@voltro/cli 0.11.4 → 0.12.0

package/dist/serveCommand-ARqSs73o.js

@@ -1,1117 +0,0 @@
-import { At as e, t } from "./inspectMetrics-D4EJ8LTi.js";
-import { $ as n, A as r, C as i, D as a, E as o, F as s, G as c, H as l, I as u, J as d, M as f, N as p, O as ee, P as m, Q as h, S as g, T as te, U as ne, W as re, X as _, Y as ie, Z as ae, _ as oe, b as v, d as se, dt as ce, et as y, f as b, ft as le, g as ue, gt as x, h as de, i as S, it as fe, j as C, k as w, m as pe, n as me, nt as T, o as he, pt as ge, q as _e, s as E, t as ve, ut as ye, v as be, w as xe, x as Se, y as D } from "./dev-Cvojvb_J.js";
-import { a as Ce, r as we } from "./startupRunner-DhlX9nqd.js";
-import { c as O, r as Te } from "./apiBuild-DHHuiwXF.js";
-import { t as Ee } from "./bootTiming-BdyP9nYw.js";
-import { join as De } from "node:path";
-import { pathToFileURL as Oe } from "node:url";
-import { Cause as ke, Effect as k, Layer as A, ManagedRuntime as Ae } from "effect";
-import { createLogger as j } from "@voltro/logger";
-import { existsSync as je } from "node:fs";
-import { AggregateRegistry as Me, Dispatcher as M, apiKeyManagementRoutes as N, applySoftDeleteScope as Ne, applyTenantScope as Pe, attachAnalyticsMirror as P, awaitServerListening as Fe, bindMutation as F, bindStream as Ie, bindSubscription as I, buildTracingLayer as Le, cancelWakeup as Re, compileCron as ze, dataStoreApiKeyStore as Be, dataStoreIdempotencyStore as Ve, frameworkApiKeyStrategy as He, installPolicyGuardResolver as Ue, loadResourceTuples as We, makeActionRunner as L, makeAdvisoryLockCoordinator as Ge, makeApiKeyService as Ke, makeAsyncKv as qe, makeCoordinatedScheduler as Je, makeEffectStoreLayer as Ye, makeLazyWorkflowFacade as Xe, makeMutationRunner as Ze, makeOneShotQueryRunner as Qe, makeQueryDescriptorProducer as $e, makeQueryReauthorizer as et, makeQuerySubscriber as tt, makeSchemaRegistry as R, makeWorkflowFacade as nt, makeWorkflowFacadeWithCallerContext as rt, makeWorkflowLayers as it, noopKv as z, recordSubscriptionDelivery as at, registerWakeup as ot, resolveSecretsBackend as st, runProvidedEffect as ct, setSecretsBackend as lt, setSystemStoreHandle as ut, setTupleSource as dt, singleCoordinator as ft, startRpcServer as B, startScheduler as pt, workflowToRpc as mt } from "@voltro/runtime";
-import { RpcGroup as ht } from "@effect/rpc";
-import { SqlClient as gt } from "@effect/sql";
-import { and as _t, ensureTableRegistered as vt, eq as V, or as yt } from "@voltro/database";
-import { fromNodeReadable as bt, getObjectStream as xt, putObjectStream as H, resolveStorageProvider as U, toNodeReadable as St } from "@voltro/plugin-storage";
-import { AuthMiddleware as Ct, ConnectionInfoMiddleware as W, actionToRpc as G, anonymousSubject as wt, mutationToRpc as Tt, queryToRpc as K, streamToRpc as Et, workflowCancelDescriptor as Dt, workflowDomainEventsQueryDescriptor as Ot, workflowEventDeliveriesQueryDescriptor as q, workflowResumeDescriptor as kt, workflowRunEventsQueryDescriptor as J, workflowRunQueryDescriptor as At, workflowRunStepsQueryDescriptor as Y, workflowRunsQueryDescriptor as X, workflowSignalDescriptor as jt, workflowUpdateDescriptor as Mt } from "@voltro/protocol";
-import { createHash as Z, timingSafeEqual as Nt } from "node:crypto";
-import { declaredSnapshot as Pt, describeOutcome as Ft, runPlannedMigrations as It } from "@voltro/database/sql";
-import { assertProductionSessionSecret as Lt } from "@voltro/protocol/session";
-import { getAuthSessionStrategy as Rt } from "@voltro/plugin-auth";
-import { collectPublicApiRoutes as zt, restRoutesToHttpRoutes as Bt } from "@voltro/protocol/rest";
-import { buildDeliverWebhookExecute as Vt, buildWebhooksService as Ht, defaultIncomingPath as Ut, deliverWebhookWorkflow as Wt, mountIncomingWebhook as Gt } from "@voltro/plugin-webhooks";
-import { packBundle as Kt, runExport as qt, runImport as Jt, storageBlobSink as Yt, storageRefsBlobSource as Xt, unpackBundle as Zt, unpackBundleToDir as Qt } from "@voltro/data-transfer";
-//#region src/cliArgs.ts
-var $t = (e, t) => {
-	for (let n = 0; n < e.length; n++) {
-		let r = e[n];
-		if (r === t) return e[n + 1];
-		if (r.startsWith(t + "=")) return r.slice(t.length + 1);
-	}
-}, en = (e, t) => {
-	let n = [], r, i = !1;
-	for (let a = 0; a < e.length; a++) {
-		let o = e[a];
-		if (!i && o === t) {
-			r = e[++a], i = !0;
-			continue;
-		}
-		if (!i && o.startsWith(t + "=")) {
-			r = o.slice(t.length + 1), i = !0;
-			continue;
-		}
-		n.push(o);
-	}
-	return {
-		value: r,
-		rest: n
-	};
-}, tn = (e, ...t) => e.some((e) => t.includes(e)), nn = (e) => e.find((e) => !e.startsWith("-")), rn = "/_voltro/admin/import", an = "/_voltro/admin/export", Q = (e, t) => ({
-	status: e,
-	contentType: "application/json; charset=utf-8",
-	body: JSON.stringify(t)
-}), on = (e) => {
-	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
-	return n ? n[1] : null;
-}, sn = (e, t) => Nt(Z("sha256").update(e).digest(), Z("sha256").update(t).digest()), cn = (e, t) => {
-	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
-	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let n = on(e.headers);
-	return !n || !sn(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, ln = j({ scope: "voltro:admin-import" }), un = "VBUNDLE2", dn = async function* (e) {
