@voltro/testing 0.80.0 → 0.82.0

package/dist/index.js

@@ -1,64 +1,68 @@
 import { AUTO_FILLED_COLUMNS as e, allRegisteredTables as t, changeDelete as n, changeInsert as r, changeSoftDelete as i, changeUpdate as a, clearRelationsRegistry as o, missingRequiredColumns as s, registerRelations as c } from "@voltro/database";
 import { Cause as l, Effect as u, Either as d, Exit as f, Layer as p, Schema as m } from "effect";
-import { SubjectService as h, anonymousSubject as g, checkGuardsEffect as _, composeAuthStrategies as v, composeRpcInterceptors as y, eventRoute as b, systemSubject as x, tenantScopedSubject as ee } from "@voltro/protocol";
-import { EventBus as S, InMemoryDataStore as te, NO_ROW_FILTER as C, appValidation as ne, applyRowFilterToDescriptor as re, clearSystemStoreHandle as ie, getRowFilter as w, getSystemStoreHandle as ae, makeAppAccess as oe, makeConnectionState as se, makeDataLoader as ce, makeEffectStoreLayer as T, makeEventPublisher as le, makeFieldCipher as ue, makeOutboxFacade as de, makeSchemaRegistry as fe, publishEvent as pe, resolveRowFilterScopeFor as me, resolveTransactionSubject as he, runProvidedEffect as E, runWithDeadlockRetry as ge, setFieldCipher as _e, setSystemStoreHandle as D, wrapStoreWithMixinBehaviour as O } from "@voltro/runtime";
-import { installEnvSnapshot as ve } from "@voltro/env";
-import ye from "node:net";
-import { describe as be } from "vitest";
-import { collectPublicApiRoutes as xe, dispatchSharedPath as Se, restRoutesToHttpRoutes as Ce } from "@voltro/protocol/rest";
-import { createLogger as we } from "@voltro/logger";
-import { CurrentWorkflowRunId as Te, inMemoryWorkflowEngineLayer as Ee, makeInMemoryRecorder as De } from "@voltro/workflow";
+import { ApiUnavailable as h, SubjectService as g, anonymousSubject as _, checkGuardsEffect as v, composeAuthStrategies as y, composeRpcInterceptors as b, eventRoute as x, systemSubject as S, tenantScopedSubject as ee } from "@voltro/protocol";
+import { EventBus as te, InMemoryDataStore as ne, NO_ROW_FILTER as C, apiBindingTokenEnv as re, apiBindingUrlEnv as ie, appValidation as ae, applyRowFilterToDescriptor as oe, clearSystemStoreHandle as se, getFieldCipher as ce, getRowFilter as w, getSystemStoreHandle as le, makeAppAccess as ue, makeConnectionState as de, makeDataLoader as fe, makeEffectStoreLayer as T, makeEventPublisher as pe, makeFieldCipher as me, makeOutboxFacade as he, makeSchemaRegistry as ge, mintServiceToken as _e, publishEvent as ve, resolveRequestClientAddress as ye, resolveRowFilterScopeFor as be, resolveTransactionSubject as xe, resolveTrustedProxies as Se, runProvidedEffect as E, runWithDeadlockRetry as Ce, serviceCallerTokenEnv as we, setFieldCipher as Te, setSystemStoreHandle as D, wrapStoreWithMixinBehaviour as O } from "@voltro/runtime";
+import { installEnvSnapshot as Ee } from "@voltro/env";
+import k from "node:net";
+import { describe as De } from "vitest";
+import { collectPublicApiRoutes as Oe, dispatchSharedPath as ke, restRoutesToHttpRoutes as Ae } from "@voltro/protocol/rest";
+import { createLogger as je } from "@voltro/logger";
+import { randomBytes as Me } from "node:crypto";
+import { CurrentWorkflowRunId as Ne, getWorkflowJournalCipher as Pe, inMemoryWorkflowEngineLayer as Fe, makeInMemoryRecorder as Ie, setWorkflowJournalCipher as Le } from "@voltro/workflow";
+import { spawn as Re } from "node:child_process";
+import { createRequire as ze } from "node:module";
+import { dirname as Be, join as A } from "node:path";
 //#region src/fixtureRow.ts
-var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
+var Ve = new Set(e), j = 0, M = () => ++j, He = (e, t) => {
 	if (t.oneOf && t.oneOf.length > 0) return t.oneOf[0];
 	if (t.enumValues && t.enumValues.length > 0) return t.enumValues[0];
 	let n = t.unique === !0;
 	switch (t.type) {
 		case "text":
 		case "id":
-		case "enum": return n ? `${e}-${++k}` : e;
-		case "reference": return t.referenceStorage === "numeric" ? n ? ++k : 0 : n ? `${e}-${++k}` : e;
+		case "enum": return n ? `${e}-${++j}` : e;
+		case "reference": return t.referenceStorage === "numeric" ? n ? ++j : 0 : n ? `${e}-${++j}` : e;
 		case "integer":
-		case "real": return n ? ++k : 0;
+		case "real": return n ? ++j : 0;
 		case "decimal":
-		case "bigint": return n ? String(++k) : "0";
+		case "bigint": return n ? String(++j) : "0";
 		case "boolean": return !1;
 		case "timestamp":
 		case "date": return /* @__PURE__ */ new Date(0);
 		default: throw Error(`fixtureRow: column '${e}' is a required '${t.type}' with no default, and fixtureRow can't synthesize a safe placeholder for that type. Pass it explicitly: fixtureRow(table, { ${e}: … }).`);
 	}
-}, j = (e, t = {}) => {
+}, N = (e, t = {}) => {
 	let n = {};
-	for (let r of s(e, t)) Oe.has(r) || (n[r] = ke(r, e.fields[r]));
+	for (let r of s(e, t)) Ve.has(r) || (n[r] = He(r, e.fields[r]));
 	return {
 		...n,
 		...t
 	};
-}, M = m.decodeUnknownEither(m.DateFromString), Ae = /^\d{4}-\d{2}-\d{2}$/, je = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$/, Me = (e, t) => {
-	if (typeof e != "string" || !je.test(e) && !(t === "date" && Ae.test(e))) return !1;
