@voltro/cli 0.18.0 → 0.19.0

package/dist/serveCommand-CxcxHc9Y.js

@@ -1,1129 +0,0 @@
-import { st as e, t } from "./inspectMetrics-D1DmLeJs.js";
-import { s as n } from "./seedRunner-D6eu-u5U.js";
-import { r, t as i } from "./appModuleLoader-C9r9mxZt.js";
-import { f as a, m as o, n as s, p as c, u as l } from "./frameworkTableAssembly-sg41s14F.js";
-import { l as u } from "./fileConventions-CBNPZVOV.js";
-import { $ as d, A as f, B as p, C as ee, D as te, E as ne, F as m, H as re, I as ie, J as h, L as ae, M as g, N as oe, O as _, P as se, Q as v, S as ce, T as le, V as y, X as b, Y as ue, Z as x, _ as de, a as S, b as C, c as fe, et as pe, f as me, g as he, h as ge, j as w, k as _e, n as ve, nt as ye, p as T, r as be, s as xe, tt as Se, v as Ce, w as we, x as Te, y as E, z as Ee } from "./dev-BOFxC21E.js";
-import { c as D, r as De } from "./apiBuild-CPDTJHkH.js";
-import { t as Oe } from "./bootTiming-BdyP9nYw.js";
-import { n as ke } from "./cliArgs-qdZSElM3.js";
-import { join as Ae } from "node:path";
-import { pathToFileURL as je } from "node:url";
-import { Cause as O, Effect as k, Layer as A, ManagedRuntime as Me } from "effect";
-import { createLogger as j } from "@voltro/logger";
-import { existsSync as M } from "node:fs";
-import { AggregateRegistry as N, Dispatcher as Ne, apiKeyManagementRoutes as Pe, applySoftDeleteScope as Fe, applyTenantScope as Ie, attachAnalyticsMirror as Le, awaitServerListening as Re, bindMutation as P, bindStream as ze, bindSubscription as F, buildTracingLayer as Be, cancelWakeup as Ve, compileCron as He, dataStoreApiKeyStore as Ue, dataStoreIdempotencyStore as We, frameworkApiKeyStrategy as Ge, installPolicyGuardResolver as Ke, loadResourceTuples as qe, makeActionRunner as I, makeAdvisoryLockCoordinator as Je, makeApiKeyService as Ye, makeApiKeyUsageBuffer as L, makeApiKeyUsageFlusher as Xe, makeAsyncKv as Ze, makeCoordinatedScheduler as Qe, makeEffectStoreLayer as $e, makeLazyWorkflowFacade as et, makeMutationRunner as tt, makeOneShotQueryRunner as nt, makeQueryDescriptorProducer as rt, makeQueryReauthorizer as it, makeQuerySubscriber as at, makeSchemaRegistry as ot, makeWorkflowFacade as st, makeWorkflowFacadeWithCallerContext as ct, makeWorkflowLayers as lt, noopKv as R, recordSubscriptionDelivery as ut, registerWakeup as dt, resolveSecretsBackend as ft, runProvidedEffect as pt, setSecretsBackend as mt, setSystemStoreHandle as ht, setTupleSource as gt, singleCoordinator as _t, startRpcServer as vt, startScheduler as yt, workflowToRpc as z, wrapStoreWithBootCodec as bt } from "@voltro/runtime";
-import { RpcGroup as xt } from "@effect/rpc";
-import { SqlClient as St } from "@effect/sql";
-import { and as Ct, ensureTableRegistered as wt, eq as B, or as Tt } from "@voltro/database";
-import { appStorageProvider as V, fromNodeReadable as Et, getObjectStream as H, putObjectStream as U, toNodeReadable as W } from "@voltro/plugin-storage";
-import { AuthMiddleware as Dt, ConnectionInfoMiddleware as Ot, actionToRpc as G, anonymousSubject as kt, mutationToRpc as At, queryToRpc as K, streamToRpc as jt, workflowCancelDescriptor as q, workflowDomainEventsQueryDescriptor as Mt, workflowEventDeliveriesQueryDescriptor as J, workflowResumeDescriptor as Nt, workflowRunEventsQueryDescriptor as Y, workflowRunQueryDescriptor as X, workflowRunStepsQueryDescriptor as Z, workflowRunsQueryDescriptor as Pt, workflowSignalDescriptor as Ft, workflowUpdateDescriptor as It } from "@voltro/protocol";
-import { assertProductionSessionSecret as Lt } from "@voltro/protocol/session";
-import { createHash as Rt, timingSafeEqual as zt } from "node:crypto";
-import { declaredSnapshot as Bt, describeOutcome as Vt, runPlannedMigrations as Ht } from "@voltro/database/sql";
-import { getAuthSessionStrategy as Ut } from "@voltro/plugin-auth";
-import { collectPublicApiRoutes as Wt, restRoutesToHttpRoutes as Gt } from "@voltro/protocol/rest";
