@voltro/testing 0.81.0 → 0.82.0

package/dist/index.js

@@ -1,46 +1,46 @@
 import { AUTO_FILLED_COLUMNS as e, allRegisteredTables as t, changeDelete as n, changeInsert as r, changeSoftDelete as i, changeUpdate as a, clearRelationsRegistry as o, missingRequiredColumns as s, registerRelations as c } from "@voltro/database";
 import { Cause as l, Effect as u, Either as d, Exit as f, Layer as p, Schema as m } from "effect";
 import { ApiUnavailable as h, SubjectService as g, anonymousSubject as _, checkGuardsEffect as v, composeAuthStrategies as y, composeRpcInterceptors as b, eventRoute as x, systemSubject as S, tenantScopedSubject as ee } from "@voltro/protocol";
-import { EventBus as te, InMemoryDataStore as ne, NO_ROW_FILTER as C, apiBindingTokenEnv as re, apiBindingUrlEnv as ie, appValidation as ae, applyRowFilterToDescriptor as oe, clearSystemStoreHandle as se, getRowFilter as w, getSystemStoreHandle as ce, makeAppAccess as le, makeConnectionState as ue, makeDataLoader as de, makeEffectStoreLayer as fe, makeEventPublisher as pe, makeFieldCipher as me, makeOutboxFacade as he, makeSchemaRegistry as ge, mintServiceToken as _e, publishEvent as ve, resolveRequestClientAddress as ye, resolveRowFilterScopeFor as be, resolveTransactionSubject as xe, resolveTrustedProxies as Se, runProvidedEffect as T, runWithDeadlockRetry as Ce, serviceCallerTokenEnv as we, setFieldCipher as Te, setSystemStoreHandle as E, wrapStoreWithMixinBehaviour as D } from "@voltro/runtime";
+import { EventBus as te, InMemoryDataStore as ne, NO_ROW_FILTER as C, apiBindingTokenEnv as re, apiBindingUrlEnv as ie, appValidation as ae, applyRowFilterToDescriptor as oe, clearSystemStoreHandle as se, getFieldCipher as ce, getRowFilter as w, getSystemStoreHandle as le, makeAppAccess as ue, makeConnectionState as de, makeDataLoader as fe, makeEffectStoreLayer as T, makeEventPublisher as pe, makeFieldCipher as me, makeOutboxFacade as he, makeSchemaRegistry as ge, mintServiceToken as _e, publishEvent as ve, resolveRequestClientAddress as ye, resolveRowFilterScopeFor as be, resolveTransactionSubject as xe, resolveTrustedProxies as Se, runProvidedEffect as E, runWithDeadlockRetry as Ce, serviceCallerTokenEnv as we, setFieldCipher as Te, setSystemStoreHandle as D, wrapStoreWithMixinBehaviour as O } from "@voltro/runtime";
 import { installEnvSnapshot as Ee } from "@voltro/env";
-import O from "node:net";
+import k from "node:net";
 import { describe as De } from "vitest";
 import { collectPublicApiRoutes as Oe, dispatchSharedPath as ke, restRoutesToHttpRoutes as Ae } from "@voltro/protocol/rest";
 import { createLogger as je } from "@voltro/logger";
-import { CurrentWorkflowRunId as Me, inMemoryWorkflowEngineLayer as Ne, makeInMemoryRecorder as Pe } from "@voltro/workflow";
-import { spawn as Fe } from "node:child_process";
-import { randomBytes as Ie } from "node:crypto";
-import { createRequire as Le } from "node:module";
-import { dirname as Re, join as ze } from "node:path";
+import { randomBytes as Me } from "node:crypto";
+import { CurrentWorkflowRunId as Ne, getWorkflowJournalCipher as Pe, inMemoryWorkflowEngineLayer as Fe, makeInMemoryRecorder as Ie, setWorkflowJournalCipher as Le } from "@voltro/workflow";
+import { spawn as Re } from "node:child_process";
+import { createRequire as ze } from "node:module";
+import { dirname as Be, join as A } from "node:path";
 //#region src/fixtureRow.ts
-var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
+var Ve = new Set(e), j = 0, M = () => ++j, He = (e, t) => {
 	if (t.oneOf && t.oneOf.length > 0) return t.oneOf[0];
 	if (t.enumValues && t.enumValues.length > 0) return t.enumValues[0];
 	let n = t.unique === !0;
 	switch (t.type) {
 		case "text":
 		case "id":
-		case "enum": return n ? `${e}-${++k}` : e;
-		case "reference": return t.referenceStorage === "numeric" ? n ? ++k : 0 : n ? `${e}-${++k}` : e;
+		case "enum": return n ? `${e}-${++j}` : e;
+		case "reference": return t.referenceStorage === "numeric" ? n ? ++j : 0 : n ? `${e}-${++j}` : e;
 		case "integer":
-		case "real": return n ? ++k : 0;
+		case "real": return n ? ++j : 0;
 		case "decimal":
-		case "bigint": return n ? String(++k) : "0";
+		case "bigint": return n ? String(++j) : "0";
 		case "boolean": return !1;
 		case "timestamp":
 		case "date": return /* @__PURE__ */ new Date(0);
