r of e) {
 		let e = t(r);
@@ -88,8 +88,8 @@ var wt = class {
 		n.push(`${typeof e}:${String(e)}`);
 	}
 	return n.join("|");
-}, kt = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, At = (e, t, n) => {
-	let r = kt(e, n);
+}, jt = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, Mt = (e, t, n) => {
+	let r = jt(e, n);
 	if (r === null) return !1;
 	switch (t) {
 		case "gt": return r > 0;
@@ -97,7 +97,7 @@ var wt = class {
 		case "lt": return r < 0;
 		case "lte": return r <= 0;
 	}
-}, jt = class {
+}, Nt = class {
 	columnByTable = /* @__PURE__ */ new Map();
 	rangeByTable = /* @__PURE__ */ new Map();
 	tupleByTable = /* @__PURE__ */ new Map();
@@ -105,9 +105,9 @@ var wt = class {
 	subscriptions = /* @__PURE__ */ new Map();
 	register(e) {
 		this.columnByTable.has(e.table) || this.columnByTable.set(e.table, /* @__PURE__ */ new Map()), this.rangeByTable.has(e.table) || this.rangeByTable.set(e.table, /* @__PURE__ */ new Map()), this.tupleByTable.has(e.table) || this.tupleByTable.set(e.table, /* @__PURE__ */ new Map()), this.unindexedByTable.has(e.table) || this.unindexedByTable.set(e.table, /* @__PURE__ */ new Set());
-		let t = Tt(e.predicate), n = Et(e.predicate);
+		let t = Dt(e.predicate), n = Ot(e.predicate);
 		if (e.usingIndex !== void 0) {
-			let r = e.usingIndex, i = Ot(r.fields, (t) => Dt(e.predicate, t));
+			let r = e.usingIndex, i = At(r.fields, (t) => kt(e.predicate, t));
 			if (i !== null) {
 				let a = `${r.name}|${i}`, o = this.tupleByTable.get(e.table), s = o.get(a);
 				s || (s = /* @__PURE__ */ new Set(), o.set(a, s)), s.add(e.id), this.subscriptions.set(e.id, {
@@ -252,7 +252,7 @@ var wt = class {
 				}
 			}
 			for (let [e, a] of i) {
-				let i = Ot(a, (e) => t[e]);
+				let i = At(a, (e) => t[e]);
 				if (i === null) continue;
 				let o = r.get(`${e}|${i}`);
 				if (o) for (let e of o) n.add(e);
@@ -266,7 +266,7 @@ var wt = class {
 		let a = this.rangeByTable.get(e);
 		if (a) for (let [e, r] of a) {
 			let i = t[e];
-			if (i !== null) for (let [e, t] of r) for (let r of t) At(i, e, r.threshold) && n.add(r.subId);
+			if (i !== null) for (let [e, t] of r) for (let r of t) Mt(i, e, r.threshold) && n.add(r.subId);
 		}
 		return n;
 	}
@@ -275,7 +275,7 @@ var wt = class {
 			let e = t[n.column];
 			if (n.kind === "eq") {
 				if (e !== n.value) return !1;
-			} else if (!At(e, n.op, n.threshold)) return !1;
+			} else if (!Mt(e, n.op, n.threshold)) return !1;
 		}
 		return !0;
 	}
@@ -297,23 +297,23 @@ var wt = class {
 		}
 		return i;
 	}
-}, Mt = (e) => {
+}, Pt = (e) => {
 	if (e == null) return null;
-	if (Array.isArray(e)) return e.map(Mt);
+	if (Array.isArray(e)) return e.map(Pt);
 	if (typeof e == "object") {
 		let t = e, n = Object.keys(t).sort(), r = {};
-		for (let e of n) r[e] = Mt(t[e]);
+		for (let e of n) r[e] = Pt(t[e]);
 		return r;
 	}
 	return e;
-}, Nt = (e, t, n) => {
-	let r = Mt({
+}, Ft = (e, t, n) => {
+	let r = Pt({
 		table: e,
 		predicate: t,
 		indexHint: n ?? null
 	});
-	return fe("sha256").update(JSON.stringify(r)).digest("hex").slice(0, 16);
-}, Pt = class {
+	return he("sha256").update(JSON.stringify(r)).digest("hex").slice(0, 16);
+}, It = class {
 	matcher;
 	byFingerprint = /* @__PURE__ */ new Map();
 	byClient = /* @__PURE__ */ new Map();
@@ -332,7 +332,7 @@ var wt = class {
 		} catch {}
 	}
 	subscribe(e, t, n, r) {
-		let i = Nt(t, n, r?.name), a = this.byFingerprint.get(i);
+		let i = Ft(t, n, r?.name), a = this.byFingerprint.get(i);
 		return a ? (a.subscribers.add(e), this.byClient.set(e, i), this.notifyChange(), {
 			fingerprint: i,
 			deduplicated: !0
@@ -390,7 +390,7 @@ var wt = class {
 		});
 		return e;
 	}
-}, Ft = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
+}, Lt = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
 	for (let r of t) {
 		let t = e[r.column], i = n[r.column];
 		if (t === i) continue;
@@ -400,7 +400,7 @@ var wt = class {
 		return r.direction === "asc" ? a : -a;
 	}
 	return 0;
-}), It = (e, t, n) => {
+}), Rt = (e, t, n) => {
 	let r = t.split("."), i = r[0], a = r.slice(1), o = (e) => typeof e == "object" && !!e && !Array.isArray(e), s = e[i], c;
 	if (a.length === 0) c = o(s) && o(n) ? {
 		...s,
@@ -418,11 +418,11 @@ var wt = class {
 		...e,
 		[i]: c
 	};
-}, Lt = (e, t, n) => !e || d(e, t, n), V = (e, t) => {
+}, zt = (e, t, n) => !e || d(e, t, n), V = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	if (!e) return n;
 	for (let r of a(e)) {
-		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = V(r.descriptor.predicate, t), a = Rt(r.descriptor, e, t, i);
+		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = V(r.descriptor.predicate, t), a = Bt(r.descriptor, e, t, i);
 		if (r.kind === "exists") n.set(r.descriptor, a.length);
 		else {
 			let e = r.descriptor.projection, t = /* @__PURE__ */ new Set();
@@ -437,15 +437,15 @@ var wt = class {
 		}
 	}
 	return n;
-}, Rt = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
-	let i = r ?? V(e.predicate, n), a = [...t.values()].filter((t) => Lt(e.predicate, t, i));
+}, Bt = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
+	let i = r ?? V(e.predicate, n), a = [...t.values()].filter((t) => zt(e.predicate, t, i));
 	if (e.aggregations && e.aggregations.length > 0) {
-		let t = zt(a, e.aggregations, e.groupBy);
+		let t = Vt(a, e.aggregations, e.groupBy);
 		if (!e.having) return t;
 		let r = V(e.having, n);
-		return t.filter((t) => Lt(e.having, t, r));
+		return t.filter((t) => zt(e.having, t, r));
 	}
-	let o = Ft(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
+	let o = Lt(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
 	if (!e.projection) return c;
 	let l = e.projection;
 	return c.map((e) => {
@@ -453,7 +453,7 @@ var wt = class {
 		for (let n of l) t[n] = e[n];
 		return t;
 	});
-}, zt = (e, t, n) => {
+}, Vt = (e, t, n) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		let e = {};
@@ -471,11 +471,11 @@ var wt = class {
 	let i = [];
 	for (let e of r.values()) {
 		let n = { ...e.keyVals };
-		for (let r of t) n[r.alias] = Bt(r, e.rows);
+		for (let r of t) n[r.alias] = Ht(r, e.rows);
 		i.push(n);
 	}
 	return i;
-}, Bt = (e, t) => {
+}, Ht = (e, t) => {
 	switch (e.op) {
 		case "count": return e.column === void 0 ? t.length : t.reduce((t, n) => t + +(n[e.column] !== null && n[e.column] !== void 0), 0);
 		case "count-distinct": {
@@ -519,7 +519,7 @@ var wt = class {
 		}
 		default: throw Error(`computeAggregates: unknown op '${e.op}'`);
 	}
-}, Vt = "\0", Ht = (e, t) => e === null ? t : `${e}${Vt}${t}`, Ut = class e {
+}, Ut = "\0", Wt = (e, t) => e === null ? t : `${e}${Ut}${t}`, Gt = class e {
 	#e;
 	#t;
 	#n;
@@ -529,13 +529,13 @@ var wt = class {
 		return r.#e = t.tables, r.#t = t.emitter, r.#n = t.numericCounters, r;
 	}
 	constructor(e, t = null) {
-		if (this.#r = t, this.#e = /* @__PURE__ */ new Map(), this.#t = new ge(), this.#n = /* @__PURE__ */ new Map(), e) for (let [n, r] of Object.entries(e)) {
+		if (this.#r = t, this.#e = /* @__PURE__ */ new Map(), this.#t = new ye(), ae(this.#t), this.#n = /* @__PURE__ */ new Map(), e) for (let [n, r] of Object.entries(e)) {
 			let e = /* @__PURE__ */ new Map();
 			for (let t of r) {
 				let n = t.id;
 				n && e.set(n, t);
 			}
-			this.#e.set(Ht(t, n), e);
+			this.#e.set(Wt(t, n), e);
 		}
 	}
 	withNamespace(t) {
@@ -546,11 +546,11 @@ var wt = class {
 		}, t);
 	}
 	#a(e) {
-		return Ht(this.#r, e);
+		return Wt(this.#r, e);
 	}
 	#o() {
-		let e = /* @__PURE__ */ new Map(), t = this.#r === null ? null : `${this.#r}${Vt}`;
-		for (let [n, r] of this.#e) t === null ? n.includes(Vt) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
+		let e = /* @__PURE__ */ new Map(), t = this.#r === null ? null : `${this.#r}${Ut}`;
+		for (let [n, r] of this.#e) t === null ? n.includes(Ut) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
 		return e;
 	}
 	#s(e) {
@@ -558,10 +558,11 @@ var wt = class {
 		return n || (n = /* @__PURE__ */ new Map(), this.#e.set(t, n)), n;
 	}
 	async query(e) {
-		let t = Rt(e, this.#e.get(this.#a(e.table)) ?? /* @__PURE__ */ new Map(), this.#o());
-		return _(e) ? n(t, e.eager, ae(e.table), (e) => this.query(e)) : t;
+		let t = Bt(e, this.#e.get(this.#a(e.table)) ?? /* @__PURE__ */ new Map(), this.#o());
+		return _(e) ? n(t, e.eager, se(e.table), (e) => this.query(e)) : t;
 	}
 	async insert(e, t) {
+		t = ue(e, t);
 		let n = t;
 		if (n.id === void 0) {
 			let r = this.#c(e);
@@ -588,7 +589,7 @@ var wt = class {
 		if (!i) return null;
 		let a = i.get(t);
 		if (!a) return null;
-		let o = It(a, n, r);
+		let o = Rt(a, n, r);
 		return i.set(t, o), this.#t.emit("change", {
 			table: e,
 			op: "update",
@@ -688,7 +689,7 @@ var wt = class {
 		}
 	}
 	async transactional(e) {
-		let t = new Wt(this.#u());
+		let t = new Kt(this.#u());
 		try {
 			let n = await e(t);
 			return t.commit(), n;
@@ -724,7 +725,7 @@ var wt = class {
 			allocateNumericId: (e) => this.#c(e)
 		};
 	}
-}, Wt = class {
+}, Kt = class {
 	parent;
 	overlay = /* @__PURE__ */ new Map();
 	tombstones = /* @__PURE__ */ new Map();
@@ -754,10 +755,11 @@ var wt = class {
 		return t || (t = /* @__PURE__ */ new Map(), this.overlay.set(e, t)), t;
 	}
 	async query(e) {
-		let t = this.buildTablesView(e), r = Rt(e, this.materialise(e.table), t);
-		return _(e) ? n(r, e.eager, ae(e.table), (e) => this.query(e)) : r;
+		let t = this.buildTablesView(e), r = Bt(e, this.materialise(e.table), t);
+		return _(e) ? n(r, e.eager, se(e.table), (e) => this.query(e)) : r;
 	}
 	async insert(e, t) {
+		t = ue(e, t);
 		let n = t;
 		n.id === void 0 && (n = {
 			...t,
@@ -793,7 +795,7 @@ var wt = class {
 	async patchJson(e, t, n, r) {
 		let i = this.materialise(e).get(t);
 		if (!i) return null;
-		let a = It(i, n, r);
+		let a = Rt(i, n, r);
 		return this.getOrCreateOverlay(e).set(t, a), this.events.push({
 			table: e,
 			op: "update",
@@ -894,7 +896,7 @@ var wt = class {
 	discard() {
 		this.settled || (this.settled = !0, this.overlay.clear(), this.tombstones.clear(), this.events.length = 0);
 	}
-}, Gt = (e) => {
+}, qt = (e) => {
 	let t = {}, n = [], r = e;
 	for (let e = 0; e < 8 && typeof r == "object" && r; e++) {
 		let e = r;
@@ -905,23 +907,23 @@ var wt = class {
 		(o || s) && n.push(`${o || "Error"}${s ? `: ${s.slice(0, 200)}` : ""}`), r = e.cause;
 	}
 	return n.length > 0 && (t.dbCauseChain = n.join(" ← "), t.dbMessage === void 0 && (t.dbMessage = n[n.length - 1])), t;
-}, Kt = (e) => {
+}, Jt = (e) => {
 	let t = e.dbCode;
 	return t === "23503" || e.dbErrno === 1452 || t === 547 || t === "SQLITE_CONSTRAINT_FOREIGNKEY";
-}, qt = (e) => ({
-	has: (t) => Ae(e, t),
-	hasAny: (t) => t.some((t) => Ae(e, t)),
-	require: (t) => Ne(e, t),
+}, Yt = (e) => ({
+	has: (t) => Ne(e, t),
+	hasAny: (t) => t.some((t) => Ne(e, t)),
+	require: (t) => Ie(e, t),
 	get scopes() {
-		return ke(e);
+		return Me(e);
 	}
-}), Jt = (e) => {
+}), Xt = (e) => {
 	let t = /* @__PURE__ */ new Set();
-	return Yt(e, t), t;
-}, Yt = (e, t) => {
-	if (t.add(e.table), e.eager !== void 0 && Xt(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) Yt(n, t);
-	if (e.ctes !== void 0) for (let n of e.ctes) Yt(n.descriptor, t);
-}, Xt = (e, t, n) => {
+	return Zt(e, t), t;
+}, Zt = (e, t) => {
+	if (t.add(e.table), e.eager !== void 0 && Qt(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) Zt(n, t);
+	if (e.ctes !== void 0) for (let n of e.ctes) Zt(n.descriptor, t);
+}, Qt = (e, t, n) => {
 	let r = p(e);
 	if (r !== void 0) for (let [e, i] of Object.entries(t)) {
 		let t = r[e];
@@ -929,24 +931,24 @@ var wt = class {
 		let a = i === !0 ? {} : i;
 		if (t.kind === "manyToMany") {
 			let e = t.through().tableName, r = t.target().tableName;
-			n.add(e), n.add(r), a.with !== void 0 && Xt(r, a.with, n);
+			n.add(e), n.add(r), a.with !== void 0 && Qt(r, a.with, n);
 		} else {
 			let e = t.target().tableName;
-			n.add(e), a.with !== void 0 && Xt(e, a.with, n);
+			n.add(e), a.with !== void 0 && Qt(e, a.with, n);
 		}
 	}
-}, Zt = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), Qt = /* @__PURE__ */ new Set(["*"]), $t = (e, t) => {
+}, $t = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), en = /* @__PURE__ */ new Set(["*"]), tn = (e, t) => {
 	if (e !== void 0) {
 		if ("not" in e) {
-			$t(e.not, t);
+			tn(e.not, t);
 			return;
 		}
 		if ("and" in e) {
-			for (let n of e.and) $t(n, t);
+			for (let n of e.and) tn(n, t);
 			return;
 		}
 		if ("or" in e) {
-			for (let n of e.or) $t(n, t);
+			for (let n of e.or) tn(n, t);
 			return;
 		}
 		if (e.op === "subquery-in" || e.op === "subquery-not-in") {
@@ -959,7 +961,7 @@ var wt = class {
 	let r = e.get(t);
 	r === void 0 && (r = /* @__PURE__ */ new Set(), e.set(t, r));
 	for (let e of n) r.add(e);
-}, en = (e, t, n) => {
+}, nn = (e, t, n) => {
 	let r = p(e);
 	if (r !== void 0) for (let [i, a] of Object.entries(t)) {
 		let t = r[i];
@@ -967,65 +969,65 @@ var wt = class {
 		let o = a === !0 ? {} : a;
 		if (t.kind === "manyToMany") {
 			let r = t.through(), i = t.target();
-			H(n, r.tableName, [t.sourceKey, t.targetKey]), H(n, e, ["id"]), H(n, i.tableName, ["id"]), tn(i.tableName, o, n), o.with !== void 0 && en(i.tableName, o.with, n);
+			H(n, r.tableName, [t.sourceKey, t.targetKey]), H(n, e, ["id"]), H(n, i.tableName, ["id"]), rn(i.tableName, o, n), o.with !== void 0 && nn(i.tableName, o.with, n);
 			continue;
 		}
 		let s = t.target();
-		t.foreignKey !== void 0 && H(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? H(n, e, ["id"]) : H(n, e, [t.sourceKey]), H(n, s.tableName, ["id"]), tn(s.tableName, o, n), o.with !== void 0 && en(s.tableName, o.with, n);
+		t.foreignKey !== void 0 && H(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? H(n, e, ["id"]) : H(n, e, [t.sourceKey]), H(n, s.tableName, ["id"]), rn(s.tableName, o, n), o.with !== void 0 && nn(s.tableName, o.with, n);
 	}
-}, tn = (e, t, n) => {
+}, rn = (e, t, n) => {
 	if (t.where !== void 0) {
 		let r = /* @__PURE__ */ new Set();
-		$t(t.where, r), H(n, e, r);
+		tn(t.where, r), H(n, e, r);
 	}
 	t.orderBy !== void 0 && H(n, e, t.orderBy.map((e) => e.column));
 	let r = m(e);
 	r === void 0 ? H(n, e, ["*"]) : H(n, e, Object.keys(r.fields));
-}, nn = (e) => {
+}, an = (e) => {
 	let t = /* @__PURE__ */ new Map();
-	if (Zt(e)) {
-		for (let n of Jt(e)) H(t, n, ["*"]);
+	if ($t(e)) {
+		for (let n of Xt(e)) H(t, n, ["*"]);
 		return t;
 	}
 	let n = /* @__PURE__ */ new Set();
 	if (e.projection !== void 0) for (let t of e.projection) n.add(t);
 	else n.add("*");
-	$t(e.predicate, n);
+	tn(e.predicate, n);
 	for (let t of e.order) n.add(t.column);
-	return H(t, e.table, n), e.eager !== void 0 && en(e.table, e.eager, t), t;
-}, rn = (e) => {
-	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return Qt;
+	return H(t, e.table, n), e.eager !== void 0 && nn(e.table, e.eager, t), t;
+}, on = (e) => {
+	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return en;
 	let t = /* @__PURE__ */ new Set(), n = e.old, r = e.new, i = /* @__PURE__ */ new Set([...Object.keys(n), ...Object.keys(r)]);
 	for (let e of i) Object.is(n[e], r[e]) || t.add(e);
 	return t;
-}, an = (e, t) => {
+}, sn = (e, t) => {
 	let n = t.get(e.table);
 	if (n === void 0) return !1;
 	if (n.has("*")) return !0;
-	let r = rn(e);
+	let r = on(e);
 	if (r.has("*")) return !0;
 	for (let e of r) if (n.has(e)) return !0;
 	return !1;
-}, on = Ge.exponential({
+}, cn = qe.exponential({
 	start: .001,
 	factor: 2,
 	count: 16
-}), sn = P.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), cn = P.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), ln = P.histogram("voltro_rpc_duration_seconds", on, "RPC handler duration in seconds."), un = P.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), dn = P.histogram("voltro_http_duration_seconds", on, "HTTP route duration in seconds."), fn = P.histogram("voltro_plugin_hook_duration_seconds", on, "Plugin interceptor duration in seconds."), pn = P.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), mn = P.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), hn = P.histogram("voltro_subscription_delivery_seconds", on, "Subscription delivery produce→push latency in seconds."), gn = P.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), _n = (e) => {
-	let t = e.durationMs / 1e3, n = e.kind === "rpc" ? M.zipRight(P.increment(sn).pipe(M.tagMetrics("tag", e.tag), M.tagMetrics("status", e.status)), M.zipRight(P.update(ln, t).pipe(M.tagMetrics("tag", e.tag)), e.status === "error" ? P.increment(cn).pipe(M.tagMetrics("tag", e.tag)) : M.void)) : e.kind === "request" ? M.zipRight(P.increment(un).pipe(M.tagMetrics("route", e.tag), M.tagMetrics("status", e.status)), P.update(dn, t).pipe(M.tagMetrics("route", e.tag))) : M.zipRight(P.update(fn, t).pipe(M.tagMetrics("hook", e.tag)), e.status === "error" ? P.increment(pn).pipe(M.tagMetrics("hook", e.tag)) : M.void);
+}), ln = P.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), un = P.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), dn = P.histogram("voltro_rpc_duration_seconds", cn, "RPC handler duration in seconds."), fn = P.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), pn = P.histogram("voltro_http_duration_seconds", cn, "HTTP route duration in seconds."), mn = P.histogram("voltro_plugin_hook_duration_seconds", cn, "Plugin interceptor duration in seconds."), hn = P.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), gn = P.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), _n = P.histogram("voltro_subscription_delivery_seconds", cn, "Subscription delivery produce→push latency in seconds."), vn = P.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), yn = (e) => {
+	let t = e.durationMs / 1e3, n = e.kind === "rpc" ? M.zipRight(P.increment(ln).pipe(M.tagMetrics("tag", e.tag), M.tagMetrics("status", e.status)), M.zipRight(P.update(dn, t).pipe(M.tagMetrics("tag", e.tag)), e.status === "error" ? P.increment(un).pipe(M.tagMetrics("tag", e.tag)) : M.void)) : e.kind === "request" ? M.zipRight(P.increment(fn).pipe(M.tagMetrics("route", e.tag), M.tagMetrics("status", e.status)), P.update(pn, t).pipe(M.tagMetrics("route", e.tag))) : M.zipRight(P.update(mn, t).pipe(M.tagMetrics("hook", e.tag)), e.status === "error" ? P.increment(hn).pipe(M.tagMetrics("hook", e.tag)) : M.void);
 	M.runSync(n);
-}, vn = (e) => e.startsWith("subscription.") ? e.slice(13) : e, yn = (e) => {
-	let t = vn(e.label);
-	M.runSync(M.zipRight(P.increment(mn).pipe(M.tagMetrics("tag", t), M.tagMetrics("kind", e.kind)), P.update(hn, e.durationMs / 1e3).pipe(M.tagMetrics("tag", t), M.tagMetrics("kind", e.kind))));
-}, bn = /* @__PURE__ */ new Map(), U = (e, t) => {
-	let n = vn(e), r = Math.max(0, (bn.get(n) ?? 0) + t);
-	r === 0 ? bn.delete(n) : bn.set(n, r), M.runSync(P.set(gn, r).pipe(M.tagMetrics("tag", n)));
-}, xn = (e, t) => P.counter(e, t === void 0 ? {} : { description: t }), Sn = (e, t) => P.gauge(e, t === void 0 ? {} : { description: t }), Cn = (e, t = on, n) => P.histogram(e, t, n), wn = (e) => {
+}, bn = (e) => e.startsWith("subscription.") ? e.slice(13) : e, xn = (e) => {
+	let t = bn(e.label);
+	M.runSync(M.zipRight(P.increment(gn).pipe(M.tagMetrics("tag", t), M.tagMetrics("kind", e.kind)), P.update(_n, e.durationMs / 1e3).pipe(M.tagMetrics("tag", t), M.tagMetrics("kind", e.kind))));
+}, Sn = /* @__PURE__ */ new Map(), U = (e, t) => {
+	let n = bn(e), r = Math.max(0, (Sn.get(n) ?? 0) + t);
+	r === 0 ? Sn.delete(n) : Sn.set(n, r), M.runSync(P.set(vn, r).pipe(M.tagMetrics("tag", n)));
+}, Cn = (e, t) => P.counter(e, t === void 0 ? {} : { description: t }), wn = (e, t) => P.gauge(e, t === void 0 ? {} : { description: t }), Tn = (e, t = cn, n) => P.histogram(e, t, n), En = (e) => {
 	let t = {};
 	for (let n of e) t[n.key] = n.value;
 	return t;
-}, Tn = P.snapshot.pipe(M.map((e) => e.map((e) => {
-	let t = e.metricKey.name, n = wn(e.metricKey.tags), r = F.getOrUndefined(e.metricKey.description), i = r === void 0 ? {} : { description: r }, a = e.metricState;
-	if (Ke.isHistogramState(a)) return {
+}, Dn = P.snapshot.pipe(M.map((e) => e.map((e) => {
+	let t = e.metricKey.name, n = En(e.metricKey.tags), r = F.getOrUndefined(e.metricKey.description), i = r === void 0 ? {} : { description: r }, a = e.metricState;
+	if (Je.isHistogramState(a)) return {
 		name: t,
 		labels: n,
 		...i,
@@ -1037,14 +1039,14 @@ var wt = class {
 		sum: a.sum,
 		count: a.count
 	};
-	if (Ke.isGaugeState(a)) return {
+	if (Je.isGaugeState(a)) return {
 		name: t,
 		labels: n,
 		...i,
 		type: "gauge",
 		value: Number(a.value)
 	};
-	if (Ke.isSummaryState(a)) return {
+	if (Je.isSummaryState(a)) return {
 		name: t,
 		labels: n,
 		...i,
@@ -1056,7 +1058,7 @@ var wt = class {
 			value: t.value
 		}] : [])
 	};
-	if (Ke.isFrequencyState(a)) {
+	if (Je.isFrequencyState(a)) {
 		let e = {};
 		for (let [t, n] of a.occurrences) e[t] = n;
 		return {
@@ -1074,25 +1076,25 @@ var wt = class {
 		type: "counter",
 		value: Number(a.count)
 	};
-}))), En = () => M.runSync(Tn), Dn = class extends L.TaggedError()("RowFilterUnavailable", { cause: L.String }) {}, On = qe.exponential("20 millis").pipe(qe.intersect(qe.recurs(2))), kn, An = (e) => {
-	kn = e;
-}, jn = () => kn, Mn = () => void 0, Nn = (e, t) => Pn(kn, e, t), Pn = (e, t, n) => {
-	if (e === void 0 || t.type === "system") return M.succeed(Mn);
-	let r = e.retry ?? On, i = e.load(t);
-	return (r === !1 ? i : M.retry(i, r)).pipe(M.map((t) => (n) => e.predicate(t, n)), M.catchAll((t) => M.suspend(() => (n?.(t), e.onLoadError === "deny" ? M.succeed(Fn) : M.fail(new Dn({ cause: String(t) }))))));
-}, Fn = () => ({
+}))), On = () => M.runSync(Dn), kn = class extends L.TaggedError()("RowFilterUnavailable", { cause: L.String }) {}, An = Ye.exponential("20 millis").pipe(Ye.intersect(Ye.recurs(2))), jn, Mn = (e) => {
+	jn = e;
+}, Nn = () => jn, Pn = () => void 0, Fn = (e, t) => In(jn, e, t), In = (e, t, n) => {
+	if (e === void 0 || t.type === "system") return M.succeed(Pn);
+	let r = e.retry ?? An, i = e.load(t);
+	return (r === !1 ? i : M.retry(i, r)).pipe(M.map((t) => (n) => e.predicate(t, n)), M.catchAll((t) => M.suspend(() => (n?.(t), e.onLoadError === "deny" ? M.succeed(Ln) : M.fail(new kn({ cause: String(t) }))))));
+}, Ln = () => ({
 	column: "id",
 	op: "isNull"
-}), In = (e, n, r) => {
+}), Rn = (e, n, r) => {
 	let i = e(n);
 	return i === void 0 ? r : r ? t(r, i) : i;
-}, Ln = (e, t) => {
-	let n = In(e, t.table, t.predicate);
+}, zn = (e, t) => {
+	let n = Rn(e, t.table, t.predicate);
 	return n === t.predicate ? t : {
 		...t,
 		predicate: n
 	};
-}, W = A({ scope: "voltro:dispatcher" }), Rn = (e) => typeof e == "object" && !!e && e._tag === "ScopeError", zn = class {
+}, W = k({ scope: "voltro:dispatcher" }), Bn = (e) => Array.isArray(e) ? e.length : e == null ? 0 : 1, Vn = (e) => typeof e == "object" && !!e && e._tag === "ScopeError", Hn = class {
 	deps;
 	subscriptionRegistry;
 	matcher;
@@ -1102,12 +1104,12 @@ var wt = class {
 	computedSubs = /* @__PURE__ */ new Map();
 	computedByTable = /* @__PURE__ */ new Map();
 	constructor(e) {
-		this.deps = e, this.matcher = new jt(), this.subscriptionRegistry = new Pt(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
+		this.deps = e, this.matcher = new Nt(), this.subscriptionRegistry = new It(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
 			this.handleChange(e);
 		});
 	}
 	async subscribe(e, t, n, r, i, a, o, s) {
-		let c = `sub_${me()}`, l = i ?? `subscription.${e.table}`, u = Jt(e), d = nn(e);
+		let c = `sub_${_e()}`, l = i ?? `subscription.${e.table}`, u = Xt(e), d = an(e);
 		e.predicate !== void 0 && this.subscriptionRegistry.subscribe(c, e.table, e.predicate, r);
 		for (let e of u) {
 			let t = this.dependentByTable.get(e);
@@ -1121,7 +1123,7 @@ var wt = class {
 			}
 		}, h, g;
 		try {
-			h = s === void 0 ? e : Ln(await s(), e), g = this.deps.cache !== void 0 && a !== void 0 ? await this.deps.cache.wrap(a, p, () => this.deps.store.query(h)) : await this.deps.store.query(h);
+			h = s === void 0 ? e : zn(await s(), e), g = this.deps.cache !== void 0 && a !== void 0 ? await this.deps.cache.wrap(a, p, () => this.deps.store.query(h)) : await this.deps.store.query(h);
 		} catch (e) {
 			throw m(), e;
 		}
@@ -1188,7 +1190,7 @@ var wt = class {
 		});
 	}
 	async subscribeComputed(e, t, n, r) {
-		let i = `csub_${me()}`, a = e.dependentTables, o = {
+		let i = `csub_${_e()}`, a = e.dependentTables, o = {
 			id: i,
 			recompute: e.recompute,
 			tenantId: e.tenantId,
@@ -1196,7 +1198,7 @@ var wt = class {
 			context: n,
 			label: r ?? "subscription.computed",
 			tables: a,
-			lastJson: Bn(e.value),
+			lastJson: Un(e.value),
 			revision: 0
 		};
 		this.computedSubs.set(i, o), U(o.label, 1);
@@ -1217,7 +1219,7 @@ var wt = class {
 			startMs: s,
 			endMs: Date.now(),
 			durationMs: Date.now() - s,
-			rowCount: 1
+			rowCount: Bn(e.value)
 		}), () => {
 			this.computedSubs.delete(i), U(o.label, -1);
 			for (let e of a) {
@@ -1229,7 +1231,7 @@ var wt = class {
 	async recomputeComputed(e) {
 		let t = Date.now();
 		try {