-import { buildDeliverWebhookExecute as Kt, buildWebhooksService as qt, defaultIncomingPath as Jt, deliverWebhookWorkflow as Yt, mountIncomingWebhook as Xt } from "@voltro/plugin-webhooks";
-import { packBundle as Zt, runExport as Qt, runImport as $t, storageBlobSink as en, storageRefsBlobSource as tn, unpackBundle as nn, unpackBundleToDir as rn } from "@voltro/data-transfer";
-//#region src/adminAuth.ts
-var an = "/_voltro/admin/import", on = "/_voltro/admin/export", Q = (e, t) => ({
-	status: e,
-	contentType: "application/json; charset=utf-8",
-	body: JSON.stringify(t)
-}), sn = (e) => {
-	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
-	return n ? n[1] : null;
-}, cn = (e, t) => zt(Rt("sha256").update(e).digest(), Rt("sha256").update(t).digest()), ln = (e, t) => {
-	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
-	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let n = sn(e.headers);
-	return !n || !cn(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, un = j({ scope: "voltro:admin-import" }), dn = "VBUNDLE2", fn = async function* (e) {
-	yield e;
-}, pn = (e) => async (t) => {
-	let n = ln(t, e.secret);
-	if (n) return n;
-	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === dn, c, l;
-	if (s) c = fn(t.rawBody), l = "upload";
-	else {
-		let n;
-		try {
-			n = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-		} catch {
-			return Q(400, { error: "body must be a packed bundle archive or { bundleKey } JSON" });
-		}
-		if (typeof n.bundleKey != "string" || !n.bundleKey) return Q(400, { error: "body.bundleKey (string) is required for the storage transport" });
-		if (!e.openArchive) return Q(501, { error: "storage transport not configured on this instance" });
-		c = e.openArchive(n.bundleKey), l = "storage";
-	}
-	let u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-import-"));
-	try {
-		e.assetSink ? await nn(c, {
-			dir: p,
-			blobs: e.assetSink
-		}) : await rn(c, p);
-		let t = await k.runPromiseExit($t({
-			store: e.store,
-			bundleDir: p,
-			...r ? { mode: r } : {},
-			...i ? { onConflict: i } : {},
-			...a ? { atomic: a } : {},
-			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
-			force: o,
-			onWarn: (e) => un.warn("admin.import", { message: e }),
-			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
-		}));
-		if (t._tag === "Failure") {
-			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
-			if (e && e._tag === "SchemaDriftError") {
-				let t = e;
-				return un.warn("admin.import refused (schema drift)", {
-					transport: l,
-					bundle: t.bundleFingerprint.slice(0, 16),
-					target: t.targetFingerprint.slice(0, 16)
-				}), Q(409, {
-					error: "schema drift",
-					bundleFingerprint: t.bundleFingerprint,
-					targetFingerprint: t.targetFingerprint,
-					diff: t.diff,
-					hint: "re-export against the current schema, or resend with x-import-force: 1"
-				});
-			}
-			throw Error(String(e?.message ?? e ?? "import failed"));
-		}
-		let n = t.value, s = n.tables.reduce((e, t) => e + t.rowCount, 0);
-		return un.info("admin.import", {
-			transport: l,
-			tables: n.tables.length,
-			rows: s,
-			mode: r ?? "upsert",
-			atomic: a
-		}), Q(200, {
-			tables: n.tables.length,
-			rows: s,
-			transport: l
-		});
-	} catch (e) {
-		return un.warn("admin.import failed", {
-			transport: l,
-			error: e?.message ?? String(e)
-		}), Q(500, {
-			error: "import failed",
-			message: e?.message ?? String(e)
-		});
-	} finally {
-		await d.rm(p, {
-			recursive: !0,
-			force: !0
-		});
-	}
-}, mn = j({ scope: "voltro:admin-export" }), hn = async (e) => {
-	let t = [];
-	for await (let n of e) t.push(Buffer.from(n));
-	return new Uint8Array(Buffer.concat(t));
-}, gn = (e) => typeof e.tenant == "string" && e.tenant ? {
-	kind: "tenant",
-	tenantId: e.tenant
-} : Array.isArray(e.tables) && e.tables.length ? {