 		default: throw Error(`fixtureRow: column '${e}' is a required '${t.type}' with no default, and fixtureRow can't synthesize a safe placeholder for that type. Pass it explicitly: fixtureRow(table, { ${e}: … }).`);
 	}
-}, A = (e, t = {}) => {
+}, N = (e, t = {}) => {
 	let n = {};
-	for (let r of s(e, t)) Be.has(r) || (n[r] = He(r, e.fields[r]));
+	for (let r of s(e, t)) Ve.has(r) || (n[r] = He(r, e.fields[r]));
 	return {
 		...n,
 		...t
 	};
-}, j = m.decodeUnknownEither(m.DateFromString), Ue = /^\d{4}-\d{2}-\d{2}$/, We = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$/, Ge = (e, t) => {
+}, P = m.decodeUnknownEither(m.DateFromString), Ue = /^\d{4}-\d{2}-\d{2}$/, We = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$/, Ge = (e, t) => {
 	if (typeof e != "string" || !We.test(e) && !(t === "date" && Ue.test(e))) return !1;
-	let n = e.slice(0, 10), r = j(n);
+	let n = e.slice(0, 10), r = P(n);
 	return d.isRight(r) && Number.isFinite(r.right.getTime()) && r.right.toISOString().slice(0, 10) === n;
 }, Ke = (e, t) => {
 	let n = Object.entries(e.fields).filter(([, e]) => e.type === "timestamp" || e.type === "date");
@@ -49,7 +49,7 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		for (let [a, o] of n) {
 			let n = t[a];
 			if (n == null || n instanceof Date && Number.isFinite(n.getTime())) continue;
-			let s = j(n);
+			let s = P(n);
 			if (!Ge(n, o.type) || d.isLeft(s) || !Number.isFinite(s.right.getTime())) throw TypeError(`hydrateFixtureRows: table '${e.tableName}', row ${r}, column '${a}' requires a valid Date or ISO date-time with Z or an offset${o.type === "date" ? " (YYYY-MM-DD is also accepted as UTC midnight)" : ""}.`);
 			i[a] = s.right;
 		}
@@ -57,7 +57,7 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 	});
 }, qe = (e) => {
 	let t = {};
-	for (let [n, r] of Object.entries(e)) t[n] = typeof r == "function" ? r(Ve()) : r;
+	for (let [n, r] of Object.entries(e)) t[n] = typeof r == "function" ? r(M()) : r;
 	return t;
 }, Je = (e) => {
 	for (let [t, n] of Object.entries(e.fields)) if (n.type === "id") return t;
@@ -70,29 +70,29 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		let s = n.references();
 		if (i.includes(s.tableName)) throw Error(`defineFactory: creating '${t.tableName}' requires '${s.tableName}' via '${o}', and that reference is cyclic (${[...i, s.tableName].join(" → ")}). Insert one side first and pass the id: create(store, { ${o}: existing.id }).`);
 		let c = r[o];
-		a[o] = (c === void 0 ? await M(e, s, {}, {}, [...i, s.tableName]) : await c.create(e, {}))[n.referenceColumn ?? Je(s)];
+		a[o] = (c === void 0 ? await F(e, s, {}, {}, [...i, s.tableName]) : await c.create(e, {}))[n.referenceColumn ?? Je(s)];
 	}
 	return a;
-}, M = async (e, t, n, r, i) => {
+}, F = async (e, t, n, r, i) => {
 	let a = {
 		...await Ye(e, t, n, r, i),
 		...n
 	};
-	return e.insert(t.tableName, A(t, a));
-}, N = (e, t) => typeof e == "function" ? e(t) : e ?? {}, Xe = (e, t = {}) => {
+	return e.insert(t.tableName, N(t, a));
+}, Xe = (e, t) => typeof e == "function" ? e(t) : e ?? {}, Ze = (e, t = {}) => {
 	let n = t.traits ?? {}, r = t.associations ?? {}, i = (t) => {
 		let a = (e = {}) => ({
 			...qe(t),
 			...e
-		}), o = (t = {}) => A(e, a(t));
+		}), o = (t = {}) => N(e, a(t));
 		return {
 			table: e,
 			build: o,
-			buildList: (e, t) => Array.from({ length: e }, (e, n) => o(N(t, n))),
-			create: (t, n = {}) => M(t, e, a(n), r, [e.tableName]),
+			buildList: (e, t) => Array.from({ length: e }, (e, n) => o(Xe(t, n))),
+			create: (t, n = {}) => F(t, e, a(n), r, [e.tableName]),
 			createList: async (t, n, i) => {
 				let o = [];
-				for (let s = 0; s < n; s++) o.push(await M(t, e, a(N(i, s)), r, [e.tableName]));
+				for (let s = 0; s < n; s++) o.push(await F(t, e, a(Xe(i, s)), r, [e.tableName]));
 				return o;
 			},
 			with: (...r) => {
@@ -114,19 +114,19 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		};
 	};
 	return i(t.defaults ?? {});
-}, P = Symbol.for("voltro/testing/mockClock.installed"), F = () => globalThis, Ze = (e, t) => new Proxy(e, {
+}, I = Symbol.for("voltro/testing/mockClock.installed"), L = () => globalThis, Qe = (e, t) => new Proxy(e, {
 	construct: (e, n, r) => Reflect.construct(e, n.length === 0 ? [t()] : n, r),
 	apply: () => new e(t()).toString(),
 	get: (e, n, r) => n === "now" ? () => t() : Reflect.get(e, n, r)