-	yield e;
-}, fn = (e) => async (t) => {
-	let n = cn(t, e.secret);
-	if (n) return n;
-	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === un, c, l;
-	if (s) c = dn(t.rawBody), l = "upload";
-	else {
-		let n;
-		try {
-			n = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-		} catch {
-			return Q(400, { error: "body must be a packed bundle archive or { bundleKey } JSON" });
-		}
-		if (typeof n.bundleKey != "string" || !n.bundleKey) return Q(400, { error: "body.bundleKey (string) is required for the storage transport" });
-		if (!e.openArchive) return Q(501, { error: "storage transport not configured on this instance" });
-		c = e.openArchive(n.bundleKey), l = "storage";
-	}
-	let u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-import-"));
-	try {
-		e.assetSink ? await Zt(c, {
-			dir: p,
-			blobs: e.assetSink
-		}) : await Qt(c, p);
-		let t = await k.runPromiseExit(Jt({
-			store: e.store,
-			bundleDir: p,
-			...r ? { mode: r } : {},
-			...i ? { onConflict: i } : {},
-			...a ? { atomic: a } : {},
-			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
-			force: o,
-			onWarn: (e) => ln.warn("admin.import", { message: e }),
-			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
-		}));
-		if (t._tag === "Failure") {
-			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
-			if (e && e._tag === "SchemaDriftError") {
-				let t = e;
-				return ln.warn("admin.import refused (schema drift)", {
-					transport: l,
-					bundle: t.bundleFingerprint.slice(0, 16),
-					target: t.targetFingerprint.slice(0, 16)
-				}), Q(409, {
-					error: "schema drift",
-					bundleFingerprint: t.bundleFingerprint,
-					targetFingerprint: t.targetFingerprint,
-					diff: t.diff,
-					hint: "re-export against the current schema, or resend with x-import-force: 1"
-				});
-			}
-			throw Error(String(e?.message ?? e ?? "import failed"));
-		}
-		let n = t.value, s = n.tables.reduce((e, t) => e + t.rowCount, 0);
-		return ln.info("admin.import", {
-			transport: l,
-			tables: n.tables.length,
-			rows: s,
-			mode: r ?? "upsert",
-			atomic: a
-		}), Q(200, {
-			tables: n.tables.length,
-			rows: s,
-			transport: l
-		});
-	} catch (e) {
-		return ln.warn("admin.import failed", {
-			transport: l,
-			error: e?.message ?? String(e)
-		}), Q(500, {
-			error: "import failed",
-			message: e?.message ?? String(e)
-		});
-	} finally {
-		await d.rm(p, {
-			recursive: !0,
-			force: !0
-		});
-	}
-}, pn = j({ scope: "voltro:admin-export" }), mn = async (e) => {
-	let t = [];
-	for await (let n of e) t.push(Buffer.from(n));
-	return new Uint8Array(Buffer.concat(t));
-}, hn = (e) => typeof e.tenant == "string" && e.tenant ? {
-	kind: "tenant",
-	tenantId: e.tenant
-} : Array.isArray(e.tables) && e.tables.length ? {
-	kind: "tables",
-	tables: e.tables.filter((e) => typeof e == "string")
-} : { kind: "all" }, gn = (e) => async (t) => {
-	let n = cn(t, e.secret);
-	if (n) return n;
-	let r;
-	try {
-		r = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-	} catch {
-		return Q(400, { error: "body must be JSON: { profile?, tenant?, tables?, consistency?, compression?, bundleKey? }" });
-	}
-	let i = {};
-	if (typeof r.profile == "string" && r.profile) {
-		if (!e.loadProfile) return Q(501, { error: "server-side profiles not configured on this instance" });
-		try {
-			i = await e.loadProfile(r.profile);
-		} catch (e) {
-			return Q(400, {
-				error: `profile '${r.profile}' could not be loaded`,
-				message: e?.message ?? String(e)
-			});
-		}
-	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? hn(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-export-"));
-	try {
-		let t = await k.runPromise(qt({
-			store: e.store,
-			snapshot: e.snapshot,
-			dialect: e.dialect,
-			outDir: p,
-			...i.subset ? { subset: i.subset } : {
-				scope: s,
-				...e.tenantTables && e.tenantTables.length > 0 ? { tenantTables: e.tenantTables } : {}
-			},
-			consistency: a,
-			...o ? { compression: o } : {},
-			...i.masking ? { masking: i.masking } : {}
-		})), n = t.tables.reduce((e, t) => e + t.rowCount, 0), u = t.masking?.transformed.length ?? 0;
-		if (c) {
-			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
-			let i = r.bundleKey;
-			return await e.putArchive(i, () => Kt({
-				dir: p,
-				...l
-			})), pn.info("admin.export", {
-				transport: "storage",
-				tables: t.tables.length,
-				rows: n,
-				masked: u,
-				bundleKey: i
-			}), Q(200, {
-				bundleKey: i,
-				tables: t.tables.length,
-				rows: n,
-				masked: u,
-				transport: "storage"
-			});
-		}
-		let d = await mn(Kt({
-			dir: p,
-			...l
-		}));
-		return pn.info("admin.export", {
-			transport: "download",
-			tables: t.tables.length,
-			rows: n,
-			masked: u,
-			bytes: d.byteLength
-		}), {
-			status: 200,
-			contentType: "application/octet-stream",
-			body: d,
-			headers: {
-				"x-export-tables": String(t.tables.length),
-				"x-export-rows": String(n),
-				"x-export-masked": String(u)
-			}
-		};
-	} catch (e) {
-		return pn.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
-			error: "export failed",
-			message: e?.message ?? String(e)
-		});