-	kind: "tables",
-	tables: e.tables.filter((e) => typeof e == "string")
-} : { kind: "all" }, _n = (e) => async (t) => {
-	let n = ln(t, e.secret);
-	if (n) return n;
-	let r;
-	try {
-		r = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-	} catch {
-		return Q(400, { error: "body must be JSON: { profile?, tenant?, tables?, consistency?, compression?, bundleKey? }" });
-	}
-	let i = {};
-	if (typeof r.profile == "string" && r.profile) {
-		if (!e.loadProfile) return Q(501, { error: "server-side profiles not configured on this instance" });
-		try {
-			i = await e.loadProfile(r.profile);
-		} catch (e) {
-			return Q(400, {
-				error: `profile '${r.profile}' could not be loaded`,
-				message: e?.message ?? String(e)
-			});
-		}
-	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? gn(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-export-"));
-	try {
-		let t = await k.runPromise(Qt({
-			store: e.store,
-			snapshot: e.snapshot,
-			dialect: e.dialect,
-			outDir: p,
-			...i.subset ? { subset: i.subset } : {
-				scope: s,
-				...e.tenantTables && e.tenantTables.length > 0 ? { tenantTables: e.tenantTables } : {}
-			},
-			consistency: a,
-			...o ? { compression: o } : {},
-			...i.masking ? { masking: i.masking } : {}
-		})), n = t.tables.reduce((e, t) => e + t.rowCount, 0), u = t.masking?.transformed.length ?? 0;
-		if (c) {
-			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
-			let i = r.bundleKey;
-			return await e.putArchive(i, () => Zt({
-				dir: p,
-				...l
-			})), mn.info("admin.export", {
-				transport: "storage",
-				tables: t.tables.length,
-				rows: n,
-				masked: u,
-				bundleKey: i
-			}), Q(200, {
-				bundleKey: i,
-				tables: t.tables.length,
-				rows: n,
-				masked: u,
-				transport: "storage"
-			});
-		}
-		let d = await hn(Zt({
-			dir: p,
-			...l
-		}));
-		return mn.info("admin.export", {
-			transport: "download",
-			tables: t.tables.length,
-			rows: n,
-			masked: u,
-			bytes: d.byteLength
-		}), {
-			status: 200,
-			contentType: "application/octet-stream",
-			body: d,
-			headers: {
-				"x-export-tables": String(t.tables.length),
-				"x-export-rows": String(n),
-				"x-export-masked": String(u)
-			}
-		};
-	} catch (e) {
-		return mn.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
-			error: "export failed",
-			message: e?.message ?? String(e)
-		});
-	} finally {
-		await d.rm(p, {
-			recursive: !0,
-			force: !0
-		});
-	}
-}, vn = async (e) => {
-	let { resolve: t } = await import("node:path"), { existsSync: n } = await import("node:fs"), r = [
-		e,
-		`${e}.profile.ts`,
-		`data-profiles/${e}.ts`,
-		`data-profiles/${e}.profile.ts`
-	].map((e) => t(process.cwd(), e)), i = r.find((e) => n(e));
-	if (!i) throw Error(`data profile '${e}' not found (looked for: ${r.join(", ")})`);
-	let a = await import(i), o = a.default ?? a.profile;
-	if (!o) throw Error(`data profile '${i}' has no default export`);
-	return o;
-}, yn = (e, t, n = {}) => (async function* () {
-	let r = await W((await k.runPromise(H(e, t).pipe(k.timeout(n.openTimeout ?? "30 seconds")))).stream), i = n.stallMs ?? 12e4, a, o = () => {
-		a && clearTimeout(a), a = setTimeout(() => r.destroy(/* @__PURE__ */ Error(`storage read stalled for ${i}ms reading '${t}'`)), i);
-	};
-	try {
-		o();
-		for await (let e of r) o(), yield e instanceof Uint8Array ? e : new Uint8Array(e);
-	} finally {
-		a && clearTimeout(a), r.destroy();
-	}
-})(), bn = {
-	get: async () => void 0,
-	set: async () => {},
-	setWithTags: async () => {},
-	remove: async () => !1,
-	has: async () => !1,
-	clear: async () => {},
-	invalidateTag: async () => 0,
-	wrap: async (e, t, n) => n()
-}, xn = async (e) => {
-	ht({
-		dataStore: e.store,
-		schemaRegistry: e.schemaRegistry
-	});
-	let t = new Ne({
-		store: e.store,
-		...e.snapshotCache ? { cache: e.snapshotCache } : {},