-}), Qe = (e) => {
+}), R = (e) => {
 	if (typeof e == "number") return e;
 	let t = e instanceof Date ? e.getTime() : Date.parse(e);
 	if (Number.isNaN(t)) throw Error(`mockClock: cannot read an instant from '${String(e)}'`);
 	return t;
-}, I = class {
+}, z = class {
 	currentMs;
 	constructor(e = "2026-01-01T00:00:00Z") {
-		this.currentMs = Qe(e);
+		this.currentMs = R(e);
 	}
 	now() {
 		return this.currentMs;
@@ -138,28 +138,28 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		this.currentMs += typeof e == "number" ? e : nt(e);
 	}
 	set(e) {
-		this.currentMs = Qe(e);
+		this.currentMs = R(e);
 	}
 	get installed() {
-		return F()[P]?.clock === this;
+		return L()[I]?.clock === this;
 	}
 	install() {
-		let e = F(), t = e[P];
+		let e = L(), t = e[I];
 		if (t !== void 0) throw Error("mockClock: global time is already faked" + (t.clock === this ? " by this same clock" : " by another MockClock") + ". Uninstall it before installing again — a nested install restores the outer fake on the way out, which leaves the realm frozen with nothing pointing at why. `withFrozenTime` always restores, including on a throw.");
 		let n = globalThis.Date;
-		return e[P] = {
+		return e[I] = {
 			realDate: n,
 			clock: this
-		}, globalThis.Date = Ze(n, () => this.currentMs), () => {
+		}, globalThis.Date = Qe(n, () => this.currentMs), () => {
 			this.uninstall();
 		};
 	}
 	uninstall() {
-		let e = F(), t = e[P];
-		t !== void 0 && t.clock === this && (globalThis.Date = t.realDate, delete e[P]);
+		let e = L(), t = e[I];
+		t !== void 0 && t.clock === this && (globalThis.Date = t.realDate, delete e[I]);
 	}
 }, $e = (e) => typeof e == "object" && !!e && typeof e.then == "function", et = (e, t) => {
-	let n = e instanceof I ? e : new I(e);
+	let n = e instanceof z ? e : new z(e);
 	n.install();
 	let r = !1;
 	try {
@@ -171,7 +171,7 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		r || n.uninstall();
 	}
 }, tt = (e) => u.acquireRelease(u.sync(() => {
-	let t = e instanceof I ? e : new I(e);
+	let t = e instanceof z ? e : new z(e);
 	return t.install(), t;
 }), (e) => u.sync(() => {
 	e.uninstall();
@@ -187,16 +187,19 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		case "d": return n * 864e5;
 		default: throw Error(`mockClock: unknown unit '${r}'`);
 	}
-}, L = class {
+}, B = class {
 	emitted = [];
 	async emit(e, t) {
-		let n = typeof e == "string" ? e : e.id ?? e.event ?? "(unnamed event)";
+		let n = typeof e == "string" ? e : e.name ?? e.id ?? e.event ?? "(unnamed event)";
 		return this.emitted.push({
 			event: n,
 			payload: t,
 			emittedAt: /* @__PURE__ */ new Date()
 		}), { delivered: 0 };
 	}
+	async listTargets(e, t) {
+		return [];
+	}
 	payloadsFor(e) {
 		return this.emitted.filter((t) => t.event === e).map((e) => e.payload);
 	}
@@ -206,7 +209,7 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 	clear() {
 		this.emitted.length = 0;
 	}
-}, R = (e = {}) => {
+}, V = (e = {}) => {
 	let t = e.tenantId ?? null, n = new te({
 		origin: e.origin ?? "test",
 		...e.ringSize === void 0 ? {} : { ringSize: e.ringSize }
@@ -276,7 +279,7 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 			n.clear();
 		}
 	};
-}, z = class {
+}, H = class {
 	queue;
 	calls = [];
 	constructor(e) {
@@ -291,41 +294,41 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 	remaining() {
 		return this.queue.length;
 	}
-}, rt = (e) => e, B = "00000000000000000000000000000000", V = /* @__PURE__ */ new WeakMap(), H = /* @__PURE__ */ new WeakMap(), it = (e, t) => {
-	let n = H.get(e);
+}, rt = (e) => e, U = "00000000000000000000000000000000", W = /* @__PURE__ */ new WeakMap(), G = /* @__PURE__ */ new WeakMap(), it = (e, t) => {
+	let n = G.get(e);
 	if (n === void 0) throw Error("withRpcConnection requires a context created by makeTestContext");
 	return n(t);
-}, U = /* @__PURE__ */ new WeakMap(), W = /* @__PURE__ */ new WeakMap(), G = /* @__PURE__ */ new WeakMap(), K = (e) => G.get(e) ?? [], q = /* @__PURE__ */ new WeakMap(), J = (e, t, n) => {
-	q.set(e, {
+}, K = /* @__PURE__ */ new WeakMap(), q = /* @__PURE__ */ new WeakMap(), J = /* @__PURE__ */ new WeakMap(), Y = (e) => J.get(e) ?? [], X = /* @__PURE__ */ new WeakMap(), Z = (e, t, n) => {
+	X.set(e, {
 		publicApi: t,
 		...n === void 0 ? {} : { remoteAddr: n }
 	});
