@voltro/cli 0.11.3 → 0.12.0

package/dist/serveCommand-p6e5Ahgx.js

@@ -1,1070 +0,0 @@
-import { kt as e, t } from "./inspectMetrics-SRtv8KDy.js";
-import { $ as n, A as r, C as i, D as a, E as o, F as s, G as c, H as l, I as u, J as d, M as f, N as p, O as ee, P as m, Q as h, S as g, T as te, U as ne, W as re, X as _, Y as ie, Z as ae, _ as oe, at as v, b as se, d as ce, et as y, f as b, g as le, h as ue, i as x, it as de, j as S, k as C, m as fe, n as pe, nt as me, o as w, ot as T, q as he, s as ge, st as _e, t as ve, ut as E, v as ye, w as be, x as xe, y as D } from "./dev-CGt0PP1f.js";
-import { a as Se, r as Ce } from "./startupRunner-DhlX9nqd.js";
-import { n as we, s as O } from "./apiBuild-zFDv0u8y.js";
-import { t as Te } from "./bootTiming-BdyP9nYw.js";
-import { join as Ee } from "node:path";
-import { pathToFileURL as De } from "node:url";
-import { Cause as k, Effect as A, Layer as j, ManagedRuntime as Oe } from "effect";
-import { createLogger as M } from "@voltro/logger";
-import { existsSync as N } from "node:fs";
-import { AggregateRegistry as ke, Dispatcher as P, apiKeyManagementRoutes as Ae, applySoftDeleteScope as je, applyTenantScope as Me, attachAnalyticsMirror as Ne, awaitServerListening as Pe, bindMutation as F, bindStream as Fe, bindSubscription as I, buildTracingLayer as Ie, cancelWakeup as Le, compileCron as Re, dataStoreApiKeyStore as ze, dataStoreIdempotencyStore as Be, frameworkApiKeyStrategy as Ve, installPolicyGuardResolver as He, loadResourceTuples as Ue, makeActionRunner as L, makeAdvisoryLockCoordinator as We, makeApiKeyService as Ge, makeAsyncKv as R, makeCoordinatedScheduler as Ke, makeEffectStoreLayer as qe, makeLazyWorkflowFacade as Je, makeMutationRunner as Ye, makeQueryDescriptorProducer as Xe, makeQueryReauthorizer as Ze, makeSchemaRegistry as Qe, makeWorkflowFacade as $e, makeWorkflowFacadeWithCallerContext as et, makeWorkflowLayers as tt, noopKv as nt, recordSubscriptionDelivery as rt, registerWakeup as z, resolveSecretsBackend as it, runProvidedEffect as at, setSecretsBackend as ot, setSystemStoreHandle as st, setTupleSource as ct, singleCoordinator as lt, startRpcServer as ut, startScheduler as dt, workflowToRpc as B } from "@voltro/runtime";
-import { RpcGroup as ft } from "@effect/rpc";
-import { SqlClient as pt } from "@effect/sql";
-import { and as mt, ensureTableRegistered as ht, eq as V, or as gt } from "@voltro/database";
-import { fromNodeReadable as _t, getObjectStream as vt, putObjectStream as yt, resolveStorageProvider as H, toNodeReadable as U } from "@voltro/plugin-storage";
-import { AuthMiddleware as bt, ConnectionInfoMiddleware as xt, actionToRpc as W, anonymousSubject as St, mutationToRpc as Ct, queryToRpc as G, streamToRpc as wt, workflowCancelDescriptor as Tt, workflowDomainEventsQueryDescriptor as Et, workflowEventDeliveriesQueryDescriptor as K, workflowResumeDescriptor as Dt, workflowRunEventsQueryDescriptor as q, workflowRunQueryDescriptor as J, workflowRunStepsQueryDescriptor as Y, workflowRunsQueryDescriptor as Ot, workflowSignalDescriptor as X, workflowUpdateDescriptor as kt } from "@voltro/protocol";
-import { createHash as Z, timingSafeEqual as At } from "node:crypto";
-import { declaredSnapshot as jt, describeOutcome as Mt, runPlannedMigrations as Nt } from "@voltro/database/sql";
-import { assertProductionSessionSecret as Pt } from "@voltro/protocol/session";
-import { getAuthSessionStrategy as Ft } from "@voltro/plugin-auth";
-import { collectPublicApiRoutes as It, restRoutesToHttpRoutes as Lt } from "@voltro/protocol/rest";
-import { buildDeliverWebhookExecute as Rt, buildWebhooksService as zt, defaultIncomingPath as Bt, deliverWebhookWorkflow as Vt, mountIncomingWebhook as Ht } from "@voltro/plugin-webhooks";
-import { packBundle as Ut, runExport as Wt, runImport as Gt, storageBlobSink as Kt, storageRefsBlobSource as qt, unpackBundle as Jt, unpackBundleToDir as Yt } from "@voltro/data-transfer";
-//#region src/adminAuth.ts
-var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
-	status: e,
-	contentType: "application/json; charset=utf-8",
-	body: JSON.stringify(t)
-}), Qt = (e) => {
-	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
-	return n ? n[1] : null;
-}, $t = (e, t) => At(Z("sha256").update(e).digest(), Z("sha256").update(t).digest()), en = (e, t) => {
-	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
-	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let n = Qt(e.headers);
-	return !n || !$t(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, tn = M({ scope: "voltro:admin-import" }), nn = "VBUNDLE2", rn = async function* (e) {
-	yield e;
-}, an = (e) => async (t) => {
-	let n = en(t, e.secret);
-	if (n) return n;
-	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === nn, c, l;
-	if (s) c = rn(t.rawBody), l = "upload";
-	else {
-		let n;
-		try {
-			n = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-		} catch {
-			return Q(400, { error: "body must be a packed bundle archive or { bundleKey } JSON" });
-		}