-	let n = e.slice(0, 10), r = M(n);
+}, P = m.decodeUnknownEither(m.DateFromString), Ue = /^\d{4}-\d{2}-\d{2}$/, We = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$/, Ge = (e, t) => {
+	if (typeof e != "string" || !We.test(e) && !(t === "date" && Ue.test(e))) return !1;
+	let n = e.slice(0, 10), r = P(n);
 	return d.isRight(r) && Number.isFinite(r.right.getTime()) && r.right.toISOString().slice(0, 10) === n;
-}, Ne = (e, t) => {
+}, Ke = (e, t) => {
 	let n = Object.entries(e.fields).filter(([, e]) => e.type === "timestamp" || e.type === "date");
 	return t.map((t, r) => {
 		let i = { ...t };
 		for (let [a, o] of n) {
 			let n = t[a];
 			if (n == null || n instanceof Date && Number.isFinite(n.getTime())) continue;
-			let s = M(n);
-			if (!Me(n, o.type) || d.isLeft(s) || !Number.isFinite(s.right.getTime())) throw TypeError(`hydrateFixtureRows: table '${e.tableName}', row ${r}, column '${a}' requires a valid Date or ISO date-time with Z or an offset${o.type === "date" ? " (YYYY-MM-DD is also accepted as UTC midnight)" : ""}.`);
+			let s = P(n);
+			if (!Ge(n, o.type) || d.isLeft(s) || !Number.isFinite(s.right.getTime())) throw TypeError(`hydrateFixtureRows: table '${e.tableName}', row ${r}, column '${a}' requires a valid Date or ISO date-time with Z or an offset${o.type === "date" ? " (YYYY-MM-DD is also accepted as UTC midnight)" : ""}.`);
 			i[a] = s.right;
 		}
 		return i;
 	});
-}, Pe = (e) => {
+}, qe = (e) => {
 	let t = {};
-	for (let [n, r] of Object.entries(e)) t[n] = typeof r == "function" ? r(A()) : r;
+	for (let [n, r] of Object.entries(e)) t[n] = typeof r == "function" ? r(M()) : r;
 	return t;
-}, Fe = (e) => {
+}, Je = (e) => {
 	for (let [t, n] of Object.entries(e.fields)) if (n.type === "id") return t;
 	return "id";
-}, Ie = async (e, t, n, r, i) => {
+}, Ye = async (e, t, n, r, i) => {
 	let a = {};
 	for (let o of s(t, n)) {
 		let n = t.fields[o];
@@ -66,29 +70,29 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 		let s = n.references();
 		if (i.includes(s.tableName)) throw Error(`defineFactory: creating '${t.tableName}' requires '${s.tableName}' via '${o}', and that reference is cyclic (${[...i, s.tableName].join(" → ")}). Insert one side first and pass the id: create(store, { ${o}: existing.id }).`);
 		let c = r[o];
-		a[o] = (c === void 0 ? await N(e, s, {}, {}, [...i, s.tableName]) : await c.create(e, {}))[n.referenceColumn ?? Fe(s)];
+		a[o] = (c === void 0 ? await F(e, s, {}, {}, [...i, s.tableName]) : await c.create(e, {}))[n.referenceColumn ?? Je(s)];
 	}
 	return a;
-}, N = async (e, t, n, r, i) => {
+}, F = async (e, t, n, r, i) => {
 	let a = {
-		...await Ie(e, t, n, r, i),
+		...await Ye(e, t, n, r, i),
 		...n
 	};
-	return e.insert(t.tableName, j(t, a));
-}, P = (e, t) => typeof e == "function" ? e(t) : e ?? {}, Le = (e, t = {}) => {
+	return e.insert(t.tableName, N(t, a));
+}, Xe = (e, t) => typeof e == "function" ? e(t) : e ?? {}, Ze = (e, t = {}) => {
 	let n = t.traits ?? {}, r = t.associations ?? {}, i = (t) => {
 		let a = (e = {}) => ({
-			...Pe(t),
+			...qe(t),
 			...e
-		}), o = (t = {}) => j(e, a(t));
+		}), o = (t = {}) => N(e, a(t));
 		return {
 			table: e,
 			build: o,
-			buildList: (e, t) => Array.from({ length: e }, (e, n) => o(P(t, n))),
-			create: (t, n = {}) => N(t, e, a(n), r, [e.tableName]),
+			buildList: (e, t) => Array.from({ length: e }, (e, n) => o(Xe(t, n))),
+			create: (t, n = {}) => F(t, e, a(n), r, [e.tableName]),
 			createList: async (t, n, i) => {
 				let o = [];
-				for (let s = 0; s < n; s++) o.push(await N(t, e, a(P(i, s)), r, [e.tableName]));
+				for (let s = 0; s < n; s++) o.push(await F(t, e, a(Xe(i, s)), r, [e.tableName]));
 				return o;
 			},
 			with: (...r) => {
@@ -110,19 +114,19 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 		};
 	};
 	return i(t.defaults ?? {});
-}, F = Symbol.for("voltro/testing/mockClock.installed"), I = () => globalThis, Re = (e, t) => new Proxy(e, {
+}, I = Symbol.for("voltro/testing/mockClock.installed"), L = () => globalThis, Qe = (e, t) => new Proxy(e, {
 	construct: (e, n, r) => Reflect.construct(e, n.length === 0 ? [t()] : n, r),
 	apply: () => new e(t()).toString(),
 	get: (e, n, r) => n === "now" ? () => t() : Reflect.get(e, n, r)
-}), L = (e) => {
+}), R = (e) => {
 	if (typeof e == "number") return e;
 	let t = e instanceof Date ? e.getTime() : Date.parse(e);
 	if (Number.isNaN(t)) throw Error(`mockClock: cannot read an instant from '${String(e)}'`);
 	return t;
-}, R = class {
+}, z = class {
 	currentMs;
 	constructor(e = "2026-01-01T00:00:00Z") {
-		this.currentMs = L(e);
+		this.currentMs = R(e);
 	}
 	now() {
 		return this.currentMs;
@@ -131,47 +135,47 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 		return new Date(this.currentMs);
 	}
 	advance(e) {
-		this.currentMs += typeof e == "number" ? e : He(e);
+		this.currentMs += typeof e == "number" ? e : nt(e);
 	}
 	set(e) {
-		this.currentMs = L(e);
+		this.currentMs = R(e);
 	}
 	get installed() {
-		return I()[F]?.clock === this;
+		return L()[I]?.clock === this;
 	}
 	install() {