-}, Y = (e) => q.get(e), X = /* @__PURE__ */ new WeakMap(), at = (e, t) => {
-	let n = G.get(e) ?? [], r = t === "mutation" ? "interceptMutation" : t === "query" ? "interceptQuery" : "interceptAction", i = [];
+}, at = (e) => X.get(e), ot = /* @__PURE__ */ new WeakMap(), st = (e, t) => {
+	let n = J.get(e) ?? [], r = t === "mutation" ? "interceptMutation" : t === "query" ? "interceptQuery" : "interceptAction", i = [];
 	for (let e of n) {
 		let t = e[r];
 		typeof t == "function" && i.push(t);
 	}
 	return b(i);
-}, ot = (e) => {
-	let t = (G.get(e) ?? []).map((e) => e.services).filter((e) => e !== void 0), n = X.get(e) ?? [], r = [...t, ...n];
+}, ct = (e) => {
+	let t = (J.get(e) ?? []).map((e) => e.services).filter((e) => e !== void 0), n = ot.get(e) ?? [], r = [...t, ...n];
 	if (r.length !== 0) return p.mergeAll(...r);
-}, st = (e) => {
-	let t = U.get(e);
+}, lt = (e) => {
+	let t = K.get(e);
 	t !== void 0 && (t.length = 0);
-}, Z = async (e) => {
-	let t = U.get(e);
+}, Q = async (e) => {
+	let t = K.get(e);
 	if (t === void 0 || t.length === 0) return;
 	let n = [...t];
 	t.length = 0;
 	for (let e of n) await e();
-}, ct = (e) => W.get(e) ?? [], lt = async (e, t) => {
-	let n = V.get(e);
+}, ut = (e) => q.get(e) ?? [], dt = async (e, t) => {
+	let n = W.get(e);
 	return n === void 0 ? e.store.transactional(async (n) => t({
 		...e,
 		store: n
 	})) : n(t);
-}, ut = (e) => {
+}, ft = (e) => {
 	let t = /* @__PURE__ */ new Map(), n = /* @__PURE__ */ new Map(), r = (n) => {
 		let r = t.get(n);
 		return r === void 0 ? !1 : r.expiresAt !== null && r.expiresAt <= e() ? (t.delete(n), !1) : !0;
@@ -364,7 +367,7 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 			return i(e, o, n.ttlMs, n.tags), o;
 		}
 	};
-}, dt = (e) => {
+}, pt = (e) => {
 	let t = /* @__PURE__ */ new Map(), n = (n) => {
 		let r = t.get(n);
 		return r === void 0 ? !1 : r.expiresAt !== null && r.expiresAt <= e() ? (t.delete(n), !1) : !0;
@@ -392,29 +395,29 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 			t.clear();
 		}
 	};
-}, ft = async (e, t) => {
-	let n = ce();
-	E(e);
+}, mt = async (e, t) => {
+	let n = le();
+	D(e);
 	try {
 		return await t();
 	} finally {
-		n === void 0 ? se() : E(n);
+		n === void 0 ? se() : D(n);
 	}
-}, pt = /* @__PURE__ */ new Set(), mt = (e) => {
-	pt.has(e) || (pt.add(e), console.warn(e));
-}, ht = (e, t, n) => {
-	let r = gt, i;
+}, ht = /* @__PURE__ */ new Set(), gt = (e) => {
+	ht.has(e) || (ht.add(e), console.warn(e));
+}, _t = (e, t, n) => {
+	let r = vt, i;
 	return () => {
 		let a = t ?? w();
-		return t !== void 0 && w() !== void 0 && t !== w() && mt("[voltro:testing] this test passes `rowFilter:` while a DIFFERENT filter is registered via `setRowFilter`. The option wins, so this test does not exercise your app's registration. Drop `rowFilter:` to run the real process-global one."), (i === void 0 || a !== r) && (r = a, i = ft(n, () => T(be(a, e, (e) => {
+		return t !== void 0 && w() !== void 0 && t !== w() && gt("[voltro:testing] this test passes `rowFilter:` while a DIFFERENT filter is registered via `setRowFilter`. The option wins, so this test does not exercise your app's registration. Drop `rowFilter:` to run the real process-global one."), (i === void 0 || a !== r) && (r = a, i = mt(n, () => E(be(a, e, (e) => {
 			console.error("[voltro:testing] row filter failed to load — reads refused for this subject", e);
 		})))), i;
 	};
-}, gt = Symbol("unresolved"), Q = (e, t) => new Proxy(e, { get: (e, n) => {
+}, vt = Symbol("unresolved"), yt = (e, t) => new Proxy(e, { get: (e, n) => {
 	if (n === "query") return async (n) => e.query(oe(await t(), n));
 	let r = Reflect.get(e, n, e);
 	return typeof r == "function" ? r.bind(e) : r;
-} }), _t = (e = {}) => {
+} }), bt = (e = {}) => {
 	if (Ee({
 		...process.env,
 		...e.env ?? {}
@@ -422,15 +425,17 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		o();
 		for (let t of e.relations) c(t);
 	}
-	let n = e.tables ?? t(), r = ge(n), i = new ne(e.store ?? {}), a = {
+	let n = e.tables ?? t(), r = ge(n), i = new ne(e.store ?? {});
+	for (let t of e.plugins ?? []) t.bindDataStore?.(i);
+	let a = {
 		dataStore: i,
 		schemaRegistry: r
 	};
-	E(a);
-	let s = new I(e.clockStart), l = new L(), u = R(), d = new z(e.llmResponses ?? []), f = ut(() => s.now()), p = dt(() => s.now()), m = (t, n, o = i, c, h = !1) => {