-		if (typeof n.bundleKey != "string" || !n.bundleKey) return Q(400, { error: "body.bundleKey (string) is required for the storage transport" });
-		if (!e.openArchive) return Q(501, { error: "storage transport not configured on this instance" });
-		c = e.openArchive(n.bundleKey), l = "storage";
-	}
-	let u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-import-"));
-	try {
-		e.assetSink ? await Jt(c, {
-			dir: p,
-			blobs: e.assetSink
-		}) : await Yt(c, p);
-		let t = await A.runPromiseExit(Gt({
-			store: e.store,
-			bundleDir: p,
-			...r ? { mode: r } : {},
-			...i ? { onConflict: i } : {},
-			...a ? { atomic: a } : {},
-			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
-			force: o,
-			onWarn: (e) => tn.warn("admin.import", { message: e }),
-			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
-		}));
-		if (t._tag === "Failure") {
-			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
-			if (e && e._tag === "SchemaDriftError") {
-				let t = e;
-				return tn.warn("admin.import refused (schema drift)", {
-					transport: l,
-					bundle: t.bundleFingerprint.slice(0, 16),
-					target: t.targetFingerprint.slice(0, 16)
-				}), Q(409, {
-					error: "schema drift",
-					bundleFingerprint: t.bundleFingerprint,
-					targetFingerprint: t.targetFingerprint,
-					diff: t.diff,
-					hint: "re-export against the current schema, or resend with x-import-force: 1"
-				});
-			}
-			throw Error(String(e?.message ?? e ?? "import failed"));
-		}
-		let n = t.value, s = n.tables.reduce((e, t) => e + t.rowCount, 0);
-		return tn.info("admin.import", {
-			transport: l,
-			tables: n.tables.length,
-			rows: s,
-			mode: r ?? "upsert",
-			atomic: a
-		}), Q(200, {
-			tables: n.tables.length,
-			rows: s,
-			transport: l
-		});
-	} catch (e) {
-		return tn.warn("admin.import failed", {
-			transport: l,
-			error: e?.message ?? String(e)
-		}), Q(500, {
-			error: "import failed",
-			message: e?.message ?? String(e)
-		});
-	} finally {
-		await d.rm(p, {
-			recursive: !0,
-			force: !0
-		});
-	}
-}, on = M({ scope: "voltro:admin-export" }), sn = async (e) => {
-	let t = [];
-	for await (let n of e) t.push(Buffer.from(n));
-	return new Uint8Array(Buffer.concat(t));
-}, cn = (e) => typeof e.tenant == "string" && e.tenant ? {
-	kind: "tenant",
-	tenantId: e.tenant
-} : Array.isArray(e.tables) && e.tables.length ? {
-	kind: "tables",
-	tables: e.tables.filter((e) => typeof e == "string")
-} : { kind: "all" }, ln = (e) => async (t) => {
-	let n = en(t, e.secret);
-	if (n) return n;
-	let r;
-	try {
-		r = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-	} catch {
-		return Q(400, { error: "body must be JSON: { profile?, tenant?, tables?, consistency?, compression?, bundleKey? }" });
-	}
-	let i = {};
-	if (typeof r.profile == "string" && r.profile) {
-		if (!e.loadProfile) return Q(501, { error: "server-side profiles not configured on this instance" });
-		try {
-			i = await e.loadProfile(r.profile);
-		} catch (e) {
-			return Q(400, {
-				error: `profile '${r.profile}' could not be loaded`,
-				message: e?.message ?? String(e)
-			});
-		}
-	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? cn(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-export-"));
-	try {
-		let t = await A.runPromise(Wt({
-			store: e.store,
-			snapshot: e.snapshot,
-			dialect: e.dialect,
-			outDir: p,
-			...i.subset ? { subset: i.subset } : {
-				scope: s,
-				...e.tenantTables && e.tenantTables.length > 0 ? { tenantTables: e.tenantTables } : {}
-			},
-			consistency: a,
-			...o ? { compression: o } : {},
-			...i.masking ? { masking: i.masking } : {}
-		})), n = t.tables.reduce((e, t) => e + t.rowCount, 0), u = t.masking?.transformed.length ?? 0;
-		if (c) {
-			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
-			let i = r.bundleKey;
-			return await e.putArchive(i, () => Ut({
-				dir: p,
-				...l
-			})), on.info("admin.export", {
-				transport: "storage",
-				tables: t.tables.length,
-				rows: n,
-				masked: u,
-				bundleKey: i
-			}), Q(200, {
-				bundleKey: i,
-				tables: t.tables.length,
-				rows: n,
-				masked: u,
-				transport: "storage"
-			});
-		}
-		let d = await sn(Ut({
-			dir: p,
-			...l
-		}));
-		return on.info("admin.export", {
-			transport: "download",
-			tables: t.tables.length,
-			rows: n,
-			masked: u,
-			bytes: d.byteLength
-		}), {
-			status: 200,
-			contentType: "application/octet-stream",
-			body: d,
-			headers: {
-				"x-export-tables": String(t.tables.length),
-				"x-export-rows": String(n),
-				"x-export-masked": String(u)
-			}
-		};
-	} catch (e) {
-		return on.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
-			error: "export failed",
-			message: e?.message ?? String(e)
-		});
-	} finally {
-		await d.rm(p, {
-			recursive: !0,
-			force: !0
-		});
-	}
-}, un = async (e) => {
-	let { resolve: t } = await import("node:path"), { existsSync: n } = await import("node:fs"), r = [
-		e,
-		`${e}.profile.ts`,
-		`data-profiles/${e}.ts`,
-		`data-profiles/${e}.profile.ts`
-	].map((e) => t(process.cwd(), e)), i = r.find((e) => n(e));