-		let e = I(), t = e[F];
+		let e = L(), t = e[I];
 		if (t !== void 0) throw Error("mockClock: global time is already faked" + (t.clock === this ? " by this same clock" : " by another MockClock") + ". Uninstall it before installing again — a nested install restores the outer fake on the way out, which leaves the realm frozen with nothing pointing at why. `withFrozenTime` always restores, including on a throw.");
 		let n = globalThis.Date;
-		return e[F] = {
+		return e[I] = {
 			realDate: n,
 			clock: this
-		}, globalThis.Date = Re(n, () => this.currentMs), () => {
+		}, globalThis.Date = Qe(n, () => this.currentMs), () => {
 			this.uninstall();
 		};
 	}
 	uninstall() {
-		let e = I(), t = e[F];
-		t !== void 0 && t.clock === this && (globalThis.Date = t.realDate, delete e[F]);
+		let e = L(), t = e[I];
+		t !== void 0 && t.clock === this && (globalThis.Date = t.realDate, delete e[I]);
 	}
-}, ze = (e) => typeof e == "object" && !!e && typeof e.then == "function", Be = (e, t) => {
-	let n = e instanceof R ? e : new R(e);
+}, $e = (e) => typeof e == "object" && !!e && typeof e.then == "function", et = (e, t) => {
+	let n = e instanceof z ? e : new z(e);
 	n.install();
 	let r = !1;
 	try {
 		let e = t(n);
-		return ze(e) ? (r = !0, e.then((e) => (n.uninstall(), e), (e) => {
+		return $e(e) ? (r = !0, e.then((e) => (n.uninstall(), e), (e) => {
 			throw n.uninstall(), e;
 		})) : e;
 	} finally {
 		r || n.uninstall();
 	}
-}, Ve = (e) => u.acquireRelease(u.sync(() => {
-	let t = e instanceof R ? e : new R(e);
+}, tt = (e) => u.acquireRelease(u.sync(() => {
+	let t = e instanceof z ? e : new z(e);
 	return t.install(), t;
 }), (e) => u.sync(() => {
 	e.uninstall();
-})), He = (e) => {
+})), nt = (e) => {
 	let t = /^\s*(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)\s*$/.exec(e);
 	if (!t) throw Error(`mockClock: cannot parse duration '${e}'`);
 	let n = Number(t[1]), r = t[2];
@@ -183,16 +187,19 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 		case "d": return n * 864e5;
 		default: throw Error(`mockClock: unknown unit '${r}'`);
 	}
-}, z = class {
+}, B = class {
 	emitted = [];
 	async emit(e, t) {
-		let n = typeof e == "string" ? e : e.id ?? e.event ?? "(unnamed event)";
+		let n = typeof e == "string" ? e : e.name ?? e.id ?? e.event ?? "(unnamed event)";
 		return this.emitted.push({
 			event: n,
 			payload: t,
 			emittedAt: /* @__PURE__ */ new Date()
 		}), { delivered: 0 };
 	}
+	async listTargets(e, t) {
+		return [];
+	}
 	payloadsFor(e) {
 		return this.emitted.filter((t) => t.event === e).map((e) => e.payload);
 	}
@@ -202,14 +209,14 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 	clear() {
 		this.emitted.length = 0;
 	}
-}, B = (e = {}) => {
-	let t = e.tenantId ?? null, n = new S({
+}, V = (e = {}) => {
+	let t = e.tenantId ?? null, n = new te({
 		origin: e.origin ?? "test",
 		...e.ringSize === void 0 ? {} : { ringSize: e.ringSize }
 	});
 	return {
 		publish: async (e, r, i) => {
-			let a = await u.runPromise(u.either(pe({
+			let a = await u.runPromise(u.either(ve({
 				bus: n,
 				tenantId: t
 			}, e, r, i)));
@@ -258,7 +265,7 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 		},
 		skipSerials: (e, r, i, a) => {
 			let o = a?.tenantId ?? t, s = {
-				route: b(o, e.name, r),
+				route: x(o, e.name, r),
 				event: e.name,
 				origin: "test-gap",
 				n: i + 1,
@@ -272,7 +279,7 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 			n.clear();
 		}
 	};
-}, V = class {
+}, H = class {
 	queue;
 	calls = [];
 	constructor(e) {
@@ -287,38 +294,41 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 	remaining() {
 		return this.queue.length;
 	}
-}, Ue = (e) => e, H = "00000000000000000000000000000000", U = /* @__PURE__ */ new WeakMap(), W = /* @__PURE__ */ new WeakMap(), We = (e, t) => {
-	let n = W.get(e);
+}, rt = (e) => e, U = "00000000000000000000000000000000", W = /* @__PURE__ */ new WeakMap(), G = /* @__PURE__ */ new WeakMap(), it = (e, t) => {
+	let n = G.get(e);
 	if (n === void 0) throw Error("withRpcConnection requires a context created by makeTestContext");
 	return n(t);
-}, G = /* @__PURE__ */ new WeakMap(), K = /* @__PURE__ */ new WeakMap(), q = /* @__PURE__ */ new WeakMap(), J = (e) => q.get(e) ?? [], Y = /* @__PURE__ */ new WeakMap(), X = (e, t) => {
-	Y.set(e, { publicApi: t });
-}, Ge = (e) => Y.get(e), Ke = /* @__PURE__ */ new WeakMap(), qe = (e, t) => {
-	let n = q.get(e) ?? [], r = t === "mutation" ? "interceptMutation" : t === "query" ? "interceptQuery" : "interceptAction", i = [];
+}, K = /* @__PURE__ */ new WeakMap(), q = /* @__PURE__ */ new WeakMap(), J = /* @__PURE__ */ new WeakMap(), Y = (e) => J.get(e) ?? [], X = /* @__PURE__ */ new WeakMap(), Z = (e, t, n) => {
+	X.set(e, {
+		publicApi: t,
+		...n === void 0 ? {} : { remoteAddr: n }
+	});
+}, at = (e) => X.get(e), ot = /* @__PURE__ */ new WeakMap(), st = (e, t) => {
+	let n = J.get(e) ?? [], r = t === "mutation" ? "interceptMutation" : t === "query" ? "interceptQuery" : "interceptAction", i = [];
 	for (let e of n) {
 		let t = e[r];
 		typeof t == "function" && i.push(t);
 	}