+	D(a);
+	let s = new z(e.clockStart), l = new B(), u = V(), d = new H(e.llmResponses ?? []), f = ft(() => s.now()), p = pt(() => s.now()), m = (t, n, o = i, c, h = !1) => {
 		let g = {
 			subject: t,
-			traceId: B,
+			traceId: U,
 			...n === void 0 ? {} : { connection: n }
 		}, _ = c?.queued ?? [], v = c?.nudges ?? [], y = pe({
 			bus: u.bus,
@@ -440,7 +445,7 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 					e();
 				});
 			} }
-		}), b = de({ store: o }), x = h ? async () => C : ht(t, e.rowFilter, a), S = {
+		}), b = fe({ store: o }), x = h ? async () => C : _t(t, e.rowFilter, a), S = {
 			apis: e.apis ?? Object.freeze({}),
 			transaction: async (e, r) => {
 				let a = xe(t, r?.tenantId, o !== i);
@@ -453,7 +458,7 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 					}, h), a = await e(i);
 					return s = i, a;
 				});
-				return s !== void 0 && (await Z(s), v.push(...ct(s))), c;
+				return s !== void 0 && (await Q(s), v.push(...ut(s))), c;
 			},
 			clock: s,
 			webhooks: l,
@@ -462,19 +467,19 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 			llm: d,
 			...e.ai === void 0 ? {} : { ai: e.ai },
 			request: g,
-			...n === void 0 ? {} : { connectionState: ue(n, o === i ? void 0 : (e) => {
+			...n === void 0 ? {} : { connectionState: de(n, o === i ? void 0 : (e) => {
 				_.push(e);
 			}) },
 			validation: ae,
-			access: le(t),
+			access: ue(t),
 			cache: f,
 			kv: p,
-			store: D(Q(o, x), {
+			store: O(yt(o, x), {
 				subject: t,
 				schemaRegistry: r,
 				rowFilter: C
 			}),
-			storeForTenant: (e) => D(Q(o, x), {
+			storeForTenant: (e) => O(yt(o, x), {
 				subject: ee(t, e),
 				schemaRegistry: r,
 				rowFilter: C
@@ -482,9 +487,9 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 			outbox: he({
 				store: o,
 				subject: t,
-				traceId: B,
+				traceId: U,
 				nudge: () => {
-					v.push(B);
+					v.push(U);
 				},
 				afterCommit: (e) => {
 					_.push(e);
@@ -515,22 +520,22 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 				nudges: v
 			})
 		};
-		return U.set(S, _), H.set(S, (e) => m(t, e, o, {
+		return K.set(S, _), G.set(S, (e) => m(t, e, o, {
 			queued: _,
 			nudges: v
-		})), W.set(S, v), G.set(S, e.plugins ?? []), X.set(S, e.layers ?? []), V.set(S, (e) => o.transactional((r) => e(m(t, n, r, {
+		})), q.set(S, v), J.set(S, e.plugins ?? []), ot.set(S, e.layers ?? []), W.set(S, (e) => o.transactional((r) => e(m(t, n, r, {
 			queued: _,
 			nudges: v
 		})))), S;
 	};
 	return m(e.subject ?? _(null), e.connection);
-}, vt = (e, t) => {
-	let n = ot(t);
-	return (n === void 0 ? e : u.provide(e, n)).pipe(u.provide(fe(t.store)), u.provideService(g, t.request.subject));
-}, yt = async (e, t, n, r) => {
+}, xt = (e, t) => {
+	let n = ct(t);
+	return (n === void 0 ? e : u.provide(e, n)).pipe(u.provide(T(t.store)), u.provideService(g, t.request.subject));
+}, St = async (e, t, n, r) => {
 	let i = e.input, a = await m.decodeUnknownPromise(i)(n), o = e.kind, s = async (e) => {
 		let n = t(a, e);
-		return u.isEffect(n) ? T(vt(n, e)) : n;
+		return u.isEffect(n) ? E(xt(n, e)) : n;
 	}, c = async () => {
 		let t = e.guards;
 		if (t !== void 0 && t.length > 0) {
@@ -538,14 +543,14 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 			if (e !== null) throw e;
 		}
 		if (o !== "mutation") return s(r);
-		let n = await Ce(async () => lt(r, async (e) => (st(r), s(e))), { delay: () => Promise.resolve() });
-		return await Z(r), n;
-	}, d = o === "mutation" || o === "query" || o === "action" ? o : void 0, p = d === void 0 ? void 0 : at(r, d);
+		let n = await Ce(async () => dt(r, async (e) => (lt(r), s(e))), { delay: () => Promise.resolve() });
+		return await Q(r), n;
+	}, d = o === "mutation" || o === "query" || o === "action" ? o : void 0, p = d === void 0 ? void 0 : st(r, d);
 	if (p === void 0 || d === void 0) return await c();
 	let h = u.tryPromise({
 		try: () => c(),
 		catch: (e) => e
-	}), g = Y(r), _ = p(h, {
+	}), g = at(r), _ = p(h, {
 		tag: e.name ?? "",
 		kind: d,
 		input: a,
@@ -560,12 +565,12 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 	}), y = await u.runPromiseExit(_);
 	if (f.isSuccess(y)) return y.value;
 	throw l.squash(y.cause);
-}, bt = (e) => new Promise((t) => {
-	let n = new O.Socket(), r = (e) => {
+}, Ct = (e) => new Promise((t) => {
+	let n = new k.Socket(), r = (e) => {