-	if (!i) throw Error(`data profile '${e}' not found (looked for: ${r.join(", ")})`);
-	let a = await import(i), o = a.default ?? a.profile;
-	if (!o) throw Error(`data profile '${i}' has no default export`);
-	return o;
-}, dn = {
-	get: async () => void 0,
-	set: async () => {},
-	setWithTags: async () => {},
-	remove: async () => !1,
-	has: async () => !1,
-	clear: async () => {},
-	invalidateTag: async () => 0,
-	wrap: async (e, t, n) => n()
-}, fn = async (e) => {
-	st({
-		dataStore: e.store,
-		schemaRegistry: e.schemaRegistry
-	});
-	let t = new P({
-		store: e.store,
-		...e.snapshotCache ? { cache: e.snapshotCache } : {},
-		recordDelivery: (e) => rt({
-			label: e.label,
-			kind: e.kind,
-			durationMs: e.durationMs,
-			rowCount: e.rowCount
-		})
-	}), n = e.cache ?? dn, r = e.kv ?? nt, a, o, c, l = /* @__PURE__ */ new Map(), u = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, d = async (t, n, r) => {
-		let i = {
-			...r,
-			source: r.source ?? `workflow:${t}`
-		};
-		l.set(n, i);
-		try {
-			let r = await e.store.query({
-				table: "_voltro_workflow_start_contexts",
-				order: [],
-				predicate: V("executionId", n),
-				projection: ["id"],
-				skip: void 0,
-				take: 1
-			}), a = {
-				workflowName: t,
-				executionId: n,
-				subject: i.subject ?? null,
-				traceId: i.traceId ?? null,
-				source: i.source ?? null,
-				parentExecutionId: i.parentExecutionId ?? null,
-				parentClosePolicy: i.parentClosePolicy ?? null,
-				createdAt: /* @__PURE__ */ new Date()
-			};
-			r[0] === void 0 ? await e.store.insert("_voltro_workflow_start_contexts", {
-				id: u(),
-				...a
-			}) : await e.store.update("_voltro_workflow_start_contexts", r[0].id, a);
-		} catch (e) {
-			process.stderr.write(`[workflow] failed to persist start context for ${t}/${n}: ${e?.message ?? String(e)}\n`);
-		}
-	}, p = async (t, n) => {
-		let r = l.get(n);
-		if (r !== void 0) return r;
-		try {
-			let t = (await e.store.query({
-				table: "_voltro_workflow_start_contexts",
-				order: [],
-				predicate: V("executionId", n),
-				projection: void 0,
-				skip: void 0,
-				take: 1
-			}))[0];
-			if (t === void 0) return;
-			let r = {
-				...t.subject === null ? {} : { subject: t.subject },
-				...t.traceId === null ? {} : { traceId: t.traceId },
-				...t.source === null ? {} : { source: t.source },
-				...t.parentExecutionId === null ? {} : { parentExecutionId: t.parentExecutionId },
-				...t.parentClosePolicy === null ? {} : { parentClosePolicy: t.parentClosePolicy }
-			};
-			return l.set(n, r), r;
-		} catch (e) {
-			process.stderr.write(`[workflow] failed to load start context for ${n}: ${e?.message ?? String(e)}\n`);
-			return;
-		}
-	}, g = (e.discovered.workflows?.length ?? 0) > 0 ? Je(() => a) : void 0, te = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ne = te || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", re = e.tenantIsolation === "namespace", ie = (e.log ?? M({ scope: "voltro:serve" })).child("webhooks"), oe, v = e.discovered.webhooks;
-	if (v && v.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
-		let t = e.workflowEngineLayer, i = h({
-			store: e.store,
-			schemaRegistry: e.schemaRegistry,
-			cache: n,
-			kv: r
-		}), a = v.outgoing.map((e) => e.descriptor);
-		oe = zt(i, async (e) => {
-			let n = Vt.execute(e).pipe(A.provide(Vt.toLayer(Rt(i, { events: a })).pipe(j.provideMerge(t))));
-			A.runPromise(n).catch((t) => {
-				ie.error("deliverWebhook workflow crashed", {
-					deliveryId: e.deliveryId,
-					targetId: e.targetId
-				}, t);
-			});
-		}, { events: a });
-	}
-	let se = /* @__PURE__ */ new Map();
-	if (v) for (let e of v.incoming) {
-		let t = e.descriptor.path ?? Bt(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Ht(e.descriptor, {
-			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => g === void 0 ? void 0 : et(g, {
-				traceId: `incoming:${e.descriptor.id}`,
-				source: `incoming:${e.descriptor.id}`
-			}),
-			log: (e) => {
-				let t = {
-					webhookId: e.webhookId,
-					status: e.status,
-					signatureOk: String(e.signatureOk),
-					idempotency: e.idempotency,
-					durationMs: e.durationMs
-				};
-				e.status >= 500 ? ie.error("incoming delivery failed", t) : e.status >= 400 ? ie.warn("incoming delivery rejected", t) : ie.info("incoming delivery handled", t);
-			}
-		});
-		se.set(t, { handle: r });
-	}
-	He(), ct((t) => Ue(e.store, t.subjectId, t.resourceType, t.resourceId));
-	let ce = (e.discovered.outboxHandlers?.length ?? 0) > 0 ? m({
-		handlers: e.discovered.outboxHandlers ?? [],
-		store: e.store,
-		log: (e.log ?? M({ scope: "voltro:serve" })).child("outbox")
-	}) : void 0, y = f({
-		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
-		store: e.store,
-		publicUrl: S(e.port ?? 4e3),
-		log: (e.log ?? M({ scope: "voltro:serve" })).child("connections")
-	}), b = ae({
-		store: e.store,
-		schemaRegistry: e.schemaRegistry,
-		cache: n,
-		kv: r,
-		...oe === void 0 ? {} : { webhooksService: oe },
-		...g === void 0 ? {} : { workflowsProxy: g },