-		recordDelivery: (e) => ut({
-			label: e.label,
-			kind: e.kind,
-			durationMs: e.durationMs,
-			rowCount: e.rowCount
-		})
-	}), n = e.cache ?? bn, r = e.kv ?? R, i, a, o, s = /* @__PURE__ */ new Map(), c = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, l = async (t, n, r) => {
-		let i = {
-			...r,
-			source: r.source ?? `workflow:${t}`
-		};
-		s.set(n, i);
-		try {
-			let r = await e.store.query({
-				table: "_voltro_workflow_start_contexts",
-				order: [],
-				predicate: B("executionId", n),
-				projection: ["id"],
-				skip: void 0,
-				take: 1
-			}), a = {
-				workflowName: t,
-				executionId: n,
-				subject: i.subject ?? null,
-				traceId: i.traceId ?? null,
-				source: i.source ?? null,
-				parentExecutionId: i.parentExecutionId ?? null,
-				parentClosePolicy: i.parentClosePolicy ?? null,
-				createdAt: /* @__PURE__ */ new Date()
-			};
-			r[0] === void 0 ? await e.store.insert("_voltro_workflow_start_contexts", {
-				id: c(),
-				...a
-			}) : await e.store.update("_voltro_workflow_start_contexts", r[0].id, a);
-		} catch (e) {
-			process.stderr.write(`[workflow] failed to persist start context for ${t}/${n}: ${e?.message ?? String(e)}\n`);
-		}
-	}, u = async (t, n) => {
-		let r = s.get(n);
-		if (r !== void 0) return r;
-		try {
-			let t = (await e.store.query({
-				table: "_voltro_workflow_start_contexts",
-				order: [],
-				predicate: B("executionId", n),
-				projection: void 0,
-				skip: void 0,
-				take: 1
-			}))[0];
-			if (t === void 0) return;
-			let r = {
-				...t.subject === null ? {} : { subject: t.subject },
-				...t.traceId === null ? {} : { traceId: t.traceId },
-				...t.source === null ? {} : { source: t.source },
-				...t.parentExecutionId === null ? {} : { parentExecutionId: t.parentExecutionId },
-				...t.parentClosePolicy === null ? {} : { parentClosePolicy: t.parentClosePolicy }
-			};
-			return s.set(n, r), r;
-		} catch (e) {
-			process.stderr.write(`[workflow] failed to load start context for ${n}: ${e?.message ?? String(e)}\n`);
-			return;
-		}
-	}, p = (e.discovered.workflows?.length ?? 0) > 0 ? et(() => i) : void 0, ee = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, te = ee || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", ne = e.tenantIsolation === "namespace", re = (e.log ?? j({ scope: "voltro:serve" })).child("webhooks"), ae, _ = e.discovered.webhooks;
-	if (_ && _.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
-		let t = e.workflowEngineLayer, i = d({
-			store: e.store,
-			schemaRegistry: e.schemaRegistry,
-			cache: n,
-			kv: r
-		}), a = _.outgoing.map((e) => e.descriptor);
-		ae = qt(i, async (e) => {
-			let n = Yt.execute(e).pipe(k.provide(Yt.toLayer(Kt(i, { events: a })).pipe(A.provideMerge(t))));
-			k.runPromise(n).catch((t) => {
-				re.error("deliverWebhook workflow crashed", {
-					deliveryId: e.deliveryId,
-					targetId: e.targetId
-				}, t);
-			});
-		}, { events: a });
-	}
-	let se = /* @__PURE__ */ new Map();
-	if (_) for (let e of _.incoming) {
-		let t = e.descriptor.path ?? Jt(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Xt(e.descriptor, {
-			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => p === void 0 ? void 0 : ct(p, {
-				traceId: `incoming:${e.descriptor.id}`,
-				source: `incoming:${e.descriptor.id}`
-			}),
-			log: (e) => {
-				let t = {
-					webhookId: e.webhookId,
-					status: e.status,
-					signatureOk: String(e.signatureOk),
-					idempotency: e.idempotency,
-					durationMs: e.durationMs
-				};
-				e.status >= 500 ? re.error("incoming delivery failed", t) : e.status >= 400 ? re.warn("incoming delivery rejected", t) : re.info("incoming delivery handled", t);
-			}
-		});
-		se.set(t, { handle: r });
-	}
-	Ke(), gt((t) => qe(e.store, t.subjectId, t.resourceType, t.resourceId));
-	let ce = (e.discovered.outboxHandlers?.length ?? 0) > 0 ? m({