-	} finally {
-		await d.rm(p, {
-			recursive: !0,
-			force: !0
-		});
-	}
-}, _n = async (e) => {
-	let { resolve: t } = await import("node:path"), { existsSync: n } = await import("node:fs"), r = [
-		e,
-		`${e}.profile.ts`,
-		`data-profiles/${e}.ts`,
-		`data-profiles/${e}.profile.ts`
-	].map((e) => t(process.cwd(), e)), i = r.find((e) => n(e));
-	if (!i) throw Error(`data profile '${e}' not found (looked for: ${r.join(", ")})`);
-	let a = await import(i), o = a.default ?? a.profile;
-	if (!o) throw Error(`data profile '${i}' has no default export`);
-	return o;
-}, vn = {
-	get: async () => void 0,
-	set: async () => {},
-	setWithTags: async () => {},
-	remove: async () => !1,
-	has: async () => !1,
-	clear: async () => {},
-	invalidateTag: async () => 0,
-	wrap: async (e, t, n) => n()
-}, yn = async (e) => {
-	ut({
-		dataStore: e.store,
-		schemaRegistry: e.schemaRegistry
-	});
-	let t = new M({
-		store: e.store,
-		...e.snapshotCache ? { cache: e.snapshotCache } : {},
-		recordDelivery: (e) => at({
-			label: e.label,
-			kind: e.kind,
-			durationMs: e.durationMs,
-			rowCount: e.rowCount
-		})
-	}), n = e.cache ?? vn, r = e.kv ?? z, a, o, c, l = /* @__PURE__ */ new Map(), u = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, d = async (t, n, r) => {
-		let i = {
-			...r,
-			source: r.source ?? `workflow:${t}`
-		};
-		l.set(n, i);
-		try {
-			let r = await e.store.query({
-				table: "_voltro_workflow_start_contexts",
-				order: [],
-				predicate: V("executionId", n),
-				projection: ["id"],
-				skip: void 0,
-				take: 1
-			}), a = {
-				workflowName: t,
-				executionId: n,
-				subject: i.subject ?? null,
-				traceId: i.traceId ?? null,
-				source: i.source ?? null,
-				parentExecutionId: i.parentExecutionId ?? null,
-				parentClosePolicy: i.parentClosePolicy ?? null,
-				createdAt: /* @__PURE__ */ new Date()
-			};
-			r[0] === void 0 ? await e.store.insert("_voltro_workflow_start_contexts", {
-				id: u(),
-				...a
-			}) : await e.store.update("_voltro_workflow_start_contexts", r[0].id, a);
-		} catch (e) {
-			process.stderr.write(`[workflow] failed to persist start context for ${t}/${n}: ${e?.message ?? String(e)}\n`);
-		}
-	}, p = async (t, n) => {
-		let r = l.get(n);
-		if (r !== void 0) return r;
-		try {
-			let t = (await e.store.query({
-				table: "_voltro_workflow_start_contexts",
-				order: [],
-				predicate: V("executionId", n),
-				projection: void 0,
-				skip: void 0,
-				take: 1
-			}))[0];
-			if (t === void 0) return;
-			let r = {
-				...t.subject === null ? {} : { subject: t.subject },
-				...t.traceId === null ? {} : { traceId: t.traceId },
-				...t.source === null ? {} : { source: t.source },
-				...t.parentExecutionId === null ? {} : { parentExecutionId: t.parentExecutionId },
-				...t.parentClosePolicy === null ? {} : { parentClosePolicy: t.parentClosePolicy }
-			};
-			return l.set(n, r), r;
-		} catch (e) {
-			process.stderr.write(`[workflow] failed to load start context for ${n}: ${e?.message ?? String(e)}\n`);
-			return;
-		}
-	}, g = (e.discovered.workflows?.length ?? 0) > 0 ? Xe(() => a) : void 0, te = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ne = te || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", re = e.tenantIsolation === "namespace", ie = (e.log ?? j({ scope: "voltro:serve" })).child("webhooks"), oe, v = e.discovered.webhooks;
-	if (v && v.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
-		let t = e.workflowEngineLayer, i = h({
-			store: e.store,
-			schemaRegistry: e.schemaRegistry,
-			cache: n,
-			kv: r
-		}), a = v.outgoing.map((e) => e.descriptor);
-		oe = Ht(i, async (e) => {
-			let n = Wt.execute(e).pipe(k.provide(Wt.toLayer(Vt(i, { events: a })).pipe(A.provideMerge(t))));
-			k.runPromise(n).catch((t) => {
-				ie.error("deliverWebhook workflow crashed", {
-					deliveryId: e.deliveryId,
-					targetId: e.targetId
-				}, t);
-			});
-		}, { events: a });
-	}
-	let se = /* @__PURE__ */ new Map();
-	if (v) for (let e of v.incoming) {
-		let t = e.descriptor.path ?? Ut(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Gt(e.descriptor, {
-			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => g === void 0 ? void 0 : rt(g, {
-				traceId: `incoming:${e.descriptor.id}`,
-				source: `incoming:${e.descriptor.id}`
-			}),
-			log: (e) => {
-				let t = {
-					webhookId: e.webhookId,
-					status: e.status,
-					signatureOk: String(e.signatureOk),
-					idempotency: e.idempotency,
-					durationMs: e.durationMs
-				};
-				e.status >= 500 ? ie.error("incoming delivery failed", t) : e.status >= 400 ? ie.warn("incoming delivery rejected", t) : ie.info("incoming delivery handled", t);
-			}
-		});
-		se.set(t, { handle: r });
-	}
-	Ue(), dt((t) => We(e.store, t.subjectId, t.resourceType, t.resourceId));
-	let ce = (e.discovered.outboxHandlers?.length ?? 0) > 0 ? m({
-		handlers: e.discovered.outboxHandlers ?? [],
-		store: e.store,
-		log: (e.log ?? j({ scope: "voltro:serve" })).child("outbox")
-	}) : void 0, y = f({
-		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
-		store: e.store,
-		publicUrl: C(e.port ?? 4e3),
-		log: (e.log ?? j({ scope: "voltro:serve" })).child("connections")
-	}), b = ae({