-		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: re,
-		...ce === void 0 ? {} : { outbox: { nudge: ce.nudge } },
-		...y.active ? { connections: { registry: y.registry } } : {}
-	}), le = j.succeed(ke, be), x = (t, n) => {
-		let r = t.pipe(A.provide(qe(n)));
-		return at((e.baseLayer ? r.pipe(A.provide(e.baseLayer)) : r).pipe(A.provide(le)));
-	}, de = Ye({
-		store: e.store,
-		buildContext: (e, t, n) => b(e, t, n),
-		runEffect: x,
-		undoCapture: D()
-	}), pe = ye(), me = L({
-		buildContext: (e) => b(e),
-		runEffect: x
-	}), w = Xe({
-		buildContext: (e) => b(e),
-		finalize: (t, n) => je(Me(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
-		provideEffect: (e, t) => e.pipe(A.provide(qe(t)))
-	}), T = {};
-	for (let n of [
-		...e.discovered.queries,
-		...pe.queries,
-		...y.queries
-	]) T[n.descriptor.name] = (e) => I(w(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, Ze(n, e));
-	for (let t of [
-		...e.discovered.mutations,
-		...pe.mutations,
-		...y.mutations
-	]) T[t.descriptor.name] = (e) => F(async (e, n) => de(t, e, n), e, `mutation.${t.descriptor.name}`);
-	for (let t of [...e.discovered.actions, ...y.actions]) T[t.descriptor.name] = (e) => F(async (e, n) => me(t, e, n), e, `action.${t.descriptor.name}`);
-	let ge = () => `public-${Math.random().toString(36).slice(2, 10)}`, _e = [...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-		descriptor: e.descriptor,
-		invoke: (t, n) => de(e, t, {
-			subject: n.subject,
-			traceId: ge()
-		})
-	})), ...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-		descriptor: e.descriptor,
-		invoke: (t, n) => me(e, t, {
-			subject: n.subject,
-			traceId: ge()
-		})
-	}))], ve = _e.length > 0 ? Lt(It(_e), {
-		store: e.store,
-		resolveSubject: (t) => e.resolveSubject(t, -1)
-	}) : [], E = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, xe = E && E.length >= 16 ? [{
-		method: "POST",
-		path: Xt,
-		handle: an({
-			secret: E,
-			store: e.store,
-			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-			assetSink: Kt(H({})),
-			openArchive: (e) => (async function* () {
-				let t = H({}), n = await U((await A.runPromise(vt(t, e))).stream);
-				for await (let e of n) yield e instanceof Uint8Array ? e : new Uint8Array(e);
-			})()
-		})
-	}, {
-		method: "POST",
-		path: Zt,
-		handle: ln({
-			secret: E,
-			store: e.store,
-			snapshot: e.dataTransferSnapshot ?? { tables: [] },
-			dialect: e.dataTransferDialect ?? "memory",
-			tenantTables: [...e.tenantScopedTables],
-			loadProfile: un,
-			assetSource: qt(H({}), e.store),
-			putArchive: async (e, t) => {
-				let { Readable: n } = await import("node:stream"), r = H({}), i = _t("storage", () => n.from(t()));
-				await A.runPromise(yt(r, e, i, { contentType: "application/octet-stream" }));
-			}
-		})
-	}] : [], Se = [
-		...e.httpRoutes ?? [],
-		...ve,
-		...xe,
-		...y.httpRoutes
-	];
-	for (let t of e.discovered.streams ?? []) T[t.descriptor.name] = (n) => Fe((r) => {
-		let i = b(r), a = t.executor(n, i);
-		if (A.isEffect(a)) {
-			let t = a.pipe(A.provide(qe(i.store)));
-			return (e.baseLayer ? t.pipe(A.provide(e.baseLayer)) : t).pipe(A.provide(le));
-		}
-		return typeof a == "object" && a && typeof a.then == "function" ? A.promise(() => a) : a;
-	}, `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) T[t.definition.name] = (e) => F(async (e, n) => {
-		let r = n;
-		return et(g, {
-			subject: r.subject,
-			traceId: r.traceId,
-			source: "workflow-rpc"
-		}).start(t.definition.name, e);
-	}, e, `workflow.${t.definition.name}`);
-	te && (T[J.name] = (e) => I(w({
-		descriptor: J,
-		executor: (e) => {
-			let t = e.id;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: gt(V("id", t), V("executionId", t)),
-				take: 1,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${J.name}`), T[Ot.name] = (e) => I(w({
-		descriptor: Ot,
-		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [V("tag", t.tag)], ...t.status === void 0 ? [] : [V("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : mt(...n),
-				take: r,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Ot.name}`), T[Y.name] = (e) => I(w({
-		descriptor: Y,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_steps",
-				order: [{
-					column: "startedAt",
-					direction: "asc"
-				}],
-				predicate: V("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Y.name}`), T[q.name] = (e) => I(w({
-		descriptor: q,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_events",
-				order: [{
-					column: "occurredAt",
-					direction: "asc"
-				}],
-				predicate: V("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${q.name}`), T[Et.name] = (e) => I(w({
-		descriptor: Et,
-		executor: (e) => {
-			let t = e;
-			return {
-				table: "_voltro_workflow_events",
-				order: [{
-					column: "occurredAt",
-					direction: "desc"
-				}],
-				predicate: t.name === void 0 ? void 0 : V("name", t.name),
-				take: Math.max(1, Math.min(500, t.limit ?? 100)),
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Et.name}`), T[K.name] = (e) => I(w({
-		descriptor: K,
-		executor: (e) => {