 		clearTimeout(i), n.destroy(), t(e);
 	}, i = setTimeout(() => r(!1), e.timeoutMs ?? 750);
 	n.once("connect", () => r(!0)), n.once("error", () => r(!1)), n.connect(e.port, e.host);
-}), xt = async (e, t, n, r) => {
+}), wt = async (e, t, n, r) => {
 	if (typeof t != "string" || typeof n != "function" || typeof r != "function") throw TypeError(`describeIfAvailable('${e}', ...): expected (label, dependency, probe, suite) — got dependency: ${typeof t}, probe: ${typeof n}, suite: ${typeof r}. Three arguments means the suite body is being used as the probe: it would run at file scope, unconditionally, and the skip would silently do nothing.`);
 	let i = !1;
 	try {
@@ -574,20 +579,20 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		i = !1;
 	}
 	De.skipIf(!i)(i ? e : `${e} [SKIPPED: needs ${t}]`, r);
-}, St = async (e, t, n) => {
-	await xt(e, `${t.name} at ${t.host}:${t.port}`, () => bt(t), n);
-}, Ct = async (e, t) => {
+}, Tt = async (e, t, n) => {
+	await wt(e, `${t.name} at ${t.host}:${t.port}`, () => Ct(t), n);
+}, Et = async (e, t) => {
 	try {
 		let n = await t();
 		n !== void 0 && n !== "" && console.log(`[engine] ${e}: ${n}`);
 	} catch {}
-}, wt = "test-tenant", $ = (e, t, n) => ({
+}, Dt = "test-tenant", $ = (e, t, n) => ({
 	type: e,
 	id: t,
 	tenantId: n.tenantId ?? "test-tenant",
 	scopes: n.scopes ?? [],
 	...n.metadata === void 0 ? {} : { metadata: n.metadata }
-}), Tt = (e, t = {}) => $("user", e, t), Et = (e, t = {}) => $("apiKey", e, t), Dt = (e, t = {}) => $("serviceAccount", e, t), Ot = (e = null) => _(e), kt = (e = "job:test", t) => t === void 0 ? S(e) : S(e, t), At = "127.0.0.1", jt = (e) => {
+}), Ot = (e, t = {}) => $("user", e, t), kt = (e, t = {}) => $("apiKey", e, t), At = (e, t = {}) => $("serviceAccount", e, t), jt = (e = null) => _(e), Mt = (e = "job:test", t) => t === void 0 ? S(e) : S(e, t), Nt = "127.0.0.1", Pt = (e) => {
 	let t = e.indexOf("?");
 	return t === -1 ? {
 		path: e,
@@ -596,22 +601,22 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		path: e.slice(0, t),
 		query: e.slice(t + 1)
 	};
-}, Mt = (e, t) => {
+}, Ft = (e, t) => {
 	let n = e.split("/").filter((e) => e.length > 0), r = t.split("/").filter((e) => e.length > 0);
 	return n.length === r.length && n.every((e, t) => e.startsWith(":") || e === r[t]);
-}, Nt = (e) => {
+}, It = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n.toLowerCase()] = r;
 	return t;
-}, Pt = (e) => e === void 0 ? /* @__PURE__ */ new Uint8Array() : new TextEncoder().encode(JSON.stringify(e)), Ft = (e) => e === void 0 ? "" : typeof e == "string" ? e : new TextDecoder().decode(e), It = (e) => {
+}, Lt = (e) => e === void 0 ? /* @__PURE__ */ new Uint8Array() : new TextEncoder().encode(JSON.stringify(e)), Rt = (e) => e === void 0 ? "" : typeof e == "string" ? e : new TextDecoder().decode(e), zt = (e) => {
 	let t = Se(e.security?.trustedProxies, process.env, e.security?.clientAddressHeader), { ctx: n } = e, r = Oe((e.publicApi ?? []).map((e) => ({
 		descriptor: e.descriptor,
-		invoke: (t, r) => n.withSubject(r.subject, (n) => (e.descriptor.publicApi !== void 0 && J(n, e.descriptor.publicApi, r.remoteAddr), yt(e.descriptor, e.handler, t, n)))
+		invoke: (t, r) => n.withSubject(r.subject, (n) => (e.descriptor.publicApi !== void 0 && Z(n, e.descriptor.publicApi, r.remoteAddr), St(e.descriptor, e.handler, t, n)))
 	})), {
-		pluginErrors: K(n).flatMap((e) => e.errorSchemas ?? []),
+		pluginErrors: Y(n).flatMap((e) => e.errorSchemas ?? []),
 		...e.publicApiProfile === void 0 ? {} : { profile: e.publicApiProfile }
 	}), i = [...e.restRoutes ?? [], ...r], a = y(e.strategies ?? [], {
-		...e.anonymousTenantRequired === void 0 ? {} : { anonymousTenantRequired: e.anonymousTenantRequired },
+		anonymous: e.anonymous ?? { headerOrTenant: "acme" },
 		getStore: () => n.store
 	}), o = (r, s) => {
 		let c = {
@@ -626,7 +631,7 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 			pattern: i[t].path,
 			route: e
 		})), u = async (e, r, a = {}) => {
-			let { path: o, query: c } = jt(r), u = l.filter((e) => Mt(e.pattern, o)).map((e) => e.route);
+			let { path: o, query: c } = Pt(r), u = l.filter((e) => Ft(e.pattern, o)).map((e) => e.route);
 			if (u.length === 0) return {
 				status: 404,
 				headers: {},
@@ -638,10 +643,10 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 				stream: !1