-		store: e.store,
-		schemaRegistry: e.schemaRegistry,
-		cache: n,
-		kv: r,
-		...oe === void 0 ? {} : { webhooksService: oe },
-		...g === void 0 ? {} : { workflowsProxy: g },
-		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: re,
-		...ce === void 0 ? {} : { outbox: { nudge: ce.nudge } },
-		...y.active ? { connections: { registry: y.registry } } : {}
-	}), le = A.succeed(Me, xe), ue = (t, n) => {
-		let r = t.pipe(k.provide(Ye(n)));
-		return ct((e.baseLayer ? r.pipe(k.provide(e.baseLayer)) : r).pipe(k.provide(le)));
-	}, x = Ze({
-		store: e.store,
-		buildContext: (e, t, n) => b(e, t, n),
-		runEffect: ue,
-		undoCapture: D()
-	}), S = be(), fe = L({
-		buildContext: (e) => b(e),
-		runEffect: ue
-	}), me = {
-		buildContext: (e) => b(e),
-		finalize: (t, n) => Ne(Pe(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
-		provideEffect: (e, t) => e.pipe(k.provide(Ye(t)))
-	}, T = $e(me), he = Qe({
-		...me,
-		queryRows: (t) => e.store.query(t)
-	}), ge = tt({
-		...me,
-		subscribeDescriptor: (e, n, r) => t.subscribe(e, n, r),
-		subscribeComputed: (e, n, r) => t.subscribeComputed(e, n, r)
-	}), E = {};
-	for (let n of [
-		...e.discovered.queries,
-		...S.queries,
-		...y.queries
-	]) E[n.descriptor.name] = (e) => I(T(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, et(n, e));
-	for (let t of [
-		...e.discovered.mutations,
-		...S.mutations,
-		...y.mutations
-	]) E[t.descriptor.name] = (e) => F(async (e, n) => x(t, e, n), e, `mutation.${t.descriptor.name}`);
-	for (let t of [...e.discovered.actions, ...y.actions]) E[t.descriptor.name] = (e) => F(async (e, n) => fe(t, e, n), e, `action.${t.descriptor.name}`);
-	let ve = () => `public-${Math.random().toString(36).slice(2, 10)}`, ye = [
-		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => he(e, t, {
-				subject: n.subject,
-				traceId: ve()
-			}),
-			subscribe: (t, n, r) => ge(e, t, {
-				subject: n.subject,
-				traceId: ve()
-			}, r)
-		})),
-		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => x(e, t, {
-				subject: n.subject,
-				traceId: ve()
-			})
-		})),
-		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => fe(e, t, {
-				subject: n.subject,
-				traceId: ve()
-			})
-		}))
-	], Se = ye.length > 0 ? Bt(zt(ye), {
-		store: e.store,
-		resolveSubject: (t) => e.resolveSubject(t, -1)
-	}) : [], Ce = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, we = Ce && Ce.length >= 16 ? [{
-		method: "POST",
-		path: rn,
-		handle: fn({
-			secret: Ce,
-			store: e.store,
-			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-			assetSink: Yt(U({})),
-			openArchive: (e) => (async function* () {
-				let t = U({}), n = await St((await k.runPromise(xt(t, e))).stream);
-				for await (let e of n) yield e instanceof Uint8Array ? e : new Uint8Array(e);
-			})()
-		})
-	}, {
-		method: "POST",
-		path: an,
-		handle: gn({
-			secret: Ce,
-			store: e.store,
-			snapshot: e.dataTransferSnapshot ?? { tables: [] },
-			dialect: e.dataTransferDialect ?? "memory",
-			tenantTables: [...e.tenantScopedTables],
-			loadProfile: _n,
-			assetSource: Xt(U({}), e.store),
-			putArchive: async (e, t) => {
-				let { Readable: n } = await import("node:stream"), r = U({}), i = bt("storage", () => n.from(t()));
-				await k.runPromise(H(r, e, i, { contentType: "application/octet-stream" }));
-			}
-		})
-	}] : [], O = [
-		...e.httpRoutes ?? [],
-		...Se,
-		...we,
-		...y.httpRoutes
-	];
-	for (let t of e.discovered.streams ?? []) E[t.descriptor.name] = (n) => Ie((r) => {
-		let i = b(r), a = t.executor(n, i);
-		if (k.isEffect(a)) {
-			let t = a.pipe(k.provide(Ye(i.store)));
-			return (e.baseLayer ? t.pipe(k.provide(e.baseLayer)) : t).pipe(k.provide(le));
-		}
-		return typeof a == "object" && a && typeof a.then == "function" ? k.promise(() => a) : a;
-	}, `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) E[t.definition.name] = (e) => F(async (e, n) => {
-		let r = n;
-		return rt(g, {
-			subject: r.subject,
-			traceId: r.traceId,
-			source: "workflow-rpc"
-		}).start(t.definition.name, e);
-	}, e, `workflow.${t.definition.name}`);
-	te && (E[At.name] = (e) => I(T({
-		descriptor: At,
-		executor: (e) => {
-			let t = e.id;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: yt(V("id", t), V("executionId", t)),
-				take: 1,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${At.name}`), E[X.name] = (e) => I(T({
-		descriptor: X,
-		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [V("tag", t.tag)], ...t.status === void 0 ? [] : [V("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : _t(...n),
-				take: r,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${X.name}`), E[Y.name] = (e) => I(T({
-		descriptor: Y,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_steps",
-				order: [{
-					column: "startedAt",
-					direction: "asc"
-				}],
-				predicate: V("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Y.name}`), E[J.name] = (e) => I(T({
-		descriptor: J,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_events",
-				order: [{
-					column: "occurredAt",
-					direction: "asc"
-				}],
-				predicate: V("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${J.name}`), E[Ot.name] = (e) => I(T({
-		descriptor: Ot,