-			let n = await e.recompute(), r = Bn(n);
+			let n = await e.recompute(), r = Un(n);
 			if (r === e.lastJson) return;
 			e.lastJson = r, e.revision += 1;
 			let i = Date.now();
@@ -1245,10 +1247,10 @@ var wt = class {
 				startMs: t,
 				endMs: i,
 				durationMs: i - t,
-				rowCount: 1
+				rowCount: Bn(n)
 			});
 		} catch (t) {
-			if (Rn(t)) {
+			if (Vn(t)) {
 				this.revokeComputed(e, t);
 				return;
 			}
@@ -1301,7 +1303,7 @@ var wt = class {
 				W.trace("missing subscription", { subscriberId: t });
 				continue;
 			}
-			if (!an(e, n.relevantFields)) {
+			if (!sn(e, n.relevantFields)) {
 				o++;
 				continue;
 			}
@@ -1324,21 +1326,21 @@ var wt = class {
 						this.revokeSubscription(n, e, "row filter unavailable");
 						continue;
 					}
-					i = Ln(e, n.baseDescriptor);
+					i = zn(e, n.baseDescriptor);
 				}
 				let o = await this.deps.store.query(i), s = n.lastDelivered;
-				if (Vn(o, s)) {
+				if (Wn(o, s)) {
 					W.trace("suppressed no-op delta", {
 						subscriberId: t,
 						table: e.table
 					});
 					continue;
 				}
-				n.lastDelivered = o, this.deps.cache !== void 0 && n.cacheBinding !== void 0 && this.deps.cache.put(n.cacheBinding, Array.from(n.dependentTables), o), je(s) && je(o) ? n.emit({
+				n.lastDelivered = o, this.deps.cache !== void 0 && n.cacheBinding !== void 0 && this.deps.cache.put(n.cacheBinding, Array.from(n.dependentTables), o), Pe(s) && Pe(o) ? n.emit({
 					_tag: "delta",
 					revision: a,
 					emittedAt: a,
-					patch: Oe(s, o)
+					patch: je(s, o)
 				}) : n.emit({
 					_tag: "snapshot",
 					revision: a,
@@ -1370,44 +1372,44 @@ var wt = class {
 			skipped: o
 		});
 	}
-}, Bn = (e) => {
+}, Un = (e) => {
 	try {
 		return JSON.stringify(e) ?? "null";
 	} catch {
 		return String(e);
 	}
-}, Vn = (e, t) => {
+}, Wn = (e, t) => {
 	if (e === t) return !0;
 	if (e.length !== t.length) return !1;
 	for (let n = 0; n < e.length; n++) if (JSON.stringify(e[n]) !== JSON.stringify(t[n])) return !1;
 	return !0;
-}, Hn = (e) => typeof e == "object" && !!e && e.__voltroComputed === !0, Un = 1440 * 60 * 1e3, Wn = 3600 * 1e3, G = /* @__PURE__ */ new Map(), Gn = /* @__PURE__ */ new Set(), Kn = (e, t) => {
+}, Gn = (e) => typeof e == "object" && !!e && e.__voltroComputed === !0, Kn = 1440 * 60 * 1e3, qn = 3600 * 1e3, G = /* @__PURE__ */ new Map(), Jn = /* @__PURE__ */ new Set(), Yn = (e, t) => {
 	G.set(e, {
 		subject: t,
 		touchedAt: Date.now()
 	});
-	for (let n of Gn) try {
+	for (let n of Jn) try {
 		n(e, t);
 	} catch {}
-}, qn = (e) => {
+}, Xn = (e) => {
 	let t = G.get(e);
 	if (t) return t.touchedAt = Date.now(), t.subject;
-}, Jn = (e) => {
+}, Zn = (e) => {
 	G.delete(e);
-}, Yn = (e) => (Gn.add(e), () => {
-	Gn.delete(e);
-}), Xn = setInterval(() => {
-	let e = Date.now() - Un;
+}, Qn = (e) => (Jn.add(e), () => {
+	Jn.delete(e);
+}), $n = setInterval(() => {
+	let e = Date.now() - Kn;
 	for (let [t, n] of G) n.touchedAt < e && G.delete(t);
-}, Wn);
-typeof Xn == "object" && Xn && "unref" in Xn && Xn.unref();
-var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
+}, qn);
+typeof $n == "object" && $n && "unref" in $n && $n.unref();
+var K = /* @__PURE__ */ new Map(), er = (e, t) => {
 	let n = K.get(e);
 	return n || (n = /* @__PURE__ */ new Set(), K.set(e, n)), n.add(t), () => {
 		let n = K.get(e);
 		n && (n.delete(t), n.size === 0 && K.delete(e));
 	};
-}, Qn = (e) => {
+}, tr = (e) => {
 	let t = K.get(e);
 	if (t) {
 		for (let e of [...t]) try {
@@ -1415,15 +1417,15 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		} catch {}
 		K.delete(e);
 	}
-}, $n = (e) => K.get(e)?.size ?? 0, er = () => {
+}, nr = (e) => K.get(e)?.size ?? 0, rr = () => {
 	G.clear(), K.clear();
-}, tr = () => [...G.entries()].map(([e, t]) => ({
+}, ir = () => [...G.entries()].map(([e, t]) => ({
 	clientId: e,
 	subjectType: t.subject.type,
 	tenantId: t.subject.tenantId
-})), nr = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, rr = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, ir = (e) => {
+})), ar = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, or = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, sr = (e) => {
 	if (typeof e != "string") return null;
-	let t = nr.exec(e.trim().toLowerCase());
+	let t = ar.exec(e.trim().toLowerCase());
 	if (t === null) return null;
 	let [, n, r, i] = t;
 	return n === "0".repeat(32) || r === "0".repeat(16) ? null : {
@@ -1431,14 +1433,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		spanId: r,
 		sampled: (parseInt(i, 16) & 1) == 1
 	};
-}, ar = (e) => {
-	let t = ir(e);
-	if (t !== null) return Je.externalSpan({
+}, cr = (e) => {
+	let t = sr(e);
+	if (t !== null) return Xe.externalSpan({
 		traceId: t.traceId,
 		spanId: t.spanId,
 		sampled: t.sampled
 	});
-}, or = new ut(), sr = (e, t) => or.run(e, t), cr = () => or.getStore(), lr = (e = {}) => {
+}, lr = new ft(), ur = (e, t) => lr.run(e, t), dr = () => lr.getStore(), fr = (e = {}) => {
 	let t = e.random ?? Math.random, n = /* @__PURE__ */ new Map(), r = (e) => n.get(e) ?? 0;
 	return {
 		pick(e) {
@@ -1463,7 +1465,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			}));
 		}
 	};
-}, ur = (e = {}) => {
+}, pr = (e = {}) => {
 	let t = e.thresholdFailures ?? 3, n = e.windowMs ?? 1e4, r = e.blackoutMs ?? 6e4, i = e.now ?? Date.now, a = /* @__PURE__ */ new Map(), o = (e) => {
 		let t = a.get(e);
 		return t === void 0 && (t = {
@@ -1497,7 +1499,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			}));
 		}
 	};
-}, dr = (e = {}) => {
+}, mr = (e = {}) => {
 	let t = e.now ?? Date.now, n = /* @__PURE__ */ new Map();
 	return {
 		get(e) {
@@ -1520,7 +1522,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return n.size;
 		}
 	};
-}, fr = (e, t) => e === null ? t === void 0 ? "anon:bg" : `anon:${t}` : `subject:${e}`, pr = (e) => {
+}, hr = (e, t) => e === null ? t === void 0 ? "anon:bg" : `anon:${t}` : `subject:${e}`, gr = (e) => {
 	let t = e.now ?? Date.now, n = e.keyPrefix ?? "voltro:ryw", r = e.channel ?? `${n}:bus`, i = e.onError ?? ((e, t) => {
 		process.stderr.write(`[voltro:ryw] redis ${t} failed: ${String(e)}\n`);
 	}), a = `${process.pid ?? 0}:${Math.random() * 1e9 | 0}:${t()}`, o = /* @__PURE__ */ new Map(), s = (e) => {
@@ -1579,7 +1581,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return o.size;
 		}
 	};
-}, mr = A({ scope: "voltro:replication" }), hr = new ut(), gr = (e, t) => hr.run(e, t), _r = () => hr.getStore(), vr = class {
+}, _r = k({ scope: "voltro:replication" }), vr = new ft(), yr = (e, t) => vr.run(e, t), br = () => vr.getStore(), xr = class {
 	primary;
 	replicas;
 	adapter;
@@ -1592,10 +1594,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	recordRouting;
 	now;
 	constructor(e) {
-		this.primary = e.primary, this.replicas = e.replicas, this.adapter = e.replicationAdapter, this.policy = e.rywPolicy ?? "fallback", this.rywTtlMs = e.rywTtlMs ?? 3e4, this.rywMaxWaitMs = e.rywMaxWaitMs ?? 500, this.now = e.now ?? Date.now, this.rywStore = e.rywStore ?? dr({ now: this.now }), this.selector = e.replicaSelector ?? lr(), this.health = e.replicaHealth ?? ur({ now: this.now }), e.recordRouting !== void 0 && (this.recordRouting = e.recordRouting);
+		this.primary = e.primary, this.replicas = e.replicas, this.adapter = e.replicationAdapter, this.policy = e.rywPolicy ?? "fallback", this.rywTtlMs = e.rywTtlMs ?? 3e4, this.rywMaxWaitMs = e.rywMaxWaitMs ?? 500, this.now = e.now ?? Date.now, this.rywStore = e.rywStore ?? mr({ now: this.now }), this.selector = e.replicaSelector ?? fr(), this.health = e.replicaHealth ?? pr({ now: this.now }), e.recordRouting !== void 0 && (this.recordRouting = e.recordRouting);
 	}
 	async query(e) {
-		let t = hr.getStore(), n = t?.subjectKey ?? "anon:bg";
+		let t = vr.getStore(), n = t?.subjectKey ?? "anon:bg";
 		if (t?.forcePrimary === !0) return this.emitRouting({
 			target: "primary",
 			replicaIndex: null,
@@ -1659,7 +1661,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				waitMs: 0
 			}), r;
 		} catch (r) {
-			return this.health.reportFailure(i, String(r)), mr.warn("replica query failed; falling back to primary", {
+			return this.health.reportFailure(i, String(r)), _r.warn("replica query failed; falling back to primary", {
 				idx: a,
 				err: r
 			}), this.emitRouting({
@@ -1728,7 +1730,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 					fallbackReason: "wait-timeout"
 				}), this.primary.query(e);
 			}
-			await yr(10);
+			await Sr(10);
 		}
 	}
 	async insert(e, t) {
@@ -1768,8 +1770,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		return await this.stampPostWrite(), r;
 	}
 	async transactional(e) {
-		let t = await gr({
-			subjectKey: hr.getStore()?.subjectKey ?? "anon:bg",
+		let t = await yr({
+			subjectKey: vr.getStore()?.subjectKey ?? "anon:bg",
 			forcePrimary: !0
 		}, () => this.primary.transactional(e));
 		return await this.stampPostWrite(), t;
@@ -1785,7 +1787,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	async stampPostWrite() {
 		if (this.replicas.length === 0) return;
-		let e = hr.getStore()?.subjectKey ?? "anon:bg";
+		let e = vr.getStore()?.subjectKey ?? "anon:bg";
 		try {
 			let t = await this.adapter.capturePrimaryPosition(this.primary);
 			this.rywStore.set(e, {
@@ -1793,37 +1795,37 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				expiresAt: this.now() + this.rywTtlMs
 			});
 		} catch (e) {
-			mr.warn("failed to capture primary position; RYW skipped", { err: e });
+			_r.warn("failed to capture primary position; RYW skipped", { err: e });
 		}
 	}
 	emitRouting(e) {
 		this.recordRouting?.(e);
 	}
-}, yr = (e) => new Promise((t) => setTimeout(t, e)), br = (e, t, n) => ({
+}, Sr = (e) => new Promise((t) => setTimeout(t, e)), Cr = (e, t, n) => ({
 	subject: e,
-	traceId: t?.traceId ?? me(),
+	traceId: t?.traceId ?? _e(),
 	...t?.spanId === void 0 ? {} : { spanId: t.spanId },
 	...n === void 0 ? {} : { clientId: n }
-}), xr = M.currentSpan.pipe(M.catchAll(() => M.succeed(void 0))), Sr = (e) => ({
+}), wr = M.currentSpan.pipe(M.catchAll(() => M.succeed(void 0))), Tr = (e) => ({
 	traceId: e.traceId,
 	...e.spanId === void 0 ? {} : { spanId: e.spanId }
-}), Cr = (e, t, n) => {
+}), Er = (e, t, n) => {
 	e !== void 0 && (e.attribute("rpc.tag", t), e.attribute("subject.type", n.type), n.tenantId !== void 0 && n.tenantId !== null && e.attribute("tenant.id", n.tenantId));
-}, wr = (e) => {
-	if (jn() !== void 0) return async () => {
-		let t = await M.runPromise(M.either(Nn(e, (e) => {
+}, Dr = (e) => {
+	if (Nn() !== void 0) return async () => {
+		let t = await M.runPromise(M.either(Fn(e, (e) => {
 			console.error("[voltro] row filter failed to load — subscription", e);
 		})));
 		if (t._tag === "Left") throw t.left;
 		return t.right;
 	};
-}, Tr = (e, t, n, r, i, a, o, s) => R.asyncScoped((c) => M.gen(function* () {
+}, Or = (e, t, n, r, i, a, o, s) => R.asyncScoped((c) => M.gen(function* () {
 	let l = yield* M.tryPromise(() => t.subscribe(e, (e) => {
 		c.single(e);
 	}, n, r, i, a, o, s)).pipe(M.matchCause({
-		onFailure: (e) => (jr(`subscription.${i}`, n.traceId, e), {
+		onFailure: (e) => (Pr(`subscription.${i}`, n.traceId, e), {
 			ok: !1,
-			error: Fr(e)
+			error: Rr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1839,21 +1841,21 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	let u = l.unsubscribe;
 	if (yield* M.addFinalizer(() => M.sync(() => u())), n.clientId !== void 0) {
-		let e = Zn(n.clientId, () => {
+		let e = er(n.clientId, () => {
 			c.end();
 		});
 		yield* M.addFinalizer(() => M.sync(() => e()));
 	}
-})), Er = (e, t, n, r) => R.asyncScoped((i) => M.gen(function* () {
+})), kr = (e, t, n, r) => R.asyncScoped((i) => M.gen(function* () {
 	let a = yield* M.tryPromise(() => t.subscribeComputed(e, (e) => {
 		i.single(e._tag === "snapshot" ? {
 			...e,
 			computed: !0
 		} : e);
 	}, n, r)).pipe(M.matchCause({
-		onFailure: (e) => (jr(`subscription.${r}`, n.traceId, e), {
+		onFailure: (e) => (Pr(`subscription.${r}`, n.traceId, e), {
 			ok: !1,
-			error: Fr(e)
+			error: Rr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1869,21 +1871,21 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	let o = a.unsubscribe;
 	if (yield* M.addFinalizer(() => M.sync(() => o())), n.clientId !== void 0) {
-		let e = Zn(n.clientId, () => {
+		let e = er(n.clientId, () => {
 			i.end();
 		});
 		yield* M.addFinalizer(() => M.sync(() => e()));
 	}
-})), Dr = (e, t, n = "rpc.subscription", r, i, a, o) => R.unwrap(M.gen(function* () {
-	let s = yield* Se, c = yield* ve, l = yield* xr;
-	Cr(l, n, s);
-	let u = br(s, l, c.clientId), d = fr(s.id, c.clientId), f = gr({ subjectKey: d }, () => sr({
+})), Ar = (e, t, n = "rpc.subscription", r, i, a, o) => R.unwrap(M.gen(function* () {
+	let s = yield* Te, c = yield* xe, l = yield* wr;
+	Er(l, n, s);
+	let u = Cr(s, l, c.clientId), d = hr(s.id, c.clientId), f = yr({ subjectKey: d }, () => ur({
 		traceId: u.traceId,
 		...u.spanId === void 0 ? {} : { spanId: u.spanId }
 	}, () => e(u))), p = M.isEffect(f) ? yield* f.pipe(M.matchCause({
-		onFailure: (e) => (jr(`subscription.${n}`, u.traceId, e), {
+		onFailure: (e) => (Pr(`subscription.${n}`, u.traceId, e), {
 			ok: !1,
-			error: Fr(e)
+			error: Rr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1898,39 +1900,39 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		error: p.error
 	});
 	let m = p.value;
-	if (Hn(m)) return Er(m, t, u, n);
+	if (Gn(m)) return kr(m, t, u, n);
 	let h = m, g = r?.(h);
-	return Tr(h, t, u, g, n, i === void 0 ? void 0 : {
+	return Or(h, t, u, g, n, i === void 0 ? void 0 : {
 		key: i.scope === "subject" ? `${i.baseKey}:s:${d}` : `${i.baseKey}:global`,
 		ttlMs: i.ttlMs,
 		swrMs: i.swrMs
-	}, a?.(s), o?.(s) ?? wr(s));
-}).pipe(M.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), Or = (e, t = "rpc.stream") => R.unwrap(M.gen(function* () {
-	let n = yield* Se, r = yield* ve, i = yield* xr;
-	Cr(i, t, n);
-	let a = br(n, i, r.clientId), o = e(a), s = M.isEffect(o) ? yield* o.pipe(M.orDie) : o;
+	}, a?.(s), o?.(s) ?? Dr(s));
+}).pipe(M.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), jr = (e, t = "rpc.stream") => R.unwrap(M.gen(function* () {
+	let n = yield* Te, r = yield* xe, i = yield* wr;
+	Er(i, t, n);
+	let a = Cr(n, i, r.clientId), o = e(a), s = M.isEffect(o) ? yield* o.pipe(M.orDie) : o;
 	if (a.clientId === void 0) return s;
 	let c = a.clientId;
 	return R.unwrapScoped(M.gen(function* () {
-		let e = yield* Be.make(), t = Zn(c, () => {
-			Be.unsafeDone(e, M.void);
+		let e = yield* He.make(), t = er(c, () => {
+			He.unsafeDone(e, M.void);
 		});
-		return yield* M.addFinalizer(() => M.sync(() => t())), s.pipe(R.interruptWhen(Be.await(e)));
+		return yield* M.addFinalizer(() => M.sync(() => t())), s.pipe(R.interruptWhen(He.await(e)));
 	}));
-}).pipe(M.withSpan(t, { attributes: { "framework.kind": "stream" } }))), kr = A({ scope: "voltro:rpc" }), Ar = A({ scope: "voltro:http" }), jr = (e, t, n) => {
-	if (j.isInterruptedOnly(n)) return;
-	let r = j.squash(n), i = r?._tag, a = r instanceof Error ? r.message : r?.message ?? String(r), o = j.dieOption(n)._tag === "Some", s = Gt(r), c = {
+}).pipe(M.withSpan(t, { attributes: { "framework.kind": "stream" } }))), Mr = k({ scope: "voltro:rpc" }), Nr = k({ scope: "voltro:http" }), Pr = (e, t, n) => {
+	if (A.isInterruptedOnly(n)) return;
+	let r = A.squash(n), i = r?._tag, a = r instanceof Error ? r.message : r?.message ?? String(r), o = A.dieOption(n)._tag === "Some", s = qt(r), c = {
 		traceId: t,
 		...i === void 0 ? {} : { errorTag: i },
 		...s
 	}, l = a === "Failed to execute statement" && typeof s.dbMessage == "string" ? s.dbMessage : a;
-	o ? kr.error(`${e} failed: ${l}`, c) : kr.warn(`${e} failed: ${l}`, c);
-}, Mr = /* @__PURE__ */ new Set(["SqlError", "ResultLengthMismatch"]), Nr = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && Mr.has(e._tag), Pr = (e) => ({
+	o ? Mr.error(`${e} failed: ${l}`, c) : Mr.warn(`${e} failed: ${l}`, c);
+}, Fr = /* @__PURE__ */ new Set(["SqlError", "ResultLengthMismatch"]), Ir = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && Fr.has(e._tag), Lr = (e) => ({
 	_tag: "InternalError",
 	message: "internal server error",
 	traceId: e
-}), Fr = (e) => {
-	let t = j.squash(e);
+}), Rr = (e) => {
+	let t = A.squash(e);
 	t && typeof t == "object" && t._tag === "UnknownException" && (t = t.error ?? t.cause ?? t);
 	let n = t && typeof t == "object" ? t : {}, r = {};
 	for (let [e, t] of Object.entries(n)) e === "cause" || e === "stack" || e === "message" || (t === null || typeof t == "string" || typeof t == "number" || typeof t == "boolean") && (r[e] = t);
@@ -1940,19 +1942,19 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		...typeof i == "string" ? { _tag: i } : {},
 		message: typeof a == "string" ? a : String(t)
 	};
-}, Ir = (e, t, n = "rpc.mutation") => M.gen(function* () {
-	let r = yield* Se, i = yield* ve, a = yield* xr;
-	Cr(a, n, r);
-	let o = br(r, a, i.clientId), s = gr({ subjectKey: fr(r.id, i.clientId) }, () => sr({
+}, zr = (e, t, n = "rpc.mutation") => M.gen(function* () {
+	let r = yield* Te, i = yield* xe, a = yield* wr;
+	Er(a, n, r);
+	let o = Cr(r, a, i.clientId), s = yr({ subjectKey: hr(r.id, i.clientId) }, () => ur({
 		traceId: o.traceId,
 		...o.spanId === void 0 ? {} : { spanId: o.spanId }
 	}, () => e(t, o)));
 	return yield* (M.isEffect(s) ? s : M.tryPromise({
 		try: () => Promise.resolve(s),
 		catch: (e) => e
-	})).pipe(M.tapErrorCause((e) => M.sync(() => jr(n, o.traceId, e))), M.catchIf(Nr, () => M.die(Pr(o.traceId))), M.annotateLogs(Sr(o)));
-}).pipe(M.withSpan(n, { attributes: { "framework.kind": "mutation" } })), Lr = 8 * 1024 * 1024, Rr = (e) => {
-	let t = e.port ?? 4e3, n = e.path ?? "/ws", r = Xe(), i = (t) => et.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
+	})).pipe(M.tapErrorCause((e) => M.sync(() => Pr(n, o.traceId, e))), M.catchIf(Ir, () => M.die(Lr(o.traceId))), M.annotateLogs(Tr(o)));
+}).pipe(M.withSpan(n, { attributes: { "framework.kind": "mutation" } })), Br = 8 * 1024 * 1024, Vr = (e) => {
+	let t = e.port ?? 4e3, n = e.path ?? "/ws", r = Qe(), i = (t) => nt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
 		if (!e.inspectRoute) return B.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
@@ -1964,7 +1966,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			contentType: a.contentType,
 			headers: a.headers ?? {}
 		});
-	}))), a = () => et.HttpServerRequest.pipe(M.flatMap((t) => {
+	}))), a = () => nt.HttpServerRequest.pipe(M.flatMap((t) => {
 		let n = e.inspectStream;
 		if (!n) return M.succeed(B.text("inspect stream not configured", { status: 404 }));
 		let r = {};
@@ -2009,7 +2011,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				...i
 			}
 		}));
-	})), o = z.add("*", "/_voltro/inspect/*", et.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
+	})), o = z.add("*", "/_voltro/inspect/*", nt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
 		if (!e.inspectRoute) return B.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
@@ -2025,10 +2027,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	e.inspectRoute !== void 0 && (s = e.inspectStream === void 0 ? N.mergeAll(z.add("*", "/_voltro/inspect", i(!0)), o) : N.mergeAll(z.add("GET", "/_voltro/inspect/stream", a()), z.add("*", "/_voltro/inspect", i(!0)), o));
 	let c = N.empty;
 	if (e.webhookRoutes !== void 0 && e.webhookRoutes.size > 0) {
-		let t = (e) => et.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
+		let t = (e) => nt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
 			let n = {};
 			for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
-			let r = t.method !== "GET" && t.method !== "HEAD" ? yield* t.text.pipe(M.orElseSucceed(() => "")) : "", i = new TextEncoder().encode(r), a = t.url.split("?")[0], o = ar(n.traceparent), s = yield* M.promise(() => e.handle({
+			let r = t.method !== "GET" && t.method !== "HEAD" ? yield* t.text.pipe(M.orElseSucceed(() => "")) : "", i = new TextEncoder().encode(r), a = t.url.split("?")[0], o = cr(n.traceparent), s = yield* M.promise(() => e.handle({
 				method: t.method,
 				path: a,
 				headers: n,
@@ -2049,7 +2051,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	let l = N.empty;
 	if (e.httpRoutes !== void 0 && e.httpRoutes.length > 0) {
-		let t = (e) => et.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
+		let t = (e) => nt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
 			let n = {};
 			for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 			let r = t.url.indexOf("?"), i = r >= 0 ? t.url.slice(0, r) : t.url, a = r >= 0 ? t.url.slice(r + 1) : "", o = t.method !== "GET" && t.method !== "HEAD" ? new Uint8Array(yield* t.arrayBuffer.pipe(M.orElseSucceed(() => /* @__PURE__ */ new ArrayBuffer(0)))) : /* @__PURE__ */ new Uint8Array(), s = {
@@ -2058,8 +2060,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				query: a,
 				headers: n,
 				rawBody: o
-			}, c = yield* M.promise(() => ct(e, s));
-			c.status >= 500 && Ar.warn(`${t.method} ${i} → ${c.status}`, {
+			}, c = yield* M.promise(() => ut(e, s));
+			c.status >= 500 && Nr.warn(`${t.method} ${i} → ${c.status}`, {
 				method: t.method,
 				path: i,
 				status: c.status,
@@ -2071,7 +2073,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				headers: l
 			};
 			return c.body instanceof Uint8Array ? B.uint8Array(c.body, u) : B.text(c.body ?? "", u);
-		})), M.tapErrorCause((t) => j.isInterruptedOnly(t) ? M.void : M.sync(() => Ar.error(`${e.map((e) => e.method).join("|")} ${e[0].path} threw`, { path: e[0].path }, j.squash(t))))), n = /* @__PURE__ */ new Map();
+		})), M.tapErrorCause((t) => A.isInterruptedOnly(t) ? M.void : M.sync(() => Nr.error(`${e.map((e) => e.method).join("|")} ${e[0].path} threw`, { path: e[0].path }, A.squash(t))))), n = /* @__PURE__ */ new Map();
 		for (let t of e.httpRoutes) {
 			let e = n.get(t.path);
 			e ? e.push(t) : n.set(t.path, [t]);
@@ -2082,14 +2084,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		});
 		l = N.mergeAll(...r);
 	}
-	let u = ot.layerProtocolWebsocketRouter({ path: n }), d = ot.layer(e.group), f = ot.layer(e.group).pipe(N.provide(ot.layerProtocolHttpRouter({ path: "/rpc" })), N.provide(at.layerJson), N.provide(e.httpHandlersLayer ?? e.handlersLayer)), p = N.scopedDiscard(M.gen(function* () {
-		let e = yield* ot.Protocol;
+	let u = ct.layerProtocolWebsocketRouter({ path: n }), d = ct.layer(e.group), f = ct.layer(e.group).pipe(N.provide(ct.layerProtocolHttpRouter({ path: "/rpc" })), N.provide(st.layerJson), N.provide(e.httpHandlersLayer ?? e.handlersLayer)), p = N.scopedDiscard(M.gen(function* () {
+		let e = yield* ct.Protocol;
 		yield* M.forkScoped(M.gen(function* () {
 			let t = yield* e.disconnects.take;
-			Jn(t), Qn(t);
+			Zn(t), tr(t);
 		}).pipe(M.forever));
-	})), m = N.mergeAll(d, p).pipe(N.provide(u), N.provide(at.layerJson), N.provide(e.handlersLayer)), h = N.mergeAll(m, f, s, c, l), g = e.pluginHttpInterceptor, _ = e.healthCheck, v = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), y = e.maxRpcBodyBytes ?? (Number.isFinite(v) && v > 0 ? v : 8388608), b = { "cache-control": "no-store" }, x = (e) => M.gen(function* () {
-		let t = yield* et.HttpServerRequest, n = {};
+	})), m = N.mergeAll(d, p).pipe(N.provide(u), N.provide(st.layerJson), N.provide(e.handlersLayer)), h = N.mergeAll(m, f, s, c, l), g = e.pluginHttpInterceptor, _ = e.healthCheck, v = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), y = e.maxRpcBodyBytes ?? (Number.isFinite(v) && v > 0 ? v : 8388608), b = { "cache-control": "no-store" }, x = (e) => M.gen(function* () {
+		let t = yield* nt.HttpServerRequest, n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r = t.url.indexOf("?"), i = r === -1 ? t.url : t.url.slice(0, r);
 		if (t.method === "POST" && i === "/rpc") {
@@ -2129,13 +2131,13 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			status: l.status,
 			...l.headers ? { headers: l.headers } : {}
 		});
-	}), S = N.unwrapEffect(z.toHttpEffect(h).pipe(M.map((e) => $e.serve(x(e))))).pipe(N.provide(nt.layer(() => r, { port: t })), N.provide(tt.layer));
+	}), S = N.unwrapEffect(z.toHttpEffect(h).pipe(M.map((e) => tt.serve(x(e))))).pipe(N.provide(it.layer(() => r, { port: t })), N.provide(rt.layer));
 	e.tracerLayer && (S = S.pipe(N.provide(e.tracerLayer)));
-	let C = A({ scope: "voltro:rpc" }), ee = N.launch(S).pipe(M.catchAllCause((e) => M.sync(() => {
-		C.error("rpc server crashed", {}, j.squash(e)), process.exit(1);
+	let C = k({ scope: "voltro:rpc" }), ee = N.launch(S).pipe(M.catchAllCause((e) => M.sync(() => {
+		C.error("rpc server crashed", {}, A.squash(e)), process.exit(1);
 	})));
-	return rt.runMain(ee, { disableErrorReporting: !0 }), r;
-}, zr = (e, t = 1e4) => new Promise((n, r) => {
+	return at.runMain(ee, { disableErrorReporting: !0 }), r;
+}, Hr = (e, t = 1e4) => new Promise((n, r) => {
 	if (e.listening) {
 		n();
 		return;
@@ -2151,13 +2153,13 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		o(e);
 	}