-	return y(i);
-}, Je = (e) => {
-	let t = (q.get(e) ?? []).map((e) => e.services).filter((e) => e !== void 0), n = Ke.get(e) ?? [], r = [...t, ...n];
+	return b(i);
+}, ct = (e) => {
+	let t = (J.get(e) ?? []).map((e) => e.services).filter((e) => e !== void 0), n = ot.get(e) ?? [], r = [...t, ...n];
 	if (r.length !== 0) return p.mergeAll(...r);
-}, Ye = (e) => {
-	let t = G.get(e);
+}, lt = (e) => {
+	let t = K.get(e);
 	t !== void 0 && (t.length = 0);
-}, Z = async (e) => {
-	let t = G.get(e);
+}, Q = async (e) => {
+	let t = K.get(e);
 	if (t === void 0 || t.length === 0) return;
 	let n = [...t];
 	t.length = 0;
 	for (let e of n) await e();
-}, Xe = (e) => K.get(e) ?? [], Ze = async (e, t) => {
-	let n = U.get(e);
+}, ut = (e) => q.get(e) ?? [], dt = async (e, t) => {
+	let n = W.get(e);
 	return n === void 0 ? e.store.transactional(async (n) => t({
 		...e,
 		store: n
 	})) : n(t);
-}, Qe = (e) => {
+}, ft = (e) => {
 	let t = /* @__PURE__ */ new Map(), n = /* @__PURE__ */ new Map(), r = (n) => {
 		let r = t.get(n);
 		return r === void 0 ? !1 : r.expiresAt !== null && r.expiresAt <= e() ? (t.delete(n), !1) : !0;
@@ -357,7 +367,7 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 			return i(e, o, n.ttlMs, n.tags), o;
 		}
 	};
-}, $e = (e) => {
+}, pt = (e) => {
 	let t = /* @__PURE__ */ new Map(), n = (n) => {
 		let r = t.get(n);
 		return r === void 0 ? !1 : r.expiresAt !== null && r.expiresAt <= e() ? (t.delete(n), !1) : !0;
@@ -385,47 +395,49 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 			t.clear();
 		}
 	};
-}, et = async (e, t) => {
-	let n = ae();
+}, mt = async (e, t) => {
+	let n = le();
 	D(e);
 	try {
 		return await t();
 	} finally {
-		n === void 0 ? ie() : D(n);
+		n === void 0 ? se() : D(n);
 	}
-}, tt = /* @__PURE__ */ new Set(), nt = (e) => {
-	tt.has(e) || (tt.add(e), console.warn(e));
-}, rt = (e, t, n) => {
-	let r = it, i;
+}, ht = /* @__PURE__ */ new Set(), gt = (e) => {
+	ht.has(e) || (ht.add(e), console.warn(e));
+}, _t = (e, t, n) => {
+	let r = vt, i;
 	return () => {
 		let a = t ?? w();
-		return t !== void 0 && w() !== void 0 && t !== w() && nt("[voltro:testing] this test passes `rowFilter:` while a DIFFERENT filter is registered via `setRowFilter`. The option wins, so this test does not exercise your app's registration. Drop `rowFilter:` to run the real process-global one."), (i === void 0 || a !== r) && (r = a, i = et(n, () => E(me(a, e, (e) => {
+		return t !== void 0 && w() !== void 0 && t !== w() && gt("[voltro:testing] this test passes `rowFilter:` while a DIFFERENT filter is registered via `setRowFilter`. The option wins, so this test does not exercise your app's registration. Drop `rowFilter:` to run the real process-global one."), (i === void 0 || a !== r) && (r = a, i = mt(n, () => E(be(a, e, (e) => {
 			console.error("[voltro:testing] row filter failed to load — reads refused for this subject", e);
 		})))), i;
 	};
-}, it = Symbol("unresolved"), at = (e, t) => new Proxy(e, { get: (e, n) => {
-	if (n === "query") return async (n) => e.query(re(await t(), n));
+}, vt = Symbol("unresolved"), yt = (e, t) => new Proxy(e, { get: (e, n) => {
+	if (n === "query") return async (n) => e.query(oe(await t(), n));
 	let r = Reflect.get(e, n, e);
 	return typeof r == "function" ? r.bind(e) : r;
-} }), ot = (e = {}) => {
-	if (ve({
+} }), bt = (e = {}) => {
+	if (Ee({
 		...process.env,
 		...e.env ?? {}
-	}), e.fieldEncryptionKey !== void 0 && _e(ue(e.fieldEncryptionKey)), e.relations !== void 0) {
+	}), e.fieldEncryptionKey !== void 0 && Te(me(e.fieldEncryptionKey)), e.relations !== void 0) {
 		o();
 		for (let t of e.relations) c(t);
 	}
-	let n = e.tables ?? t(), r = fe(n), i = new te(e.store ?? {}), a = {
+	let n = e.tables ?? t(), r = ge(n), i = new ne(e.store ?? {});
+	for (let t of e.plugins ?? []) t.bindDataStore?.(i);
+	let a = {
 		dataStore: i,
 		schemaRegistry: r
 	};
 	D(a);
-	let s = new R(e.clockStart), l = new z(), u = B(), d = new V(e.llmResponses ?? []), f = Qe(() => s.now()), p = $e(() => s.now()), m = (t, n, o = i, c, h = !1) => {
+	let s = new z(e.clockStart), l = new B(), u = V(), d = new H(e.llmResponses ?? []), f = ft(() => s.now()), p = pt(() => s.now()), m = (t, n, o = i, c, h = !1) => {
 		let g = {
 			subject: t,
-			traceId: H,
+			traceId: U,
 			...n === void 0 ? {} : { connection: n }
-		}, _ = c?.queued ?? [], v = c?.nudges ?? [], y = le({
+		}, _ = c?.queued ?? [], v = c?.nudges ?? [], y = pe({
 			bus: u.bus,
 			tenantId: t.tenantId ?? null,
 			...o === i ? {} : { deferToCommit: (e) => {
@@ -433,9 +445,10 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 					e();
 				});
 			} }
-		}), b = ce({ store: o }), x = h ? async () => C : rt(t, e.rowFilter, a), S = {
+		}), b = fe({ store: o }), x = h ? async () => C : _t(t, e.rowFilter, a), S = {
+			apis: e.apis ?? Object.freeze({}),
 			transaction: async (e, r) => {
-				let a = he(t, r?.tenantId, o !== i);
+				let a = xe(t, r?.tenantId, o !== i);
 				if (a !== t) return m(a, n, i, void 0, !0).transaction(e);
 				if (o !== i) return e(S);
 				let s, c = await o.transactional(async (r) => {