-		executor: (e) => {
-			let t = e;
-			return {
-				table: "_voltro_workflow_events",
-				order: [{
-					column: "occurredAt",
-					direction: "desc"
-				}],
-				predicate: t.name === void 0 ? void 0 : V("name", t.name),
-				take: Math.max(1, Math.min(500, t.limit ?? 100)),
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Ot.name}`), E[q.name] = (e) => I(T({
-		descriptor: q,
-		executor: (e) => {
-			let t = e.eventId;
-			return {
-				table: "_voltro_workflow_event_deliveries",
-				order: [{
-					column: "createdAt",
-					direction: "asc"
-				}],
-				predicate: V("eventId", t),
-				take: 500,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${q.name}`), E[Dt.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await _(e.store, n.subject, { executionId: r.executionId }), await g.cancel(r.workflowName, r.executionId), await Be(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Dt.name}`), E[kt.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await _(e.store, n.subject, { executionId: r.executionId }), await g.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${kt.name}`), E[jt.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await _(e.store, n.subject, { id: r.id }), g.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${jt.name}`), E[Mt.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await _(e.store, n.subject, { id: r.id }), g.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${Mt.name}`));
-	let Te = [
-		...e.discovered.queries.map((e) => K(e.descriptor)),
-		...e.discovered.mutations.map((e) => Tt(e.descriptor)),
-		...e.discovered.actions.map((e) => G(e.descriptor)),
-		...S.queries.map((e) => K(e.descriptor)),
-		...S.mutations.map((e) => Tt(e.descriptor)),
-		...y.queries.map((e) => K(e.descriptor)),
-		...y.mutations.map((e) => Tt(e.descriptor)),
-		...y.actions.map((e) => G(e.descriptor)),
-		...(e.discovered.streams ?? []).map((e) => Et(e.descriptor)),
-		...(e.discovered.workflows ?? []).map((e) => mt(e.definition)),
-		...te ? [
-			K(At),
-			K(X),
-			K(Y),
-			K(J),
-			K(Ot),
-			K(q),
-			G(Dt),
-			G(kt),
-			G(jt),
-			G(Mt)
-		] : []
-	], Ee = ht.make(...Te).middleware(Ct).middleware(W), De = A.succeed(Ct, Ct.of(({ headers: t, clientId: n }) => k.promise(() => e.resolveSubject(t, n)))), Oe = A.succeed(W, W.of(({ clientId: e }) => k.succeed({ clientId: e }))), ke = e.dormancyTenantId ?? "default", je = e.dormancy === "sleep" ? {
-		register: (t, n, r) => ot(e.store, {
-			tenantId: r ?? ke,
-			kind: "workflow",
-			refId: t,
-			wakeAt: n
-		}),
-		cancel: (t, n) => Re(e.store, {
-			tenantId: n ?? ke,
-			kind: "workflow",
-			refId: t
-		}).then(() => {})
-	} : void 0, N = ne ? await import("@voltro/workflow") : void 0, P = N?.makeWorkflowRunRecorder({
-		store: e.store,
-		...je === void 0 ? {} : { wakeups: je }
-	}), ze = async (t, n) => {
-		await N.closeWorkflowChildrenForParent({
-			store: e.store,
-			parentExecutionId: t,
-			parentStatus: n,
-			recorder: P,
-			log: { warn: (e, t) => {
-				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-			} },
-			interruptChild: async (t, n) => {
-				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
-				if (!r) throw Error(`Unknown child workflow: ${t}`);
-				if (!o) throw Error("Workflow runtime is not ready");
-				await o.runPromise(r.definition.interrupt(n));
-			}
-		});
-	}, Be = async (t, n, r) => {
-		let i = (await e.store.query({
-			table: "_voltro_workflow_runs",
-			order: [],
-			predicate: V("executionId", n),
-			projection: void 0,
-			skip: void 0,
-			take: 1
-		}))[0];
-		if (i === void 0) return;
-		let a = await e.store.update("_voltro_workflow_runs", i.id, {
-			status: "cancelled",
-			cancelled: !0,
-			completedAt: /* @__PURE__ */ new Date()
-		}), o = i.subject?.tenantId ?? void 0;
-		a && await P.recordEvent({
-			runId: i.id,
-			eventType: "run-cancelled",
-			payload: {
-				reason: r,
-				workflowName: t,
-				executionId: n,
-				...o == null ? {} : { tenantId: o }
-			}
-		}), a && await ze(n, "cancelled");
-	}, Ve = [...it(e.discovered.workflows ?? [], {
-		buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? b({
-			subject: t.subject,
-			traceId: t.traceId
-		}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-		resolveStartContext: p
-	}, (t, n, r) => {
-		let i = N.getWorkflowVersionMetadata(t.definition);
-		return N.wrapWorkflowExecuteWithRunRecording({
-			name: t.definition.name,
-			store: e.store,
-			subject: r.subject,
-			source: r.source ?? null,
-			traceId: r.traceId,
-			workflowVersion: i.version,
-			workflowCompatibleVersions: i.compatibleWith,
-			workflowPatches: i.patches,
-			parentExecutionId: r?.parentExecutionId ?? null,
-			parentClosePolicy: r?.parentClosePolicy ?? null,
-			onParentClose: ({ executionId: e, status: t }) => ze(e, t),
-			recorder: P
-		}, n);
-	}), ...e.discovered.workflowWorkers ?? []], He = Ve.length > 0 ? A.mergeAll(...Ve) : A.empty;
-	((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster") && e.workflowEngineLayer !== void 0 && (o = Ae.make(He.pipe(A.provideMerge(e.workflowEngineLayer))), await o.runPromise(k.void), a = (e.discovered.workflows?.length ?? 0) > 0 ? nt({
-		workflows: e.discovered.workflows ?? [],