 	a = setTimeout(() => o(/* @__PURE__ */ Error(`rpc server did not bind within ${t}ms`)), t), e.on("listening", s), e.on("error", c);
-}), Br = () => {
+}), Ur = () => {
 	let e = process.env.FRAMEWORK_TRACING?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ? "otlp" : "off";
-}, Vr = () => {
+}, Wr = () => {
 	let e = process.env.FRAMEWORK_METRICS?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_METRICS_ENDPOINT ? "otlp" : "off";
-}, Hr = async () => {
+}, Gr = async () => {
 	let [e, t, n, r, i] = await Promise.all([
 		import("@opentelemetry/sdk-trace-base"),
 		import("@opentelemetry/sdk-metrics"),
@@ -2172,7 +2174,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		otlpMetrics: r,
 		nodeSdk: i
 	};
-}, Ur = (e, t, n) => {
+}, Kr = (e, t, n) => {
 	let { PeriodicExportingMetricReader: r, ConsoleMetricExporter: i, InMemoryMetricExporter: a, AggregationTemporality: o } = e.sdkMetrics;
 	if (t === "off") return {
 		reader: void 0,
@@ -2195,8 +2197,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		}),
 		inMemory: void 0
 	};
-}, Wr = async (e = {}) => {
-	let t = e.mode ?? Br(), n = e.metricsMode ?? Vr(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
+}, qr = async (e = {}) => {
+	let t = e.mode ?? Ur(), n = e.metricsMode ?? Wr(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
 	if (t === "off" && e.traceSink === void 0 && n === "off" && r.length === 0 && i.length === 0) return {
 		layer: N.empty,
 		mode: t,
@@ -2205,13 +2207,13 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: void 0
 	};
-	let a = await Hr(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
+	let a = await Gr(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
 	e.spanProcessor ? p = e.spanProcessor : u ? p = void 0 : t === "memory" ? (f = new s(), p = new c(f)) : p = t === "console" ? new c(new o()) : new l(new a.otlpTrace.OTLPTraceExporter());
 	let m = [
 		...e.traceSink ? [e.traceSink] : [],
 		...p ? [p] : [],
 		...r
-	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = Ur(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
+	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = Kr(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
 		serviceName: d,
 		...e.serviceVersion ? { serviceVersion: e.serviceVersion } : {},
 		...e.resourceAttributes ? { attributes: e.resourceAttributes } : {}
@@ -2229,18 +2231,18 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: _
 	};
-}, Gr = {
-	[dt.INTERNAL]: "internal",
-	[dt.SERVER]: "server",
-	[dt.CLIENT]: "client",
-	[dt.PRODUCER]: "producer",
-	[dt.CONSUMER]: "consumer"
-}, Kr = (e) => e[0] * 1e3 + e[1] / 1e6, qr = 512, Jr = 48, Yr = (e) => {
+}, Jr = {
+	[pt.INTERNAL]: "internal",
+	[pt.SERVER]: "server",
+	[pt.CLIENT]: "client",
+	[pt.PRODUCER]: "producer",
+	[pt.CONSUMER]: "consumer"
+}, Yr = (e) => e[0] * 1e3 + e[1] / 1e6, Xr = 512, Zr = 48, Qr = (e) => {
 	let t = {}, n = 0;
 	for (let r in e) {
-		if (n >= Jr) break;
+		if (n >= Zr) break;
 		let i = e[r];
-		if (typeof i == "string") t[r] = i.length > qr ? `${i.slice(0, qr)}…` : i;
+		if (typeof i == "string") t[r] = i.length > Xr ? `${i.slice(0, Xr)}…` : i;
 		else if (typeof i == "number" || typeof i == "boolean" || i == null) t[r] = i;
 		else {
 			let e;
@@ -2249,49 +2251,49 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			} catch {
 				e = String(i);
 			}
-			t[r] = e.length > qr ? `${e.slice(0, qr)}…` : e;
+			t[r] = e.length > Xr ? `${e.slice(0, Xr)}…` : e;
 		}
 		n++;
 	}
 	return t;
-}, Xr = {
-	[ft.UNSET]: "unset",
-	[ft.OK]: "ok",
-	[ft.ERROR]: "error"
-}, Zr = (e) => {
+}, $r = {
+	[mt.UNSET]: "unset",
+	[mt.OK]: "ok",
+	[mt.ERROR]: "error"
+}, ei = (e) => {
 	let t = e.spanContext(), n = e.events.length > 0 ? e.events.slice(0, 16).map((e) => ({
 		name: e.name,
-		tsMs: Kr(e.time),
-		...e.attributes ? { attributes: Yr(e.attributes) } : {}
+		tsMs: Yr(e.time),
+		...e.attributes ? { attributes: Qr(e.attributes) } : {}
 	})) : void 0;
 	return {
 		traceId: t.traceId,
 		spanId: t.spanId,
 		parentSpanId: e.parentSpanContext?.spanId ?? null,
 		name: e.name,
-		kind: Gr[e.kind] ?? "internal",
-		attributes: Yr(e.attributes),
-		startMs: Kr(e.startTime),
-		endMs: Kr(e.endTime),
-		durationMs: Kr(e.duration),
-		status: Xr[e.status.code] ?? "unset",
+		kind: Jr[e.kind] ?? "internal",
+		attributes: Qr(e.attributes),
+		startMs: Yr(e.startTime),
+		endMs: Yr(e.endTime),
+		durationMs: Yr(e.duration),
+		status: $r[e.status.code] ?? "unset",
 		...e.status.message ? { statusMessage: e.status.message } : {},
 		...n ? { events: n } : {}
 	};
-}, Qr = (e) => ({
+}, ti = (e) => ({
 	onStart: () => {},
 	onEnd: (t) => {
 		try {
-			e(Zr(t));
+			e(ei(t));
 		} catch {}
 	},
 	forceFlush: () => Promise.resolve(),
 	shutdown: () => Promise.resolve()
-}), $r = { get: (e) => Promise.resolve(process.env[e]) }, ei = $r, ti = (e) => {
-	ei = e;
-}, ni = () => {
-	ei = $r;
-}, ri = async (e) => await ei.get(e) ?? process.env[e], ii = (e) => process.env[e], ai = (e, t = 6e4, n = () => Date.now()) => {
+}), ni = { get: (e) => Promise.resolve(process.env[e]) }, ri = ni, ii = (e) => {
+	ri = e;
+}, ai = () => {
+	ri = ni;
+}, oi = async (e) => await ri.get(e) ?? process.env[e], si = (e) => process.env[e], ci = (e, t = 6e4, n = () => Date.now()) => {
 	let r = /* @__PURE__ */ new Map();
 	return { get: async (i) => {
 		let a = r.get(i);
@@ -2302,12 +2304,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			at: n()
 		}), o;
 	} };
-}, oi = (e) => {
+}, li = (e) => {
 	let t = {
 		accept: "application/json",
 		...e.headers ?? {}
 	};
-	if (e.perKey) return ai({ get: async (n) => {
+	if (e.perKey) return ci({ get: async (n) => {
 		let r = await fetch(`${e.url.replace(/\/$/, "")}/${encodeURIComponent(n)}`, { headers: t });
 		if (!r.ok) return;
 		let i = await r.json();
@@ -2318,59 +2320,59 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		let t = (await a())[e];
 		return typeof t == "string" ? t : void 0;
 	} };
-}, si = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? $r : e.kind === "custom" ? e.backend : e.kind === "http" ? oi(e) : $r, ci = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : he(e, "voltro:field-encryption:v1", 32), li = (t) => {
+}, ui = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? ni : e.kind === "custom" ? e.backend : e.kind === "http" ? li(e) : ni, di = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : ve(e, "voltro:field-encryption:v1", 32), fi = (t) => {
 	if (t.length !== 32) throw Error(`field cipher key must be 32 bytes, got ${t.length}`);
 	return {
 		encrypt: (n) => {
-			let r = pe(12), i = ue("aes-256-gcm", t, r), a = Buffer.concat([i.update(n, "utf8"), i.final()]), o = i.getAuthTag();
+			let r = ge(12), i = pe("aes-256-gcm", t, r), a = Buffer.concat([i.update(n, "utf8"), i.final()]), o = i.getAuthTag();
 			return `${e}${r.toString("base64")}:${o.toString("base64")}:${a.toString("base64")}`;
 		},
 		decrypt: (n) => {
 			let [r, i, a] = n.slice(e.length).split(":");
 			if (!r || !i || a === void 0) throw Error("field cipher: malformed ciphertext");
-			let o = de("aes-256-gcm", t, Buffer.from(r, "base64"));
+			let o = me("aes-256-gcm", t, Buffer.from(r, "base64"));
 			return o.setAuthTag(Buffer.from(i, "base64")), Buffer.concat([o.update(Buffer.from(a, "base64")), o.final()]).toString("utf8");
 		}
 	};
-}, ui = (e) => li(ci(e)), di, fi = (e) => {
-	di = e;
-}, pi = () => di, mi = "no field cipher registered — enable `@voltro/plugin-governance` `governancePlugin({ fieldEncryption: { key } })` (or call setFieldCipher) so a key is available.", q = (e) => {
-	let t = pi();
-	if (!t) throw Error(`encryptField: ${mi}`);
+}, pi = (e) => fi(di(e)), mi, hi = (e) => {
+	mi = e;
+}, gi = () => mi, _i = "no field cipher registered — enable `@voltro/plugin-governance` `governancePlugin({ fieldEncryption: { key } })` (or call setFieldCipher) so a key is available.", q = (e) => {
+	let t = gi();
+	if (!t) throw Error(`encryptField: ${_i}`);
 	return t.encrypt(e);
-}, hi = (e) => {
+}, vi = (e) => {
 	if (!x(e)) return e;
-	let t = pi();
-	if (!t) throw Error(`decryptField: ${mi}`);
+	let t = gi();
+	if (!t) throw Error(`decryptField: ${_i}`);
 	return t.decrypt(e);
-}, gi = "_voltro_idempotency", _i = (e) => {
+}, yi = "_voltro_idempotency", bi = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "string" ? JSON.parse(e) : e;
 	return t && typeof t == "object" && "status" in t ? t : null;
-}, vi = (e) => ({
+}, xi = (e) => ({
 	scope: e.scope,
 	key: e.key,
 	status: e.status === "completed" ? "completed" : "in_flight",
-	response: _i(e.response),
-	createdAt: Ie(e.createdAt)
-}), yi = async (e, n, r) => (await e.query({
-	table: gi,
+	response: bi(e.response),
+	createdAt: ze(e.createdAt)
+}), Si = async (e, n, r) => (await e.query({
+	table: yi,
 	predicate: t(u("scope", n), u("key", r)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, bi = (e) => ({
+}))[0] ?? null, Ci = (e) => ({
 	get: async (t, n) => {
-		let r = await yi(e, t, n);
-		return r ? vi(r) : null;
+		let r = await Si(e, t, n);
+		return r ? xi(r) : null;
 	},
 	claim: async (t, n, r, i) => {
 		for (let a = 0; a < 2; a++) {
 			let a = f({
 				kind: "typeid",
 				prefix: "idem"
-			}, gi), o = await e.insertIgnore(gi, {
+			}, yi), o = await e.insertIgnore(yi, {
 				id: a,
 				scope: t,
 				key: n,
@@ -2379,11 +2381,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				createdAt: new Date(r)
 			}, { conflictColumns: ["scope", "key"] });
 			if (o.id === a) return "claimed";
-			if (r - Ie(o.createdAt) < i) return vi(o);
-			await e.delete(gi, o.id);
+			if (r - ze(o.createdAt) < i) return xi(o);
+			await e.delete(yi, o.id);
 		}
-		let a = await yi(e, t, n);
-		return a ? vi(a) : {
+		let a = await Si(e, t, n);
+		return a ? xi(a) : {
 			scope: t,
 			key: n,
 			status: "in_flight",
@@ -2392,36 +2394,36 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		};
 	},
 	complete: async (t, n, r, i) => {
-		let a = await yi(e, t, n);
-		a && await e.update(gi, a.id, {
+		let a = await Si(e, t, n);
+		a && await e.update(yi, a.id, {
 			status: "completed",
 			response: r
 		});
 	},
 	release: async (t, n) => {
-		let r = await yi(e, t, n);
-		r && await e.delete(gi, r.id);
+		let r = await Si(e, t, n);
+		r && await e.delete(yi, r.id);
 	}
-}), J = "_voltro_kv", xi = (e) => {
+}), J = "_voltro_kv", wi = (e) => {
 	if (e == null) return null;
 	if (e instanceof Date) return e.getTime();
 	if (typeof e == "number") return e;
 	let t = Date.parse(String(e));
 	return Number.isNaN(t) ? null : t;
-}, Si = (e, t) => {
-	let n = xi(e.expiresAt);
+}, Ti = (e, t) => {
+	let n = wi(e.expiresAt);
 	return n !== null && n <= t;
-}, Ci = (e) => e === null ? null : JSON.parse(e), wi = async (e, t) => (await e.query({
+}, Ei = (e) => e === null ? null : JSON.parse(e), Di = async (e, t) => (await e.query({
 	table: J,
 	predicate: u("key", t),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Ti = (e) => {
+}))[0] ?? null, Oi = (e) => {
 	let n = (e, t, n) => M.tryPromise({
 		try: n,
-		catch: (n) => new mt({
+		catch: (n) => new gt({
 			operation: e,
 			key: t,
 			cause: String(n)
@@ -2429,8 +2431,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	});
 	return {
 		get: (t) => n("get", t, async () => {
-			let n = await wi(e, t);
-			return n === null ? F.none() : Si(n, Date.now()) ? (await e.delete(J, n.id), F.none()) : F.some(Ci(n.value));
+			let n = await Di(e, t);
+			return n === null ? F.none() : Ti(n, Date.now()) ? (await e.delete(J, n.id), F.none()) : F.some(Ei(n.value));
 		}),
 		set: (t, r, i) => n("set", t, async () => {
 			let n = Date.now(), a = i?.ttlMs !== void 0 && i.ttlMs > 0 ? new Date(n + i.ttlMs) : null, o = f({
@@ -2453,17 +2455,17 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			});
 		}),
 		delete: (t) => n("delete", t, async () => {
-			let n = await wi(e, t);
+			let n = await Di(e, t);
 			if (n === null) return !1;
-			let r = !Si(n, Date.now());
+			let r = !Ti(n, Date.now());
 			return await e.delete(J, n.id), r;
 		}),
 		has: (t) => n("has", t, async () => {
-			let n = await wi(e, t);
-			return n === null ? !1 : Si(n, Date.now()) ? (await e.delete(J, n.id), !1) : !0;
+			let n = await Di(e, t);
+			return n === null ? !1 : Ti(n, Date.now()) ? (await e.delete(J, n.id), !1) : !0;
 		}),
 		list: (r) => n("list", "", async () => {
-			let n = Date.now(), i = ne(S("expiresAt"), h("expiresAt", new Date(n))), a = r === "" ? i : t(o("key", r), i), s = await e.query({
+			let n = Date.now(), i = re(S("expiresAt"), h("expiresAt", new Date(n))), a = r === "" ? i : t(o("key", r), i), s = await e.query({
 				table: J,
 				predicate: a,
 				order: [],
@@ -2471,7 +2473,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				skip: void 0,
 				projection: void 0
 			}), c = [];
-			for (let e of s) Si(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
+			for (let e of s) Ti(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
 			return c;
 		}),
 		clear: () => n("clear", "", async () => {
@@ -2481,8 +2483,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			} });
 		})
 	};
-}, Ei = async ({ store: e, env: t = process.env }) => {
-	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? vt(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(N.provide(gt)) : r === "memory" ? _t() : N.succeed(ht, ht.of(Ti(e))), a = We.make(pt.Default.pipe(N.provide(i))), o = await a.runPromise(pt);
+}, ki = async ({ store: e, env: t = process.env }) => {
+	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? bt(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(N.provide(vt)) : r === "memory" ? yt() : N.succeed(_t, _t.of(Oi(e))), a = Ke.make(ht.Default.pipe(N.provide(i))), o = await a.runPromise(ht);
 	return {
 		kv: {
 			get: (e) => a.runPromise(o.get(e)).then((e) => F.getOrUndefined(e)),
@@ -2497,7 +2499,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		backend: r,
 		dispose: () => a.dispose()
 	};
-}, Di = {
+}, Ai = {
 	get: () => Promise.resolve(void 0),
 	getOrElse: (e, t) => Promise.resolve(t()),
 	set: () => Promise.resolve(),
@@ -2505,7 +2507,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	has: () => Promise.resolve(!1),
 	list: () => Promise.resolve([]),
 	clear: () => Promise.resolve()
-}, Oi = "_voltro_api_keys", ki = (e) => fe("sha256").update(e, "utf8").digest("hex"), Ai = (e = "voltro_") => `${e}${pe(30).toString("base64url")}`, ji = (e) => ({
+}, ji = "_voltro_api_keys", Mi = (e) => he("sha256").update(e, "utf8").digest("hex"), Ni = (e = "voltro_") => `${e}${ge(30).toString("base64url")}`, Pi = (e) => ({
 	id: e.id,
 	name: e.name,
 	keyPrefix: e.keyPrefix,
@@ -2515,17 +2517,17 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	expiresAt: e.expiresAt,
 	revokedAt: e.revokedAt,
 	createdAt: e.createdAt
-}), Mi = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), Ni = (e, t = {}) => {
+}), Fi = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), Ii = (e, t = {}) => {
 	let n = t.prefix ?? "voltro_", r = async (t) => {
-		let r = Ai(n), i = f({
+		let r = Ni(n), i = f({
 			kind: "typeid",
 			prefix: "apikey"
-		}, Oi), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
+		}, ji), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
 		return await e.insert({
 			id: i,
 			tenantId: t.tenantId ?? null,
 			name: t.name,
-			hashedKey: ki(r),
+			hashedKey: Mi(r),
 			keyPrefix: r.slice(0, n.length + 6),
 			scopes: a,
 			lastUsedAt: null,
@@ -2543,7 +2545,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		};
 	}, i = async (t, n = Date.now()) => {
 		let r = await e.findByHash(t);
-		return !r || !Mi(r, n) ? null : (await e.patch(r.id, { lastUsedAt: n }), {
+		return !r || !Fi(r, n) ? null : (await e.patch(r.id, { lastUsedAt: n }), {
 			id: r.id,
 			tenantId: r.tenantId ?? "",
 			createdBy: r.createdBy ?? null,
@@ -2553,7 +2555,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	return {
 		issue: r,
 		resolveByHash: i,
-		verify: (e, t) => i(ki(e), t),
+		verify: (e, t) => i(Mi(e), t),
 		revoke: async (t, n = Date.now()) => await e.findById(t) ? (await e.patch(t, { revokedAt: n }), !0) : !1,
 		rotate: async (t, n = Date.now()) => {
 			let i = await e.findById(t);
@@ -2564,9 +2566,9 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				createdBy: i.createdBy
 			})) : null;
 		},
-		list: async (t) => (await e.listByTenant(t)).map(ji)
+		list: async (t) => (await e.listByTenant(t)).map(Pi)
 	};
-}, Pi = () => {
+}, Li = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
 		insert: async (t) => {
@@ -2583,21 +2585,21 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			});
 		}
 	};
-}, Fi = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, Ii = (e) => ({
+}, Ri = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, zi = (e) => ({
 	id: String(e.id),
 	tenantId: e.tenantId ?? null,
 	name: String(e.name),
 	hashedKey: String(e.hashedKey),
 	keyPrefix: String(e.keyPrefix),
 	scopes: e.scopes ?? null,
-	lastUsedAt: Fi(e.lastUsedAt),
-	expiresAt: Fi(e.expiresAt),
-	revokedAt: Fi(e.revokedAt),
+	lastUsedAt: Ri(e.lastUsedAt),
+	expiresAt: Ri(e.expiresAt),
+	revokedAt: Ri(e.revokedAt),
 	createdBy: e.createdBy ?? null,
-	createdAt: Fi(e.createdAt) ?? 0
-}), Li = (e) => {
+	createdAt: Ri(e.createdAt) ?? 0
+}), Bi = (e) => {
 	let t = async (t) => await e.query({
-		table: Oi,
+		table: ji,
 		predicate: t,
 		order: [],
 		take: void 0,
@@ -2615,32 +2617,32 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	};
 	return {
 		insert: async (t) => {
-			await e.insert(Oi, n(t));
+			await e.insert(ji, n(t));
 		},
 		findByHash: async (e) => {
 			let n = await t(u("hashedKey", e));
-			return n[0] ? Ii(n[0]) : null;
+			return n[0] ? zi(n[0]) : null;
 		},
 		findById: async (e) => {
 			let n = await t(u("id", e));
-			return n[0] ? Ii(n[0]) : null;
+			return n[0] ? zi(n[0]) : null;
 		},
-		listByTenant: async (e) => (await t(e === null ? void 0 : u("tenantId", e))).map(Ii).filter((t) => e === null || t.tenantId === e),
+		listByTenant: async (e) => (await t(e === null ? void 0 : u("tenantId", e))).map(zi).filter((t) => e === null || t.tenantId === e),
 		patch: async (t, r) => {
-			await e.update(Oi, t, n(r));
+			await e.update(ji, t, n(r));
 		}
 	};
-}, Ri = (e, t = {}) => yt({
+}, Vi = (e, t = {}) => xt({
 	id: "voltro-apikey",
 	...t.prefix ? { prefix: t.prefix } : {},
 	resolveKey: (t) => e.resolveByHash(t)
-}), zi = (e) => {
+}), Hi = (e) => {
 	let t = e.subject;
 	return {
 		id: t.id ?? null,
 		tenantId: t.tenantId ?? null
 	};
-}, Bi = (e, t = "/v1/api-keys") => {
+}, Ui = (e, t = "/v1/api-keys") => {
 	let n = L.Struct({
 		id: L.String,
 		name: L.String,
@@ -2653,11 +2655,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		createdAt: L.Number
 	});
 	return [
-		st({
+		lt({
 			method: "POST",
 			path: `${t}/issue`,
 			summary: "Issue an API key (the token is returned ONCE).",
-			guards: [lt(_e)],
+			guards: [dt(be)],
 			input: L.Struct({ body: L.Struct({
 				name: L.String,
 				scopes: L.optional(L.Array(L.String)),
@@ -2669,7 +2671,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				keyPrefix: L.String
 			}),
 			handler: async (t, n) => {
-				let r = t.body, i = zi(n), a = await e.issue({
+				let r = t.body, i = Hi(n), a = await e.issue({
 					tenantId: i.tenantId,
 					name: r.name,
 					...r.scopes ? { scopes: r.scopes } : {},
@@ -2683,68 +2685,72 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				};
 			}
 		}),
-		st({
+		lt({
 			method: "GET",
 			path: t,
 			summary: "List the caller tenant's API keys (no secrets).",
-			guards: [lt(_e)],
+			guards: [dt(be)],
 			input: L.Struct({}),
 			output: L.Struct({ keys: L.Array(n) }),
-			handler: async (t, n) => ({ keys: [...await e.list(zi(n).tenantId)] })
+			handler: async (t, n) => ({ keys: [...await e.list(Hi(n).tenantId)] })
 		}),
-		st({
+		lt({
 			method: "POST",
 			path: `${t}/revoke`,
 			summary: "Revoke an API key by id.",
-			guards: [lt(_e)],
+			guards: [dt(be)],
 			input: L.Struct({ body: L.Struct({ id: L.String }) }),
 			output: L.Struct({ ok: L.Boolean }),
 			handler: async (t, n) => ({ ok: await e.revoke(t.body.id) })
 		})
 	];
-}, Vi = class extends L.TaggedError()("TenantScopeViolation", {
+}, Wi = {
+	type: "anonymous",
+	id: null,
+	tenantId: null
+}, Gi = class extends L.TaggedError()("TenantScopeViolation", {
 	table: L.String,
 	reason: L.String
-}) {}, Hi = class extends L.TaggedError()("StoreOperationFailed", {
+}) {}, Ki = class extends L.TaggedError()("StoreOperationFailed", {
 	operation: L.String,
 	table: L.String,
 	cause: L.String
-}) {}, Ui = class extends L.TaggedError()("TableValidationFailed", {
+}) {}, qi = class extends L.TaggedError()("TableValidationFailed", {
 	table: L.String,
 	summary: L.String,
 	issues: L.Array(L.Struct({
 		path: L.String,
 		message: L.String
 	}))
-}) {}, Wi = class extends Re.Tag("@voltro/EffectStore")() {}, Gi = (e, t) => (n) => n instanceof Vi ? n : new Hi({
+}) {}, Ji = class extends Ve.Tag("@voltro/EffectStore")() {}, Yi = (e, t) => (n) => n instanceof Gi ? n : new Ki({
 	operation: e,
 	table: t,
 	cause: String(n)
-}), Ki = (e, t, n) => M.tryPromise({
+}), Xi = (e, t, n) => M.tryPromise({
 	try: n,
-	catch: Gi(e, t)
-}), qi = (e) => N.succeed(Wi, {
-	query: ((t) => Ki("query", t.table, () => e.query(t))),
-	insert: (t, n) => Ki("insert", t, () => e.insert(t, n)),
-	update: (t, n, r) => Ki("update", t, () => e.update(t, n, r)),
-	delete: (t, n) => Ki("delete", t, () => e.delete(t, n)),
-	hardDelete: (t, n) => Ki("hardDelete", t, () => e.hardDelete(t, n))
-}), Ji = (e) => it.make(e.name, {
+	catch: Yi(e, t)
+}), Zi = (e) => N.succeed(Ji, {
+	query: ((t) => Xi("query", t.table, () => e.query(t))),
+	insert: (t, n) => Xi("insert", t, () => e.insert(t, n)),
+	update: (t, n, r) => Xi("update", t, () => e.update(t, n, r)),
+	delete: (t, n) => Xi("delete", t, () => e.delete(t, n)),
+	hardDelete: (t, n) => Xi("hardDelete", t, () => e.hardDelete(t, n))
+}), Qi = (e) => ot.make(e.name, {
 	payload: e.payloadSchema,
-	success: Ee,
+	success: ke,
 	error: e.errorSchema
-}), Yi = (e, t) => ({
+}), $i = (e, t) => ({
 	id: t,
 	workflowName: e,
 	executionId: t,
 	status: "running"
-}), Xi = Yi, Zi = (e) => {
-	let t = j.failureOption(e), n = t._tag === "Some" ? t.value : j.squash(e);
+}), ea = $i, ta = (e) => {
+	let t = A.failureOption(e), n = t._tag === "Some" ? t.value : A.squash(e);
 	return {
 		tag: n && typeof n == "object" && "_tag" in n ? String(n._tag) : null,
 		message: n?.message ?? String(n)
 	};
-}, Qi = (e, t, n) => {
+}, na = (e, t, n) => {
 	if (n === void 0) return {
 		id: t,
 		workflowName: e,
@@ -2759,7 +2765,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	};
 	if (typeof n == "object" && n && n._tag === "Complete") {
 		let r = n.exit;
-		return Ue.isSuccess(r) ? {
+		return Ge.isSuccess(r) ? {
 			id: t,
 			workflowName: e,
 			executionId: t,
@@ -2770,7 +2776,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			workflowName: e,
 			executionId: t,
 			status: "failed",
-			error: Zi(r.cause)
+			error: ta(r.cause)
 		};
 	}
 	return {
@@ -2779,17 +2785,17 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		executionId: t,
 		status: "running"
 	};
-}, $i = (e) => new Promise((t) => setTimeout(t, e)), ea = (e) => {
+}, ra = (e) => new Promise((t) => setTimeout(t, e)), ia = (e) => {
 	let t = new Map(e.workflows.map((e) => [e.definition.name, e.definition])), n = (e) => {
 		let n = t.get(e);
 		if (!n) throw Error(`Unknown workflow: ${e}`);
 		return n;
 	}, r = async (t, r) => {
 		let i = n(t);
-		return Qi(t, r, await e.runEffect(i.poll(r)));
-	}, i = async () => e.runEffect(bt()), a = async (t, r, i) => {
+		return na(t, r, await e.runEffect(i.poll(r)));
+	}, i = async () => e.runEffect(St()), a = async (t, r, i) => {
 		let a = n(t), o;
-		return i?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(r)), await e.rememberStartContext?.(t, o, i.callerContext)), i?.wait ? (await e.runEffect(a.execute(r)), Yi(t, o ?? await e.runEffect(a.executionId(r)))) : Yi(t, await e.runEffect(a.execute(r, { discard: !0 })));
+		return i?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(r)), await e.rememberStartContext?.(t, o, i.callerContext)), i?.wait ? (await e.runEffect(a.execute(r)), $i(t, o ?? await e.runEffect(a.executionId(r)))) : $i(t, await e.runEffect(a.execute(r, { discard: !0 })));
 	};
 	return {
 		start: a,
@@ -2827,7 +2833,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				let e = await r(i, a);
 				if (e.status === "succeeded" || e.status === "failed" || e.status === "cancelled") return e;
 				if (o?.timeoutMs !== void 0 && Date.now() - s >= o.timeoutMs) throw Error(`Timed out waiting for workflow '${i}' run '${a}'`);
-				await $i(c);
+				await ra(c);
 			}
 		}),
 		cancel: async (t, r) => {
@@ -2865,22 +2871,22 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return e.retry(t, n);
 		}
 	};
-}, ta = (e, t) => ({
+}, aa = (e, t) => ({
 	...e,
 	start: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.start(..., { wait: true }) is not allowed inside a mutation transaction; start the workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.start(n, r)), Yi(n, a);