-		handlers: e.discovered.outboxHandlers ?? [],
-		store: e.store,
-		log: (e.log ?? j({ scope: "voltro:serve" })).child("outbox")
-	}) : void 0, y = oe({
-		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
-		store: e.store,
-		publicUrl: g(e.port ?? 4e3),
-		log: (e.log ?? j({ scope: "voltro:serve" })).child("connections")
-	}), b = v({
-		store: e.store,
-		schemaRegistry: e.schemaRegistry,
-		cache: n,
-		kv: r,
-		...ae === void 0 ? {} : { webhooksService: ae },
-		...p === void 0 ? {} : { workflowsProxy: p },
-		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: ne,
-		...ce === void 0 ? {} : { outbox: { nudge: ce.nudge } },
-		...y.active ? { connections: { registry: y.registry } } : {}
-	}), ue = A.succeed(N, le), de = (t, n) => {
-		let r = t.pipe(k.provide($e(n)));
-		return pt((e.baseLayer ? r.pipe(k.provide(e.baseLayer)) : r).pipe(k.provide(ue)));
-	}, S = tt({
-		store: e.store,
-		buildContext: (e, t, n) => b(e, t, n),
-		runEffect: de,
-		undoCapture: C()
-	}), fe = E(), pe = I({
-		buildContext: (e) => b(e),
-		runEffect: de
-	}), me = {
-		buildContext: (e) => b(e),
-		finalize: (t, n) => Fe(Ie(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
-		provideEffect: (e, t) => e.pipe(k.provide($e(t)))
-	}, w = rt(me), ve = nt({
-		...me,
-		queryRows: (t) => e.store.query(t)
-	}), ye = at({
-		...me,
-		subscribeDescriptor: (e, n, r) => t.subscribe(e, n, r),
-		subscribeComputed: (e, n, r) => t.subscribeComputed(e, n, r)
-	}), T = {};
-	for (let n of [
-		...e.discovered.queries,
-		...fe.queries,
-		...y.queries
-	]) T[n.descriptor.name] = (e) => F(w(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, it(n, e));
-	for (let t of [
-		...e.discovered.mutations,
-		...fe.mutations,
-		...y.mutations
-	]) T[t.descriptor.name] = (e) => P(async (e, n) => S(t, e, n), e, `mutation.${t.descriptor.name}`);
-	for (let t of [...e.discovered.actions, ...y.actions]) T[t.descriptor.name] = (e) => P(async (e, n) => pe(t, e, n), e, `action.${t.descriptor.name}`);
-	let be = () => `public-${Math.random().toString(36).slice(2, 10)}`, xe = [
-		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => ve(e, t, {
-				subject: n.subject,
-				traceId: be()
-			}),
-			subscribe: (t, n, r) => ye(e, t, {
-				subject: n.subject,
-				traceId: be()
-			}, r)
-		})),
-		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => S(e, t, {
-				subject: n.subject,
-				traceId: be()
-			})
-		})),
-		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => pe(e, t, {
-				subject: n.subject,
-				traceId: be()
-			})
-		}))
-	], Se = xe.length > 0 ? Gt(Wt(xe), {
-		store: e.store,
-		resolveSubject: (t) => e.resolveSubject(t, -1)
-	}) : [], Ce = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Te = Ce && Ce.length >= 16 ? [{
-		method: "POST",
-		path: an,
-		handle: pn({
-			secret: Ce,
-			store: e.store,
-			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-			assetSink: en(V()),
-			openArchive: (e) => yn(V(), e)
-		})
-	}, {
-		method: "POST",
-		path: on,
-		handle: _n({
-			secret: Ce,
-			store: e.store,
-			snapshot: e.dataTransferSnapshot ?? { tables: [] },
-			dialect: e.dataTransferDialect ?? "memory",
-			tenantTables: [...e.tenantScopedTables],
-			loadProfile: vn,
-			assetSource: tn(V(), e.store),
-			putArchive: async (e, t) => {
-				let { Readable: n } = await import("node:stream"), r = V(), i = Et("storage", () => n.from(t()));
-				await k.runPromise(U(r, e, i, { contentType: "application/octet-stream" }));
-			}
-		})
-	}] : [], Ee = [
-		...e.httpRoutes ?? [],
-		...Se,
-		...Te,
-		...y.httpRoutes
-	];
-	for (let t of e.discovered.streams ?? []) T[t.descriptor.name] = (n) => ze((r) => {
-		let i = b(r), a = t.executor(n, i);
-		if (k.isEffect(a)) {
-			let t = a.pipe(k.provide($e(i.store)));
-			return (e.baseLayer ? t.pipe(k.provide(e.baseLayer)) : t).pipe(k.provide(ue));
-		}