-		runEffect: (e) => o.runPromise(e),
-		rememberStartContext: d,
-		signal: async (t, n, r) => {
-			let i = await N.sendWorkflowSignal({
-				store: e.store,
-				recorder: P,
-				target: t,
-				signalName: n,
-				payload: r
-			});
-			return await o.runPromise(N.completeSuspendingSignal({
-				store: e.store,
-				target: t,
-				signalName: n,
-				payload: r
-			})).catch(() => {}), i;
-		},
-		update: (t, n, r, i) => N.sendWorkflowUpdate({
-			store: e.store,
-			recorder: P,
-			target: t,
-			updateName: n,
-			payload: r,
-			...i === void 0 ? {} : { options: i }
-		}),
-		listRuns: (t) => pe(e.store, t),
-		retry: (t, n) => de({
-			store: e.store,
-			workflows: e.discovered.workflows ?? [],
-			runPromise: (e) => o.runPromise(e)
-		}, t, n)
-	}) : void 0);
-	let Ke = A.mergeAll(Ee.toLayer(E), De, Oe), qe = _e(E, e.discovered.queries.map((e) => e.descriptor.name), te), Je = A.mergeAll(Ee.toLayer(qe), De, Oe), R = e.observability, st = await Le({
-		...R && R.spanProcessors.length > 0 ? { extraSpanProcessors: R.spanProcessors } : {},
-		...R && R.metricReaders.length > 0 ? { extraMetricReaders: R.metricReaders } : {},
-		...R && Object.keys(R.resourceAttributes).length > 0 ? { resourceAttributes: R.resourceAttributes } : {},
-		...R && R.sampler !== void 0 ? { sampler: R.sampler } : {}
-	}), lt = !1, gt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, vt = B({
-		group: Ee,
-		handlersLayer: Ke,
-		httpHandlersLayer: Je,
-		port: e.port ?? 4e3,
-		path: e.path ?? "/ws",
-		tracerLayer: st.layer,
-		healthCheck: {
-			isReady: () => lt,
-			...gt ? { ping: gt } : {}
-		},
-		...O.length > 0 ? { httpRoutes: O } : {},
-		...se.size > 0 ? { webhookRoutes: se } : {}
-	});
-	if (await Fe(vt), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Ge(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : ft;
-		c = await pt(e.discovered.schedules ?? [], {
-			store: e.store,
-			coordinator: t,
-			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
-			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`,
-			armSelf: e.scheduleArmSelf ?? !0,
-			dormancy: e.dormancy ?? "always-on",
-			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
-			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => b({
-				subject: r,
-				traceId: t
-			}, e.store, void 0, `schedule:${n}`),
-			log: {
-				info: (e, t) => {
-					process.stdout.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				warn: (e, t) => {
-					process.stderr.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				error: (e, t) => {
-					process.stderr.write(`[schedule] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				debug: () => {}
-			},
-			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
-			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
-		}), e.onSchedulerReady?.(c);
-	}
-	let Z = e.log ?? j({ scope: "voltro:serve" }), Nt, Pt;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (Nt = s(e.discovered.subscribers ?? [], e.store, Z.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = Z.child("reaction");
-		Pt = ee(e.discovered.reactions ?? [], e.store, {
-			runAct: async (n, r) => {
-				if (n.kind === "workflow") {
-					if (g === void 0) {
-						t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
-						return;
-					}
-					let e = r.new ?? r.old ?? {};
-					await rt(g, {
-						traceId: `reaction:${n.workflow}`,
-						source: `reaction:${n.workflow}`
-					}).start(n.workflow, e);
-					return;
-				}
-				await w(n.agent, r, {
-					findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-					runAction: (e, t, n) => Promise.resolve(fe(e, t, n)),
-					makeSubject: (e) => wt(e),
-					now: () => Date.now(),
-					log: t
-				});
-			},
-			checkBudget: async (n, r) => {
-				try {
-					let { requireAiBudget: t } = await import("@voltro/ai");
-					return (await k.runPromise(k.either(t(e.store, {
-						tenantId: n,
-						limitUsd: r
-					}))))._tag === "Right";
-				} catch (e) {
-					return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
-				}
-			}
-		}, t);
-	}
-	let Ft;
-	return (e.discovered.aggregates?.length ?? 0) > 0 && (Ft = await i({
-		discovered: e.discovered.aggregates ?? [],
-		store: e.store,
-		log: Z.child("aggregate"),
-		...e.analytics === void 0 ? {} : { analytics: e.analytics },
-		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
-		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), le = A.succeed(Me, Ft.registry)), lt = !0, e.bootTiming?.mark("ready"), {
-		dispatcher: t,
-		server: vt,
-		scheduler: c,
-		close: async () => {
-			lt = !1, Ft?.detach(), Pt?.(), Nt?.(), await c?.shutdown(), t.close(), await o?.dispose(), await new Promise((e) => vt.close(() => e()));
-		}
-	};
-}, $ = j({ scope: "voltro:serve" }), bn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", xn = $t, Sn = async (e) => {
-	let t = O(process.cwd());
-	if (je(t)) {
-		let n;
-		try {
-			let e = await import(Oe(t).href);
-			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
-		} catch (e) {
-			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
-		}
-		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
-	}
-	return Cn(e);
-}, Cn = async (i) => {
-	let s = Ee();