+		return t(() => e.start(n, r)), $i(n, a);
 	},
 	child: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.child(..., { wait: true }) is not allowed inside a mutation transaction; start the child workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.child(n, r, i)), Yi(n, a);
+		return t(() => e.child(n, r, i)), $i(n, a);
 	},
 	run: async () => {
 		throw Error("ctx.workflows.run(...) is not allowed inside a mutation transaction; use ctx.workflows.start(...) so the workflow starts after commit.");
 	}
-}), na = (e, t) => ({
+}), oa = (e, t) => ({
 	...e,
 	start: (n, r, i) => e.start(n, r, {
 		...i,
@@ -2894,7 +2900,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		...i,
 		callerContext: t
 	})
-}), ra = (e) => {
+}), sa = (e) => {
 	let t = () => {
 		let t = e();
 		if (!t) throw Error("Workflow runtime is not ready yet");
@@ -2915,55 +2921,59 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		listRuns: ((e) => t().listRuns(e)),
 		retry: (e, n) => t().retry(e, n)
 	};
-}, ia = (e, t) => {
+}, ca = (e, t) => {
 	let n = {};
-	for (let r of e) n[r.definition.name] = (e) => (t ? M.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(M.map((e) => Yi(r.definition.name, e)))).pipe(M.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
+	for (let r of e) n[r.definition.name] = (e) => (t ? M.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(M.map((e) => $i(r.definition.name, e)))).pipe(M.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
 	return n;
-}, aa = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
+}, la = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
 	let a = t.resolveStartContext?.(e.definition.name, i);
 	return (a === void 0 ? M.succeed(void 0) : M.promise(() => Promise.resolve(a))).pipe(M.flatMap((a) => {
-		let o = t.buildContext(a, {
+		let o = {
+			...a,
+			subject: a?.subject ?? Wi,
+			traceId: a?.traceId ?? "workflow-bootstrap"
+		}, s = t.buildContext(o, {
 			workflowName: e.definition.name,
 			executionId: i,
 			parentExecutionId: a?.parentExecutionId ?? null,
 			parentClosePolicy: a?.parentClosePolicy ?? null
-		}), s = e.buildExecute(o), c = (n?.(e, s, a) ?? s)(r, i), l = o?.store;
-		return l === void 0 ? c : M.provide(c, qi(l));
+		}), c = e.buildExecute(s), l = (n?.(e, c, o) ?? c)(r, i), u = s?.store;
+		return u === void 0 ? l : M.provide(l, Zi(u));
 	}));
-}))), oa = (e) => ({
+}))), ua = (e) => ({
 	_tag: "workflowEventTrigger",
 	...e
-}), sa = oa, ca = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", la = () => {
+}), da = ua, fa = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", pa = () => {
 	let e = globalThis.crypto;
 	return typeof e?.randomUUID == "function" ? e.randomUUID() : `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`;
-}, ua = (e) => `${e}_${la()}`, da = (e) => e.id ?? `${e.event}->${e.workflow}`, fa = E("_voltro_workflow_events", {
+}, ma = (e) => `${e}_${pa()}`, ha = (e) => e.id ?? `${e.event}->${e.workflow}`, ga = T("_voltro_workflow_events", {
 	id: v({ prefix: "wfe" }),
-	name: D(),
+	name: E(),
 	payload: C(),
-	source: D(),
+	source: E(),
 	subject: C().nullable(),
-	traceId: D().nullable(),
-	occurredAt: O().default("now")
-}).index(["name"]).index(["source"]).index(["occurredAt"]).reactive(), pa = E("_voltro_workflow_event_deliveries", {
+	traceId: E().nullable(),
+	occurredAt: D().default("now")
+}).index(["name"]).index(["source"]).index(["occurredAt"]).reactive(), _a = T("_voltro_workflow_event_deliveries", {
 	id: v({ prefix: "wfed" }),
-	eventId: D(),
-	eventName: D(),
-	triggerId: D(),
-	workflowName: D(),
-	executionId: D().nullable(),
-	status: D().oneOf([
+	eventId: E(),
+	eventName: E(),
+	triggerId: E(),
+	workflowName: E(),
+	executionId: E().nullable(),
+	status: E().oneOf([
 		"starting",
 		"started",
 		"skipped",
 		"failed"
 	]).default("starting"),
-	idempotencyKey: D().unique(),
+	idempotencyKey: E().unique(),
 	skipped: r().default(!1),
-	errorMessage: D().nullable(),
-	createdAt: O().default("now"),
-	completedAt: O().nullable()
-}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]).reactive(), ma = (e) => {
-	let t = e.makeId ?? ua, n = /* @__PURE__ */ new Map();
+	errorMessage: E().nullable(),
+	createdAt: D().default("now"),
+	completedAt: D().nullable()
+}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]).reactive(), va = (e) => {
+	let t = e.makeId ?? ma, n = /* @__PURE__ */ new Map();
 	for (let t of e.triggers) {
 		let e = n.get(t.event);
 		e ? e.push(t) : n.set(t.event, [t]);
@@ -3004,7 +3014,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		});
 		let p = o(n), m = [];
 		for (let o of p) {
-			let s = da(o), l = o.workflow, d;
+			let s = ha(o), l = o.workflow, d;
 			try {
 				let p = o.idempotencyKey?.(f) ?? `${c}:${s}`;
 				if (o.filter && !await o.filter(f)) {
@@ -3107,56 +3117,56 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			triggered: m
 		};
 	} };
-}, ha = A({ scope: "voltro:outbox" }), Y = "_voltro_outbox", ga = {
+}, ya = k({ scope: "voltro:outbox" }), Y = "_voltro_outbox", ba = {
 	kind: "typeid",
 	prefix: "obx"
-}, _a = E(Y, {
+}, xa = T(Y, {
 	id: v({ prefix: "obx" }),
-	effect: D(),
+	effect: E(),
 	payload: C(),
-	status: D(),
+	status: E(),
 	attempts: b(),
 	maxAttempts: b(),
-	nextAttemptAt: O(),
-	idempotencyKey: D().nullable(),
-	lastError: D().nullable(),
-	subjectId: D().nullable(),
-	tenantId: D().nullable(),
-	traceId: D().nullable(),
-	createdAt: O(),
-	deliveredAt: O().nullable(),
-	resendRequestedBy: D().nullable(),
-	resendReason: D().nullable(),
+	nextAttemptAt: D(),
+	idempotencyKey: E().nullable(),
+	lastError: E().nullable(),
+	subjectId: E().nullable(),
+	tenantId: E().nullable(),
+	traceId: E().nullable(),
+	createdAt: D(),
+	deliveredAt: D().nullable(),
+	resendRequestedBy: E().nullable(),
+	resendReason: E().nullable(),
 	resendCount: b()
-}), va = "_voltro_outbox_attempts", ya = {
+}), Sa = "_voltro_outbox_attempts", Ca = {
 	kind: "typeid",
 	prefix: "obxa"
-}, ba = E(va, {
+}, wa = T(Sa, {
 	id: v({ prefix: "obxa" }),
-	outboxId: D(),
-	effect: D(),
+	outboxId: E(),
+	effect: E(),
 	attempt: b(),
-	trigger: D().oneOf(["automatic", "manual"]),
-	triggeredBy: D().nullable(),
-	reason: D().nullable(),
-	outcome: D().oneOf([
+	trigger: E().oneOf(["automatic", "manual"]),
+	triggeredBy: E().nullable(),
+	reason: E().nullable(),
+	outcome: E().oneOf([
 		"delivered",
 		"failed",
 		"dead"
 	]),
-	startedAt: O(),
-	finishedAt: O(),
+	startedAt: D(),
+	finishedAt: D(),
 	durationMs: b(),
-	error: D().nullable(),
+	error: E().nullable(),
 	response: C().nullable(),
-	subjectId: D().nullable(),
-	tenantId: D().nullable(),
-	traceId: D().nullable()
-}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), xa = (e) => {
+	subjectId: E().nullable(),
+	tenantId: E().nullable(),
+	traceId: E().nullable()
+}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), Ta = (e) => {
 	if (e.effect.trim() === "") throw Error("defineOutboxHandler: `effect` must be a non-empty name");
 	if (e.maxAttempts !== void 0 && e.maxAttempts < 1) throw Error(`defineOutboxHandler("${e.effect}"): maxAttempts must be >= 1`);
 	return e;
-}, Sa = 8, Ca = (e) => ({
+}, Ea = 8, Da = (e) => ({
 	enqueue: async (n, r, i) => {
 		let a = (e.now ?? (() => /* @__PURE__ */ new Date()))(), o = i?.idempotencyKey;
 		if (o !== void 0) {
@@ -3171,12 +3181,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			if (n !== void 0) return n.id;
 		}
 		let s = {
-			id: f(ga, Y),
+			id: f(ba, Y),
 			effect: n,
 			payload: r,
 			status: "pending",
 			attempts: 0,
-			maxAttempts: i?.maxAttempts ?? Sa,
+			maxAttempts: i?.maxAttempts ?? Ea,
 			nextAttemptAt: new Date(a.getTime() + (i?.delayMs ?? 0)),
 			idempotencyKey: o ?? null,
 			lastError: null,
@@ -3223,7 +3233,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			});
 		} else e.nudge?.();
 	}
-}), wa = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), Ta = 50, Ea = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, Da = (e) => {
+}), Oa = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), ka = 50, Aa = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, ja = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "object" && !Array.isArray(e) ? e : { value: e }, n;
 	try {
@@ -3233,13 +3243,13 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	return n.length > 8192 ? {
 		truncated: !0,
-		preview: Ea(n, 8192)
+		preview: Aa(n, 8192)
 	} : t;
-}, Oa = async (e, t, n) => {
+}, Ma = async (e, t, n) => {
 	let r = t.outboxRow, i = r.id, a = r.resendRequestedBy ?? null;
 	try {
-		await e.insert(va, {
-			id: f(ya, va),
+		await e.insert(Sa, {
+			id: f(Ca, Sa),
 			outboxId: i,
 			effect: r.effect,
 			attempt: t.attempt,
@@ -3250,14 +3260,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			startedAt: t.startedAt,
 			finishedAt: t.finishedAt,
 			durationMs: Math.max(0, t.finishedAt.getTime() - t.startedAt.getTime()),
-			error: t.error === null ? null : Ea(t.error, 4e3),
-			response: Da(t.response),
+			error: t.error === null ? null : Aa(t.error, 4e3),
+			response: ja(t.response),
 			subjectId: r.subjectId ?? null,
 			tenantId: r.tenantId ?? null,
 			traceId: r.traceId ?? null
 		});
 	} catch (e) {
-		ha.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
+		ya.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
 			outboxId: i,
 			attempt: t.attempt
 		}, e);
@@ -3265,7 +3275,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	if (!(t.attempt <= n)) try {
 		let t = await e.query({
-			table: va,
+			table: Sa,
 			predicate: u("outboxId", i),
 			order: [{
 				column: "attempt",
@@ -3275,14 +3285,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			skip: void 0,
 			projection: ["id"]
 		});
-		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(va, r.id);
+		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(Sa, r.id);
 	} catch (e) {
-		ha.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
+		ya.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
 	}
-}, ka = async (e) => {
+}, Na = async (e) => {
 	let n = (e.now ?? (() => /* @__PURE__ */ new Date()))(), r = await e.store.query({
 		table: Y,
-		predicate: t(u("status", "pending"), te("nextAttemptAt", n)),
+		predicate: t(u("status", "pending"), ne("nextAttemptAt", n)),
 		order: [{
 			column: "nextAttemptAt",
 			direction: "asc"
@@ -3297,7 +3307,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			s++;
 			continue;
 		}
-		let u = t.attempts + 1, d = t.maxAttempts ?? Sa, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
+		let u = t.attempts + 1, d = t.maxAttempts ?? Ea, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
 		try {
 			let n = await l.handler({
 				payload: t.payload ?? {},
@@ -3306,7 +3316,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				tenantId: t.tenantId ?? null,
 				traceId: t.traceId ?? null
 			});
-			await Oa(e.store, {
+			await Ma(e.store, {
 				outboxRow: t,
 				attempt: u,
 				outcome: "delivered",
@@ -3324,7 +3334,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			}), i++;
 		} catch (i) {
 			let s = i instanceof Error ? i.message : String(i), l = u >= d;
-			await Oa(e.store, {
+			await Ma(e.store, {
 				outboxRow: t,
 				attempt: u,
 				outcome: l ? "dead" : "failed",
@@ -3336,20 +3346,20 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				status: l ? "dead" : "pending",
 				attempts: u,
 				lastError: s,
-				nextAttemptAt: new Date(n.getTime() + wa(u)),
+				nextAttemptAt: new Date(n.getTime() + Oa(u)),
 				resendRequestedBy: null,
 				resendReason: null
-			}), l ? (o++, ha.error("outbox effect dead-lettered after exhausting attempts", {
+			}), l ? (o++, ya.error("outbox effect dead-lettered after exhausting attempts", {
 				id: r,
 				effect: c,
 				attempts: u,
 				maxAttempts: d
-			}, i)) : (a++, ha.warn("outbox delivery failed; will retry", {
+			}, i)) : (a++, ya.warn("outbox delivery failed; will retry", {
 				id: r,
 				effect: c,
 				attempt: u,
 				maxAttempts: d,
-				retryInMs: wa(u)
+				retryInMs: Oa(u)
 			}));
 		}
 	}
@@ -3359,47 +3369,47 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		dead: o,
 		skipped: s
 	};
-}, Aa = A({ scope: "voltro:connections" }), X = "_voltro_connections", ja = {
+}, Pa = k({ scope: "voltro:connections" }), X = "_voltro_connections", Fa = {
 	kind: "typeid",
 	prefix: "conn"
-}, Ma = E(X, {
+}, Ia = T(X, {
 	id: v({ prefix: "conn" }),
-	connectionId: D(),
-	subjectId: D(),
-	tenantId: D().nullable(),
-	kind: D().oneOf(["oauth2", "pat"]),
-	status: D().oneOf([
+	connectionId: E(),
+	subjectId: E(),
+	tenantId: E().nullable(),
+	kind: E().oneOf(["oauth2", "pat"]),
+	status: E().oneOf([
 		"connected",
 		"expired",
 		"revoked",
 		"error"
 	]),
-	accessToken: D(),
-	refreshToken: D().nullable(),
-	expiresAt: O().nullable(),
-	scopes: D().nullable(),
-	accountId: D().nullable(),
-	accountLabel: D().nullable(),
-	lastError: D().nullable(),
-	refreshLockedUntil: O(),
+	accessToken: E(),
+	refreshToken: E().nullable(),
+	expiresAt: D().nullable(),
+	scopes: E().nullable(),
+	accountId: E().nullable(),
+	accountLabel: E().nullable(),
+	lastError: E().nullable(),
+	refreshLockedUntil: D(),
 	metadata: C().nullable(),
-	connectedAt: O(),
-	updatedAt: O()
-}).unique("bySubject", ["connectionId", "subjectId"]).index(["subjectId"]).reactive(), Na = "_voltro_connection_grants", Pa = {
+	connectedAt: D(),
+	updatedAt: D()
+}).unique("bySubject", ["connectionId", "subjectId"]).index(["subjectId"]).reactive(), La = "_voltro_connection_grants", Ra = {
 	kind: "typeid",
 	prefix: "cgrant"
-}, Fa = E(Na, {
+}, za = T(La, {
 	id: v({ prefix: "cgrant" }),
-	state: D().unique(),
-	connectionId: D(),
-	subjectId: D(),
-	tenantId: D().nullable(),
-	codeVerifier: D().nullable(),
-	redirectTo: D(),
-	createdAt: O(),
-	expiresAt: O()
-}).index(["expiresAt"]), Ia = /^[a-z][a-z0-9-]*$/, La = (e) => {
-	if (!Ia.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
+	state: E().unique(),
+	connectionId: E(),
+	subjectId: E(),
+	tenantId: E().nullable(),
+	codeVerifier: E().nullable(),
+	redirectTo: E(),
+	createdAt: D(),
+	expiresAt: D()
+}).index(["expiresAt"]), Ba = /^[a-z][a-z0-9-]*$/, Va = (e) => {
+	if (!Ba.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
 	if (e.kind === "oauth2") {
 		for (let t of [
 			"authorizeUrl",
@@ -3409,9 +3419,9 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		]) if (typeof e[t] != "string" || e[t].length === 0) throw Error(`defineConnection("${e.id}"): \`${t}\` is required for kind 'oauth2'.`);
 	}
 	return e;
-}, Ra = (e) => e.label ?? e.id, za = (e) => {
-	if (e.length !== 0 && pi() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
-}, Ba = (e) => {
+}, Ha = (e) => e.label ?? e.id, Ua = (e) => {
+	if (e.length !== 0 && gi() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
+}, Wa = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		if (t.has(n.id)) throw Error(`connections: duplicate connection id "${n.id}" — each *.connection.ts must declare a distinct id.`);
@@ -3421,14 +3431,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		get: (e) => t.get(e),
 		list: () => [...t.values()]
 	};
-}, Va = (e) => {
+}, Ga = (e) => {
 	if (e == null) return null;
 	let t = e instanceof Date ? e : new Date(String(e));
 	return Number.isNaN(t.getTime()) ? null : t;
-}, Ha = (e) => Va(e)?.toISOString() ?? null, Ua = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), Wa = (e, t) => t === void 0 ? {
+}, Ka = (e) => Ga(e)?.toISOString() ?? null, qa = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), Ja = (e, t) => t === void 0 ? {
 	connectionId: e.id,
 	kind: e.kind,
-	label: Ra(e),
+	label: Ha(e),
 	status: "disconnected",
 	accountId: null,
 	accountLabel: null,
@@ -3439,24 +3449,24 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 } : {
 	connectionId: e.id,
 	kind: e.kind,
-	label: Ra(e),
+	label: Ha(e),
 	status: String(t.status ?? "connected"),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null,
-	scopes: Ua(t.scopes),
-	expiresAt: Ha(t.expiresAt),
+	scopes: qa(t.scopes),
+	expiresAt: Ka(t.expiresAt),
 	lastError: t.lastError ?? null,
-	connectedAt: Ha(t.connectedAt)
-}, Ga = async (e, n, r) => (await e.query({
+	connectedAt: Ka(t.connectedAt)
+}, Ya = async (e, n, r) => (await e.query({
 	table: X,
 	predicate: t(u("connectionId", n), u("subjectId", r)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0], Ka = async (e) => {
+}))[0], Xa = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = e.tokens.expiresAt === void 0 ? null : new Date(e.tokens.expiresAt), r = {
-		id: f(ja, X),
+		id: f(Fa, X),
 		connectionId: e.definition.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
@@ -3474,8 +3484,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		connectedAt: t,
 		updatedAt: t
 	};
-	return qa(e.store, r);
-}, qa = (e, t) => e.upsert(X, t, {
+	return Za(e.store, r);
+}, Za = (e, t) => e.upsert(X, t, {
 	conflictColumns: ["connectionId", "subjectId"],
 	update: [
 		"kind",
@@ -3491,10 +3501,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		"metadata",
 		"updatedAt"
 	]
-}), Ja = async (e, t, n) => {
-	let r = await Ga(e, t, n);
+}), Qa = async (e, t, n) => {
+	let r = await Ya(e, t, n);
 	return r !== void 0 && e.delete(X, r.id);
-}, Ya = async (e, t, n) => {
+}, $a = async (e, t, n) => {
 	let r = await e.query({
 		table: X,
 		predicate: u("subjectId", n),
@@ -3503,9 +3513,9 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	}), i = new Map(r.map((e) => [String(e.connectionId), e]));
-	return t.list().map((e) => Wa(e, i.get(e.id)));
-}, Xa = (e, t) => globalThis.fetch(e, t), Za = async (e, t, n) => {
-	let r = e.fetchImpl ?? Xa, i, a;
+	return t.list().map((e) => Ja(e, i.get(e.id)));
+}, eo = (e, t) => globalThis.fetch(e, t), to = async (e, t, n) => {
+	let r = e.fetchImpl ?? eo, i, a;
 	try {
 		let n = await r(e.tokenUrl, {
 			method: "POST",
@@ -3517,7 +3527,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		});
 		i = n.status, a = await n.text();
 	} catch (t) {
-		throw new k({
+		throw new O({
 			connectionId: e.id,
 			reason: `token endpoint unreachable: ${String(t)}`,
 			transient: !0
@@ -3529,12 +3539,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	} catch {
 		o = {};
 	}
-	if (i < 200 || i >= 300) throw new k({
+	if (i < 200 || i >= 300) throw new O({
 		connectionId: e.id,
 		reason: `token endpoint ${i}: ${o.error ?? ""} ${o.error_description ?? a.slice(0, 200)}`.trim(),
 		transient: i >= 500
 	});
-	if (typeof o.access_token != "string" || o.access_token.length === 0) throw new k({
+	if (typeof o.access_token != "string" || o.access_token.length === 0) throw new O({
 		connectionId: e.id,
 		reason: "token response carried no access_token",
 		transient: !1
@@ -3545,64 +3555,64 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		...Number.isFinite(o.expires_in) ? { expiresAt: n() + o.expires_in * 1e3 } : {},
 		scopes: (o.scope ?? e.scopes?.join(" ") ?? "").split(" ").filter(Boolean)
 	};
-}, Qa = (e, t, n = Date.now) => Za(e, {
+}, no = (e, t, n = Date.now) => to(e, {
 	grant_type: "authorization_code",
 	client_id: e.clientId,
 	client_secret: e.clientSecret,
 	code: t.code,
 	redirect_uri: t.redirectUri,
 	...t.codeVerifier ? { code_verifier: t.codeVerifier } : {}
-}, n), $a = (e, t, n = Date.now) => Za(e, {
+}, n), ro = (e, t, n = Date.now) => to(e, {
 	grant_type: "refresh_token",
 	client_id: e.clientId,
 	client_secret: e.clientSecret,
 	refresh_token: t
-}, n), eo = 6e4, to = 3e4, no = class extends Error {
+}, n), io = 6e4, ao = 3e4, oo = class extends Error {
 	connectionId;
 	subjectId;
 	_tag = "ConnectionNotConnected";
 	constructor(e, t) {
 		super(`connection "${e}" is not connected for this subject`), this.connectionId = e, this.subjectId = t, this.name = "ConnectionNotConnected";
 	}
-}, ro = (e) => new Promise((t) => {
+}, so = (e) => new Promise((t) => {
 	setTimeout(t, e);
-}), io = /* @__PURE__ */ new Map(), ao = (e, t) => `${e}${t}`, oo = () => {
-	io.clear();
-}, so = (e, t) => ({
+}), co = /* @__PURE__ */ new Map(), lo = (e, t) => `${e}${t}`, uo = () => {
+	co.clear();
+}, fo = (e, t) => ({
 	connectionId: e.id,
 	kind: e.kind,
-	accessToken: hi(String(t.accessToken)),
-	expiresAt: Va(t.expiresAt),
-	scopes: Ua(t.scopes),
+	accessToken: vi(String(t.accessToken)),
+	expiresAt: Ga(t.expiresAt),
+	scopes: qa(t.scopes),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null
-}), co = (e, t, n) => {
-	let r = Va(e.expiresAt);
+}), po = (e, t, n) => {
+	let r = Ga(e.expiresAt);
 	return r !== null && r.getTime() - n < t;
-}, lo = async (e) => {
-	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await Ga(n, r.id, i);
-	if (a === void 0) throw new no(r.id, i);
-	if (r.kind === "pat" || !co(a, r.refreshSkewMs ?? 6e4, t())) return so(r, a);
-	let o = ao(r.id, i), s = io.get(o);
+}, mo = async (e) => {
+	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await Ya(n, r.id, i);
+	if (a === void 0) throw new oo(r.id, i);
+	if (r.kind === "pat" || !po(a, r.refreshSkewMs ?? 6e4, t())) return fo(r, a);
+	let o = lo(r.id, i), s = co.get(o);
 	if (s !== void 0) return s;
-	let c = uo({
+	let c = ho({
 		...e,
 		now: t,
 		row: a
 	}).finally(() => {
-		io.delete(o);
+		co.delete(o);
 	});
-	return io.set(o, c), c;
-}, uo = async (e) => {
-	let { store: n, subjectId: r, now: i } = e, a = e.definition, o = e.sleep ?? ro, s = a.refreshSkewMs ?? 6e4, c = e.row.id;
-	if (await n.updateMany("_voltro_connections", { refreshLockedUntil: new Date(i() + 3e4) }, { where: t(u("id", c), te("refreshLockedUntil", new Date(i()))) }) === 0) {
+	return co.set(o, c), c;
+}, ho = async (e) => {
+	let { store: n, subjectId: r, now: i } = e, a = e.definition, o = e.sleep ?? so, s = a.refreshSkewMs ?? 6e4, c = e.row.id;
+	if (await n.updateMany("_voltro_connections", { refreshLockedUntil: new Date(i() + 3e4) }, { where: t(u("id", c), ne("refreshLockedUntil", new Date(i()))) }) === 0) {
 		for (let e = 0; e < 10; e++) {
 			await o(200);
-			let e = await Ga(n, a.id, r);
-			if (e === void 0) throw new no(a.id, r);
-			if (!co(e, s, i())) return so(a, e);
+			let e = await Ya(n, a.id, r);
+			if (e === void 0) throw new oo(a.id, r);
+			if (!po(e, s, i())) return fo(a, e);
 		}
-		throw new k({
+		throw new O({
 			connectionId: a.id,
 			reason: "another replica held the refresh lease and did not publish a fresh token in time",
 			transient: !0
@@ -3614,16 +3624,16 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		lastError: "access token expired and no refresh token is on file — reconnect required",
 		refreshLockedUntil: /* @__PURE__ */ new Date(0),
 		updatedAt: new Date(i())
-	}), new k({
+	}), new O({
 		connectionId: a.id,
 		reason: "access token expired and no refresh token is on file — reconnect required",
 		transient: !1
 	});
 	let d;
 	try {
-		d = await $a(a, hi(String(l)), i);
+		d = await ro(a, vi(String(l)), i);
 	} catch (e) {
-		let t = e instanceof k ? e : new k({
+		let t = e instanceof O ? e : new O({
 			connectionId: a.id,
 			reason: String(e),
 			transient: !0
@@ -3638,7 +3648,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				refreshToken: null,
 				expiresAt: null
 			}
-		}), Aa.warn("connection refresh failed", {
+		}), Pa.warn("connection refresh failed", {
 			connectionId: a.id,
 			transient: t.transient,
 			reason: t.reason
@@ -3654,32 +3664,32 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		refreshLockedUntil: /* @__PURE__ */ new Date(0),
 		updatedAt: new Date(i())
 	};
-	return so(a, await n.update(X, c, f) ?? {
+	return fo(a, await n.update(X, c, f) ?? {
 		...e.row,
 		...f
 	});
-}, fo = (e = 32) => {
+}, go = (e = 32) => {
 	let t = new Uint8Array(e);
 	return globalThis.crypto.getRandomValues(t), Array.from(t, (e) => e.toString(16).padStart(2, "0")).join("");
-}, po = (e) => {
+}, _o = (e) => {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}, mo = async (e) => {
+}, vo = async (e) => {
 	let t = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(e));
-	return po(new Uint8Array(t));
-}, ho = 10 * 6e4, go = (e) => `/_voltro/connections/${e}/callback`, _o = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, vo = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${go(e.id)}`, yo = async (e) => {
-	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = fo(), i = n.pkce === !1 ? null : fo(48), a = vo(n, e.publicUrl);
-	await e.store.insert(Na, {
-		id: f(Pa, Na),
+	return _o(new Uint8Array(t));
+}, yo = 10 * 6e4, bo = (e) => `/_voltro/connections/${e}/callback`, xo = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, So = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${bo(e.id)}`, Co = async (e) => {
+	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = go(), i = n.pkce === !1 ? null : go(48), a = So(n, e.publicUrl);
+	await e.store.insert(La, {
+		id: f(Ra, La),
 		state: r,
 		connectionId: n.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
 		codeVerifier: i === null ? null : q(i),