-		return typeof a == "object" && a && typeof a.then == "function" ? k.promise(() => a) : a;
-	}, `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) T[t.definition.name] = (e) => P(async (e, n) => {
-		let r = n;
-		return ct(p, {
-			subject: r.subject,
-			traceId: r.traceId,
-			source: "workflow-rpc"
-		}).start(t.definition.name, e);
-	}, e, `workflow.${t.definition.name}`);
-	ee && (T[X.name] = (e) => F(w({
-		descriptor: X,
-		executor: (e) => {
-			let t = e.id;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: Tt(B("id", t), B("executionId", t)),
-				take: 1,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${X.name}`), T[Pt.name] = (e) => F(w({
-		descriptor: Pt,
-		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [B("tag", t.tag)], ...t.status === void 0 ? [] : [B("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : Ct(...n),
-				take: r,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Pt.name}`), T[Z.name] = (e) => F(w({
-		descriptor: Z,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_steps",
-				order: [{
-					column: "startedAt",
-					direction: "asc"
-				}],
-				predicate: B("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Z.name}`), T[Y.name] = (e) => F(w({
-		descriptor: Y,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_events",
-				order: [{
-					column: "occurredAt",
-					direction: "asc"
-				}],
-				predicate: B("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Y.name}`), T[Mt.name] = (e) => F(w({
-		descriptor: Mt,
-		executor: (e) => {
-			let t = e;
-			return {
-				table: "_voltro_workflow_events",
-				order: [{
-					column: "occurredAt",
-					direction: "desc"
-				}],
-				predicate: t.name === void 0 ? void 0 : B("name", t.name),
-				take: Math.max(1, Math.min(500, t.limit ?? 100)),
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Mt.name}`), T[J.name] = (e) => F(w({
-		descriptor: J,
-		executor: (e) => {
-			let t = e.eventId;
-			return {
-				table: "_voltro_workflow_event_deliveries",
-				order: [{
-					column: "createdAt",
-					direction: "asc"
-				}],
-				predicate: B("eventId", t),
-				take: 500,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${J.name}`), T[q.name] = (t) => P(async (t, n) => {
-		let r = t;
-		return await x(e.store, n.subject, { executionId: r.executionId }), await p.cancel(r.workflowName, r.executionId), await Le(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${q.name}`), T[Nt.name] = (t) => P(async (t, n) => {
-		let r = t;
-		return await x(e.store, n.subject, { executionId: r.executionId }), await p.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Nt.name}`), T[Ft.name] = (t) => P(async (t, n) => {
-		let r = t;
-		return await x(e.store, n.subject, { id: r.id }), p.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${Ft.name}`), T[It.name] = (t) => P(async (t, n) => {
-		let r = t;
-		return await x(e.store, n.subject, { id: r.id }), p.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${It.name}`));
-	let D = [
-		...e.discovered.queries.map((e) => K(e.descriptor)),
-		...e.discovered.mutations.map((e) => At(e.descriptor)),
-		...e.discovered.actions.map((e) => G(e.descriptor)),
-		...fe.queries.map((e) => K(e.descriptor)),
-		...fe.mutations.map((e) => At(e.descriptor)),
-		...y.queries.map((e) => K(e.descriptor)),
-		...y.mutations.map((e) => At(e.descriptor)),
-		...y.actions.map((e) => G(e.descriptor)),
-		...(e.discovered.streams ?? []).map((e) => jt(e.descriptor)),
-		...(e.discovered.workflows ?? []).map((e) => z(e.definition)),
-		...ee ? [
-			K(X),
-			K(Pt),
-			K(Z),
-			K(Y),
-			K(Mt),
-			K(J),
-			G(q),
-			G(Nt),
-			G(Ft),
-			G(It)
-		] : []
-	], De = xt.make(...D).middleware(Dt).middleware(Ot), Oe = A.succeed(Dt, Dt.of(({ headers: t, clientId: n }) => k.promise(() => e.resolveSubject(t, n)))), ke = A.succeed(Ot, Ot.of(({ clientId: e }) => k.succeed({ clientId: e }))), Ae = e.dormancyTenantId ?? "default", je = e.dormancy === "sleep" ? {