@@ -445,7 +458,7 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 					}, h), a = await e(i);
 					return s = i, a;
 				});
-				return s !== void 0 && (await Z(s), v.push(...Xe(s))), c;
+				return s !== void 0 && (await Q(s), v.push(...ut(s))), c;
 			},
 			clock: s,
 			webhooks: l,
@@ -454,29 +467,29 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 			llm: d,
 			...e.ai === void 0 ? {} : { ai: e.ai },
 			request: g,
-			...n === void 0 ? {} : { connectionState: se(n, o === i ? void 0 : (e) => {
+			...n === void 0 ? {} : { connectionState: de(n, o === i ? void 0 : (e) => {
 				_.push(e);
 			}) },
-			validation: ne,
-			access: oe(t),
+			validation: ae,
+			access: ue(t),
 			cache: f,
 			kv: p,
-			store: O(at(o, x), {
+			store: O(yt(o, x), {
 				subject: t,
 				schemaRegistry: r,
 				rowFilter: C
 			}),
-			storeForTenant: (e) => O(at(o, x), {
+			storeForTenant: (e) => O(yt(o, x), {
 				subject: ee(t, e),
 				schemaRegistry: r,
 				rowFilter: C
 			}),
-			outbox: de({
+			outbox: he({
 				store: o,
 				subject: t,
-				traceId: H,
+				traceId: U,
 				nudge: () => {
-					v.push(H);
+					v.push(U);
 				},
 				afterCommit: (e) => {
 					_.push(e);
@@ -507,37 +520,37 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 				nudges: v
 			})
 		};
-		return G.set(S, _), W.set(S, (e) => m(t, e, o, {
+		return K.set(S, _), G.set(S, (e) => m(t, e, o, {
 			queued: _,
 			nudges: v
-		})), K.set(S, v), q.set(S, e.plugins ?? []), Ke.set(S, e.layers ?? []), U.set(S, (e) => o.transactional((r) => e(m(t, n, r, {
+		})), q.set(S, v), J.set(S, e.plugins ?? []), ot.set(S, e.layers ?? []), W.set(S, (e) => o.transactional((r) => e(m(t, n, r, {
 			queued: _,
 			nudges: v
 		})))), S;
 	};
-	return m(e.subject ?? g(null), e.connection);
-}, st = (e, t) => {
-	let n = Je(t);
-	return (n === void 0 ? e : u.provide(e, n)).pipe(u.provide(T(t.store)), u.provideService(h, t.request.subject));
-}, ct = async (e, t, n, r) => {
+	return m(e.subject ?? _(null), e.connection);
+}, xt = (e, t) => {
+	let n = ct(t);
+	return (n === void 0 ? e : u.provide(e, n)).pipe(u.provide(T(t.store)), u.provideService(g, t.request.subject));
+}, St = async (e, t, n, r) => {
 	let i = e.input, a = await m.decodeUnknownPromise(i)(n), o = e.kind, s = async (e) => {
 		let n = t(a, e);
-		return u.isEffect(n) ? E(st(n, e)) : n;
+		return u.isEffect(n) ? E(xt(n, e)) : n;
 	}, c = async () => {
 		let t = e.guards;
 		if (t !== void 0 && t.length > 0) {
-			let e = await u.runPromise(_(r.request.subject, t, a));
+			let e = await u.runPromise(v(r.request.subject, t, a));
 			if (e !== null) throw e;
 		}
 		if (o !== "mutation") return s(r);
-		let n = await ge(async () => Ze(r, async (e) => (Ye(r), s(e))), { delay: () => Promise.resolve() });
-		return await Z(r), n;
-	}, d = o === "mutation" || o === "query" || o === "action" ? o : void 0, p = d === void 0 ? void 0 : qe(r, d);
+		let n = await Ce(async () => dt(r, async (e) => (lt(r), s(e))), { delay: () => Promise.resolve() });
+		return await Q(r), n;
+	}, d = o === "mutation" || o === "query" || o === "action" ? o : void 0, p = d === void 0 ? void 0 : st(r, d);
 	if (p === void 0 || d === void 0) return await c();
 	let h = u.tryPromise({
 		try: () => c(),
 		catch: (e) => e
-	}), g = Ge(r), v = p(h, {
+	}), g = at(r), _ = p(h, {
 		tag: e.name ?? "",
 		kind: d,
 		input: a,
@@ -547,16 +560,17 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 		...g === void 0 ? {} : {
 			surface: "rest",
 			publicApi: g.publicApi
-		}
-	}), y = await u.runPromiseExit(v);
+		},
+		...g?.remoteAddr === void 0 ? {} : { remoteAddr: g.remoteAddr }
+	}), y = await u.runPromiseExit(_);
 	if (f.isSuccess(y)) return y.value;
 	throw l.squash(y.cause);
-}, lt = (e) => new Promise((t) => {
-	let n = new ye.Socket(), r = (e) => {
+}, Ct = (e) => new Promise((t) => {
+	let n = new k.Socket(), r = (e) => {
 		clearTimeout(i), n.destroy(), t(e);
 	}, i = setTimeout(() => r(!1), e.timeoutMs ?? 750);
 	n.once("connect", () => r(!0)), n.once("error", () => r(!1)), n.connect(e.port, e.host);
-}), ut = async (e, t, n, r) => {
+}), wt = async (e, t, n, r) => {
 	if (typeof t != "string" || typeof n != "function" || typeof r != "function") throw TypeError(`describeIfAvailable('${e}', ...): expected (label, dependency, probe, suite) — got dependency: ${typeof t}, probe: ${typeof n}, suite: ${typeof r}. Three arguments means the suite body is being used as the probe: it would run at file scope, unconditionally, and the skip would silently do nothing.`);
 	let i = !1;
 	try {
@@ -564,21 +578,21 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 	} catch {
 		i = !1;
 	}
-	be.skipIf(!i)(i ? e : `${e} [SKIPPED: needs ${t}]`, r);
-}, dt = async (e, t, n) => {
-	await ut(e, `${t.name} at ${t.host}:${t.port}`, () => lt(t), n);
-}, ft = async (e, t) => {
+	De.skipIf(!i)(i ? e : `${e} [SKIPPED: needs ${t}]`, r);
+}, Tt = async (e, t, n) => {
+	await wt(e, `${t.name} at ${t.host}:${t.port}`, () => Ct(t), n);
+}, Et = async (e, t) => {
 	try {
 		let n = await t();
 		n !== void 0 && n !== "" && console.log(`[engine] ${e}: ${n}`);