-		redirectTo: _o(e.redirectTo),
+		redirectTo: xo(e.redirectTo),
 		createdAt: t,
-		expiresAt: new Date(t.getTime() + ho)
+		expiresAt: new Date(t.getTime() + yo)
 	});
 	let o = new URLSearchParams({
 		response_type: "code",
@@ -3689,50 +3699,50 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		...n.scopes && n.scopes.length > 0 ? { scope: n.scopes.join(" ") } : {},
 		...n.authorizeParams ?? {}
 	});
-	i !== null && (o.set("code_challenge", await mo(i)), o.set("code_challenge_method", "S256"));
+	i !== null && (o.set("code_challenge", await vo(i)), o.set("code_challenge_method", "S256"));
 	let s = n.authorizeUrl.includes("?") ? "&" : "?";
 	return {
 		authorizeUrl: `${n.authorizeUrl}${s}${o.toString()}`,
 		state: r
 	};
-}, bo = async (e) => {
+}, wo = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = (await e.store.query({
-		table: Na,
+		table: La,
 		predicate: u("state", e.state),
 		order: [],
 		take: 1,
 		skip: void 0,
 		projection: void 0
 	}))[0];
-	if (n === void 0) throw new k({
+	if (n === void 0) throw new O({
 		connectionId: "unknown",
 		reason: "unknown or already-used handshake state",
 		transient: !1
 	});
-	await e.store.delete(Na, n.id);
-	let r = String(n.connectionId), i = Va(n.expiresAt);
-	if (i !== null && i.getTime() < t.getTime()) throw new k({
+	await e.store.delete(La, n.id);
+	let r = String(n.connectionId), i = Ga(n.expiresAt);
+	if (i !== null && i.getTime() < t.getTime()) throw new O({
 		connectionId: r,
 		reason: "handshake expired — start again",
 		transient: !1
 	});
 	let a = e.registry.get(r);
-	if (a === void 0 || a.kind !== "oauth2") throw new k({
+	if (a === void 0 || a.kind !== "oauth2") throw new O({
 		connectionId: r,
 		reason: "no oauth2 connection is declared under that id",
 		transient: !1
 	});
-	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : hi(String(n.codeVerifier)), s = await Qa(a, {
+	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : vi(String(n.codeVerifier)), s = await no(a, {
 		code: e.code,
-		redirectUri: vo(a, e.publicUrl),
+		redirectUri: So(a, e.publicUrl),
 		codeVerifier: o
 	}, () => t.getTime()), c = a.identify === void 0 ? void 0 : await a.identify(s).catch((e) => {
-		Aa.warn("connection identify failed; storing without account details", {
+		Pa.warn("connection identify failed; storing without account details", {
 			connectionId: r,
 			reason: String(e)
 		});
 	});
-	return await Ka({
+	return await Xa({
 		store: e.store,
 		definition: a,
 		subjectId: String(n.subjectId),
@@ -3742,12 +3752,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		now: () => t
 	}), {
 		connectionId: r,
-		redirectTo: _o(String(n.redirectTo ?? "/"))
+		redirectTo: xo(String(n.redirectTo ?? "/"))
 	};
-}, xo = async (e, t = /* @__PURE__ */ new Date()) => {
+}, To = async (e, t = /* @__PURE__ */ new Date()) => {
 	let n = await e.query({
-		table: Na,
-		predicate: te("expiresAt", t),
+		table: La,
+		predicate: ne("expiresAt", t),
 		order: [],
 		take: void 0,
 		skip: void 0,
@@ -3755,27 +3765,27 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}), r = 0;
 	for (let t of n) await e.delete("_voltro_connection_grants", t.id) && r++;
 	return r;
-}, So, Co = (e) => {
-	So = e;
-}, wo = () => So, To = (e, t) => {
-	let n = So;
+}, Eo, Do = (e) => {
+	Eo = e;
+}, Oo = () => Eo, ko = (e, t) => {
+	let n = Eo;
 	return n === void 0 ? Promise.reject(/* @__PURE__ */ Error(`resolveConnectionForSubject("${t}"): no connection vault is registered — the app declares no \`*.connection.ts\`, or this call ran before boot completed.`)) : n(e, t);
-}, Eo = (e) => async (t, n) => {
+}, Ao = (e) => async (t, n) => {
 	let r = e.registry.get(n);
 	if (r === void 0) throw Error(`connection "${n}" is not declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
 	let i = t.id ?? null;
-	if (i === null || i === "") throw new no(n, "<anonymous>");
-	return lo({
+	if (i === null || i === "") throw new oo(n, "<anonymous>");
+	return mo({
 		store: e.store,
 		definition: r,
 		subjectId: i
 	});
-}, Do = (e) => {
+}, jo = (e) => {
 	let t = e.subject.id ?? null, n = async (n) => {
 		let r = e.registry.get(n);
 		if (r === void 0) throw Error(`ctx.connections.get("${n}"): no such connection is declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
-		if (t === null || t === "") throw new no(n, "<anonymous>");
-		return lo({
+		if (t === null || t === "") throw new oo(n, "<anonymous>");
+		return mo({
 			store: e.store,
 			definition: r,
 			subjectId: t
@@ -3787,7 +3797,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			try {
 				return await n(e);
 			} catch (e) {
-				if (e instanceof no) return null;
+				if (e instanceof oo) return null;
 				throw e;
 			}
 		},
@@ -3802,17 +3812,17 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			expiresAt: null,
 			lastError: null,
 			connectedAt: null
-		})) : Ya(e.store, e.registry, t)
+		})) : $a(e.store, e.registry, t)
 	};
-}, Oo = (e, t) => {
+}, Mo = (e, t) => {
 	let n = e.request?.subject?.id ?? null;
-	if (n === null || n === "") throw new xe({ connectionId: t });
+	if (n === null || n === "") throw new we({ connectionId: t });
 	return n;
-}, ko = (e, t) => {
+}, No = (e, t) => {
 	let n = e.registry.get(t);
-	if (n === void 0) throw new be({ connectionId: t });
+	if (n === void 0) throw new Ce({ connectionId: t });
 	return n;
-}, Ao = (e) => async (t, n) => {
+}, Po = (e) => async (t, n) => {
 	let r = n.request?.subject?.id ?? null;
 	return r === null || r === "" ? e.registry.list().map((e) => ({
 		connectionId: e.id,
@@ -3825,15 +3835,15 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		expiresAt: null,
 		lastError: null,
 		connectedAt: null
-	})) : Ya(n.store, e.registry, r);
-}, jo = (e) => async (t, n) => {
-	let r = ko(e, t.connectionId), i = Oo(n, t.connectionId);
-	if (r.kind !== "oauth2") throw new ye({
+	})) : $a(n.store, e.registry, r);
+}, Fo = (e) => async (t, n) => {
+	let r = No(e, t.connectionId), i = Mo(n, t.connectionId);
+	if (r.kind !== "oauth2") throw new Se({
 		connectionId: t.connectionId,
 		expected: "oauth2",
 		actual: r.kind
 	});
-	return yo({
+	return Co({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -3841,15 +3851,15 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		publicUrl: e.publicUrl,
 		...t.redirectTo === void 0 ? {} : { redirectTo: t.redirectTo }
 	});
-}, Mo = (e) => async (t, n) => {
-	let r = ko(e, t.connectionId), i = Oo(n, t.connectionId);
-	if (r.kind !== "pat") throw new ye({
+}, Io = (e) => async (t, n) => {
+	let r = No(e, t.connectionId), i = Mo(n, t.connectionId);
+	if (r.kind !== "pat") throw new Se({
 		connectionId: t.connectionId,
 		expected: "pat",
 		actual: r.kind
 	});
 	let a = t.token.trim();
-	if (a.length === 0) throw new k({
+	if (a.length === 0) throw new O({
 		connectionId: t.connectionId,
 		reason: "token is empty",
 		transient: !1
@@ -3858,13 +3868,13 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	if (r.validate !== void 0) try {
 		o = await r.validate(a);
 	} catch (e) {
-		throw new k({
+		throw new O({
 			connectionId: t.connectionId,
 			reason: `the provider rejected that token: ${e instanceof Error ? e.message : String(e)}`,
 			transient: !1
 		});
 	}
-	return await Ka({
+	return await Xa({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -3875,20 +3885,20 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		},
 		...o === void 0 ? {} : { account: o }
 	}), { ok: !0 };
-}, No = (e) => async (t, n) => {
-	ko(e, t.connectionId);
-	let r = Oo(n, t.connectionId);
-	return { ok: await Ja(n.store, t.connectionId, r) };
-}, Po = "admin:full", Fo = class extends L.TaggedError()("AccessDenied", {
+}, Lo = (e) => async (t, n) => {
+	No(e, t.connectionId);
+	let r = Mo(n, t.connectionId);
+	return { ok: await Qa(n.store, t.connectionId, r) };
+}, Ro = "admin:full", zo = class extends L.TaggedError()("AccessDenied", {
 	action: L.String,
 	resourceType: L.String,
 	resourceId: L.String
-}) {}, Io = /* @__PURE__ */ new Map(), Lo = (e) => {
+}) {}, Bo = /* @__PURE__ */ new Map(), Vo = (e) => {
 	if (typeof e.resourceType != "string" || e.resourceType.length === 0) throw Error("defineResourcePolicy: a non-empty `resourceType` is required");
 	if (e.actions === void 0 || Object.keys(e.actions).length === 0) throw Error(`resource policy '${e.resourceType}': at least one action is required`);
-	if (Io.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
-	return Io.set(e.resourceType, e), e;
-}, Ro = (e) => Io.get(e), zo = () => [...Io.values()], Bo = () => Io.clear(), Vo = () => zo().map((e) => {
+	if (Bo.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
+	return Bo.set(e.resourceType, e), e;
+}, Ho = (e) => Bo.get(e), Uo = () => [...Bo.values()], Wo = () => Bo.clear(), Go = () => Uo().map((e) => {
 	let t = /* @__PURE__ */ new Set();
 	for (let n of Object.values(e.actions)) for (let e of n) t.add(e);
 	for (let [n, r] of Object.entries(e.implies ?? {})) {
@@ -3901,7 +3911,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		relations: [...t],
 		implies: e.implies ?? {}
 	};
-}), Ho = (e, t) => {
+}), Ko = (e, t) => {
 	let n = new Set(e);
 	if (t === void 0) return n;
 	let r = [...e];
@@ -3910,37 +3920,37 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		for (let i of t[e] ?? []) n.has(i) || (n.add(i), r.push(i));
 	}
 	return n;
-}, Uo = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : Ho(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), Wo = (e, t, n, r) => {
+}, qo = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : Ko(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), Jo = (e, t, n, r) => {
 	if (e.scopes?.includes("admin:full")) return !0;
 	if (e.id === null || n.tenantId != null && e.tenantId !== n.tenantId) return !1;
 	let i = r.policy.actions[t];
 	if (i === void 0 || i.length === 0) return !1;
-	let a = Uo(e, n, r.tuples, r.policy);
+	let a = qo(e, n, r.tuples, r.policy);
 	return i.some((e) => a.has(e));
-}, Go = (e, t, n, r) => {
-	if (!Wo(e, t, n, r)) throw new Fo({
+}, Yo = (e, t, n, r) => {
+	if (!Jo(e, t, n, r)) throw new zo({
 		action: t,
 		resourceType: n.type,
 		resourceId: n.id
 	});
-}, Ko = (e, t, n, r, i) => r.filter((r) => Wo(e, t, {
+}, Xo = (e, t, n, r, i) => r.filter((r) => Jo(e, t, {
 	type: n,
 	id: r.id,
 	...r.tenantId === void 0 ? {} : { tenantId: r.tenantId }
-}, i)), qo = (e, t) => {
+}, i)), Zo = (e, t) => {
 	let n = new Set(t.map((e) => e.id));
 	return e.filter((e) => !n.has(e.id)).map((e) => e.id);
-}, Jo = A({ scope: "voltro:policy" }), Yo, Xo = (e) => {
-	Yo = e;
-}, Zo = () => Yo, Qo = () => {
-	Pe((e) => M.gen(function* () {
-		let t = Ro(e.resourceType);
-		if (t === void 0) return Jo.warn("policy guard denied — no resource policy registered for this type", {
+}, Qo = k({ scope: "voltro:policy" }), $o, es = (e) => {
+	$o = e;
+}, ts = () => $o, ns = () => {
+	Le((e) => M.gen(function* () {
+		let t = Ho(e.resourceType);
+		if (t === void 0) return Qo.warn("policy guard denied — no resource policy registered for this type", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
-		let n = Yo;
-		if (n === void 0) return Jo.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
+		let n = $o;
+		if (n === void 0) return Qo.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
@@ -3951,11 +3961,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				resourceId: e.resourceId
 			}),
 			catch: (e) => e
-		}).pipe(M.catchAll((t) => (Jo.error("policy guard denied — tuple source failed", {
+		}).pipe(M.catchAll((t) => (Qo.error("policy guard denied — tuple source failed", {
 			resourceType: e.resourceType,
 			resourceId: e.resourceId
 		}, t), M.succeed([])))), i = e.subject;
-		return Wo({
+		return Jo({
 			id: e.subject.id,
 			tenantId: i.tenantId ?? null,
 			...i.scopes === void 0 ? {} : { scopes: i.scopes }
@@ -3968,10 +3978,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			tuples: r
 		});
 	}));
-}, $o = (e) => {
+}, rs = (e) => {
 	Promise.resolve().then(e);
-}, es = (e) => {
-	let t = e.schedule ?? $o, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}${t}`, a = async (t) => {
+}, is = (e) => {
+	let t = e.schedule ?? rs, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}${t}`, a = async (t) => {
 		let a = r.get(t);
 		if (a === void 0) return;
 		r.delete(t);
@@ -4017,11 +4027,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		load: async (e, t) => (await o(e, [t]))[0] ?? null,
 		loadMany: (e, t) => o(e, t)
 	};
-}, ts = N.effect(Ze.HttpClient, M.map(Ze.HttpClient, (e) => e.pipe(Ze.mapRequestEffect((e) => M.currentSpan.pipe(M.map((t) => e.headers.traceparent === void 0 ? Qe.setHeader(e, "traceparent", rr({
+}, as = N.effect($e.HttpClient, M.map($e.HttpClient, (e) => e.pipe($e.mapRequestEffect((e) => M.currentSpan.pipe(M.map((t) => e.headers.traceparent === void 0 ? et.setHeader(e, "traceparent", or({
 	traceId: t.traceId,
 	spanId: t.spanId,
 	sampled: t.sampled
-})) : e), M.catchAll(() => M.succeed(e))))))), ns = "voltro/audit", rs = "voltro/softDelete", is = "voltro/tenant", as = (e) => {
+})) : e), M.catchAll(() => M.succeed(e))))))), os = "voltro/audit", ss = "voltro/softDelete", cs = "voltro/tenant", ls = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = /* @__PURE__ */ new Set();
@@ -4064,49 +4074,49 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return !1;
 		},
 		idScheme: (e) => t.get(e)?.idScheme,
-		defaultFactories: (e) => t.get(e)?.defaultFactories ?? os,
-		computedFields: (e) => t.get(e)?.computedFields ?? ss,
+		defaultFactories: (e) => t.get(e)?.defaultFactories ?? us,
+		computedFields: (e) => t.get(e)?.computedFields ?? ds,
 		insertSchema: (e) => t.get(e)?.insertSchema,
 		validatePatchSchema: (e) => t.get(e)?.validatePatchSchema
 	};
-}, os = /* @__PURE__ */ new Map(), ss = /* @__PURE__ */ new Map(), cs = as([]), ls = class extends L.TaggedError()("NoRowFound", {
+}, us = /* @__PURE__ */ new Map(), ds = /* @__PURE__ */ new Map(), fs = ls([]), ps = class extends L.TaggedError()("NoRowFound", {
 	table: L.String,
 	found: L.Number
 }) {
 	get message() {
 		return this.found === 0 ? `expected exactly one row in '${this.table}', found none` : `expected exactly one row in '${this.table}', found more than one`;
 	}
-}, us = class extends L.TaggedError()("OptimisticLockError", {
+}, ms = class extends L.TaggedError()("OptimisticLockError", {
 	table: L.String,
 	expected: L.Number
 }) {
 	get message() {
 		return `optimistic lock failed on '${this.table}': expected version ${this.expected}`;
 	}
-}, ds = (e) => typeof e == "object" && !!e && ("and" in e || "or" in e || "not" in e || "op" in e || "subquery" in e), fs = (e) => {
-	if (e.length === 1 && ds(e[0])) return e[0];
+}, hs = (e) => typeof e == "object" && !!e && ("and" in e || "or" in e || "not" in e || "op" in e || "subquery" in e), gs = (e) => {
+	if (e.length === 1 && hs(e[0])) return e[0];
 	let t = e[0];
 	if (e.length === 2) return u(t, e[1]);
 	let n = e[1], r = e[2];
 	switch (n) {
 		case "=": return u(t, r);
 		case "!=":
-		case "<>": return T(t, r);
+		case "<>": return w(t, r);
 		case ">": return h(t, r);
 		case ">=": return g(t, r);
-		case "<": return w(t, r);
-		case "<=": return te(t, r);
+		case "<": return te(t, r);
+		case "<=": return ne(t, r);
 		case "in": return y(t, r);
 		case "like":
 		case "contains":
 		case "fts": return o(t, r);
 		default: return u(t, r);
 	}
-}, ps = (e) => {
+}, _s = (e) => {
 	let t = m(e);
 	if (t === void 0) throw Error(`unknown table '${e}' — is it declared with table()?`);
-	return re(t);
-}, ms = class e {
+	return ie(t);
+}, vs = class e {
 	backend;
 	scope;
 	table;
@@ -4120,7 +4130,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		return new e(this.backend, this.scope, this.table, t, this.skipTenant, this.skipSoftDelete);
 	}
 	where(...e) {
-		return this.clone(this.query.where(fs(e)));
+		return this.clone(this.query.where(gs(e)));
 	}
 	orderBy(e, t = "asc") {
 		return this.clone(this.query.orderBy(e, t));
@@ -4155,7 +4165,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	scopedQuery() {
 		let e = this.query, { subject: t, schemaRegistry: n } = this.scope;
 		!this.skipTenant && n.hasTenant(this.table) && t.tenantId != null && (e = e.where(u("tenantId", t.tenantId))), !this.skipSoftDelete && n.hasSoftDelete(this.table) && (e = e.where(S("deletedAt")));
-		let r = (this.scope.rowFilter ?? Mn)(this.table);
+		let r = (this.scope.rowFilter ?? Pn)(this.table);
 		return r !== void 0 && (e = e.where(r)), e;
 	}
 	async all() {
@@ -4169,11 +4179,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	async one() {
 		let e = await this.backend.query(this.scopedQuery().limit(2).descriptor), t = e[0];
-		if (t === void 0) throw new ls({
+		if (t === void 0) throw new ps({
 			table: this.table,
 			found: 0
 		});
-		if (e.length > 1) throw new ls({
+		if (e.length > 1) throw new ps({
 			table: this.table,
 			found: e.length
 		});
@@ -4189,7 +4199,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	get descriptor() {
 		return this.scopedQuery().descriptor;
 	}
-}, hs = class {
+}, ys = class {
 	backend;
 	scope;
 	table;
@@ -4200,7 +4210,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		this.backend = e, this.scope = t, this.table = n;
 	}
 	where(...e) {
-		let n = fs(e);
+		let n = gs(e);
 		return this.predicate = this.predicate ? t(this.predicate, n) : n, this;
 	}
 	unscoped() {
@@ -4224,7 +4234,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	async set(e) {
 		let t = await this.backend.updateMany(this.table, e, { where: this.scopedWhere() });
-		if (this.expectedVersion !== void 0 && t === 0) throw new us({
+		if (this.expectedVersion !== void 0 && t === 0) throw new ms({
 			table: this.table,
 			expected: this.expectedVersion
 		});
@@ -4233,7 +4243,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	async restore() {
 		return this.backend.updateMany(this.table, { deletedAt: null }, { where: this.scopedWhere() });
 	}
-}, gs = class {
+}, bs = class {
 	backend;
 	scope;
 	table;
@@ -4243,7 +4253,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		this.backend = e, this.scope = t, this.table = n;
 	}
 	where(...e) {
-		let n = fs(e);
+		let n = gs(e);
 		return this.predicate = this.predicate ? t(this.predicate, n) : n, this;
 	}
 	unscoped() {
@@ -4264,32 +4274,32 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	async hard() {
 		return this.backend.deleteMany(this.table, { where: this.scopedWhere() });
 	}
-}, _s = (e, t) => ({
-	select: (n) => new ms(e, t, n, ps(n)),
-	updateWhere: (n) => new hs(e, t, n),
-	deleteWhere: (n) => new gs(e, t, n)
-}), vs = "id", ys = (e) => "descriptor" in e ? e.descriptor : e, bs = (e, t) => {
+}, xs = (e, t) => ({
+	select: (n) => new vs(e, t, n, _s(n)),
+	updateWhere: (n) => new ys(e, t, n),
+	deleteWhere: (n) => new bs(e, t, n)
+}), Ss = "id", Cs = (e) => "descriptor" in e ? e.descriptor : e, ws = (e, t) => {
 	let n = {};
 	for (let r of t) e[r] !== void 0 && (n[r] = e[r]);
 	return n;
-}, xs = "cannot insert into tenant-scoped table without an authenticated tenant — subject.tenantId is null. Either authenticate first or pass tenantId explicitly in the row (admin tooling).", Ss = (e) => {
-	throw new Vi({
+}, Ts = "cannot insert into tenant-scoped table without an authenticated tenant — subject.tenantId is null. Either authenticate first or pass tenantId explicitly in the row (admin tooling).", Es = (e) => {
+	throw new Gi({
 		table: e,
-		reason: xs
+		reason: Ts
 	});
-}, Cs = (e, n) => {
-	let r = n.subject.id, i = n.subject.tenantId, a = n.rowFilter ?? Mn, o = (e, t) => {
+}, Ds = (e, n) => {
+	let r = n.subject.id, i = n.subject.tenantId, a = n.rowFilter ?? Pn, o = (e, t) => {
 		let a = { ...t }, o = n.schemaRegistry, s = o.idScheme(e);
-		if (s !== void 0 && a[vs] == null) if (s.kind === "numeric") delete a[vs];
+		if (s !== void 0 && a[Ss] == null) if (s.kind === "numeric") delete a[Ss];
 		else {
 			let t = f(s, e);
-			t !== null && (a[vs] = t);
+			t !== null && (a[Ss] = t);
 		}
 		if (o.hasAudit(e)) {
 			let e = /* @__PURE__ */ new Date();
 			"createdAt" in a || (a.createdAt = e), "updatedAt" in a || (a.updatedAt = e), r !== null && ("createdBy" in a || (a.createdBy = r), "updatedBy" in a || (a.updatedBy = r));
 		}
-		o.hasTenant(e) && ("tenantId" in a || (i === null && Ss(e), a.tenantId = i));
+		o.hasTenant(e) && ("tenantId" in a || (i === null && Es(e), a.tenantId = i));
 		let c = o.defaultFactories(e);
 		if (c.size > 0) for (let [e, t] of c) (!(e in a) || a[e] === void 0) && (a[e] = t());
 		let l = o.computedFields(e);
@@ -4304,10 +4314,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		try {
 			return await r();
 		} catch (n) {
-			let r = Gt(n);
-			if (Kt(r)) {
+			let r = qt(n);
+			if (Jt(r)) {
 				let n = t.tenantId, i = `${r.dbConstraint ?? ""} ${r.dbColumn ?? ""} ${r.dbMessage ?? ""} ${r.dbCauseChain ?? ""}`.toLowerCase();
-				if (i.includes("tenantid") || /\btenants\b/.test(i) || n != null && i.includes(String(n).toLowerCase())) throw new Vi({
+				if (i.includes("tenantid") || /\btenants\b/.test(i) || n != null && i.includes(String(n).toLowerCase())) throw new Gi({
 					table: e,
 					reason: n == null ? "write references a tenant that does not exist" : `tenant '${String(n)}' does not exist — seed the row in \`tenants\`, or fix how the request resolved this tenant (subject.tenantId / the x-tenant header / the dev TENANT fallback)`
 				});
@@ -4328,11 +4338,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		if (r === void 0) return t;
 		let i = L.decodeUnknownEither(r)(t);
 		if (i._tag === "Right") return t;
-		let a = St.formatErrorSync(i.left).map((e) => ({
+		let a = wt.formatErrorSync(i.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), o = a[0];
-		throw new Ui({
+		throw new qi({
 			table: e,
 			summary: o === void 0 ? "patch validation failed" : `${o.path}: ${o.message}`,
 			issues: a
@@ -4345,20 +4355,20 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		if (r === void 0) return t;
 		let i = L.decodeUnknownEither(r)(t);
 		if (i._tag === "Right") return t;
-		let a = St.formatErrorSync(i.left).map((e) => ({
+		let a = wt.formatErrorSync(i.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), o = a[0];
-		throw new Ui({
+		throw new qi({
 			table: e,
 			summary: o === void 0 ? "row validation failed" : `${o.path}: ${o.message}`,
 			issues: a
 		});
 	}, y = n.dialect, b = (e, t) => {
 		let n = m(e);
-		return l(y ? se(t, n, y) : t, n, pi());
+		return l(y ? le(t, n, y) : t, n, gi());
 	}, x = (e, t) => {
-		let n = m(e), r = s(t, n, pi());
+		let n = m(e), r = s(t, n, gi());
 		return y ? c(r, n, y) : r;
 	}, C = (e) => {
 		let r = e.table, o = e.predicate;
@@ -4370,20 +4380,20 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			let e = S("deletedAt");
 			o = o ? t(o, e) : e;
 		}
-		return o = In(a, r, o), o === e.predicate ? e : {
+		return o = Rn(a, r, o), o === e.predicate ? e : {
 			...e,
 			predicate: o
 		};
 	}, ee = async (t) => {
 		let n = await e.query(t);
 		return x(t.table, n);
-	}, w = async (e) => ee(C(e)), te = async (t, r, i) => {
+	}, te = async (e) => ee(C(e)), ne = async (t, r, i) => {
 		let a = d(t, i);
 		if (n.schemaRegistry.computedFields(t).size > 0) {
 			let n = (await e.query({
 				table: t,
 				predicate: {
-					column: vs,
+					column: Ss,
 					op: "eq",
 					value: r
 				},
@@ -4398,16 +4408,16 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		a = g(t, a);
 		let o = await e.update(t, r, b(t, a));
 		return o === null ? null : x(t, [o])[0];
-	}, T = async (t, r) => n.schemaRegistry.hasSoftDelete(t) ? await e.update(t, r, _()) !== null : e.delete(t, r), ne = async (t, n, r) => e.updateMany(t, b(t, d(t, n)), r), re = async (t, n) => e.deleteMany(t, n), ie = (e, r) => i != null && n.schemaRegistry.hasTenant(e) ? t(r, u("tenantId", i)) : r, ae = async (e, t, n) => ne(e, t, {
+	}, w = async (t, r) => n.schemaRegistry.hasSoftDelete(t) ? await e.update(t, r, _()) !== null : e.delete(t, r), re = async (t, n, r) => e.updateMany(t, b(t, d(t, n)), r), ie = async (t, n) => e.deleteMany(t, n), ae = (e, r) => i != null && n.schemaRegistry.hasTenant(e) ? t(r, u("tenantId", i)) : r, oe = async (e, t, n) => re(e, t, {
 		...n,
-		where: ie(e, n.where)
-	}), oe = async (e, t) => re(e, {
+		where: ae(e, n.where)
+	}), se = async (e, t) => ie(e, {
 		...t,
-		where: ie(e, t.where)
-	}), ce = _s({
+		where: ae(e, t.where)
+	}), ce = xs({
 		query: ee,
-		updateMany: ne,
-		deleteMany: re,
+		updateMany: re,
+		deleteMany: ie,
 		delete: (t, n) => e.delete(t, n)
 	}, {
 		subject: n.subject,
@@ -4415,28 +4425,28 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		rowFilter: a
 	});
 	return {
-		query: w,
+		query: te,
 		one: (async (e) => {
-			let t = ys(e), n = await w({
+			let t = Cs(e), n = await te({
 				...t,
 				take: 2
 			}), r = n[0];
-			if (r === void 0) throw new ls({
+			if (r === void 0) throw new ps({
 				table: t.table,
 				found: 0
 			});
-			if (n.length > 1) throw new ls({
+			if (n.length > 1) throw new ps({