-			let t = e.eventId;
-			return {
-				table: "_voltro_workflow_event_deliveries",
-				order: [{
-					column: "createdAt",
-					direction: "asc"
-				}],
-				predicate: V("eventId", t),
-				take: 500,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${K.name}`), T[Tt.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await _(e.store, n.subject, { executionId: r.executionId }), await g.cancel(r.workflowName, r.executionId), await Ne(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Tt.name}`), T[Dt.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await _(e.store, n.subject, { executionId: r.executionId }), await g.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Dt.name}`), T[X.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await _(e.store, n.subject, { id: r.id }), g.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${X.name}`), T[kt.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await _(e.store, n.subject, { id: r.id }), g.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${kt.name}`));
-	let Ce = [
-		...e.discovered.queries.map((e) => G(e.descriptor)),
-		...e.discovered.mutations.map((e) => Ct(e.descriptor)),
-		...e.discovered.actions.map((e) => W(e.descriptor)),
-		...pe.queries.map((e) => G(e.descriptor)),
-		...pe.mutations.map((e) => Ct(e.descriptor)),
-		...y.queries.map((e) => G(e.descriptor)),
-		...y.mutations.map((e) => Ct(e.descriptor)),
-		...y.actions.map((e) => W(e.descriptor)),
-		...(e.discovered.streams ?? []).map((e) => wt(e.descriptor)),
-		...(e.discovered.workflows ?? []).map((e) => B(e.definition)),
-		...te ? [
-			G(J),
-			G(Ot),
-			G(Y),
-			G(q),
-			G(Et),
-			G(K),
-			W(Tt),
-			W(Dt),
-			W(X),
-			W(kt)
-		] : []
-	], we = ft.make(...Ce).middleware(bt).middleware(xt), O = j.succeed(bt, bt.of(({ headers: t, clientId: n }) => A.promise(() => e.resolveSubject(t, n)))), Te = j.succeed(xt, xt.of(({ clientId: e }) => A.succeed({ clientId: e }))), Ee = e.dormancyTenantId ?? "default", De = e.dormancy === "sleep" ? {
-		register: (t, n, r) => z(e.store, {
-			tenantId: r ?? Ee,
-			kind: "workflow",
-			refId: t,
-			wakeAt: n
-		}),
-		cancel: (t, n) => Le(e.store, {
-			tenantId: n ?? Ee,
-			kind: "workflow",
-			refId: t
-		}).then(() => {})
-	} : void 0, k = ne ? await import("@voltro/workflow") : void 0, N = k?.makeWorkflowRunRecorder({
-		store: e.store,
-		...De === void 0 ? {} : { wakeups: De }
-	}), Ae = async (t, n) => {
-		await k.closeWorkflowChildrenForParent({
-			store: e.store,
-			parentExecutionId: t,
-			parentStatus: n,
-			recorder: N,
-			log: { warn: (e, t) => {
-				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-			} },
-			interruptChild: async (t, n) => {
-				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
-				if (!r) throw Error(`Unknown child workflow: ${t}`);
-				if (!o) throw Error("Workflow runtime is not ready");
-				await o.runPromise(r.definition.interrupt(n));
-			}
-		});
-	}, Ne = async (t, n, r) => {
-		let i = (await e.store.query({
-			table: "_voltro_workflow_runs",
-			order: [],
-			predicate: V("executionId", n),
-			projection: void 0,
-			skip: void 0,
-			take: 1
-		}))[0];
-		if (i === void 0) return;
-		let a = await e.store.update("_voltro_workflow_runs", i.id, {
-			status: "cancelled",
-			cancelled: !0,
-			completedAt: /* @__PURE__ */ new Date()
-		}), o = i.subject?.tenantId ?? void 0;
-		a && await N.recordEvent({
-			runId: i.id,
-			eventType: "run-cancelled",
-			payload: {
-				reason: r,
-				workflowName: t,
-				executionId: n,
-				...o == null ? {} : { tenantId: o }
-			}
-		}), a && await Ae(n, "cancelled");
-	}, Re = [...tt(e.discovered.workflows ?? [], {
-		buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? b({
-			subject: t.subject,
-			traceId: t.traceId
-		}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-		resolveStartContext: p
-	}, (t, n, r) => {
-		let i = k.getWorkflowVersionMetadata(t.definition);
-		return k.wrapWorkflowExecuteWithRunRecording({
-			name: t.definition.name,
-			store: e.store,
-			subject: r.subject,
-			source: r.source ?? null,
-			traceId: r.traceId,
-			workflowVersion: i.version,
-			workflowCompatibleVersions: i.compatibleWith,
-			workflowPatches: i.patches,
-			parentExecutionId: r?.parentExecutionId ?? null,
-			parentClosePolicy: r?.parentClosePolicy ?? null,
-			onParentClose: ({ executionId: e, status: t }) => Ae(e, t),
-			recorder: N
-		}, n);
-	}), ...e.discovered.workflowWorkers ?? []], ze = Re.length > 0 ? j.mergeAll(...Re) : j.empty;
-	((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster") && e.workflowEngineLayer !== void 0 && (o = Oe.make(ze.pipe(j.provideMerge(e.workflowEngineLayer))), await o.runPromise(A.void), a = (e.discovered.workflows?.length ?? 0) > 0 ? $e({
-		workflows: e.discovered.workflows ?? [],
-		runEffect: (e) => o.runPromise(e),
-		rememberStartContext: d,
-		signal: async (t, n, r) => {
-			let i = await k.sendWorkflowSignal({
-				store: e.store,
-				recorder: N,
-				target: t,
-				signalName: n,
-				payload: r
-			});