 	} catch {}
-}, pt = "test-tenant", Q = (e, t, n) => ({
+}, Dt = "test-tenant", $ = (e, t, n) => ({
 	type: e,
 	id: t,
 	tenantId: n.tenantId ?? "test-tenant",
 	scopes: n.scopes ?? [],
 	...n.metadata === void 0 ? {} : { metadata: n.metadata }
-}), mt = (e, t = {}) => Q("user", e, t), ht = (e, t = {}) => Q("apiKey", e, t), gt = (e, t = {}) => Q("serviceAccount", e, t), _t = (e = null) => g(e), vt = (e = "job:test", t) => t === void 0 ? x(e) : x(e, t), yt = (e) => {
+}), Ot = (e, t = {}) => $("user", e, t), kt = (e, t = {}) => $("apiKey", e, t), At = (e, t = {}) => $("serviceAccount", e, t), jt = (e = null) => _(e), Mt = (e = "job:test", t) => t === void 0 ? S(e) : S(e, t), Nt = "127.0.0.1", Pt = (e) => {
 	let t = e.indexOf("?");
 	return t === -1 ? {
 		path: e,
@@ -587,105 +601,110 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 		path: e.slice(0, t),
 		query: e.slice(t + 1)
 	};
-}, bt = (e, t) => {
+}, Ft = (e, t) => {
 	let n = e.split("/").filter((e) => e.length > 0), r = t.split("/").filter((e) => e.length > 0);
 	return n.length === r.length && n.every((e, t) => e.startsWith(":") || e === r[t]);
-}, $ = (e) => {
+}, It = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n.toLowerCase()] = r;
 	return t;
-}, xt = (e) => e === void 0 ? /* @__PURE__ */ new Uint8Array() : new TextEncoder().encode(JSON.stringify(e)), St = (e) => e === void 0 ? "" : typeof e == "string" ? e : new TextDecoder().decode(e), Ct = (e) => {
-	let { ctx: t } = e, n = xe((e.publicApi ?? []).map((e) => ({
+}, Lt = (e) => e === void 0 ? /* @__PURE__ */ new Uint8Array() : new TextEncoder().encode(JSON.stringify(e)), Rt = (e) => e === void 0 ? "" : typeof e == "string" ? e : new TextDecoder().decode(e), zt = (e) => {
+	let t = Se(e.security?.trustedProxies, process.env, e.security?.clientAddressHeader), { ctx: n } = e, r = Oe((e.publicApi ?? []).map((e) => ({
 		descriptor: e.descriptor,
-		invoke: (n, r) => t.withSubject(r.subject, (t) => (e.descriptor.publicApi !== void 0 && X(t, e.descriptor.publicApi), ct(e.descriptor, e.handler, n, t)))
+		invoke: (t, r) => n.withSubject(r.subject, (n) => (e.descriptor.publicApi !== void 0 && Z(n, e.descriptor.publicApi, r.remoteAddr), St(e.descriptor, e.handler, t, n)))
 	})), {
-		pluginErrors: J(t).flatMap((e) => e.errorSchemas ?? []),
+		pluginErrors: Y(n).flatMap((e) => e.errorSchemas ?? []),
 		...e.publicApiProfile === void 0 ? {} : { profile: e.publicApiProfile }
-	}), r = [...e.restRoutes ?? [], ...n], i = v(e.strategies ?? [], {
-		...e.anonymousTenantRequired === void 0 ? {} : { anonymousTenantRequired: e.anonymousTenantRequired },
-		getStore: () => t.store
-	}), a = (n, o) => {
-		let s = {
-			store: t.store,
-			buildContext: () => t,
-			resolveSubject: n === void 0 ? async (e) => (await i({
+	}), i = [...e.restRoutes ?? [], ...r], a = y(e.strategies ?? [], {
+		anonymous: e.anonymous ?? { headerOrTenant: "acme" },
+		getStore: () => n.store
+	}), o = (r, s) => {
+		let c = {
+			store: n.store,
+			buildContext: () => n,
+			resolveSubject: r === void 0 ? async (e) => (await a({
 				headers: e,
 				clientId: -1
-			})).subject : () => n,
+			})).subject : () => r,
 			...e.idempotency === void 0 ? {} : { idempotency: e.idempotency }
-		}, c = Ce(r, s).map((e, t) => ({
-			pattern: r[t].path,
+		}, l = Ae(i, c).map((e, t) => ({
+			pattern: i[t].path,
 			route: e
-		})), l = async (e, n, i = {}) => {
-			let { path: a, query: s } = yt(n), l = c.filter((e) => bt(e.pattern, a)).map((e) => e.route);
-			if (l.length === 0) return {
+		})), u = async (e, r, a = {}) => {
+			let { path: o, query: c } = Pt(r), u = l.filter((e) => Ft(e.pattern, o)).map((e) => e.route);
+			if (u.length === 0) return {
 				status: 404,
 				headers: {},
 				text: "",
 				body: {
 					error: "No route mounted for this path",
-					mounted: r.map((e) => e.path)
+					mounted: i.map((e) => e.path)
 				},
 				stream: !1
 			};
-			let u = {
+			let d = {
+				...It(s),
+				...It(a.headers ?? {})
+			}, f = ye({
+				socketAddress: a.remoteAddr ?? Nt,
+				headers: d,
+				config: t
+			}), p = {
 				method: e.toUpperCase(),
-				path: a,
-				query: s,
-				headers: {
-					...$(o),
-					...$(i.headers ?? {})
-				},
-				rawBody: xt(i.body),
-				store: t.store
-			}, d = await Se(l, u), f = {};
-			for (let [e, t] of Object.entries(d.headers ?? {})) f[e.toLowerCase()] = t;
-			d.contentType !== void 0 && (f["content-type"] = d.contentType);
-			let p = St(d.body), m = (d.contentType ?? "").includes("json");
+				path: o,
+				query: c,
+				headers: d,
+				rawBody: Lt(a.body),
+				store: n.store,
+				...f === void 0 ? {} : { remoteAddr: f }
+			}, m = await ke(u, p), h = {};
+			for (let [e, t] of Object.entries(m.headers ?? {})) h[e.toLowerCase()] = t;
+			m.contentType !== void 0 && (h["content-type"] = m.contentType);
+			let g = Rt(m.body), _ = (m.contentType ?? "").includes("json");
 			return {
-				status: d.status,
-				headers: f,
-				text: p,
-				body: m && p !== "" ? JSON.parse(p) : void 0,
-				stream: d.stream !== void 0
+				status: m.status,
+				headers: h,