 				table: t.table,
 				found: n.length
 			});
 			return r;
 		}),
-		first: (async (e) => (await w({
-			...ys(e),
+		first: (async (e) => (await te({
+			...Cs(e),
 			take: 1
 		}))[0] ?? null),
-		maybeOne: (async (e) => (await w({
-			...ys(e),
+		maybeOne: (async (e) => (await te({
+			...Cs(e),
 			take: 1
 		}))[0] ?? null),
 		insert: async (t, n) => {
@@ -4452,12 +4462,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return a === null ? null : x(t, [a])[0];
 		},
 		select: ce.select,
-		update: ((e, t, n) => t === void 0 ? ce.updateWhere(e) : te(e, t, n)),
-		delete: ((e, t) => t === void 0 ? ce.deleteWhere(e) : T(e, t)),
-		applyDefined: bs,
+		update: ((e, t, n) => t === void 0 ? ce.updateWhere(e) : ne(e, t, n)),
+		delete: ((e, t) => t === void 0 ? ce.deleteWhere(e) : w(e, t)),
+		applyDefined: ws,
 		hardDelete: async (t, n) => e.delete(t, n),
-		updateMany: ae,
-		deleteMany: oe,
+		updateMany: oe,
+		deleteMany: se,
 		upsert: async (t, n, r) => {
 			let i = o(t, n), a = await p(t, i, () => e.upsert(t, b(t, v(t, i)), r));
 			return x(t, [a])[0];
@@ -4466,34 +4476,34 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			let i = o(t, n), a = await p(t, i, () => e.insertIgnore(t, b(t, v(t, i)), r));
 			return x(t, [a])[0];
 		},
-		transactional: (t) => e.transactional(async (e) => t(Cs(e, n))),
+		transactional: (t) => e.transactional(async (e) => t(Ds(e, n))),
 		...e.raw ? { raw: e.raw.bind(e) } : {},
 		onChange: (t) => e.onChange(t),
 		injectExternalChange: (t) => e.injectExternalChange(t),
 		...e.changeScope === void 0 ? {} : { changeScope: e.changeScope }
 	};
-}, ws = class extends L.TaggedError()("CircuitOpen", {
+}, Os = class extends L.TaggedError()("CircuitOpen", {
 	name: L.String,
 	retryAfterMs: L.Number
-}) {}, Ts = {
+}) {}, ks = {
 	tag: "closed",
 	failureCount: 0,
 	halfOpenSuccesses: 0,
 	openedAt: 0
-}, Es = { make: (e) => M.gen(function* () {
-	let t = e.name ?? "circuit", n = Ve.toMillis(Ve.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* I.make(Ts), o = M.gen(function* () {
+}, As = { make: (e) => M.gen(function* () {
+	let t = e.name ?? "circuit", n = Ue.toMillis(Ue.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* I.make(ks), o = M.gen(function* () {
 		let e = yield* I.get(a);
 		if (e.tag === "half-open") {
 			let t = e.halfOpenSuccesses + 1;
-			yield* I.set(a, t >= r ? Ts : {
+			yield* I.set(a, t >= r ? ks : {
 				...e,
 				halfOpenSuccesses: t
 			});
 			return;
 		}
-		e.failureCount !== 0 && (yield* I.set(a, Ts));
+		e.failureCount !== 0 && (yield* I.set(a, ks));
 	}), s = M.gen(function* () {
-		let t = yield* Le.currentTimeMillis, n = yield* I.get(a);
+		let t = yield* Be.currentTimeMillis, n = yield* I.get(a);
 		if (n.tag === "half-open" || n.tag === "open") {
 			yield* I.set(a, {
 				tag: "open",
@@ -4516,7 +4526,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}), c = M.gen(function* () {
 		let e = yield* I.get(a);
 		if (e.tag !== "open") return null;
-		let t = (yield* Le.currentTimeMillis) - e.openedAt;
+		let t = (yield* Be.currentTimeMillis) - e.openedAt;
 		return t >= n ? (yield* I.set(a, {
 			tag: "half-open",
 			failureCount: 0,
@@ -4526,10 +4536,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}), l = (e) => M.gen(function* () {
 		let n = yield* c;
 		return n === null ? yield* e.pipe(M.tap(() => o), M.tapErrorCause((e) => {
-			if (j.isInterruptedOnly(e)) return M.void;
-			let t = j.failureOption(e), n = t._tag === "Some" ? t.value : void 0;
+			if (A.isInterruptedOnly(e)) return M.void;
+			let t = A.failureOption(e), n = t._tag === "Some" ? t.value : void 0;
 			return i(n) ? s : M.void;
-		})) : yield* M.fail(new ws({
+		})) : yield* M.fail(new Os({
 			name: t,
 			retryAfterMs: n
 		}));
@@ -4538,25 +4548,25 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		value: I.get(a).pipe(M.map((e) => e.tag)),
 		enumerable: !0
 	}), Object.defineProperty(u, "reset", {
-		value: I.set(a, Ts),
+		value: I.set(a, ks),
 		enumerable: !0
 	}), u;
-}) }, Ds, Os = (e) => {
-	Ds = e;
-}, ks = () => {
-	Ds = void 0;
-}, As = () => Ds, js = async (e, t = {}) => {
-	let n = t.scopes === void 0 ? Fe(t.id ?? "system") : Fe(t.id ?? "system", t.scopes), r = t.store ?? Ds?.dataStore, i = t.schemaRegistry ?? Ds?.schemaRegistry, a = t.dialect ?? Ds?.dialect;
+}) }, js, Ms = (e) => {
+	js = e;
+}, Ns = () => {
+	js = void 0;
+}, Ps = () => js, Fs = async (e, t = {}) => {
+	let n = t.scopes === void 0 ? Re(t.id ?? "system") : Re(t.id ?? "system", t.scopes), r = t.store ?? js?.dataStore, i = t.schemaRegistry ?? js?.schemaRegistry, a = t.dialect ?? js?.dialect;
 	if (r === void 0 || i === void 0) throw Error("runAsSystem: no data store available — register one at boot via setSystemStoreHandle({ dataStore, schemaRegistry }) or pass { store, schemaRegistry } in the options.");
 	return e({
 		subject: n,
-		store: Cs(r, {
+		store: Ds(r, {
 			subject: n,
 			schemaRegistry: i,
 			...a === void 0 ? {} : { dialect: a }
 		})
 	});
-}, Ms = (e) => {
+}, Is = (e) => {
 	let { currentRegion: t, replicaRegions: n, inner: r } = e, i = (e) => {
 		if (t === void 0) return {
 			sameRegion: [],
@@ -4584,7 +4594,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return r.loadSnapshot();
 		}
 	};
-}, Ns = (e = process.env) => {
+}, Ls = (e = process.env) => {
 	for (let t of [
 		"VOLTRO_REGION",
 		"AWS_REGION",
@@ -4596,7 +4606,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		let n = e[t];
 		if (typeof n == "string" && n.length > 0) return n;
 	}
-}, Ps = () => {
+}, Rs = () => {
 	let e = {
 		primary: 0,
 		lagByReplica: /* @__PURE__ */ new Map()
@@ -4621,27 +4631,27 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			e.lagByReplica.set(t, n);
 		}
 	};
-}, Fs = Symbol.for("@voltro/ScheduleDefinition"), Is = (e) => typeof e == "object" && !!e && Fs in e, Ls = 30 * 6e4, Rs = (e) => {
-	let t = ze.parse(e.cron, e.timezone);
-	if (He.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
+}, zs = Symbol.for("@voltro/ScheduleDefinition"), Bs = (e) => typeof e == "object" && !!e && zs in e, Vs = 30 * 6e4, Hs = (e) => {
+	let t = j.parse(e.cron, e.timezone);
+	if (We.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
 	if (!e.timezone || e.timezone.trim() === "") throw Error(`defineSchedule("${e.name}"): timezone is required (e.g. "UTC", "Europe/Berlin")`);
 	if (e.handler === void 0 && e.workflow === void 0) throw Error(`defineSchedule("${e.name}"): define either handler or workflow`);
 	return {
 		...e,
 		onOverlap: e.onOverlap ?? "skip",
 		backfill: e.backfill ?? "skip",
-		maxRuntimeMs: e.maxRuntimeMs ?? Ls,
-		[Fs]: !0
+		maxRuntimeMs: e.maxRuntimeMs ?? Vs,
+		[zs]: !0
 	};
-}, zs = (e) => ze.unsafeParse(e.cron, e.timezone), Bs = (e, t = /* @__PURE__ */ new Date()) => ze.next(zs(e), t), Z = "_voltro_wakeups", Vs = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Hs = (e) => ({
+}, Us = (e) => j.unsafeParse(e.cron, e.timezone), Ws = (e, t = /* @__PURE__ */ new Date()) => j.next(Us(e), t), Z = "_voltro_wakeups", Gs = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Ks = (e) => ({
 	tenantId: String(e.tenantId),
 	kind: String(e.kind),
 	refId: String(e.refId),
 	wakeAt: e.wakeAt instanceof Date ? e.wakeAt : new Date(String(e.wakeAt)),
 	status: e.status === "fired" ? "fired" : "pending"
-}), Us = async (e, t) => {
+}), qs = async (e, t) => {
 	await e.upsert(Z, {
-		id: Vs(t),
+		id: Gs(t),
 		tenantId: t.tenantId,
 		kind: t.kind,
 		refId: t.refId,
@@ -4651,7 +4661,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		conflictColumns: ["id"],
 		update: ["wakeAt", "status"]
 	});
-}, Ws = async (e, t) => e.delete(Z, Vs(t)), Gs = async (e, t) => await e.update(Z, Vs(t), { status: "fired" }) !== null, Ks = (e, t) => ({ and: [{
+}, Js = async (e, t) => e.delete(Z, Gs(t)), Ys = async (e, t) => await e.update(Z, Gs(t), { status: "fired" }) !== null, Xs = (e, t) => ({ and: [{
 	column: "id",
 	op: "eq",
 	value: e
@@ -4659,16 +4669,16 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	column: "status",
 	op: "eq",
 	value: t
-}] }), qs = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: Ks(Vs(t), "pending") }) > 0, Js = async (e, t) => {
-	await e.updateMany(Z, { status: "pending" }, { where: Ks(Vs(t), "fired") });
-}, Ys = {
+}] }), Zs = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: Xs(Gs(t), "pending") }) > 0, Qs = async (e, t) => {
+	await e.updateMany(Z, { status: "pending" }, { where: Xs(Gs(t), "fired") });
+}, $s = {
 	column: "status",
 	op: "eq",
 	value: "pending"
-}, Xs = async (e, t) => {
+}, ec = async (e, t) => {
 	let n = {
 		table: Z,
-		predicate: Ys,
+		predicate: $s,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -4677,18 +4687,18 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	};
-	return (await e.query(n)).map(Hs);
-}, Zs = async (e, t, n = 500) => {
-	let r = await Xs(e, n), i = t.getTime();
+	return (await e.query(n)).map(Ks);
+}, tc = async (e, t, n = 500) => {
+	let r = await ec(e, n), i = t.getTime();
 	return r.filter((e) => e.wakeAt.getTime() <= i);
-}, Qs = async (e) => (await Xs(e, 1))[0] ?? null, $s = {
+}, nc = async (e) => (await ec(e, 1))[0] ?? null, rc = {
 	column: "status",
 	op: "eq",
 	value: "fired"
-}, ec = async (e, t = {}) => {
+}, ic = async (e, t = {}) => {
 	let n = {
 		table: Z,
-		predicate: $s,
+		predicate: rc,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -4699,12 +4709,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}, r = await e.query(n), i = t.firedOlderThan?.getTime(), a = 0;
 	for (let t of r) i !== void 0 && (t.wakeAt instanceof Date ? t.wakeAt : new Date(String(t.wakeAt))).getTime() >= i || await e.delete(Z, String(t.id)) && a++;
 	return a;
-}, tc = {
+}, ac = Wi, oc = "default", sc = {
 	kind: "single",
 	tryClaim: async () => !0
-}, nc = "_voltro_schedule_claims", rc = (e, t, n) => {
+}, cc = "_voltro_schedule_claims", lc = (e, t, n) => {
 	let r = async (t) => (await e.query({
-		table: nc,
+		table: cc,
 		order: [],
 		predicate: void 0,
 		projection: ["id"],
@@ -4719,7 +4729,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				if (await r(s)) return !1;
 			} catch {}
 			try {
-				return await e.insert(nc, {
+				return await e.insert(cc, {
 					id: s,
 					scheduleName: i,
 					bucket: o,
@@ -4737,12 +4747,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			}
 		}
 	};
-}, ic = "_voltro_schedule_runs", ac = async (e, t) => {
+}, uc = "_voltro_schedule_runs", dc = async (e, t) => {
 	let { store: n, coordinator: r, buildContext: i, replicaId: a, log: o, onRunEvent: s, interceptFire: c } = t, l = t.dormancy === "sleep", u = t.dormancyTenantId ?? "default", d = /* @__PURE__ */ new Map(), f = /* @__PURE__ */ new Set(), p = /* @__PURE__ */ new Map(), m = !1, h = new Map(e.map((e) => [e.name, e])), g = (e, t) => {
-		s?.(e, sc(t));
+		s?.(e, pc(t));
 	}, _ = async (e, t, r, i, s, c) => {
 		try {
-			let o = `sr_${me()}`, l = await n.insert(ic, {
+			let o = `sr_${_e()}`, l = await n.insert(uc, {
 				id: o,
 				name: e.name,
 				status: i,
@@ -4767,7 +4777,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		}
 	}, v = async (e, t) => {
 		try {
-			let r = await n.update(ic, e, t);
+			let r = await n.update(uc, e, t);
 			r && g("update", r);
 		} catch (t) {
 			o.warn("schedule: failed to record run finish", {
@@ -4778,7 +4788,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}, y = async (e) => {
 		try {
 			let t = await n.query({
-				table: ic,
+				table: uc,
 				predicate: {
 					_tag: "leaf",
 					column: "status",
@@ -4812,7 +4822,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				traceId: `schedule-${e.name}-${a.getTime()}`,
 				scheduleName: e.name,
 				trigger: n,
-				runId: s
+				runId: s,
+				subject: ac
 			})
 		};
 		try {
@@ -4843,7 +4854,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			let n = Q(t).includes("exceeded maxRuntimeMs");
 			s && await v(s, {
 				status: "failed",
-				errorTag: n ? "timeout" : oc(t),
+				errorTag: n ? "timeout" : fc(t),
 				errorMessage: Q(t),
 				completedAt: /* @__PURE__ */ new Date(),
 				durationMs: Date.now() - l
@@ -4851,7 +4862,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				name: e.name,
 				reason: Q(t),
 				timeout: n
-			}), Me({
+			}), Fe({
 				error: t,
 				source: "schedule",
 				name: e.name,
@@ -4900,8 +4911,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		}
 	}, C = async (e) => {
 		try {
-			let t = ze.next(zs(e), /* @__PURE__ */ new Date());
-			await Us(n, {
+			let t = j.next(Us(e), /* @__PURE__ */ new Date());
+			await qs(n, {
 				tenantId: u,
 				kind: "schedule",
 				refId: e.name,
@@ -4913,9 +4924,9 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				reason: Q(t)
 			});
 		}
-	}, ee = 2147483647, w = (e) => {
+	}, ee = 2147483647, te = (e) => {
 		if (m) return;
-		let n = zs(e), r = ze.next(n, /* @__PURE__ */ new Date()), i = () => {
+		let n = Us(e), r = j.next(n, /* @__PURE__ */ new Date()), i = () => {
 			if (m) return;
 			let n = r.getTime() - Date.now();
 			if (n > ee) {
@@ -4927,17 +4938,17 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				x(e, r, e.trigger ?? t.defaultTrigger).catch((t) => o.warn("schedule: fire rejected", {
 					name: e.name,
 					reason: Q(t)
-				})).finally(() => w(e));
+				})).finally(() => te(e));
 			}, Math.max(0, n));
 			d.set(e.name, a);
 		};
 		i();
-	}, te = async (e) => {
+	}, ne = async (e) => {
 		if (e.backfill === "skip") return;
 		let r;
 		try {
 			let t = (await n.query({
-				table: ic,
+				table: uc,
 				order: [{
 					column: "scheduledAt",
 					direction: "desc"
@@ -4956,8 +4967,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return;
 		}
 		if (!r) return;
-		let i = zs(e), a = [], s = ze.next(i, r), c = Date.now();
-		for (; s.getTime() < c && a.length < 1e3;) a.push(s), s = ze.next(i, s);
+		let i = Us(e), a = [], s = j.next(i, r), c = Date.now();
+		for (; s.getTime() < c && a.length < 1e3;) a.push(s), s = j.next(i, s);
 		if (a.length !== 0) if (o.info("schedule: backfill", {
 			name: e.name,
 			missed: a.length,
@@ -4967,20 +4978,20 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			let n = a[a.length - 1];
 			await x(e, n, e.trigger ?? t.defaultTrigger);
 		} else for (let n of a) await x(e, n, e.trigger ?? t.defaultTrigger);
-	}, T = e.filter((e) => (e.trigger ?? t.defaultTrigger) === "self");
+	}, w = e.filter((e) => (e.trigger ?? t.defaultTrigger) === "self");
 	o.info("scheduler: starting", {
 		total: e.length,
-		self: T.length,
-		external: e.length - T.length,
+		self: w.length,
+		external: e.length - w.length,
 		coordinator: r.kind
 	});
-	let ne = (t.armSelf ?? !0) && !l;
+	let re = (t.armSelf ?? !0) && !l;
 	if (l) {
-		o.info("scheduler: sleep mode — registering wakeups, not arming timers", { count: T.length });
-		for (let e of T) await C(e);
-	} else if (ne) {
-		for (let e of T) await te(e);
-		for (let e of T) w(e);
+		o.info("scheduler: sleep mode — registering wakeups, not arming timers", { count: w.length });
+		for (let e of w) await C(e);
+	} else if (re) {
+		for (let e of w) await ne(e);
+		for (let e of w) te(e);
 	}
 	return {
 		fireNow: async (e, t) => {
@@ -5001,11 +5012,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			d.clear(), o.info("scheduler: stopped");
 		}
 	};
-}, Q = (e) => e?.message ?? String(e), oc = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, sc = (e) => {
+}, Q = (e) => e?.message ?? String(e), fc = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, pc = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n] = r instanceof Date ? r.toISOString() : r;
 	return t;
-}, cc = (e, t, n, r) => {
+}, mc = (e, t, n, r) => {
 	let i = !1, a, o = async () => {
 		if (i) return;
 		let a = new Date(Math.floor(Date.now() / t) * t), o = !1;
@@ -5035,96 +5046,96 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			i || (i = !0, a && clearInterval(a), a = void 0);
 		}
 	};
-}, lc = (e) => (t, n, r) => cc(t, n, r, e), uc = E("_voltro_schedule_runs", {
+}, hc = (e) => (t, n, r) => mc(t, n, r, e), gc = T("_voltro_schedule_runs", {
 	id: v({ prefix: "schrun" }),
-	name: D(),
-	status: D().oneOf([
+	name: E(),
+	status: E().oneOf([
 		"running",
 		"succeeded",
 		"failed",
 		"skipped",
 		"missed"
 	]).default("running"),
-	trigger: D().oneOf([
+	trigger: E().oneOf([
 		"self",
 		"external",
 		"manual"
 	]).default("self"),
-	scheduledAt: O(),
-	firedAt: O().nullable(),
-	completedAt: O().nullable(),
+	scheduledAt: D(),
+	firedAt: D().nullable(),
+	completedAt: D().nullable(),
 	durationMs: b().nullable(),
-	errorTag: D().nullable(),
-	errorMessage: D().nullable(),
-	coordinationOutcome: D().oneOf([
+	errorTag: E().nullable(),
+	errorMessage: E().nullable(),
+	coordinationOutcome: E().oneOf([
 		"single",
 		"wonLock",
 		"lostLock",
 		"external",
 		"cluster"
 	]).nullable(),
-	replicaId: D().nullable(),
+	replicaId: E().nullable(),
 	result: C().nullable()
-}).index(["name", "scheduledAt"]).index(["status"]), dc = E("_voltro_schedule_claims", {
+}).index(["name", "scheduledAt"]).index(["status"]), _c = T("_voltro_schedule_claims", {
 	id: v({ prefix: "schclaim" }),
-	scheduleName: D(),
-	bucket: D(),
-	claimedBy: D(),
-	claimedAt: O()
-}).index(["scheduleName", "bucket"]).index(["claimedAt"]), fc = E("_voltro_traces", {
+	scheduleName: E(),
+	bucket: E(),
+	claimedBy: E(),
+	claimedAt: D()
+}).index(["scheduleName", "bucket"]).index(["claimedAt"]), vc = T("_voltro_traces", {
 	id: v({ prefix: "span" }),
-	traceId: D(),
-	spanId: D(),
-	parentSpanId: D().nullable(),
-	name: D(),
-	kind: D().oneOf([
+	traceId: E(),
+	spanId: E(),
+	parentSpanId: E().nullable(),
+	name: E(),
+	kind: E().oneOf([
 		"internal",
 		"server",
 		"client",
 		"producer",
 		"consumer"
 	]).default("internal"),
-	status: D().oneOf([
+	status: E().oneOf([
 		"ok",
 		"error",
 		"unset"
 	]).default("unset"),
-	statusMessage: D().nullable(),
-	startedAt: O(),
-	endedAt: O(),
+	statusMessage: E().nullable(),
+	startedAt: D(),
+	endedAt: D(),
 	durationMs: b(),
 	attributes: C().nullable(),
 	events: C().nullable()
-}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), pc = E("_voltro_undo_log", {
+}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), yc = T("_voltro_undo_log", {
 	id: v({ prefix: "undo" }),
-	tag: D(),
-	label: D().nullable(),
-	subjectId: D().nullable(),
-	tenantId: D().nullable(),
-	traceId: D().nullable(),
-	changes: D(),
+	tag: E(),
+	label: E().nullable(),
+	subjectId: E().nullable(),
+	tenantId: E().nullable(),
+	traceId: E().nullable(),
+	changes: E(),
 	crossesAction: r().default(!1),
 	undone: r().default(!1),
-	createdAt: O().default("now")
-}).index(["subjectId", "createdAt"]).reactive(), mc = (e = process.env) => {
+	createdAt: D().default("now")
+}).index(["subjectId", "createdAt"]).reactive(), bc = (e = process.env) => {
 	let t = (e.VOLTRO_UNDO ?? "").toLowerCase();
 	return t === "on" || t === "1" || t === "true" ? !0 : t === "off" || t === "0" || t === "false" ? !1 : e.NODE_ENV !== "production";
-}, hc = (e) => e.startsWith("_voltro"), gc = async (e, t, n) => (await e.query({
+}, xc = (e) => e.startsWith("_voltro"), Sc = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: u("id", n),
 	order: []
-}))[0] ?? null, _c = (e, t) => new Proxy(e, { get(e, n, r) {
+}))[0] ?? null, Cc = (e, t) => new Proxy(e, { get(e, n, r) {
 	if (n === "insert") return async (n, r) => {
 		let i = await e.insert(n, r);
-		return hc(n) || t({
+		return xc(n) || t({
 			table: n,
 			op: "insert",
 			next: i
 		}), i;
 	};
 	if (n === "update") return async (n, r, i) => {
-		let a = hc(n) ? null : await gc(e, n, r), o = await e.update(n, r, i);
-		return hc(n) || t({
+		let a = xc(n) ? null : await Sc(e, n, r), o = await e.update(n, r, i);
+		return xc(n) || t({
 			table: n,
 			op: "update",
 			id: r,
@@ -5133,8 +5144,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		}), o;
 	};
 	if (n === "delete") return async (n, r) => {
-		let i = hc(n) ? null : await gc(e, n, r), a = await e.delete(n, r);
-		return !hc(n) && a && t({
+		let i = xc(n) ? null : await Sc(e, n, r), a = await e.delete(n, r);
+		return !xc(n) && a && t({
 			table: n,
 			op: "delete",
 			id: r,
@@ -5143,10 +5154,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	};
 	let i = Reflect.get(e, n, r);
 	return typeof i == "function" ? i.bind(e) : i;
-} }), vc = (e) => {
+} }), wc = (e) => {
 	let t = [];
 	return {
-		tx: _c(e, (e) => t.push(e)),
+		tx: Cc(e, (e) => t.push(e)),
 		persist: async (e, n) => {
 			if (t.length === 0 || n.tag.startsWith("__voltro")) return;
 			let r = n.subject;
@@ -5162,14 +5173,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			});
 		}
 	};
-}, yc = (e) => {
+}, Tc = (e) => {
 	if (e.id !== void 0) return e.id;
 	let t = e.next?.id;
 	if (typeof t == "string") return t;
 	let n = e.prev?.id;
 	return typeof n == "string" ? n : void 0;
-}, bc = (e) => {
-	let t = yc(e);
+}, Ec = (e) => {
+	let t = Tc(e);
 	switch (e.op) {
 		case "insert": return t === void 0 ? null : {
 			table: e.table,
@@ -5193,28 +5204,28 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			row: e.prev
 		};
 	}
-}, xc = (e) => {
-	if (e.crossesAction) throw new Sc(e.invocationId, "action");
+}, Dc = (e) => {
+	if (e.crossesAction) throw new Oc(e.invocationId, "action");
 	let t = [];
 	for (let n = e.changes.length - 1; n >= 0; --n) {
-		let r = bc(e.changes[n]);
+		let r = Ec(e.changes[n]);
 		r !== null && t.push(r);
 	}
 	return t;
-}, Sc = class extends Error {
+}, Oc = class extends Error {
 	invocationId;
 	boundary;
 	_tag = "UndoBoundaryError";
 	constructor(e, t) {
 		super(t === "action" ? `cannot undo invocation ${e}: it crossed an action (external side effect)` : `cannot undo invocation ${e}: the row changed since (conflict)`), this.invocationId = e, this.boundary = t, this.name = "UndoBoundaryError";
 	}
-}, Cc = (e, t, n = ["updatedAt", "updatedBy"]) => {
+}, kc = (e, t, n = ["updatedAt", "updatedBy"]) => {
 	if (t == null) return e == null;
 	if (e == null) return !1;
 	let r = new Set(n);
 	for (let [n, i] of Object.entries(t)) if (!r.has(n) && !Object.is(e[n], i) && JSON.stringify(e[n]) !== JSON.stringify(i)) return !1;
 	return !0;
-}, wc = class {
+}, Ac = class {
 	capacity;
 	done = [];
 	undone = [];
@@ -5250,7 +5261,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			redo: [...this.undone]
 		};
 	}
-}, Tc = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
+}, jc = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
 	table: e.table,
 	op: "insert",
 	next: e.new ?? null
@@ -5267,7 +5278,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	table: e.table,
 	op: "delete",
 	prev: e.old ?? null
-}, Ec = async (e, t) => {
+}, Mc = async (e, t) => {
 	switch (t.op) {
 		case "delete":
 			await e.delete(t.table, t.id);
@@ -5285,21 +5296,21 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			await e.insert(t.table, t.row);
 			return;
 	}
-}, Dc = async (e, t) => {
-	for (let n of t) await Ec(e, n);
-}, Oc = (e) => e.request?.subject?.id ?? null, kc = (e) => e === !0 || e === 1, Ac = async (e, t, n) => (await e.query({
+}, Nc = async (e, t) => {
+	for (let n of t) await Mc(e, n);
+}, Pc = (e) => e.request?.subject?.id ?? null, Fc = (e) => e === !0 || e === 1, Ic = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: u("id", n),
 	order: []
-}))[0] ?? null, jc = (e) => {
+}))[0] ?? null, Lc = (e) => {
 	try {
 		let t = JSON.parse(String(e ?? "[]"));
 		return Array.isArray(t) ? t : [];
 	} catch {
 		return [];
 	}
-}, Mc = (e) => e.id ?? e.next?.id ?? e.prev?.id, Nc = async (e, t) => {
-	let n = Oc(t);
+}, Rc = (e) => e.id ?? e.next?.id ?? e.prev?.id, zc = async (e, t) => {
+	let n = Pc(t);
 	return [...await t.store.query({
 		table: "_voltro_undo_log",
 		predicate: u("subjectId", n),
@@ -5308,68 +5319,68 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		id: String(e.id),
 		tag: String(e.tag ?? ""),
 		label: e.label ?? null,
-		undone: kc(e.undone),
-		crossesAction: kc(e.crossesAction),
+		undone: Fc(e.undone),
+		crossesAction: Fc(e.crossesAction),
 		createdAt: String(e.createdAt ?? "")
 	}));
-}, Pc = async (e, t) => {
-	let n = await Ac(t.store, "_voltro_undo_log", e.invocationId);
-	if (!n) throw new Te({ invocationId: e.invocationId });
-	if ((n.subjectId ?? null) !== Oc(t)) throw new we({ invocationId: e.invocationId });
+}, Bc = async (e, t) => {
+	let n = await Ic(t.store, "_voltro_undo_log", e.invocationId);
+	if (!n) throw new Oe({ invocationId: e.invocationId });
+	if ((n.subjectId ?? null) !== Pc(t)) throw new De({ invocationId: e.invocationId });
 	return n;
-}, Fc = async (e, t) => {
-	let n = await Pc(e, t);
-	if (kc(n.undone)) return { ok: !0 };
-	if (kc(n.crossesAction)) throw new Ce({
+}, Vc = async (e, t) => {
+	let n = await Bc(e, t);
+	if (Fc(n.undone)) return { ok: !0 };
+	if (Fc(n.crossesAction)) throw new Ee({
 		invocationId: e.invocationId,
 		reason: "action"
 	});
-	let r = jc(n.changes);
+	let r = Lc(n.changes);
 	for (let n of r) {
-		let r = Mc(n);