-		register: (t, n, r) => dt(e.store, {
-			tenantId: r ?? Ae,
-			kind: "workflow",
-			refId: t,
-			wakeAt: n
-		}),
-		cancel: (t, n) => Ve(e.store, {
-			tenantId: n ?? Ae,
-			kind: "workflow",
-			refId: t
-		}).then(() => {})
-	} : void 0, O = te ? await import("@voltro/workflow") : void 0, M = O?.makeWorkflowRunRecorder({
-		store: e.store,
-		...je === void 0 ? {} : { wakeups: je }
-	}), Pe = async (t, n) => {
-		await O.closeWorkflowChildrenForParent({
-			store: e.store,
-			parentExecutionId: t,
-			parentStatus: n,
-			recorder: M,
-			log: { warn: (e, t) => {
-				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-			} },
-			interruptChild: async (t, n) => {
-				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
-				if (!r) throw Error(`Unknown child workflow: ${t}`);
-				if (!a) throw Error("Workflow runtime is not ready");
-				await a.runPromise(r.definition.interrupt(n));
-			}
-		});
-	}, Le = async (t, n, r) => {
-		let i = (await e.store.query({
-			table: "_voltro_workflow_runs",
-			order: [],
-			predicate: B("executionId", n),
-			projection: void 0,
-			skip: void 0,
-			take: 1
-		}))[0];
-		if (i === void 0) return;
-		let a = await e.store.update("_voltro_workflow_runs", i.id, {
-			status: "cancelled",
-			cancelled: !0,
-			completedAt: /* @__PURE__ */ new Date()
-		}), o = i.subject?.tenantId ?? void 0;
-		a && await M.recordEvent({
-			runId: i.id,
-			eventType: "run-cancelled",
-			payload: {
-				reason: r,
-				workflowName: t,
-				executionId: n,
-				...o == null ? {} : { tenantId: o }
-			}
-		}), a && await Pe(n, "cancelled");
-	}, He = [...lt(e.discovered.workflows ?? [], {
-		buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? b({
-			subject: t.subject,
-			traceId: t.traceId
-		}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-		resolveStartContext: u
-	}, (t, n, r) => {
-		let i = O.getWorkflowVersionMetadata(t.definition);
-		return O.wrapWorkflowExecuteWithRunRecording({
-			name: t.definition.name,
-			store: e.store,
-			subject: r.subject,
-			source: r.source ?? null,
-			traceId: r.traceId,
-			workflowVersion: i.version,
-			workflowCompatibleVersions: i.compatibleWith,
-			workflowPatches: i.patches,
-			parentExecutionId: r?.parentExecutionId ?? null,
-			parentClosePolicy: r?.parentClosePolicy ?? null,
-			onParentClose: ({ executionId: e, status: t }) => Pe(e, t),
-			recorder: M
-		}, n);
-	}), ...e.discovered.workflowWorkers ?? []], Ue = He.length > 0 ? A.mergeAll(...He) : A.empty;
-	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster") && e.workflowEngineLayer !== void 0) {
-		let t = Ue.pipe(A.provideMerge(e.workflowEngineLayer));
-		a = Me.make(e.baseLayer === void 0 ? t : t.pipe(A.provideMerge(e.baseLayer))), await a.runPromise(k.void), i = (e.discovered.workflows?.length ?? 0) > 0 ? st({
-			workflows: e.discovered.workflows ?? [],
-			runEffect: (e) => a.runPromise(e),
-			rememberStartContext: l,
-			signal: async (t, n, r) => {
-				let i = await O.sendWorkflowSignal({
-					store: e.store,
-					recorder: M,
-					target: t,
-					signalName: n,
-					payload: r
-				});
-				return await a.runPromise(O.completeSuspendingSignal({
-					store: e.store,
-					target: t,
-					signalName: n,
-					payload: r
-				})).catch(() => {}), i;
-			},
-			update: (t, n, r, i) => O.sendWorkflowUpdate({
-				store: e.store,
-				recorder: M,
-				target: t,
-				updateName: n,
-				payload: r,
-				...i === void 0 ? {} : { options: i }
-			}),
-			listRuns: (t) => ge(e.store, t),
-			retry: (t, n) => he({
-				store: e.store,
-				workflows: e.discovered.workflows ?? [],
-				runPromise: (e) => a.runPromise(e)
-			}, t, n)
-		}) : void 0;
-	}
-	let We = A.mergeAll(De.toLayer(T), Oe, ke), Ge = h(T, e.discovered.queries.map((e) => e.descriptor.name), ee), Ye = A.mergeAll(De.toLayer(Ge), Oe, ke), L = e.observability, Xe = await Be({