-			return await o.runPromise(k.completeSuspendingSignal({
-				store: e.store,
-				target: t,
-				signalName: n,
-				payload: r
-			})).catch(() => {}), i;
-		},
-		update: (t, n, r, i) => k.sendWorkflowUpdate({
-			store: e.store,
-			recorder: N,
-			target: t,
-			updateName: n,
-			payload: r,
-			...i === void 0 ? {} : { options: i }
-		}),
-		listRuns: (t) => fe(e.store, t),
-		retry: (t, n) => ue({
-			store: e.store,
-			workflows: e.discovered.workflows ?? [],
-			runPromise: (e) => o.runPromise(e)
-		}, t, n)
-	}) : void 0);
-	let Be = j.mergeAll(we.toLayer(T), O, Te), Ve = he(T, e.discovered.queries.map((e) => e.descriptor.name), te), Ge = j.mergeAll(we.toLayer(Ve), O, Te), R = e.observability, Ke = await Ie({
-		...R && R.spanProcessors.length > 0 ? { extraSpanProcessors: R.spanProcessors } : {},
-		...R && R.metricReaders.length > 0 ? { extraMetricReaders: R.metricReaders } : {},
-		...R && Object.keys(R.resourceAttributes).length > 0 ? { resourceAttributes: R.resourceAttributes } : {},
-		...R && R.sampler !== void 0 ? { sampler: R.sampler } : {}
-	}), Qe = !1, it = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, ot = ut({
-		group: we,
-		handlersLayer: Be,
-		httpHandlersLayer: Ge,
-		port: e.port ?? 4e3,
-		path: e.path ?? "/ws",
-		tracerLayer: Ke.layer,
-		healthCheck: {
-			isReady: () => Qe,
-			...it ? { ping: it } : {}
-		},
-		...Se.length > 0 ? { httpRoutes: Se } : {},
-		...se.size > 0 ? { webhookRoutes: se } : {}
-	});
-	if (await Pe(ot), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? We(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : lt;
-		c = await dt(e.discovered.schedules ?? [], {
-			store: e.store,
-			coordinator: t,
-			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
-			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`,
-			armSelf: e.scheduleArmSelf ?? !0,
-			dormancy: e.dormancy ?? "always-on",
-			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
-			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => b({
-				subject: r,
-				traceId: t
-			}, e.store, void 0, `schedule:${n}`),
-			log: {
-				info: (e, t) => {
-					process.stdout.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				warn: (e, t) => {
-					process.stderr.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				debug: () => {}
-			},
-			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
-			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
-		}), e.onSchedulerReady?.(c);
-	}
-	let pt = e.log ?? M({ scope: "voltro:serve" }), ht, Z;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (ht = s(e.discovered.subscribers ?? [], e.store, pt.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = pt.child("reaction");
-		Z = ee(e.discovered.reactions ?? [], e.store, {
-			runAct: async (n, r) => {
-				if (n.kind === "workflow") {
-					if (g === void 0) {
-						t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
-						return;
-					}
-					let e = r.new ?? r.old ?? {};
-					await et(g, {
-						traceId: `reaction:${n.workflow}`,
-						source: `reaction:${n.workflow}`
-					}).start(n.workflow, e);
-					return;
-				}
-				await C(n.agent, r, {
-					findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-					runAction: (e, t, n) => Promise.resolve(me(e, t, n)),
-					makeSubject: (e) => St(e),
-					now: () => Date.now(),
-					log: t
-				});
-			},
-			checkBudget: async (n, r) => {
-				try {
-					let { requireAiBudget: t } = await import("@voltro/ai");
-					return (await A.runPromise(A.either(t(e.store, {
-						tenantId: n,
-						limitUsd: r
-					}))))._tag === "Right";
-				} catch (e) {
-					return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
-				}
-			}
-		}, t);
-	}
-	let At;
-	return (e.discovered.aggregates?.length ?? 0) > 0 && (At = await i({
-		discovered: e.discovered.aggregates ?? [],
-		store: e.store,
-		log: pt.child("aggregate"),
-		...e.analytics === void 0 ? {} : { analytics: e.analytics },
-		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
-		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), le = j.succeed(ke, At.registry)), Qe = !0, e.bootTiming?.mark("ready"), {
-		dispatcher: t,
-		server: ot,
-		scheduler: c,
-		close: async () => {
-			Qe = !1, At?.detach(), Z?.(), ht?.(), await c?.shutdown(), t.close(), await o?.dispose(), await new Promise((e) => ot.close(() => e()));
-		}
-	};
-}, $ = M({ scope: "voltro:serve" }), pn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", mn = (e, t) => {
-	let n = e.indexOf(t);
-	return n >= 0 ? e[n + 1] : void 0;
-}, hn = async (e) => {
-	let t = O(process.cwd());
-	if (N(t)) {
-		let n;
-		try {
-			let e = await import(De(t).href);
-			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
-		} catch (e) {
-			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
-		}
-		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
-	}
-	return gn(e);
-}, gn = async (i) => {
-	let s = Te();
-	process.env.NODE_ENV || (process.env.NODE_ENV = "production"), Pt();
-	let f = process.cwd(), ee = Number(process.env.PORT ?? mn(i, "--port") ?? 4e3), m = await w(f);