-		if (r !== void 0 && !Cc(await Ac(t.store, n.table, r), n.next ?? null)) throw new Ce({
+		let r = Rc(n);
+		if (r !== void 0 && !kc(await Ic(t.store, n.table, r), n.next ?? null)) throw new Ee({
 			invocationId: e.invocationId,
 			reason: "conflict"
 		});
 	}
 	let i = {
 		invocationId: e.invocationId,
-		subject: Oc(t),
+		subject: Pc(t),
 		changes: r,
 		crossesAction: !1
 	};
-	return await Dc(t.store, xc(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
-}, Ic = async (e, t) => {
-	let n = await Pc(e, t);
-	if (!kc(n.undone)) return { ok: !0 };
-	for (let e of jc(n.changes)) {
-		let n = Mc(e);
+	return await Nc(t.store, Dc(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
+}, Hc = async (e, t) => {
+	let n = await Bc(e, t);
+	if (!Fc(n.undone)) return { ok: !0 };
+	for (let e of Lc(n.changes)) {
+		let n = Rc(e);
 		e.op === "insert" && e.next ? await t.store.insert(e.table, e.next) : e.op === "update" && n !== void 0 && e.next ? await t.store.update(e.table, n, e.next) : e.op === "delete" && n !== void 0 && await t.store.delete(e.table, n);
 	}
 	return await t.store.update("_voltro_undo_log", e.invocationId, { undone: !1 }), { ok: !0 };
-}, Lc = (e = process.env) => {
+}, Uc = (e = process.env) => {
 	let t = (e.VOLTRO_TIMELINE ?? "").toLowerCase();
 	return t === "off" || t === "0" || t === "false" ? "off" : t === "all" ? "all" : t === "interesting" || t === "on" || t === "1" || t === "true" ? "interesting" : e.NODE_ENV === "production" ? "off" : "interesting";
-}, Rc = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, zc = "«redacted»", Bc = (e) => {
+}, Wc = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, Gc = "«redacted»", Kc = (e) => {
 	if (e == null) return null;
 	let t = {};
-	for (let [n, r] of Object.entries(e)) t[n] = Rc.test(n) ? zc : r;
+	for (let [n, r] of Object.entries(e)) t[n] = Wc.test(n) ? Gc : r;
 	return t;
-}, Vc = (e) => {
+}, qc = (e) => {
 	let t = e?.id;
 	return typeof t == "string" ? t : void 0;
-}, Hc = (e, t) => {
+}, Jc = (e, t) => {
 	if (t.op === "insert") {
-		let n = Vc(t.new);
+		let n = qc(t.new);
 		return n === void 0 ? e : e.filter((e) => e.id !== n);
 	}
 	if (t.op === "update") {
 		if (t.old == null) return e;
-		let n = Vc(t.new) ?? Vc(t.old);
+		let n = qc(t.new) ?? qc(t.old);
 		return e.map((e) => e.id === n ? t.old : e);
 	}
 	return t.old == null ? e : [...e, t.old];
-}, Uc = class {
+}, Yc = class {
 	mode;
 	capacity;
 	now;
@@ -5389,8 +5400,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			ts: this.now(),
 			table: e.table,
 			op: e.op,
-			old: Bc(e.old),
-			new: Bc(e.new),
+			old: Kc(e.old),
+			new: Kc(e.new),
 			tenantId: n
 		}), this.ring.length > this.capacity && this.ring.shift(), t;
 	}
@@ -5403,23 +5414,23 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	replay(e, t, n) {
 		let r = this.ring.filter((n) => n.table === e && n.seq > t).sort((e, t) => t.seq - e.seq), i = n;
-		for (let e of r) i = Hc(i, e);
+		for (let e of r) i = Jc(i, e);
 		return i;
 	}
-}, Wc, Gc = () => (Wc === void 0 && (Wc = new Uc(Lc())), Wc), Kc = (e) => {
-	Wc = e;
-}, qc = (e) => {
-	let t = Gc();
+}, Xc, Zc = () => (Xc === void 0 && (Xc = new Yc(Uc())), Xc), Qc = (e) => {
+	Xc = e;
+}, $c = (e) => {
+	let t = Zc();
 	if (t.enabled) try {
 		t.record(e);
 	} catch {}
-}, Jc = /* @__PURE__ */ new Set([
+}, el = /* @__PURE__ */ new Set([
 	"count",
 	"sum",
 	"avg",
 	"min",
 	"max"
-]), Yc = (e) => {
+]), tl = (e) => {
 	if (e.joins !== void 0 && e.joins.length > 0) return {
 		maintainable: !1,
 		reason: "joins are not maintainable in v1"
@@ -5441,7 +5452,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		reason: "v1 maintains exactly one aggregation"
 	};
 	let t = e.aggregations[0];
-	return Jc.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
+	return el.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
 		maintainable: !1,
 		reason: `op '${t.op}' requires a column`
 	} : {
@@ -5455,7 +5466,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		maintainable: !1,
 		reason: `op '${t.op}' is not maintainable`
 	};
-}, Xc = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(Xc), Zc = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), Qc = (e, t) => {
+}, nl = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(nl), rl = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), il = (e, t) => {
 	switch (e.op) {
 		case "count": return t.count;
 		case "sum": return t.sum ?? 0;
@@ -5463,10 +5474,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		case "min":
 		case "max": return t.count > 0 ? t.extreme ?? null : null;
 	}
-}, $c = (e, t) => {
+}, al = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	for (let r of t) {
-		let t = $(r, e.groupBy), i = n.get(t), a = Zc(r, e.column);
+		let t = $(r, e.groupBy), i = n.get(t), a = rl(r, e.column);
 		if (i === void 0) n.set(t, {
 			count: 1,
 			...e.op === "sum" || e.op === "avg" ? { sum: a } : {},
@@ -5482,10 +5493,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		}
 	}
 	return n;
-}, el = (e, t) => [...t.entries()].map(([t, n]) => ({
+}, ol = (e, t) => [...t.entries()].map(([t, n]) => ({
 	groupKey: t,
-	value: Qc(e, n)
-})), tl = (e, t, n) => {
+	value: il(e, n)
+})), sl = (e, t, n) => {
 	let r = new Map(t), i = /* @__PURE__ */ new Set(), a = (t) => {
 		let n = $(t, e.groupBy), a = r.get(n);
 		if (a === void 0) return;
@@ -5494,7 +5505,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			r.delete(n);
 			return;
 		}
-		let s = Zc(t, e.column);
+		let s = rl(t, e.column);
 		e.op === "min" || e.op === "max" ? (a.extreme !== void 0 && s === a.extreme && i.add(n), r.set(n, {
 			count: o,
 			...a.extreme === void 0 ? {} : { extreme: a.extreme }
@@ -5503,7 +5514,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			...e.op === "sum" || e.op === "avg" ? { sum: (a.sum ?? 0) - s } : {}
 		});
 	}, o = (t) => {
-		let n = $(t, e.groupBy), i = r.get(n), a = Zc(t, e.column);
+		let n = $(t, e.groupBy), i = r.get(n), a = rl(t, e.column);
 		if (i === void 0) {
 			r.set(n, {
 				count: 1,
@@ -5523,15 +5534,15 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		state: r,
 		rescanGroups: [...i]
 	};
-}, nl = (e, t, n, r) => {
+}, cl = (e, t, n, r) => {
 	if (n.length === 0) return t;
-	let i = new Set(n), a = $c(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
+	let i = new Set(n), a = al(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
 	for (let e of i) {
 		let t = a.get(e);
 		t === void 0 ? o.delete(e) : o.set(e, t);
 	}
 	return o;
-}, rl = class {
+}, ll = class {
 	shape;
 	state = /* @__PURE__ */ new Map();
 	groups = /* @__PURE__ */ new Map();
@@ -5539,7 +5550,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		this.shape = e;
 	}
 	seed(e) {
-		this.state = $c(this.shape, e), this.groups.clear();
+		this.state = al(this.shape, e), this.groups.clear();
 		for (let t of e) {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
@@ -5551,14 +5562,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
 		}
-		let n = tl(this.shape, this.state, e);
+		let n = sl(this.shape, this.state, e);
 		this.state = n.state;
 		for (let e of this.groups.keys()) this.state.has(e) || this.groups.delete(e);
 		return n.rescanGroups;
 	}
 	resolveRescan(e, t) {
 		if (e.length === 0) return;
-		this.state = nl(this.shape, this.state, e, t);
+		this.state = cl(this.shape, this.state, e, t);
 		let n = new Set(e);
 		for (let e of t) {
 			let t = $(e, this.shape.groupBy);
@@ -5567,7 +5578,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		for (let e of n) this.state.has(e) || this.groups.delete(e);
 	}
 	materialize() {
-		return el(this.shape, this.state).map((e) => ({
+		return ol(this.shape, this.state).map((e) => ({
 			groupKey: e.groupKey,
 			group: this.groups.get(e.groupKey) ?? {},
 			value: e.value
@@ -5580,19 +5591,19 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		for (let r of t) n[r] = e[r];
 		return n;
 	}
-}, il = E("_voltro_rebac_tuples", {
+}, ul = T("_voltro_rebac_tuples", {
 	id: v({ prefix: "rbct" }),
-	subjectId: D(),
-	relation: D(),
-	resourceType: D(),
-	resourceId: D(),
-	tenantId: D().nullable(),
-	createdAt: O().default("now")
+	subjectId: E(),
+	relation: E(),
+	resourceType: E(),
+	resourceId: E(),
+	tenantId: E().nullable(),
+	createdAt: D().default("now")
 }).index([
 	"subjectId",
 	"resourceType",
 	"resourceId"
-]).reactive(), al = async (e, n, r, i) => n === null ? [] : (await e.query({
+]).reactive(), dl = async (e, n, r, i) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(u("subjectId", n), u("resourceType", r), u("resourceId", i)),
 	order: [],
@@ -5604,16 +5615,16 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), ol = (e) => ({
+})), fl = (e) => ({
 	id: e.id,
 	tenantId: e.tenantId,
 	...e.scopes === void 0 ? {} : { scopes: e.scopes }
-}), sl = (e, t) => {
-	let n = t.getPolicy ?? Ro;
+}), pl = (e, t) => {
+	let n = t.getPolicy ?? Ho;
 	return (r, i) => {
 		let a = e[i.tag];
 		if (a === void 0) return r;
-		let o = n(a.resourceType), s = (e) => M.fail(new Fo({
+		let o = n(a.resourceType), s = (e) => M.fail(new zo({
 			action: a.action,
 			resourceType: a.resourceType,
 			resourceId: e
@@ -5621,17 +5632,17 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		if (o === void 0) return s("");
 		let c = a.resourceId(i.input);
 		if (c === null || c === "") return s("");
-		let l = ol(i.subject), u = {
+		let l = fl(i.subject), u = {
 			type: a.resourceType,
 			id: c,
 			tenantId: i.subject.tenantId
 		};
-		return M.flatMap(M.promise(async () => t.loadTuples(l.id, a.resourceType, c)), (e) => Wo(l, a.action, u, {
+		return M.flatMap(M.promise(async () => t.loadTuples(l.id, a.resourceType, c)), (e) => Jo(l, a.action, u, {
 			policy: o,
 			tuples: e
 		}) ? r : s(c));
 	};
-}, cl = async (e, n, r) => n === null ? [] : (await e.query({
+}, ml = async (e, n, r) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(u("subjectId", n), u("resourceType", r)),
 	order: [],
@@ -5643,18 +5654,18 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), ll = (e) => {
-	let t = e.getPolicy ?? Ro;
+})), hl = (e) => {
+	let t = e.getPolicy ?? Ho;
 	return async (n, r, i, a) => {
 		let o = t(r);
 		if (o === void 0) return [];
-		let s = ol(n);
-		return Ko(s, i, r, a, {
+		let s = fl(n);
+		return Xo(s, i, r, a, {
 			policy: o,
 			tuples: await e.loadSubjectTuples(s.id, r)
 		});
 	};
-}, ul = (e) => {
+}, gl = (e) => {
 	if (typeof e.name != "string" || e.name.length === 0) throw Error("defineReaction: a non-empty `name` is required");
 	if (e.watch === void 0 || typeof e.watch.table != "string" || e.watch.table.length === 0) throw Error(`reaction '${e.name}': watch.table is required`);
 	if (e.act === void 0 || e.act.kind !== "agent" && e.act.kind !== "workflow") throw Error(`reaction '${e.name}': act must be { kind: 'agent' | 'workflow', … }`);
@@ -5662,14 +5673,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	if (e.guards.rateLimit !== void 0 && (e.guards.rateLimit.limit <= 0 || e.guards.rateLimit.windowMs <= 0)) throw Error(`reaction '${e.name}': guards.rateLimit needs positive limit + windowMs`);
 	if (e.guards.costBudgetUsd !== void 0 && e.guards.costBudgetUsd < 0) throw Error(`reaction '${e.name}': guards.costBudgetUsd must be >= 0`);
 	return e;
-}, dl = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, fl = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, pl = class {
+}, _l = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, vl = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, yl = class {
 	hits = /* @__PURE__ */ new Map();
 	allow(e, t, n, r) {
 		let i = r - n, a = (this.hits.get(e) ?? []).filter((e) => e > i);
 		return a.length >= t ? (this.hits.set(e, a), !1) : (a.push(r), this.hits.set(e, a), !0);
 	}
-}, ml = async (e, t, n) => {
-	if (t.table !== e.watch.table || !dl(e.watch.on, t.op)) return "skipped-op";
+}, bl = async (e, t, n) => {
+	if (t.table !== e.watch.table || !_l(e.watch.on, t.op)) return "skipped-op";
 	if (e.when !== void 0 && !e.when(t)) return "skipped-when";
 	let r = `${e.name}:${e.guards.dedupeKey(t)}`;
 	if (await n.dedupe.has(r)) return "skipped-dedupe";
@@ -5678,26 +5689,26 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		let t = n.now?.() ?? Date.now();
 		if (!n.rateLimiter.allow(e.name, i.limit, i.windowMs, t)) return "skipped-ratelimit";
 	}
-	let a = fl(t);
+	let a = vl(t);
 	return e.guards.costBudgetUsd !== void 0 && n.checkBudget !== void 0 && !await n.checkBudget(a, e.guards.costBudgetUsd) ? "skipped-budget" : (await n.runAct(e.act, t, {
 		id: a,
 		via: "agent"
 	}), await n.dedupe.add(r), "acted");
-}, hl = E("_voltro_wakeups", {
+}, xl = T("_voltro_wakeups", {
 	id: v({ prefix: "wakeup" }),
-	tenantId: D(),
-	kind: D(),
-	refId: D(),
-	wakeAt: O(),
-	status: D()
-}).index(["status", "wakeAt"]).index(["tenantId"]), gl = async (e) => {
-	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await Zs(e.store, t, e.batchLimit ?? 100);
+	tenantId: E(),
+	kind: E(),
+	refId: E(),
+	wakeAt: D(),
+	status: E()
+}).index(["status", "wakeAt"]).index(["tenantId"]), Sl = async (e) => {
+	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await tc(e.store, t, e.batchLimit ?? 100);
 	if (n.length === 0) return 0;
 	let r = 0;
-	for (let t of n) if (await qs(e.store, t)) try {
+	for (let t of n) if (await Zs(e.store, t)) try {
 		await e.adapter.wake(t), r++;
 	} catch (n) {
-		await Js(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
+		await Qs(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
 			tenantId: t.tenantId,
 			kind: t.kind,
 			refId: t.refId,
@@ -5705,11 +5716,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		});
 	}
 	return r > 0 && e.log?.info("wake: woke due deployments", { count: r }), r;
-}, _l = (e, t = 1e3) => {
+}, Cl = (e, t = 1e3) => {
 	let n = !1, r, i = async () => {
 		if (!n) {
 			try {
-				await gl(e);
+				await Sl(e);
 			} catch (t) {
 				e.log?.warn("wake: tick failed", { reason: t instanceof Error ? t.message : String(t) });
 			}
@@ -5719,10 +5730,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	return i(), { stop: () => {
 		n = !0, r !== void 0 && clearTimeout(r);
 	} };
-}, vl = (e) => ({ wake: async () => {
+}, wl = (e) => ({ wake: async () => {
 	await e.start();
-} }), yl = (e) => new Promise((t) => setTimeout(t, e)), bl = (e) => {
-	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? yl, i = e.spawnImpl ?? Ct, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
+} }), Tl = (e) => new Promise((t) => setTimeout(t, e)), El = (e) => {
+	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? Tl, i = e.spawnImpl ?? Tt, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
 		try {
 			let n = await t(e.healthUrl);
 			return d(n);
@@ -5776,11 +5787,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		},
 		stop: m
 	};
-}, xl = async (e) => {
+}, Dl = async (e) => {
 	if (e.signals.connectedClients() > 0 || e.signals.inFlightRequests() > 0 || e.signals.activeWorkflowExecutions() > 0) return !1;
-	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await Qs(e.store);
+	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await nc(e.store);
 	return !(n !== null && n.wakeAt.getTime() <= t);
-}, Sl = (e, t = Date.now) => {
+}, Ol = (e, t = Date.now) => {
 	let n;
 	return {
 		update: (r) => {
@@ -5792,7 +5803,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			n = void 0;
 		}
 	};
-}, Cl = () => {
+}, kl = () => {
 	let e = 0, t = 0;
 	return {
 		onRequestStart: () => {
@@ -5810,8 +5821,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		inFlightRequests: () => e,
 		openConnections: () => t
 	};
-}, wl = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Tl = (e, t, n, r) => new Promise((i, a) => {
-	let o = Ye.request({
+}, Al = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), jl = (e, t, n, r) => new Promise((i, a) => {
+	let o = Ze.request({
 		host: n,
 		port: r,
 		method: e.method,
@@ -5821,8 +5832,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		t.writeHead(e.statusCode ?? 502, e.headers), e.pipe(t), e.on("end", i), e.on("error", a);
 	});
 	o.on("error", a), e.pipe(o);
-}), El = (e, t, n, r, i) => new Promise((a, o) => {
-	let s = Ye.request({
+}), Ml = (e, t, n, r, i) => new Promise((a, o) => {
+	let s = Ze.request({
 		host: r,
 		port: i,
 		method: e.method,
@@ -5836,21 +5847,21 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		};
 		t.on("close", s), r.on("close", s), r.on("error", o);
 	}), s.on("error", o), s.end();
-}), Dl = (e) => {
-	let t = wl({
+}), Nl = (e) => {
+	let t = Al({
 		ensureAwake: () => e.supervisor.start(),
 		...e.onActivity === void 0 ? {} : { onActivity: e.onActivity }
-	}), n = e.activity, r = Ye.createServer((r, i) => {
-		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Tl(r, i, e.targetHost, e.targetPort)).catch((t) => {
+	}), n = e.activity, r = Ze.createServer((r, i) => {
+		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => jl(r, i, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.headersSent || i.writeHead(502), i.end("wake/proxy failed");
 		});
 	});
 	return r.on("upgrade", (r, i, a) => {
-		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => El(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => Ml(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: upgrade proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.destroy();
 		});
 	}), r;
-}, Ol = async (e) => {
+}, Pl = async (e) => {
 	try {
 		return (await e.query({
 			table: "_voltro_workflow_runs",
@@ -5867,15 +5878,15 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	} catch {
 		return 0;
 	}
-}, kl = async (e) => {
-	let t = vl(e.supervisor), n = await gl({
+}, Fl = async (e) => {
+	let t = wl(e.supervisor), n = await Sl({
 		store: e.store,
 		adapter: t,
 		...e.now === void 0 ? {} : { now: e.now },
 		...e.log === void 0 ? {} : { log: e.log }
 	});
 	n > 0 && e.idleGate.reset();
-	let r = await xl({
+	let r = await Dl({
 		store: e.store,
 		signals: e.signals,
 		...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
@@ -5885,12 +5896,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		woke: n,
 		stopped: i
 	};
-}, Al = async (e) => {
-	let t = Sl(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Cl(), i = 0, a = e.signals === void 0, o = e.signals ?? {
+}, Il = async (e) => {
+	let t = Ol(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = kl(), i = 0, a = e.signals === void 0, o = e.signals ?? {
 		connectedClients: () => r.openConnections(),
 		inFlightRequests: () => r.inFlightRequests(),
 		activeWorkflowExecutions: () => i
-	}, s = Dl({
+	}, s = Nl({
 		supervisor: e.supervisor,
 		targetHost: e.targetHost,
 		targetPort: e.targetPort,
@@ -5909,7 +5920,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	let l = !1, u, d = e.firedRetentionMs ?? 10 * 6e4, f = 0, p = async () => {
 		if (!l) {
 			try {
-				if (a && (i = await Ol(e.store)), await kl({
+				if (a && (i = await Pl(e.store)), await Fl({
 					store: e.store,
 					supervisor: e.supervisor,
 					signals: o,
@@ -5917,7 +5928,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 					...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
 					...e.log === void 0 ? {} : { log: e.log }
 				}), f++ % 60 == 0) {
-					let t = await ec(e.store, { firedOlderThan: new Date(Date.now() - d) });
+					let t = await ic(e.store, { firedOlderThan: new Date(Date.now() - d) });
 					t > 0 && e.log?.info("orchestrator: pruned fired wakeups", { count: t });
 				}
 			} catch (t) {
@@ -5932,14 +5943,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			l = !0, u !== void 0 && clearTimeout(u), await new Promise((e) => s.close(() => e()));
 		}
 	};
-}, jl = (e) => e, Ml = class extends L.TaggedError()("AnalyticsError", {
+}, Ll = (e) => e, Rl = class extends L.TaggedError()("AnalyticsError", {
 	provider: L.String,
 	operation: L.String,
 	cause: L.String
-}) {}, Nl = class extends L.TaggedError()("AnalyticsCapabilityNotSupported", {
+}) {}, zl = class extends L.TaggedError()("AnalyticsCapabilityNotSupported", {
 	provider: L.String,
 	capability: L.String
-}) {}, Pl = class extends Re.Tag("@voltro/AnalyticsSink")() {}, Fl = (e, t) => ({
+}) {}, Bl = class extends Ve.Tag("@voltro/AnalyticsSink")() {}, Vl = (e, t) => ({
 	info: e.info,
 	track: (n) => e.track(n.tenantId === void 0 ? {
 		...n,
@@ -5958,20 +5969,20 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		tenantId: t
 	} : n),
 	...e.mirror === void 0 ? {} : { mirror: e.mirror }
-}), Il = () => M.gen(function* () {
-	let e = yield* Pl, t = yield* M.serviceOption(Se), n = F.match(t, {
+}), Hl = () => M.gen(function* () {
+	let e = yield* Bl, t = yield* M.serviceOption(Te), n = F.match(t, {
 		onNone: () => null,
 		onSome: (e) => e.tenantId ?? null
 	});
-	return n === null ? e : Fl(e, n);
-}), Ll = "noop", Rl = () => {
-	let e = (e) => M.fail(new Nl({
-		provider: Ll,
+	return n === null ? e : Vl(e, n);
+}), Ul = "noop", Wl = () => {
+	let e = (e) => M.fail(new zl({
+		provider: Ul,
 		capability: e
 	}));
 	return {
 		info: {
-			provider: Ll,
+			provider: Ul,
 			capabilities: {
 				track: !0,
 				aggregate: !1,
@@ -5985,8 +5996,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		timeseries: () => e("timeseries"),
 		topN: () => e("topN")
 	};
-}, zl = (e) => {
-	if (e.length === 0) return Rl();
+}, Gl = (e) => {
+	if (e.length === 0) return Wl();
 	if (e.length === 1) return e[0];
 	let t = {
 		provider: "compose",
@@ -6003,7 +6014,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		discard: !0
 	}), r = (t, n) => {
 		let r = e.find((e) => e.info.capabilities[t]);
-		return r === void 0 ? M.fail(new Nl({
+		return r === void 0 ? M.fail(new zl({
 			provider: "compose",
 			capability: t
 		})) : n(r);
@@ -6026,11 +6037,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		topN: (e) => r("topN", (t) => t.topN(e)),
 		...a === void 0 ? {} : { mirror: a }
 	};
-}, Bl = (e) => {
+}, Kl = (e) => {
 	let t = e.filter((e) => e.dispose !== void 0);
 	return {
 		kind: "compose",
-		build: (t) => zl(e.map((e) => e.build(t))),
+		build: (t) => Gl(e.map((e) => e.build(t))),
 		tables: e.flatMap((e) => e.tables ?? []),
 		initialize: (t) => M.forEach(e, (e) => e.initialize ? e.initialize(t) : M.void, {
 			concurrency: 1,
@@ -6041,15 +6052,15 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			discard: !0
 		}) } : {}
 	};
-}, Vl = {
+}, ql = {
 	kind: "noop",
-	build: () => Rl()
-}, Hl = {
+	build: () => Wl()
+}, Jl = {
 	tables: [],
 	detach: () => {}
-}, Ul = (e) => {
+}, Yl = (e) => {
 	let { store: t, sink: n, log: r } = e, i = n.mirror;
-	if (i === void 0 || i.tables.length === 0) return Hl;
+	if (i === void 0 || i.tables.length === 0) return Jl;
 	let a = e.run ?? ((e) => M.runPromise(e)), o = i.primaryKey ?? "id", s = new Set(i.tables), c = (e) => {
 		if (e.op === "delete") {
 			let t = e.old;
@@ -6073,11 +6084,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		tables: i.tables,
 		detach: l
 	};
-}, Wl = (e) => {
+}, Xl = (e) => {
 	let t = typeof e.refresh == "string" ? { interval: e.refresh } : e.refresh, n = e.strategy ?? "replace";
 	if (n === "merge" && (e.mergeKey === void 0 || e.mergeKey.length === 0)) throw Error(`defineAggregate("${e.name}"): strategy: 'merge' requires mergeKey — the property on each row to upsert by`);
 	if (e.incremental !== void 0) {
-		let t = Yc({
+		let t = tl({
 			aggregations: [{
 				op: e.incremental.op,
 				...e.incremental.column === void 0 ? {} : { column: e.incremental.column }
@@ -6099,47 +6110,47 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		build: e.build,
 		...e.incremental === void 0 ? {} : { incremental: e.incremental }
 	};
-}, Gl = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, Kl = class extends L.TaggedError()("AggregateStale", {
+}, Zl = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, Ql = class extends L.TaggedError()("AggregateStale", {
 	name: L.String,
 	ageMs: L.Number,
 	maxAgeMs: L.Number
-}) {}, ql = class extends L.TaggedError()("AggregateNotFound", { name: L.String }) {}, Jl = class extends L.TaggedError()("AggregateError", {
+}) {}, $l = class extends L.TaggedError()("AggregateNotFound", { name: L.String }) {}, eu = class extends L.TaggedError()("AggregateError", {
 	name: L.String,
 	operation: L.String,
 	cause: L.String
-}) {}, Yl = class extends Re.Tag("@voltro/AggregateRegistry")() {}, Xl = (e) => M.gen(function* () {
-	return (yield* Yl).getHandle(e);
-}), Zl = (e, n, r) => {
+}) {}, tu = class extends Ve.Tag("@voltro/AggregateRegistry")() {}, nu = (e) => M.gen(function* () {
+	return (yield* tu).getHandle(e);
+}), ru = (e, n, r) => {
 	if (e.crossTenant || !n.has(e.table) || r == null) return e;
 	let i = u("tenantId", r);
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, i) : i
 	};
-}, Ql = (e, n) => {
+}, iu = (e, n) => {
 	if (e.includeDeleted || !n.has(e.table)) return e;
 	let r = S("deletedAt");
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, r) : r
 	};
-}, $l = (e) => M.runPromiseExit(e).then((e) => {
-	if (Ue.isSuccess(e)) return e.value;