+				text: g,
+				body: _ && g !== "" ? JSON.parse(g) : void 0,
+				stream: m.stream !== void 0
 			};
 		};
 		return {
-			actingAs: (e) => a(e, o),
-			withHeaders: (e) => a(n, {
-				...o,
+			actingAs: (e) => o(e, s),
+			withHeaders: (e) => o(r, {
+				...s,
 				...e
 			}),
-			get: (e, t) => l("GET", e, t ?? {}),
-			delete: (e, t) => l("DELETE", e, t ?? {}),
-			post: (e, t, n) => l("POST", e, {
+			get: (e, t) => u("GET", e, t ?? {}),
+			delete: (e, t) => u("DELETE", e, t ?? {}),
+			post: (e, t, n) => u("POST", e, {
 				...n ?? {},
 				body: t
 			}),
-			put: (e, t, n) => l("PUT", e, {
+			put: (e, t, n) => u("PUT", e, {
 				...n ?? {},
 				body: t
 			}),
-			patch: (e, t, n) => l("PATCH", e, {
+			patch: (e, t, n) => u("PATCH", e, {
 				...n ?? {},
 				body: t
 			}),
-			request: (e, t, n) => l(e, t, n ?? {}),
-			paths: r.map((e) => e.path)
+			request: (e, t, n) => u(e, t, n ?? {}),
+			paths: i.map((e) => e.path)
 		};
 	};
-	return a(void 0, {});
-}, wt = (e = {}) => {
+	return o(void 0, {});
+}, Bt = (e = {}) => {
 	let t = e.id ?? "test", n = e.store ?? new Proxy({}, { get: (e, t) => {
 		throw Error(`makeSubscribeContext: this subscriber reached ctx.store.${String(t)} and the test passed no store. Pass \`{ store: makeTestContext().store }\` so the subscriber and the code under test share one — an empty stand-in would let a read of the wrong table pass.`);
 	} });
 	return {
 		id: t,
-		log: e.log ?? we({ scope: `subscribe:${t}` }),
+		log: e.log ?? je({ scope: `subscribe:${t}` }),
 		store: n,
 		...e.publish === void 0 ? {} : { publish: e.publish }
 	};
-}, Tt = (e) => {
+}, Vt = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = t.get(n.stepName);
@@ -711,13 +730,18 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 		});
 	}
 	return n.sort((e, t) => e._startedAt - t._startedAt), n.map(({ _startedAt: e, ...t }) => t);
-}, Et = (e) => {
+}, Ht = () => {
+	if (Pe() !== void 0) return;
+	let e = me(Me(32).toString("hex"));
+	Le(() => ce() ?? e);
+}, Ut = (e) => {
+	Ht();
 	let t = e.workflows ?? [], n = /* @__PURE__ */ new Map(), r = 0;
 	return {
 		start: async (i, a) => {
 			let o = t.find((e) => e.workflow.name === i);
 			if (o === void 0) throw Error(`makeWorkflowRunner: no workflow named '${i}' — pass it in makeWorkflowRunner({ ctx, workflows: [{ workflow, execute }] }).`);
-			let s = `wfrun_test_${++r}`, c = De(), l = o.workflow.toLayer(o.execute).pipe(p.provideMerge(Ee)), d = /* @__PURE__ */ new Date(), f = o.workflow.execute(a).pipe(u.locally(Te, s), u.provide(c.layer), u.provide(l)), m = (e.ctx.store === void 0 ? f : u.provide(f, T(e.ctx.store))).pipe(u.either), h = await u.runPromise(m), g = Tt(c.readSteps()), _ = /* @__PURE__ */ new Date(), v;
+			let s = `wfrun_test_${++r}`, c = Ie(), l = o.workflow.toLayer(o.execute).pipe(p.provideMerge(Fe)), d = /* @__PURE__ */ new Date(), f = o.workflow.execute(a).pipe(u.locally(Ne, s), u.provide(c.layer), u.provide(l)), m = (e.ctx.store === void 0 ? f : u.provide(f, T(e.ctx.store))).pipe(u.either), h = await u.runPromise(m), g = Vt(c.readSteps()), _ = /* @__PURE__ */ new Date(), v;
 			if (h._tag === "Right") v = {
 				status: "succeeded",
 				output: h.right,
@@ -757,6 +781,154 @@ var Oe = new Set(e), k = 0, A = () => ++k, ke = (e, t) => {
 		},
 		inspect: async (e) => n.get(e) ?? null
 	};
-}, Dt = 1;
+}, Wt = (e, t, n = {}) => {
+	let r = n.name ?? "mock", i = [], a = /* @__PURE__ */ new Map(), o = (e, t) => `${e}\u0000${JSON.stringify(t)}`, s = async (n, a, o) => {
+		let s = e[n];
+		if (s === void 0) throw Error(`makeServiceApiMock: '${n}' is not a service procedure of this api`);
+		let c = s.input, l = m.encodeUnknownSync(c)(a), u = m.decodeUnknownSync(c)(l);
+		i.push({
+			tag: n,
+			input: u,
+			idempotencyKey: o?.idempotencyKey
+		});
+		let d = t[n];
+		if (d === void 0) throw new h({
+			api: r,
+			tag: n,
+			reason: "transport",
+			message: "no handler in makeServiceApiMock"
+		});
+		let f = await d(u), p = s.output;
+		return m.decodeUnknownSync(p)(m.encodeUnknownSync(p)(f));
+	}, c = (e) => {
+		let t = e.join("."), n = Object.assign((e, n) => s(t, e, n), {
+			effect: (e, n) => u.tryPromise({
+				try: () => s(t, e, n),
+				catch: (e) => e
+			}),
+			subscribe: (e, n) => {
+				let r = o(t, e), i = a.get(r) ?? /* @__PURE__ */ new Set();
+				return a.set(r, i), i.add(n.onValue), s(t, e).then(n.onValue, (e) => n.onError?.(e)), { unsubscribe: () => {
+					i.delete(n.onValue);
+				} };
+			}
+		});
+		return new Proxy(n, { get: (t, n) => {
+			if (typeof n == "string") {
+				if (n === "effect" || n === "subscribe") return t[n];
+				if (n !== "then") return c([...e, n]);
+			}
+		} });
+	};
+	return {
+		api: new Proxy({}, { get: (e, t) => typeof t == "string" && t !== "then" ? c([t]) : void 0 }),
+		calls: (e) => e === void 0 ? [...i] : i.filter((t) => t.tag === e),
+		emit: (t, n, r) => {
+			let i = e[t], s = i === void 0 ? r : m.decodeUnknownSync(i.output)(m.encodeUnknownSync(i.output)(r));
+			for (let e of a.get(o(t, n)) ?? []) e(s);
+		}
+	};
+}, Gt = () => new Promise((e, t) => {
+	let n = k.createServer();