 			};
 			let d = {
-				...Nt(s),
-				...Nt(a.headers ?? {})
+				...It(s),
+				...It(a.headers ?? {})
 			}, f = ye({
-				socketAddress: a.remoteAddr ?? At,
+				socketAddress: a.remoteAddr ?? Nt,
 				headers: d,
 				config: t
 			}), p = {
@@ -649,13 +654,13 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 				path: o,
 				query: c,
 				headers: d,
-				rawBody: Pt(a.body),
+				rawBody: Lt(a.body),
 				store: n.store,
 				...f === void 0 ? {} : { remoteAddr: f }
 			}, m = await ke(u, p), h = {};
 			for (let [e, t] of Object.entries(m.headers ?? {})) h[e.toLowerCase()] = t;
 			m.contentType !== void 0 && (h["content-type"] = m.contentType);
-			let g = Ft(m.body), _ = (m.contentType ?? "").includes("json");
+			let g = Rt(m.body), _ = (m.contentType ?? "").includes("json");
 			return {
 				status: m.status,
 				headers: h,
@@ -689,7 +694,7 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		};
 	};
 	return o(void 0, {});
-}, Lt = (e = {}) => {
+}, Bt = (e = {}) => {
 	let t = e.id ?? "test", n = e.store ?? new Proxy({}, { get: (e, t) => {
 		throw Error(`makeSubscribeContext: this subscriber reached ctx.store.${String(t)} and the test passed no store. Pass \`{ store: makeTestContext().store }\` so the subscriber and the code under test share one — an empty stand-in would let a read of the wrong table pass.`);
 	} });
@@ -699,7 +704,7 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		store: n,
 		...e.publish === void 0 ? {} : { publish: e.publish }
 	};
-}, Rt = (e) => {
+}, Vt = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = t.get(n.stepName);
@@ -725,13 +730,18 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		});
 	}
 	return n.sort((e, t) => e._startedAt - t._startedAt), n.map(({ _startedAt: e, ...t }) => t);
-}, zt = (e) => {
+}, Ht = () => {
+	if (Pe() !== void 0) return;
+	let e = me(Me(32).toString("hex"));
+	Le(() => ce() ?? e);
+}, Ut = (e) => {
+	Ht();
 	let t = e.workflows ?? [], n = /* @__PURE__ */ new Map(), r = 0;
 	return {
 		start: async (i, a) => {
 			let o = t.find((e) => e.workflow.name === i);
 			if (o === void 0) throw Error(`makeWorkflowRunner: no workflow named '${i}' — pass it in makeWorkflowRunner({ ctx, workflows: [{ workflow, execute }] }).`);
-			let s = `wfrun_test_${++r}`, c = Pe(), l = o.workflow.toLayer(o.execute).pipe(p.provideMerge(Ne)), d = /* @__PURE__ */ new Date(), f = o.workflow.execute(a).pipe(u.locally(Me, s), u.provide(c.layer), u.provide(l)), m = (e.ctx.store === void 0 ? f : u.provide(f, fe(e.ctx.store))).pipe(u.either), h = await u.runPromise(m), g = Rt(c.readSteps()), _ = /* @__PURE__ */ new Date(), v;
+			let s = `wfrun_test_${++r}`, c = Ie(), l = o.workflow.toLayer(o.execute).pipe(p.provideMerge(Fe)), d = /* @__PURE__ */ new Date(), f = o.workflow.execute(a).pipe(u.locally(Ne, s), u.provide(c.layer), u.provide(l)), m = (e.ctx.store === void 0 ? f : u.provide(f, T(e.ctx.store))).pipe(u.either), h = await u.runPromise(m), g = Vt(c.readSteps()), _ = /* @__PURE__ */ new Date(), v;
 			if (h._tag === "Right") v = {
 				status: "succeeded",
 				output: h.right,
@@ -771,7 +781,7 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		},
 		inspect: async (e) => n.get(e) ?? null
 	};
-}, Bt = (e, t, n = {}) => {
+}, Wt = (e, t, n = {}) => {
 	let r = n.name ?? "mock", i = [], a = /* @__PURE__ */ new Map(), o = (e, t) => `${e}\u0000${JSON.stringify(t)}`, s = async (n, a, o) => {
 		let s = e[n];
 		if (s === void 0) throw Error(`makeServiceApiMock: '${n}' is not a service procedure of this api`);
@@ -818,31 +828,31 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 			for (let e of a.get(o(t, n)) ?? []) e(s);
 		}
 	};
-}, Vt = () => new Promise((e, t) => {
-	let n = O.createServer();
+}, Gt = () => new Promise((e, t) => {
+	let n = k.createServer();
 	n.once("error", t), n.listen(0, "127.0.0.1", () => {
 		let t = n.address(), r = typeof t == "object" && t ? t.port : 0;
 		n.close(() => e(r));
 	});
-}), Ht = async (e) => {
+}), Kt = async (e) => {
 	try {
 		return (await fetch(`http://127.0.0.1:${e}/internal/readiness`)).status === 200;
 	} catch {
 		return !1;
 	}
-}, Ut = (e) => ze(Re(Le(ze(e, "package.json")).resolve("@voltro/cli/package.json")), "bin", "voltro.mjs"), Wt = 1e4, Gt = (e) => new Promise((t) => {