-	let t = j.failureOption(e.cause);
-	throw F.isSome(t) ? t.value : j.squash(e.cause);
-}), eu = (e, t) => e.pipe(M.provideService(Se, t)), tu = async (e, t, n) => {
-	let r = await M.runPromise(De(t, e.guards, n));
+}, au = (e) => M.runPromiseExit(e).then((e) => {
+	if (Ge.isSuccess(e)) return e.value;
+	let t = A.failureOption(e.cause);
+	throw F.isSome(t) ? t.value : A.squash(e.cause);
+}), ou = (e, t) => e.pipe(M.provideService(Te, t)), su = async (e, t, n) => {
+	let r = await M.runPromise(Ae(t, e.guards, n));
 	if (r) throw r;
-}, nu = async (e) => {
-	if (jn() === void 0) return e;
-	let t = await $l(Nn(e.subject, (e) => {
+}, cu = async (e) => {
+	if (Nn() === void 0) return e;
+	let t = await au(Fn(e.subject, (e) => {
 		console.error("[voltro] row filter failed to load", e);
 	}));
 	return {
 		...e,
 		rowFilter: t
 	};
-}, ru = async (e) => {
+}, lu = async (e) => {
 	let t = `${e.kind}.${e.name}`, n = Date.now(), r = "ok";
 	try {
 		if (e.interceptor) {
@@ -6154,8 +6165,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				traceId: e.requestContext.traceId,
 				...e.requestContext.spanId === void 0 ? {} : { spanId: e.requestContext.spanId }
 			}), r = await M.runPromiseExit(n);
-			if (Ue.isSuccess(r)) return r.value;
-			throw j.squash(r.cause);
+			if (Ge.isSuccess(r)) return r.value;
+			throw A.squash(r.cause);
 		}
 		return await e.runExecutor();
 	} catch (e) {
@@ -6168,28 +6179,28 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			status: r
 		});
 	}
-}, iu = /* @__PURE__ */ new Set([1213, 1205]), au = /* @__PURE__ */ new Set([
+}, uu = /* @__PURE__ */ new Set([1213, 1205]), du = /* @__PURE__ */ new Set([
 	"ER_LOCK_DEADLOCK",
 	"ER_LOCK_WAIT_TIMEOUT",
 	"40001",
 	"40P01"
-]), ou = (e) => {
+]), fu = (e) => {
 	let t = e;
 	for (let e = 0; e < 6 && typeof t == "object" && t; e++) {
 		let e = t;
-		if (typeof e.errno == "number" && iu.has(e.errno) || typeof e.code == "string" && au.has(e.code) || typeof e.sqlState == "string" && au.has(e.sqlState)) return !0;
+		if (typeof e.errno == "number" && uu.has(e.errno) || typeof e.code == "string" && du.has(e.code) || typeof e.sqlState == "string" && du.has(e.sqlState)) return !0;
 		t = e.cause;
 	}
 	return !1;
-}, su = 3, cu = (e) => new Promise((t) => setTimeout(t, e)), lu = async (e, t) => {
-	let n = t?.delay ?? ((e) => cu(e * 20 + Math.floor(Math.random() * 30)));
+}, pu = 3, mu = (e) => new Promise((t) => setTimeout(t, e)), hu = async (e, t) => {
+	let n = t?.delay ?? ((e) => mu(e * 20 + Math.floor(Math.random() * 30)));
 	for (let t = 1;; t++) try {
 		return await e();
 	} catch (e) {
-		if (t >= su || !ou(e)) throw e;
+		if (t >= pu || !fu(e)) throw e;
 		await n(t);
 	}
-}, uu = (e) => (t, n, r) => ru({
+}, gu = (e) => (t, n, r) => lu({
 	name: t.descriptor.name,
 	kind: "mutation",
 	input: n,
@@ -6197,11 +6208,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await tu(t.descriptor, r.subject, n);
-		let i = await nu(r), a = [], o = await lu(async () => (a.length = 0, e.store.transactional(async (o) => {
+		await su(t.descriptor, r.subject, n);
+		let i = await cu(r), a = [], o = await hu(async () => (a.length = 0, e.store.transactional(async (o) => {
 			let s = e.undoCapture?.(o), c = s ? s.tx : o, l = e.buildContext(i, c, { afterCommit: (e) => {
 				a.push(e);
-			} }), u = t.executor(n, l), d = M.isEffect(u) ? await e.runEffect(eu(u, r.subject), l.store) : await u;
+			} }), u = t.executor(n, l), d = M.isEffect(u) ? await e.runEffect(ou(u, r.subject), l.store) : await u;
 			return s && await s.persist(l.store, {
 				tag: t.descriptor.name,
 				subject: r.subject,
@@ -6211,33 +6222,33 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		for (let e of a) await e();
 		return o;
 	}
-}), du = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, fu = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, pu = (e) => {
+}), _u = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, vu = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, yu = (e) => {
 	let t = e.descriptor.source;
 	return t == null ? [] : typeof t == "string" ? [t] : [...t];
-}, mu = (e, t) => (n) => () => {
+}, bu = (e, t) => (n) => () => {
 	let r = e.descriptor.guards;
-	return !r || r.length === 0 ? Promise.resolve(null) : M.runPromise(De(n, r, t));
-}, hu = (e) => (t, n) => (r) => {
-	let i = e.buildContext(r), a = mu(t, n)(r.subject), o = async () => {
+	return !r || r.length === 0 ? Promise.resolve(null) : M.runPromise(Ae(n, r, t));
+}, xu = (e) => (t, n) => (r) => {
+	let i = e.buildContext(r), a = bu(t, n)(r.subject), o = async () => {
 		let i = await a();
 		if (i) throw i;
-		let o = e.buildContext(await nu(r)), s = t.executor(n, o);
-		return M.isEffect(s) ? M.runPromise(e.provideEffect(eu(s, r.subject), o.store)) : du(await Promise.resolve(s));
+		let o = e.buildContext(await cu(r)), s = t.executor(n, o);
+		return M.isEffect(s) ? M.runPromise(e.provideEffect(ou(s, r.subject), o.store)) : _u(await Promise.resolve(s));
 	}, s = (n) => {
-		let i = du(n);
-		return fu(i) ? e.finalize(i, r) : {
+		let i = _u(n);
+		return vu(i) ? e.finalize(i, r) : {
 			__voltroComputed: !0,
 			value: i,
-			dependentTables: pu(t),
+			dependentTables: yu(t),
 			tenantId: r.subject?.tenantId ?? null,
 			recompute: o
 		};
 	}, c = () => {
 		let a = t.executor(n, i);
-		return M.isEffect(a) ? e.provideEffect(eu(a, r.subject), i.store).pipe(M.map(s)) : a instanceof Promise ? M.promise(() => a).pipe(M.map(s)) : s(a);
+		return M.isEffect(a) ? e.provideEffect(ou(a, r.subject), i.store).pipe(M.map(s)) : a instanceof Promise ? M.promise(() => a).pipe(M.map(s)) : s(a);
 	}, l = () => {
 		let e = t.descriptor.guards;
-		return !e || e.length === 0 ? c() : De(r.subject, e, n).pipe(M.flatMap((e) => {
+		return !e || e.length === 0 ? c() : Ae(r.subject, e, n).pipe(M.flatMap((e) => {
 			if (e) return M.fail(e);
 			let t = c();
 			return M.isEffect(t) ? t : M.succeed(t);
@@ -6256,7 +6267,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		traceId: r.traceId,
 		...r.spanId === void 0 ? {} : { spanId: r.spanId }
 	});
-}, gu = (e) => (t, n, r) => ru({
+}, Su = (e) => (t, n, r) => lu({
 	name: t.descriptor.name,
 	kind: "action",
 	input: n,
@@ -6264,16 +6275,16 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await tu(t.descriptor, r.subject, n);
-		let i = e.buildContext(await nu(r)), a = t.executor(n, i);
-		return M.isEffect(a) ? e.runEffect(eu(a, r.subject), i.store) : a;
+		await su(t.descriptor, r.subject, n);
+		let i = e.buildContext(await cu(r)), a = t.executor(n, i);
+		return M.isEffect(a) ? e.runEffect(ou(a, r.subject), i.store) : a;
 	}
-}), _u = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, vu = (e) => typeof e == "string" && e.length > 0 ? e : null, yu = [
+}), Cu = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, wu = (e) => typeof e == "string" && e.length > 0 ? e : null, Tu = [
 	"updatedAt",
 	"createdAt",
 	"updatedBy",
 	"createdBy"
-], bu = (e) => yu.some((t) => t in e), xu = (e, t, n) => {
+], Eu = (e) => Tu.some((t) => t in e), Du = (e, t, n) => {
 	let r = {
 		table: t.table,
 		id: t.id,
@@ -6288,14 +6299,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		found: !1
 	};
 	let i = t.column === void 0 ? void 0 : e[t.column];
-	if (!bu(e)) return {
+	if (!Eu(e)) return {
 		...r,
 		value: i,
 		lastWrite: null,
 		attribution: "none",
 		found: !0
 	};
-	let a = vu(e.updatedBy) ?? vu(e.createdBy), o = _u(e.updatedAt) ?? _u(e.createdAt);
+	let a = wu(e.updatedBy) ?? wu(e.createdBy), o = Cu(e.updatedAt) ?? Cu(e.createdAt);
 	return {
 		...r,
 		value: i,
@@ -6307,12 +6318,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		attribution: "audit",
 		found: !0
 	};
-}, Su = (e, t) => {
+}, Ou = (e, t) => {
 	let n = e.map((e) => {
 		let n = e.newValue ?? e.value, r = t.column !== void 0 && n && typeof n == "object" ? n[t.column] : e.newValue ?? e.value;
 		return {
-			actor: { id: vu(e.actor) ?? vu(e.changedBy) },
-			at: _u(e.at) ?? _u(e.changedAt),
+			actor: { id: wu(e.actor) ?? wu(e.changedBy) },
+			at: Cu(e.at) ?? Cu(e.changedAt),
 			...e.traceId === void 0 ? {} : { traceId: e.traceId },
 			value: r
 		};
@@ -6327,12 +6338,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		history: n,
 		found: n.length > 0
 	};
-}, Cu = (e) => {
+}, ku = (e) => {
 	let t = e.new?.id;
 	if (typeof t == "string") return t;
 	let n = e.old?.id;
 	return typeof n == "string" ? n : void 0;
-}, wu = (e) => {
+}, Au = (e) => {
 	let t = {};
 	if (e.op === "insert") for (let [n, r] of Object.entries(e.new ?? {})) t[n] = {
 		from: void 0,
@@ -6352,11 +6363,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	return {
 		table: e.table,
 		op: e.op,
-		id: Cu(e),
+		id: ku(e),
 		fields: t
 	};
-}, Tu = (e) => {
-	let t = e.map(wu);
+}, ju = (e) => {
+	let t = e.map(Au);
 	return {
 		rows: t,
 		summary: {
@@ -6365,21 +6376,21 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			deletes: t.filter((e) => e.op === "delete").length
 		}
 	};
-}, Eu = class extends Error {
+}, Mu = class extends Error {
 	constructor() {
 		super("voltro:preview-rollback"), this.name = "PreviewRollback";
 	}
-}, Du = async (e, t) => {
+}, Nu = async (e, t) => {
 	let n, r = !1;
 	try {
 		await e.transactional(async (e) => {
-			throw n = await t(e), r = !0, new Eu();
+			throw n = await t(e), r = !0, new Mu();
 		});
 	} catch (e) {
-		if (!(e instanceof Eu)) throw e;
+		if (!(e instanceof Mu)) throw e;
 	}
 	if (!r) throw Error("preview: handler did not complete");
 	return n;
-}, Ou = "framework-runtime";
+}, Pu = "framework-runtime";
 //#endregion
-export { Oi as API_KEYS_TABLE, Fo as AccessDenied, Jl as AggregateError, rl as AggregateMaintainer, ql as AggregateNotFound, Yl as AggregateRegistry, Kl as AggregateStale, Nl as AnalyticsCapabilityNotSupported, Ml as AnalyticsError, Pl as AnalyticsSink, X as CONNECTIONS_TABLE, Na as CONNECTION_GRANTS_TABLE, Es as CircuitBreaker, ws as CircuitOpen, no as ConnectionNotConnected, Lr as DEFAULT_MAX_RPC_BODY_BYTES, eo as DEFAULT_REFRESH_SKEW_MS, On as DEFAULT_ROW_FILTER_RETRY, gs as DeleteBuilder, zn as Dispatcher, Wi as EffectStore, ho as GRANT_TTL_MS, Ut as InMemoryDataStore, jt as IndexedMatcher, wt as LinearScanMatcher, Ge as MetricBoundaries, Ll as NOOP_ANALYTICS_PROVIDER, Mn as NO_ROW_FILTER, ls as NoRowFound, va as OUTBOX_ATTEMPTS_TABLE, Ta as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, us as OptimisticLockError, Po as REBAC_ADMIN_SCOPE, to as REFRESH_LEASE_MS, Ou as RUNTIME_NAME, pl as ReactionRateLimiter, vr as ReplicatedDataStore, Dn as RowFilterUnavailable, ms as SelectBuilder, Hi as StoreOperationFailed, Pt as SubscriptionRegistry, Ui as TableValidationFailed, Vi as TenantScopeViolation, Uc as TimelineRecorder, Sc as UndoBoundaryError, wc as UndoStack, hs as UpdateBuilder, ns as VOLTRO_AUDIT_MIXIN_ID, rs as VOLTRO_SOFT_DELETE_MIXIN_ID, is as VOLTRO_TENANT_MIXIN_ID, $n as _connectionStreamCount, er as _resetConnectionSubjectsForTest, Fa as _voltroConnectionGrantsTable, Ma as _voltroConnectionsTable, il as _voltroRebacTuplesTable, dc as _voltroScheduleClaimsTable, uc as _voltroScheduleRunsTable, fc as _voltroTracesTable, pc as _voltroUndoLogTable, hl as _voltroWakeupsTable, pa as _voltroWorkflowEventDeliveriesTable, fa as _voltroWorkflowEventsTable, Bi as apiKeyManagementRoutes, bs as applyDefined, tl as applyDelta, Ec as applyInverse, Dc as applyInverses, In as applyRowFilter, Ln as applyRowFilterToDescriptor, Ql as applySoftDeleteScope, Zl as applyTenantScope, Fc as applyUndoInvocation, Go as assertCan, za as assertConnectionCipherConfigured, Ul as attachAnalyticsMirror, zr as awaitServerListening, wa as backoffMs, yo as beginOAuthConnect, Kn as bindConnectionSubject, Ir as bindMutation, Or as bindStream, Dr as bindSubscription, Tr as bindSubscriptionUntyped, $c as buildIvmState, Tu as buildPreview, sl as buildRebacInterceptor, ll as buildRebacReadFilter, fr as buildSubjectKey, Wr as buildTracingLayer, ai as cachedBackend, Wo as can, Ws as cancelWakeup, Yc as classifyShape, oo as clearConnectionRefreshFlights, Bo as clearResourcePolicies, i as clearRetentions, ks as clearSystemStoreHandle, zs as compileCron, bo as completeOAuthConnect, Bl as composeAnalytics, zl as composeAnalyticsSinks, go as connectionCallbackPath, Ra as connectionLabel, tr as connectionSubjectsSnapshot, Ol as countRunningWorkflows, xn as counter, _r as currentRoutingContext, cr as currentTraceContext, Li as dataStoreApiKeyStore, bi as dataStoreIdempotencyStore, Ti as dataStoreKvStore, hi as decryptField, Wl as defineAggregate, La as defineConnection, sa as defineEventTrigger, xa as defineOutboxHandler, ul as defineReaction, Lo as defineResourcePolicy, Rs as defineSchedule, jl as defineSubscriber, ci as deriveKey, wu as diffChange, ka as drainOutbox, Zs as dueWakeups, Uo as effectiveRelations, cs as emptySchemaRegistry, q as encryptField, $r as envSecretsBackend, Qa as exchangeAuthorizationCode, ar as externalSpanFromTraceparent, Gt as extractDbCause, Nt as fingerprintFor, Ja as forgetCredential, rr as formatTraceparent, Tc as forwardChangeFromCdc, Ri as frameworkApiKeyStrategy, Sn as gauge, Ai as generateApiKeyToken, wo as getConnectionResolver, qn as getConnectionSubject, pi as getFieldCipher, Ro as getResourcePolicy, jn as getRowFilter, As as getSystemStoreHandle, Gc as getTimelineRecorder, Zo as getTupleSource, $ as groupKeyOf, Cn as histogramMetric, Su as historyProvenance, oi as httpSecretsBackend, xt as inspectWorkflow, Qo as installPolicyGuardResolver, Qn as interruptConnectionStreams, bc as invertChange, Gl as isAggregateDefinition, Kt as isForeignKeyViolation, xl as isIdleNow, Nr as isInfraError, Cc as isSafeToApply, Is as isScheduleDefinition, ca as isWorkflowEventTriggerDefinition, Qc as ivmValue, xu as lastWriteProvenance, Ya as listConnectionStates, zo as listResourcePolicies, ee as listRetentions, al as loadResourceTuples, cl as loadSubjectTuples, Ms as localityAwareSelector, gu as makeActionRunner, rc as makeAdvisoryLockCoordinator, li as makeAesCipher, Ni as makeApiKeyService, qt as makeAppAccess, Ei as makeAsyncKv, Qr as makeBufferingSpanProcessor, Ba as makeConnectionRegistry, Eo as makeConnectionResolver, Do as makeConnectionsFacade, lc as makeCoordinatedScheduler, es as makeDataLoader, No as makeDisconnectConnectionExecutor, qi as makeEffectStoreLayer, ma as makeEventsFacade, ui as makeFieldCipher, _s as makeFluentStore, Sl as makeIdleGate, ra as makeLazyWorkflowFacade, Ao as makeListConnectionsExecutor, uu as makeMutationRunner, Ca as makeOutboxFacade, ta as makePostCommitWorkflowFacade, vl as makeProcessAdapter, hu as makeQueryDescriptorProducer, mu as makeQueryReauthorizer, Cl as makeRouterActivity, as as makeSchemaRegistry, jo as makeStartConnectionExecutor, Mo as makeSubmitTokenExecutor, vc as makeUndoCapture, wl as makeWakeGate, Dl as makeWakeProxyServer, ea as makeWorkflowFacade, na as makeWorkflowFacadeWithCallerContext, ia as makeWorkflowHandlers, aa as makeWorkflowLayers, Xi as makeWorkflowRunHandle, Gs as markWakeupFired, el as materializeIvm, Pi as memoryApiKeyStore, Ps as memoryReplicationAdapter, dr as memoryRywPositionStore, Bs as nextFiring, Qs as nextWakeup, bl as nodeProcessSupervisor, Rl as noopAnalytics, Vl as noopAnalyticsSpec, Di as noopKv, Yn as onBindConnectionSubject, ba as outboxAttemptsTable, _a as outboxTable, ir as parseTraceparent, lr as powerOfTwoSelector, Du as previewInRollback, Wa as projectConnectionState, ec as pruneWakeups, Vo as rebacPolicyGraph, _n as recordSample, U as recordSubscriptionActive, yn as recordSubscriptionDelivery, qc as recordTimelineEvent, Bc as redactRow, pr as redisRywPositionStore, Ic as redoUndoInvocation, $a as refreshAccessToken, Zn as registerConnectionStream, ie as registerRetention, Us as registerWakeup, Js as releaseWakeup, ur as replicaHealth, ni as resetSecretsBackend, lo as resolveConnection, To as resolveConnectionForSubject, Ns as resolveCurrentRegion, Jt as resolveDependentTables, vo as resolveRedirectUri, nl as resolveRescan, Nn as resolveRowFilterScope, Pn as resolveRowFilterScopeFor, ri as resolveSecret, ii as resolveSecretSync, si as resolveSecretsBackend, Lc as resolveTimelineMode, oe as retentionTtlMsFromEnv, Hc as reverseEventOverRows, qo as revokedIds, js as runAsSystem, kl as runOrchestratorTick, $l as runProvidedEffect, ml as runReaction, Al as runSingleNodeOrchestrator, _l as runWakeLoop, lu as runWithDeadlockRetry, gr as runWithRoutingContext, sr as runWithTraceContext, _o as sanitizeRedirectTo, cc as scheduleCoordinated, Co as setConnectionResolver, fi as setFieldCipher, An as setRowFilter, ti as setSecretsBackend, Os as setSystemStoreHandle, Kc as setTimelineRecorderForTest, Xo as setTupleSource, ki as sha256Hex, tc as singleCoordinator, Tn as snapshotMetrics, En as snapshotMetricsSync, Rr as startRpcServer, ac as startScheduler, Ka as storeCredential, xo as sweepExpiredGrants, ce as sweepRetention, xc as synthesizeInverse, ts as tracingHttpClientLayer, oa as triggerWorkflow, qs as tryClaimWakeup, Jn as unbindConnectionSubject, mc as undoCaptureEnabled, Nc as undoLogExecutor, Xl as useAggregate, Il as useAnalytics, Ko as visibleRows, gl as wakeDueOnce, nu as withRowFilter, Ji as workflowToRpc, _c as wrapCaptureStore, Cs as wrapStoreWithMixinBehaviour };
+export { ji as API_KEYS_TABLE, zo as AccessDenied, eu as AggregateError, ll as AggregateMaintainer, $l as AggregateNotFound, tu as AggregateRegistry, Ql as AggregateStale, zl as AnalyticsCapabilityNotSupported, Rl as AnalyticsError, Bl as AnalyticsSink, X as CONNECTIONS_TABLE, La as CONNECTION_GRANTS_TABLE, As as CircuitBreaker, Os as CircuitOpen, oo as ConnectionNotConnected, Br as DEFAULT_MAX_RPC_BODY_BYTES, io as DEFAULT_REFRESH_SKEW_MS, An as DEFAULT_ROW_FILTER_RETRY, oc as DORMANCY_WAKEUP_TENANT, bs as DeleteBuilder, Hn as Dispatcher, Ji as EffectStore, yo as GRANT_TTL_MS, Gt as InMemoryDataStore, Nt as IndexedMatcher, Et as LinearScanMatcher, qe as MetricBoundaries, Ul as NOOP_ANALYTICS_PROVIDER, Pn as NO_ROW_FILTER, ps as NoRowFound, Sa as OUTBOX_ATTEMPTS_TABLE, ka as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, ms as OptimisticLockError, Ro as REBAC_ADMIN_SCOPE, ao as REFRESH_LEASE_MS, Pu as RUNTIME_NAME, yl as ReactionRateLimiter, xr as ReplicatedDataStore, kn as RowFilterUnavailable, ac as SCHEDULE_SUBJECT, Wi as SYSTEM_SUBJECT, vs as SelectBuilder, Ki as StoreOperationFailed, It as SubscriptionRegistry, qi as TableValidationFailed, Gi as TenantScopeViolation, Yc as TimelineRecorder, Oc as UndoBoundaryError, Ac as UndoStack, ys as UpdateBuilder, os as VOLTRO_AUDIT_MIXIN_ID, ss as VOLTRO_SOFT_DELETE_MIXIN_ID, cs as VOLTRO_TENANT_MIXIN_ID, nr as _connectionStreamCount, rr as _resetConnectionSubjectsForTest, za as _voltroConnectionGrantsTable, Ia as _voltroConnectionsTable, ul as _voltroRebacTuplesTable, _c as _voltroScheduleClaimsTable, gc as _voltroScheduleRunsTable, vc as _voltroTracesTable, yc as _voltroUndoLogTable, xl as _voltroWakeupsTable, _a as _voltroWorkflowEventDeliveriesTable, ga as _voltroWorkflowEventsTable, Ui as apiKeyManagementRoutes, ws as applyDefined, sl as applyDelta, Mc as applyInverse, Nc as applyInverses, Rn as applyRowFilter, zn as applyRowFilterToDescriptor, iu as applySoftDeleteScope, ru as applyTenantScope, Vc as applyUndoInvocation, Yo as assertCan, Ua as assertConnectionCipherConfigured, Yl as attachAnalyticsMirror, Hr as awaitServerListening, Oa as backoffMs, Co as beginOAuthConnect, Yn as bindConnectionSubject, zr as bindMutation, jr as bindStream, Ar as bindSubscription, Or as bindSubscriptionUntyped, al as buildIvmState, ju as buildPreview, pl as buildRebacInterceptor, hl as buildRebacReadFilter, hr as buildSubjectKey, qr as buildTracingLayer, ci as cachedBackend, Jo as can, Js as cancelWakeup, tl as classifyShape, uo as clearConnectionRefreshFlights, Wo as clearResourcePolicies, i as clearRetentions, Ns as clearSystemStoreHandle, Us as compileCron, wo as completeOAuthConnect, Kl as composeAnalytics, Gl as composeAnalyticsSinks, bo as connectionCallbackPath, Ha as connectionLabel, ir as connectionSubjectsSnapshot, Pl as countRunningWorkflows, Cn as counter, br as currentRoutingContext, dr as currentTraceContext, Bi as dataStoreApiKeyStore, Ci as dataStoreIdempotencyStore, Oi as dataStoreKvStore, vi as decryptField, Xl as defineAggregate, Va as defineConnection, da as defineEventTrigger, Ta as defineOutboxHandler, gl as defineReaction, Vo as defineResourcePolicy, Hs as defineSchedule, Ll as defineSubscriber, Bn as deliveredRowCount, di as deriveKey, Au as diffChange, Na as drainOutbox, tc as dueWakeups, qo as effectiveRelations, fs as emptySchemaRegistry, q as encryptField, ni as envSecretsBackend, no as exchangeAuthorizationCode, cr as externalSpanFromTraceparent, qt as extractDbCause, Ft as fingerprintFor, Qa as forgetCredential, or as formatTraceparent, jc as forwardChangeFromCdc, Vi as frameworkApiKeyStrategy, wn as gauge, Ni as generateApiKeyToken, Oo as getConnectionResolver, Xn as getConnectionSubject, gi as getFieldCipher, Ho as getResourcePolicy, Nn as getRowFilter, Ps as getSystemStoreHandle, Zc as getTimelineRecorder, ts as getTupleSource, $ as groupKeyOf, Tn as histogramMetric, Ou as historyProvenance, li as httpSecretsBackend, Ct as inspectWorkflow, ns as installPolicyGuardResolver, tr as interruptConnectionStreams, Ec as invertChange, Zl as isAggregateDefinition, Jt as isForeignKeyViolation, Dl as isIdleNow, Ir as isInfraError, kc as isSafeToApply, Bs as isScheduleDefinition, fa as isWorkflowEventTriggerDefinition, il as ivmValue, Du as lastWriteProvenance, $a as listConnectionStates, Uo as listResourcePolicies, ee as listRetentions, dl as loadResourceTuples, ml as loadSubjectTuples, Is as localityAwareSelector, Su as makeActionRunner, lc as makeAdvisoryLockCoordinator, fi as makeAesCipher, Ii as makeApiKeyService, Yt as makeAppAccess, ki as makeAsyncKv, ti as makeBufferingSpanProcessor, Wa as makeConnectionRegistry, Ao as makeConnectionResolver, jo as makeConnectionsFacade, hc as makeCoordinatedScheduler, is as makeDataLoader, Lo as makeDisconnectConnectionExecutor, Zi as makeEffectStoreLayer, va as makeEventsFacade, pi as makeFieldCipher, xs as makeFluentStore, Ol as makeIdleGate, sa as makeLazyWorkflowFacade, Po as makeListConnectionsExecutor, gu as makeMutationRunner, Da as makeOutboxFacade, aa as makePostCommitWorkflowFacade, wl as makeProcessAdapter, xu as makeQueryDescriptorProducer, bu as makeQueryReauthorizer, kl as makeRouterActivity, ls as makeSchemaRegistry, Fo as makeStartConnectionExecutor, Io as makeSubmitTokenExecutor, wc as makeUndoCapture, Al as makeWakeGate, Nl as makeWakeProxyServer, ia as makeWorkflowFacade, oa as makeWorkflowFacadeWithCallerContext, ca as makeWorkflowHandlers, la as makeWorkflowLayers, ea as makeWorkflowRunHandle, Ys as markWakeupFired, ol as materializeIvm, Li as memoryApiKeyStore, Rs as memoryReplicationAdapter, mr as memoryRywPositionStore, Ws as nextFiring, nc as nextWakeup, El as nodeProcessSupervisor, Wl as noopAnalytics, ql as noopAnalyticsSpec, Ai as noopKv, Qn as onBindConnectionSubject, wa as outboxAttemptsTable, xa as outboxTable, sr as parseTraceparent, fr as powerOfTwoSelector, Nu as previewInRollback, Ja as projectConnectionState, ic as pruneWakeups, Go as rebacPolicyGraph, yn as recordSample, U as recordSubscriptionActive, xn as recordSubscriptionDelivery, $c as recordTimelineEvent, Kc as redactRow, gr as redisRywPositionStore, Hc as redoUndoInvocation, ro as refreshAccessToken, er as registerConnectionStream, oe as registerRetention, qs as registerWakeup, Qs as releaseWakeup, pr as replicaHealth, ai as resetSecretsBackend, mo as resolveConnection, ko as resolveConnectionForSubject, Ls as resolveCurrentRegion, Xt as resolveDependentTables, So as resolveRedirectUri, cl as resolveRescan, Fn as resolveRowFilterScope, In as resolveRowFilterScopeFor, oi as resolveSecret, si as resolveSecretSync, ui as resolveSecretsBackend, Uc as resolveTimelineMode, ce as retentionTtlMsFromEnv, Jc as reverseEventOverRows, Zo as revokedIds, Fs as runAsSystem, Fl as runOrchestratorTick, au as runProvidedEffect, bl as runReaction, Il as runSingleNodeOrchestrator, Cl as runWakeLoop, hu as runWithDeadlockRetry, yr as runWithRoutingContext, ur as runWithTraceContext, xo as sanitizeRedirectTo, mc as scheduleCoordinated, Do as setConnectionResolver, hi as setFieldCipher, Mn as setRowFilter, ii as setSecretsBackend, Ms as setSystemStoreHandle, Qc as setTimelineRecorderForTest, es as setTupleSource, Mi as sha256Hex, sc as singleCoordinator, Dn as snapshotMetrics, On as snapshotMetricsSync, Vr as startRpcServer, dc as startScheduler, Xa as storeCredential, To as sweepExpiredGrants, de as sweepRetention, Dc as synthesizeInverse, as as tracingHttpClientLayer, ua as triggerWorkflow, Zs as tryClaimWakeup, Zn as unbindConnectionSubject, bc as undoCaptureEnabled, zc as undoLogExecutor, nu as useAggregate, Hl as useAnalytics, Xo as visibleRows, Sl as wakeDueOnce, cu as withRowFilter, Qi as workflowToRpc, Cc as wrapCaptureStore, Ds as wrapStoreWithMixinBehaviour };