-	process.env.NODE_ENV || (process.env.NODE_ENV = "production"), Lt();
-	let f = process.cwd(), ee = Number(process.env.PORT ?? xn(i, "--port") ?? 4e3), m = await he(f);
-	lt(st(m?.secrets)), await e({
-		rawEnv: m?.env,
-		appType: "api",
-		root: f,
-		log: $,
-		generateTypes: !1
-	}), s.mark("config");
-	let h = (process.env.DB_DIALECT ?? m?.store ?? "memory").toLowerCase(), _ = (h === "mariadb" || h === "postgres" || h === "mssql") && (process.env.CDC ?? "1") !== "0", ae = h === "mariadb" ? "mariadb" : h === "mssql" ? "mssql" : void 0, de = Te(f);
-	if (!we() && je(de)) try {
-		let e = await import(Oe(de).href);
-		if (e.modules) {
-			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[De(f, n)] = r;
-			Ce(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
-		}
-	} catch (e) {
-		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
-	}
-	let C = await se(f), w = await E(C, { cdc: _ && ae !== void 0 }), pe = C.filter((e) => Se.test(e)), _e = pe.length > 0 ? await g(pe, $.child("webhooks")) : void 0, be = T({
-		mix: w.featureMix,
-		plugins: m?.plugins ?? [],
-		cdc: _ && ae !== void 0,
-		...ae ? { cdcDialect: ae } : {}
-	}), xe = m?.analytics !== void 0 && m.analytics.kind !== "noop" && h !== "memory" ? (await x(h)).makeSqlLayer(S()) : void 0, D = await ne({
-		spec: m?.analytics,
-		sqlLayer: xe,
-		log: $
-	}), O = (() => {
-		let e = new Set(w.tables.map((e) => e.tableName)), t = [...w.tables];
-		for (let n of [...be, ...D.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
-		return t;
-	})();
-	for (let e of O) vt(e);
-	let j = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (bn(j, h, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await x(h)).makeSqlLayer(S()), t = await k.runPromise(gt.SqlClient.pipe(k.flatMap((e) => It(e, O, {
-			appliedBy: `serve:${j}`,
-			environment: "prod",
-			dialectId: h
-		})), k.provide(e)));
-		t.kind === "prod-mismatch" && ($.error(Ft(t, h)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Ft(t, h));
-	}
-	let Me = R(O);
-	s.mark("discover");
-	let M = await me(m, void 0);
-	m?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = m.cache), m?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = m.cacheRedisUrl), m?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = m.cacheRedisDriver), m?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = m.cacheKeyPrefix);
-	let { service: Ne, invalidationBus: Pe, snapshotCache: Fe, cache: F, backend: Ie, dispose: I } = await y({ env: process.env });
-	$.info(`cache backend resolved: ${Ie}` + (Ie === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), M.onChange((e) => {
-		k.runFork(Pe.publish(e.table));
-	}), m?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = m.kv), m?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = m.kvRedisUrl), m?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = m.kvKeyPrefix);
-	let { kv: Le, service: Re } = await qe({ store: M });
-	s.mark("store");
-	let Ue = P({
-		store: M,
-		sink: D.sink,
-		log: $
-	}), We = n({
-		store: M,
-		dialect: h
-	}), L = m?.plugins ?? [], Ye = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Xe, Ze;
-	h !== "memory" && (Xe = Ae.make((await x(h)).makeSqlLayer(S())), Ze = await Xe.runPromise(gt.SqlClient));
-	let Qe = Je({
-		coordinator: [
-			"postgres",
-			"mariadb",
-			"mysql",
-			"mssql"
-		].includes(h) ? Ge(M, Ye, $) : ft,
-		replicaId: Ye,
-		log: $
-	}), $e = [], et = {
-		...Ze ? { sql: Ze } : {},
-		scheduleCoordinated: (e, t, n) => {
-			let r = Qe(e, t, n);
-			return $e.push(r), r;
-		}
-	};
-	for (let e of L) e.bindDataStore?.(M, et);
-	let tt = L.filter((e) => typeof e.onChangeEvent == "function");
-	if (tt.length > 0) {
-		let e = M.changeScope ?? "local";
-		M.onChange((t) => {
-			let n = {
-				table: t.table,
-				op: t.op,
-				new: t.new ?? null,
-				old: t.old ?? null,
-				...t.origin === void 0 ? {} : { origin: t.origin },
-				changeScope: e
-			};
-			for (let e of tt) k.runFork(e.onChangeEvent(n).pipe(k.catchAllCause((t) => k.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: ke.pretty(t) })))));
-		});
-	}
-	let nt = oe({
-		plugins: L,
-		appName: m?.name ?? "voltro-api",
-		appType: "api",
-		voltroVersion: process.env.npm_package_version ?? "0.0.0",
-		log: $
-	});
-	L.length && await nt.activate(), s.mark("plugins");
-	let rt = await nt.gatherObservability(), it = await b(M, m, h, {
-		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
-		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
-		debug: () => {}
-	}), z = m?.apiKeys, at = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", ot = z ? Ke(Be(M), { prefix: at }) : void 0, ct = ot ? [He(ot, { prefix: at })] : [], ut = ve([...m?.auth?.strategies ?? [], ...ct], Rt(m?.plugins ?? []), m?.auth?.anonymousTenantRequired ?? !1), dt = [...m?.restRoutes ?? [], ...ot ? N(ot, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], B = m?.idempotency, pt = B ? {
-		store: Ve(M),
-		header: (typeof B == "object" ? B.header : void 0) ?? "Idempotency-Key",
-		ttlMs: (typeof B == "object" ? B.ttlMs : void 0) ?? 864e5
-	} : void 0, mt = dt.length > 0 ? Bt(dt, {
-		store: M,
-		resolveSubject: (e) => ut({
-			headers: e,
-			clientId: -1
-		}),
-		...pt ? { idempotency: pt } : {}