+	n.once("error", t), n.listen(0, "127.0.0.1", () => {
+		let t = n.address(), r = typeof t == "object" && t ? t.port : 0;
+		n.close(() => e(r));
+	});
+}), Kt = async (e) => {
+	try {
+		return (await fetch(`http://127.0.0.1:${e}/internal/readiness`)).status === 200;
+	} catch {
+		return !1;
+	}
+}, qt = (e) => A(Be(ze(A(e, "package.json")).resolve("@voltro/cli/package.json")), "bin", "voltro.mjs"), Jt = 1e4, Yt = (e) => new Promise((t) => {
+	if (e.exitCode !== null || e.signalCode !== null) return t();
+	let n = setTimeout(() => {
+		e.kill("SIGKILL");
+	}, Jt);
+	e.once("exit", () => {
+		clearTimeout(n), t();
+	}), e.kill("SIGTERM");
+}), Xt = async (e) => {
+	let t = Object.keys(e.apps);
+	if (t.length === 0) throw Error("startTestApps: no apps given");
+	let n = e.mode ?? "dev", r = e.bootTimeoutMs ?? 3e5, i = e.cli ?? qt(e.apps[t[0]].root), a = /* @__PURE__ */ new Map();
+	for (let e of t) a.set(e, await Gt());
+	let o = /* @__PURE__ */ new Map(), s = new Map(t.map((e) => [e, {}]));
+	for (let n of e.edges ?? []) {
+		for (let e of [n.caller, n.callee]) if (!t.includes(e)) throw Error(`startTestApps: edge names '${e}', which is not among the apps (${t.join(", ")})`);
+		let e = _e();
+		o.set(`${n.caller}\u0000${n.callee}`, e), Object.assign(s.get(n.caller), {
+			[re(n.binding)]: e,
+			[ie(n.binding)]: `ws://127.0.0.1:${a.get(n.callee)}/ws`
+		}), Object.assign(s.get(n.callee), { [we(n.caller)]: e });
+	}
+	let c = [], l = /* @__PURE__ */ new Set(), u = (t) => {
+		if (!c.includes(t)) {
+			if (l.has(t)) throw Error(`startTestApps: the edges form a cycle through '${t}' — no app can boot first`);
+			l.add(t);
+			for (let n of e.edges ?? []) n.caller === t && u(n.callee);
+			l.delete(t), c.push(t);
+		}
+	};
+	for (let e of t) u(e);
+	let d = [], f = /* @__PURE__ */ new Map(), p = async () => {
+		await Promise.all(d.map(Yt));
+	};
+	for (let t of c) {
+		let o = e.apps[t], c = a.get(t), l = "", u = Re(process.execPath, [
+			i,
+			n,
+			...n === "serve" ? ["."] : []
+		], {
+			cwd: o.root,
+			env: {
+				...process.env,
+				...n === "serve" ? { VOLTRO_SESSION_SECRET: Me(32).toString("base64url") } : {},
+				...o.env,
+				...s.get(t),
+				PORT: String(c)
+			},
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		d.push(u), u.stdout?.on("data", (e) => {
+			l += e.toString();
+		}), u.stderr?.on("data", (e) => {
+			l += e.toString();
+		}), u.on("exit", (e, t) => {
+			l += `\n[exited] code=${String(e)} signal=${String(t)}`;
+		});
+		let m = {
+			name: t,
+			port: c,
+			url: `http://127.0.0.1:${c}`,
+			wsUrl: `ws://127.0.0.1:${c}/ws`,
+			log: () => l,
+			stop: () => Yt(u)
+		};
+		f.set(t, m);
+		let h = Date.now() + r;
+		for (; !await Kt(c);) {
+			if (u.exitCode !== null || u.signalCode !== null || Date.now() > h) {
+				await p();
+				let e = u.exitCode !== null || u.signalCode !== null ? "exited before it was ready" : `was not ready within ${r} ms`;
+				throw Error(`startTestApps: '${t}' ${e}\n${m.log().slice(-4e3)}`);
+			}
+			await new Promise((e) => setTimeout(e, 250));
+		}
+	}
+	return {
+		apps: Object.fromEntries(f),
+		token: (e, t) => {
+			let n = o.get(`${e}\u0000${t}`);
+			if (n === void 0) throw Error(`startTestApps: no edge ${e} → ${t}`);
+			return n;
+		},
+		stop: p
+	};
+}, Zt = 1;
 //#endregion
-export { R as MockClock, V as MockLLM, z as MockWebhooks, Dt as TESTING_PRESET_VERSION, pt as TEST_TENANT_ID, _t as anonymous, ht as apiKey, n as changeDelete, r as changeInsert, i as changeSoftDelete, a as changeUpdate, Le as defineFactory, ut as describeIfAvailable, dt as describeIfReachable, j as fixtureRow, Ve as frozenTime, Ne as hydrateFixtureRows, ct as invoke, lt as isTcpReachable, wt as makeSubscribeContext, Ct as makeTestApp, ot as makeTestContext, Et as makeWorkflowRunner, X as markRestInvocation, Ue as mockStore, A as nextSequence, Xe as outboxNudgesOf, J as pluginsOf, ft as reportEngineVersion, Ye as resetAfterCommit, Ge as restInvocationOf, qe as rpcInterceptorFor, Z as runAfterCommit, Ze as runInStoreTransaction, gt as serviceAccount, Je as serviceLayerFor, vt as system, B as testEventBus, mt as user, Be as withFrozenTime, We as withRpcConnection };
+export { z as MockClock, H as MockLLM, B as MockWebhooks, Zt as TESTING_PRESET_VERSION, Dt as TEST_TENANT_ID, jt as anonymous, kt as apiKey, n as changeDelete, r as changeInsert, i as changeSoftDelete, a as changeUpdate, Ze as defineFactory, wt as describeIfAvailable, Tt as describeIfReachable, N as fixtureRow, tt as frozenTime, Ke as hydrateFixtureRows, St as invoke, Ct as isTcpReachable, Wt as makeServiceApiMock, Bt as makeSubscribeContext, zt as makeTestApp, bt as makeTestContext, Ut as makeWorkflowRunner, Z as markRestInvocation, rt as mockStore, M as nextSequence, ut as outboxNudgesOf, Y as pluginsOf, Et as reportEngineVersion, lt as resetAfterCommit, at as restInvocationOf, st as rpcInterceptorFor, Q as runAfterCommit, dt as runInStoreTransaction, At as serviceAccount, ct as serviceLayerFor, Xt as startTestApps, Mt as system, V as testEventBus, Ot as user, et as withFrozenTime, it as withRpcConnection };