-	ot(it(m?.secrets)), await e({
-		rawEnv: m?.env,
-		appType: "api",
-		root: f,
-		log: $,
-		generateTypes: !1
-	}), s.mark("config");
-	let h = (process.env.DB_DIALECT ?? m?.store ?? "memory").toLowerCase(), _ = (h === "mariadb" || h === "postgres" || h === "mssql") && (process.env.CDC ?? "1") !== "0", ae = h === "mariadb" ? "mariadb" : h === "mssql" ? "mssql" : void 0, ue = we(f);
-	if (!Ce() && N(ue)) try {
-		let e = await import(De(ue).href);
-		if (e.modules) {
-			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Ee(f, n)] = r;
-			Se(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
-		}
-	} catch (e) {
-		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
-	}
-	let S = await ce(f), C = await ge(S, { cdc: _ && ae !== void 0 }), fe = S.filter((e) => xe.test(e)), he = fe.length > 0 ? await g(fe, $.child("webhooks")) : void 0, ye = me({
-		mix: C.featureMix,
-		plugins: m?.plugins ?? [],
-		cdc: _ && ae !== void 0,
-		...ae ? { cdcDialect: ae } : {}
-	}), be = m?.analytics !== void 0 && m.analytics.kind !== "noop" && h !== "memory" ? (await E(h)).makeSqlLayer(x()) : void 0, D = await ne({
-		spec: m?.analytics,
-		sqlLayer: be,
-		log: $
-	}), O = (() => {
-		let e = new Set(C.tables.map((e) => e.tableName)), t = [...C.tables];
-		for (let n of [...ye, ...D.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
-		return t;
-	})();
-	for (let e of O) ht(e);
-	let M = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (pn(M, h, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await E(h)).makeSqlLayer(x()), t = await A.runPromise(pt.SqlClient.pipe(A.flatMap((e) => Nt(e, O, {
-			appliedBy: `serve:${M}`,
-			environment: "prod",
-			dialectId: h
-		})), A.provide(e)));
-		t.kind === "prod-mismatch" && ($.error(Mt(t, h)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Mt(t, h));
-	}
-	let ke = Qe(O);
-	s.mark("discover");
-	let P = await pe(m, void 0);
-	m?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = m.cache), m?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = m.cacheRedisUrl), m?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = m.cacheRedisDriver), m?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = m.cacheKeyPrefix);
-	let { service: je, invalidationBus: Me, snapshotCache: Pe, cache: F, backend: Fe, dispose: I } = await y({ env: process.env });
-	$.info(`cache backend resolved: ${Fe}` + (Fe === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), P.onChange((e) => {
-		A.runFork(Me.publish(e.table));
-	}), m?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = m.kv), m?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = m.kvRedisUrl), m?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = m.kvKeyPrefix);
-	let { kv: Ie, service: Le } = await R({ store: P });
-	s.mark("store");
-	let He = Ne({
-		store: P,
-		sink: D.sink,
-		log: $
-	}), Ue = n({
-		store: P,
-		dialect: h
-	}), L = m?.plugins ?? [], qe = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Je, Ye;
-	h !== "memory" && (Je = Oe.make((await E(h)).makeSqlLayer(x())), Ye = await Je.runPromise(pt.SqlClient));
-	let Xe = Ke({
-		coordinator: [
-			"postgres",
-			"mariadb",
-			"mysql",
-			"mssql"
-		].includes(h) ? We(P, qe, $) : lt,
-		replicaId: qe,
-		log: $
-	}), Ze = [], $e = {
-		...Ye ? { sql: Ye } : {},
-		scheduleCoordinated: (e, t, n) => {
-			let r = Xe(e, t, n);
-			return Ze.push(r), r;
-		}
-	};
-	for (let e of L) e.bindDataStore?.(P, $e);
-	let et = L.filter((e) => typeof e.onChangeEvent == "function");
-	if (et.length > 0) {
-		let e = P.changeScope ?? "local";
-		P.onChange((t) => {
-			let n = {
-				table: t.table,
-				op: t.op,
-				new: t.new ?? null,
-				old: t.old ?? null,
-				...t.origin === void 0 ? {} : { origin: t.origin },
-				changeScope: e
-			};
-			for (let e of et) A.runFork(e.onChangeEvent(n).pipe(A.catchAllCause((t) => A.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: k.pretty(t) })))));
-		});
-	}
-	let tt = oe({
-		plugins: L,
-		appName: m?.name ?? "voltro-api",
-		appType: "api",
-		voltroVersion: process.env.npm_package_version ?? "0.0.0",
-		log: $
-	});
-	L.length && await tt.activate(), s.mark("plugins");
-	let nt = await tt.gatherObservability(), rt = await b(P, m, h, {
-		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
-		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
-		debug: () => {}
-	}), z = m?.apiKeys, at = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", st = z ? Ge(ze(P), { prefix: at }) : void 0, ct = st ? [Ve(st, { prefix: at })] : [], ut = ve([...m?.auth?.strategies ?? [], ...ct], Ft(m?.plugins ?? []), m?.auth?.anonymousTenantRequired ?? !1), dt = [...m?.restRoutes ?? [], ...st ? Ae(st, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], B = m?.idempotency, ft = B ? {
-		store: Be(P),
-		header: (typeof B == "object" ? B.header : void 0) ?? "Idempotency-Key",
-		ttlMs: (typeof B == "object" ? B.ttlMs : void 0) ?? 864e5
-	} : void 0, mt = dt.length > 0 ? Lt(dt, {
-		store: P,
-		resolveSubject: (e) => ut({
-			headers: e,
-			clientId: -1
-		}),