-	}) : [], ht = L.map((e) => e.services).filter((e) => e !== void 0), _t = A.mergeAll(ie({
-		analyticsLayer: D.layer,
-		cacheService: Ne,
-		kvService: Re,
-		pluginServices: ht,
-		userLayers: m?.layers ?? []
-	}), d), V = m?.scheduling ?? {}, yt = V.trigger ?? "self", bt = /* @__PURE__ */ new Set([
-		"postgres",
-		"mysql",
-		"mariadb",
-		"mssql"
-	]), xt = V.coordination ?? (bt.has(h) ? "advisoryLock" : "single"), H = xt === "cluster" && bt.has(h), U = H ? "cluster" : xt === "advisoryLock" && bt.has(h) ? "advisoryLock" : "single";
-	xt === "cluster" && !H && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), xt === "advisoryLock" && !bt.has(h) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let St, Ct = w.workflows.length > 0 || w.workflowWorkers.length > 0 || w.eventTriggers.length > 0 || (_e?.outgoing.length ?? 0) > 0 || H, W;
-	if (Ct) {
-		if (h === "mssql") {
-			let e = await l(process.cwd());
-			e && $.warn(e);
-		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), i = H ? w.schedules.filter((e) => (e.trigger ?? yt) === "self").map((e) => t({
-			name: e.name,
-			cron: ze(e),
-			execute: async () => {
-				await St?.fireFromCluster(e.name);
-			}
-		})) : [];
-		W = h === "memory" ? e.layerMemory : await (async () => {
-			let e = await x(h), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
-			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
-				sqlClientLayer: e.makeSqlLayer(S()),
-				runnerStorage: t,
-				dialectId: e.id,
-				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
-				...i.length > 0 ? { extraShardingLayers: i } : {}
-			});
-		})();
-	}
-	let G = ue(L, t()), wt = C.filter((e) => /\.subscribe\.tsx?$/.test(e)), Tt = wt.length > 0 ? await u(wt, $) : [], K = C.filter((e) => /\.reaction\.tsx?$/.test(e)), Et = K.length > 0 ? await r(K, $) : [], Dt = C.filter((e) => fe.test(e)), Ot = Dt.length > 0 ? await p(Dt, $) : [], q = C.filter((e) => /\.aggregate\.tsx?$/.test(e)), kt = q.length > 0 ? await te(q, $) : [], J = o();
-	if (kt.length > 0 && h !== "memory") try {
-		J = a((await x(h)).makeSqlLayer(S()));
-	} catch (e) {
-		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
-	}
-	let At = h === "memory" ? ft : Ge(M, `aggregate@${process.pid}`, $), Y = [], X = [], jt = C.filter((e) => ye.test(e));
-	if (jt.length > 0) {
-		let e = $.child("agent"), t = C.filter((e) => ce.test(e));
-		t.length > 0 && await ge(t, e);
-		let n = await le(jt, e);
-		for (let e of n.agents) for (let t of v(e)) (t.kind === "action" ? Y : X).push({
-			file: t.file,
-			descriptor: t.descriptor,
-			executor: t.executor
-		});
-		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
-	}
-	s.mark("workflow");
-	let Mt = await yn({
-		bootTiming: s,
-		discovered: {
-			queries: [...w.queries, ...X],
-			mutations: w.mutations,
-			actions: [...w.actions, ...Y],
-			streams: w.streams,
-			workflows: w.workflows,
-			workflowWorkers: w.workflowWorkers,
-			eventTriggers: w.eventTriggers,
-			schedules: w.schedules,
-			subscribers: Tt,
-			outboxHandlers: Ot,
-			connections: w.connections,
-			reactions: Et,
-			aggregates: kt,
-			..._e === void 0 ? {} : { webhooks: _e }
-		},
-		log: $,
-		analytics: D.sink,
-		aggregateStorage: J,
-		aggregateCoordinator: At,
-		store: M,
-		kv: Le,
-		cache: F,
-		snapshotCache: Fe,
-		schemaRegistry: Me,
-		tenantScopedTables: w.tenantScopedTables,
-		softDeleteScopedTables: w.softDeleteScopedTables,
-		dataTransferSnapshot: Pt(O),
-		dataTransferDialect: h,
-		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => ut({
-			headers: e,
-			clientId: t
-		}),
-		httpRoutes: [...L.flatMap((e) => e.httpRoutes ?? []), ...mt],
-		..._t ? { baseLayer: _t } : {},
-		...W === void 0 ? {} : { workflowEngineLayer: W },
-		scheduleDefaultTrigger: yt,
-		scheduleCoordination: U,
-		scheduleArmSelf: !H,
-		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : m?.dormancy ?? "always-on",
-		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...G === void 0 ? {} : { scheduleFireInterceptor: G },
-		onSchedulerReady: (e) => {
-			St = e;
-		},
-		observability: rt,
-		port: ee,
-		...m?.transport?.wsPath ? { path: m.transport.wsPath } : {}
-	});
-	c(re([
-		w.queries,
-		w.mutations,
-		w.actions,
-		w.streams
-	]), (e) => {
-		$.warn(e);
-	}), $.info(`API listening on :${ee}`, {
-		dialect: h,
-		queries: w.queries.length,
-		mutations: w.mutations.length,
-		actions: w.actions.length,
-		streams: w.streams.length,
-		workflows: w.workflows.length,
-		workflowWorkers: w.workflowWorkers.length,
-		schedules: w.schedules.length,
-		scheduleCoordination: U
-	}), s.finish($);
-	let Z = () => {
-		for (let e of $e) e.stop();
-		Ue.detach(), We.stop(), I(), Xe?.dispose(), setTimeout(() => process.exit(0), 1e4).unref?.(), Promise.resolve(nt.deactivate()).then(() => it?.close()).then(() => D.dispose()).then(() => Mt.close()).then(() => M.close?.()).then(() => process.exit(0)).catch((e) => {
-			console.error("serve: shutdown step failed, exiting anyway:", e), process.exit(0);
-		});
-	};
-	return process.on("SIGINT", Z), process.on("SIGTERM", Z), await new Promise(() => {}), 0;
-};
-//#endregion
-export { $t as a, nn as i, Sn as n, tn as o, _n as r, en as s, Cn as t };