+}, qt = (e) => A(Be(ze(A(e, "package.json")).resolve("@voltro/cli/package.json")), "bin", "voltro.mjs"), Jt = 1e4, Yt = (e) => new Promise((t) => {
 	if (e.exitCode !== null || e.signalCode !== null) return t();
 	let n = setTimeout(() => {
 		e.kill("SIGKILL");
-	}, Wt);
+	}, Jt);
 	e.once("exit", () => {
 		clearTimeout(n), t();
 	}), e.kill("SIGTERM");
-}), Kt = async (e) => {
+}), Xt = async (e) => {
 	let t = Object.keys(e.apps);
 	if (t.length === 0) throw Error("startTestApps: no apps given");
-	let n = e.mode ?? "dev", r = e.bootTimeoutMs ?? 3e5, i = e.cli ?? Ut(e.apps[t[0]].root), a = /* @__PURE__ */ new Map();
-	for (let e of t) a.set(e, await Vt());
+	let n = e.mode ?? "dev", r = e.bootTimeoutMs ?? 3e5, i = e.cli ?? qt(e.apps[t[0]].root), a = /* @__PURE__ */ new Map();
+	for (let e of t) a.set(e, await Gt());
 	let o = /* @__PURE__ */ new Map(), s = new Map(t.map((e) => [e, {}]));
 	for (let n of e.edges ?? []) {
 		for (let e of [n.caller, n.callee]) if (!t.includes(e)) throw Error(`startTestApps: edge names '${e}', which is not among the apps (${t.join(", ")})`);
@@ -862,10 +872,10 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 	};
 	for (let e of t) u(e);
 	let d = [], f = /* @__PURE__ */ new Map(), p = async () => {
-		await Promise.all(d.map(Gt));
+		await Promise.all(d.map(Yt));
 	};
 	for (let t of c) {
-		let o = e.apps[t], c = a.get(t), l = "", u = Fe(process.execPath, [
+		let o = e.apps[t], c = a.get(t), l = "", u = Re(process.execPath, [
 			i,
 			n,
 			...n === "serve" ? ["."] : []
@@ -873,7 +883,7 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 			cwd: o.root,
 			env: {
 				...process.env,
-				...n === "serve" ? { VOLTRO_SESSION_SECRET: Ie(32).toString("base64url") } : {},
+				...n === "serve" ? { VOLTRO_SESSION_SECRET: Me(32).toString("base64url") } : {},
 				...o.env,
 				...s.get(t),
 				PORT: String(c)
@@ -897,11 +907,11 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 			url: `http://127.0.0.1:${c}`,
 			wsUrl: `ws://127.0.0.1:${c}/ws`,
 			log: () => l,
-			stop: () => Gt(u)
+			stop: () => Yt(u)
 		};
 		f.set(t, m);
 		let h = Date.now() + r;
-		for (; !await Ht(c);) {
+		for (; !await Kt(c);) {
 			if (u.exitCode !== null || u.signalCode !== null || Date.now() > h) {
 				await p();
 				let e = u.exitCode !== null || u.signalCode !== null ? "exited before it was ready" : `was not ready within ${r} ms`;
@@ -919,6 +929,6 @@ var Be = new Set(e), k = 0, Ve = () => ++k, He = (e, t) => {
 		},
 		stop: p
 	};
-}, qt = 1;
+}, Zt = 1;
 //#endregion
-export { I as MockClock, z as MockLLM, L as MockWebhooks, qt as TESTING_PRESET_VERSION, wt as TEST_TENANT_ID, Ot as anonymous, Et as apiKey, n as changeDelete, r as changeInsert, i as changeSoftDelete, a as changeUpdate, Xe as defineFactory, xt as describeIfAvailable, St as describeIfReachable, A as fixtureRow, tt as frozenTime, Ke as hydrateFixtureRows, yt as invoke, bt as isTcpReachable, Bt as makeServiceApiMock, Lt as makeSubscribeContext, It as makeTestApp, _t as makeTestContext, zt as makeWorkflowRunner, J as markRestInvocation, rt as mockStore, Ve as nextSequence, ct as outboxNudgesOf, K as pluginsOf, Ct as reportEngineVersion, st as resetAfterCommit, Y as restInvocationOf, at as rpcInterceptorFor, Z as runAfterCommit, lt as runInStoreTransaction, Dt as serviceAccount, ot as serviceLayerFor, Kt as startTestApps, kt as system, R as testEventBus, Tt as user, et as withFrozenTime, it as withRpcConnection };
+export { z as MockClock, H as MockLLM, B as MockWebhooks, Zt as TESTING_PRESET_VERSION, Dt as TEST_TENANT_ID, jt as anonymous, kt as apiKey, n as changeDelete, r as changeInsert, i as changeSoftDelete, a as changeUpdate, Ze as defineFactory, wt as describeIfAvailable, Tt as describeIfReachable, N as fixtureRow, tt as frozenTime, Ke as hydrateFixtureRows, St as invoke, Ct as isTcpReachable, Wt as makeServiceApiMock, Bt as makeSubscribeContext, zt as makeTestApp, bt as makeTestContext, Ut as makeWorkflowRunner, Z as markRestInvocation, rt as mockStore, M as nextSequence, ut as outboxNudgesOf, Y as pluginsOf, Et as reportEngineVersion, lt as resetAfterCommit, at as restInvocationOf, st as rpcInterceptorFor, Q as runAfterCommit, dt as runInStoreTransaction, At as serviceAccount, ct as serviceLayerFor, Xt as startTestApps, Mt as system, V as testEventBus, Ot as user, et as withFrozenTime, it as withRpcConnection };