-		...ft ? { idempotency: ft } : {}
-	}) : [], V = L.map((e) => e.services).filter((e) => e !== void 0), gt = j.mergeAll(ie({
-		analyticsLayer: D.layer,
-		cacheService: je,
-		kvService: Le,
-		pluginServices: V,
-		userLayers: m?.layers ?? []
-	}), d), _t = m?.scheduling ?? {}, vt = _t.trigger ?? "self", yt = /* @__PURE__ */ new Set([
-		"postgres",
-		"mysql",
-		"mariadb",
-		"mssql"
-	]), H = _t.coordination ?? (yt.has(h) ? "advisoryLock" : "single"), U = H === "cluster" && yt.has(h), bt = U ? "cluster" : H === "advisoryLock" && yt.has(h) ? "advisoryLock" : "single";
-	H === "cluster" && !U && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), H === "advisoryLock" && !yt.has(h) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let xt, W = C.workflows.length > 0 || C.workflowWorkers.length > 0 || C.eventTriggers.length > 0 || (he?.outgoing.length ?? 0) > 0 || U, St;
-	if (W) {
-		if (h === "mssql") {
-			let e = await l(process.cwd());
-			e && $.warn(e);
-		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), i = U ? C.schedules.filter((e) => (e.trigger ?? vt) === "self").map((e) => t({
-			name: e.name,
-			cron: Re(e),
-			execute: async () => {
-				await xt?.fireFromCluster(e.name);
-			}
-		})) : [];
-		St = h === "memory" ? e.layerMemory : await (async () => {
-			let e = await E(h), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
-			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
-				sqlClientLayer: e.makeSqlLayer(x()),
-				runnerStorage: t,
-				dialectId: e.id,
-				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
-				...i.length > 0 ? { extraShardingLayers: i } : {}
-			});
-		})();
-	}
-	let Ct = le(L, t()), G = S.filter((e) => /\.subscribe\.tsx?$/.test(e)), wt = G.length > 0 ? await u(G, $) : [], Tt = S.filter((e) => /\.reaction\.tsx?$/.test(e)), Et = Tt.length > 0 ? await r(Tt, $) : [], K = S.filter((e) => /\.outbox\.tsx?$/.test(e)), Dt = K.length > 0 ? await p(K, $) : [], q = S.filter((e) => /\.aggregate\.tsx?$/.test(e)), J = q.length > 0 ? await te(q, $) : [], Y = o();
-	if (J.length > 0 && h !== "memory") try {
-		Y = a((await E(h)).makeSqlLayer(x()));
-	} catch (e) {
-		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
-	}
-	let Ot = h === "memory" ? lt : We(P, `aggregate@${process.pid}`, $), X = [], kt = [], Z = S.filter((e) => de.test(e));
-	if (Z.length > 0) {
-		let e = $.child("agent"), t = S.filter((e) => v.test(e));
-		t.length > 0 && await _e(t, e);
-		let n = await T(Z, e);
-		for (let e of n.agents) for (let t of se(e)) (t.kind === "action" ? X : kt).push({
-			file: t.file,
-			descriptor: t.descriptor,
-			executor: t.executor
-		});
-		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
-	}
-	s.mark("workflow");
-	let At = await fn({
-		bootTiming: s,
-		discovered: {
-			queries: [...C.queries, ...kt],
-			mutations: C.mutations,
-			actions: [...C.actions, ...X],
-			streams: C.streams,
-			workflows: C.workflows,
-			workflowWorkers: C.workflowWorkers,
-			eventTriggers: C.eventTriggers,
-			schedules: C.schedules,
-			subscribers: wt,
-			outboxHandlers: Dt,
-			connections: C.connections,
-			reactions: Et,
-			aggregates: J,
-			...he === void 0 ? {} : { webhooks: he }
-		},
-		log: $,
-		analytics: D.sink,
-		aggregateStorage: Y,
-		aggregateCoordinator: Ot,
-		store: P,
-		kv: Ie,
-		cache: F,
-		snapshotCache: Pe,
-		schemaRegistry: ke,
-		tenantScopedTables: C.tenantScopedTables,
-		softDeleteScopedTables: C.softDeleteScopedTables,
-		dataTransferSnapshot: jt(O),
-		dataTransferDialect: h,
-		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => ut({
-			headers: e,
-			clientId: t
-		}),
-		httpRoutes: [...L.flatMap((e) => e.httpRoutes ?? []), ...mt],
-		...gt ? { baseLayer: gt } : {},
-		...St === void 0 ? {} : { workflowEngineLayer: St },
-		scheduleDefaultTrigger: vt,
-		scheduleCoordination: bt,
-		scheduleArmSelf: !U,
-		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : m?.dormancy ?? "always-on",
-		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...Ct === void 0 ? {} : { scheduleFireInterceptor: Ct },
-		onSchedulerReady: (e) => {
-			xt = e;
-		},
-		observability: nt,
-		port: ee,
-		...m?.transport?.wsPath ? { path: m.transport.wsPath } : {}
-	});
-	c(re([
-		C.queries,
-		C.mutations,
-		C.actions,
-		C.streams
-	]), (e) => {
-		$.warn(e);
-	}), $.info(`API listening on :${ee}`, {
-		dialect: h,
-		queries: C.queries.length,
-		mutations: C.mutations.length,
-		actions: C.actions.length,
-		streams: C.streams.length,
-		workflows: C.workflows.length,
-		workflowWorkers: C.workflowWorkers.length,
-		schedules: C.schedules.length,
-		scheduleCoordination: bt
-	}), s.finish($);
-	let It = () => {
-		for (let e of Ze) e.stop();
-		He.detach(), Ue.stop(), I(), Je?.dispose(), Promise.resolve(tt.deactivate()).then(() => rt?.close()).then(() => D.dispose()).then(() => At.close()).then(() => P.close?.()).then(() => process.exit(0));
-	};
-	return process.on("SIGINT", It), process.on("SIGTERM", It), await new Promise(() => {}), 0;
-};
-//#endregion
-export { hn as n, un as r, gn as t };