-		...L && L.spanProcessors.length > 0 ? { extraSpanProcessors: L.spanProcessors } : {},
-		...L && L.metricReaders.length > 0 ? { extraMetricReaders: L.metricReaders } : {},
-		...L && Object.keys(L.resourceAttributes).length > 0 ? { resourceAttributes: L.resourceAttributes } : {},
-		...L && L.sampler !== void 0 ? { sampler: L.sampler } : {}
-	}), Ze = !1, Qe = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: ot, shutdown: ft } = vt({
-		group: De,
-		handlersLayer: We,
-		httpHandlersLayer: Ye,
-		port: e.port ?? 4e3,
-		path: e.path ?? "/ws",
-		tracerLayer: Xe.layer,
-		healthCheck: {
-			isReady: () => Ze,
-			...Qe ? { ping: Qe } : {}
-		},
-		...Ee.length > 0 ? { httpRoutes: Ee } : {},
-		...e.getStore === void 0 ? {} : { getStore: e.getStore },
-		...se.size > 0 ? { webhookRoutes: se } : {}
-	});
-	if (await Re(ot), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Je(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : _t;
-		o = await yt(e.discovered.schedules ?? [], {
-			store: e.store,
-			coordinator: t,
-			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
-			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`,
-			armSelf: e.scheduleArmSelf ?? !0,
-			dormancy: e.dormancy ?? "always-on",
-			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
-			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => b({
-				subject: r,
-				traceId: t
-			}, e.store, void 0, `schedule:${n}`),
-			log: {
-				info: (e, t) => {
-					process.stdout.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				warn: (e, t) => {
-					process.stderr.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				error: (e, t) => {
-					process.stderr.write(`[schedule] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				debug: () => {}
-			},
-			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
-			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
-		}), e.onSchedulerReady?.(o);
-	}
-	let mt = e.log ?? j({ scope: "voltro:serve" }), bt, St;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (bt = ie(e.discovered.subscribers ?? [], e.store, mt.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = mt.child("reaction");
-		St = _e(e.discovered.reactions ?? [], e.store, {
-			runAct: async (n, r) => {
-				if (n.kind === "workflow") {
-					if (p === void 0) {
-						t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
-						return;
-					}
-					let e = r.new ?? r.old ?? {};
-					await ct(p, {
-						traceId: `reaction:${n.workflow}`,
-						source: `reaction:${n.workflow}`
-					}).start(n.workflow, e);
-					return;
-				}
-				await f(n.agent, r, {
-					findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-					runAction: (e, t, n) => Promise.resolve(pe(e, t, n)),
-					makeSubject: (e) => kt(e),
-					now: () => Date.now(),
-					log: t
-				});
-			},
-			checkBudget: async (n, r) => {
-				try {
-					let { requireAiBudget: t } = await import("@voltro/ai");
-					return (await k.runPromise(k.either(t(e.store, {
-						tenantId: n,
-						limitUsd: r
-					}))))._tag === "Right";
-				} catch (e) {
-					return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
-				}
-			}
-		}, t);
-	}
-	let wt;
-	return (e.discovered.aggregates?.length ?? 0) > 0 && (wt = await we({
-		discovered: e.discovered.aggregates ?? [],
-		store: e.store,
-		log: mt.child("aggregate"),
-		...e.analytics === void 0 ? {} : { analytics: e.analytics },
-		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
-		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), ue = A.succeed(N, wt.registry)), Ze = !0, e.bootTiming?.mark("ready"), {
-		dispatcher: t,
-		server: ot,
-		scheduler: o,
-		close: async () => {
-			Ze = !1, wt?.detach(), St?.(), bt?.(), await o?.shutdown(), t.close(), await a?.dispose(), await new Promise((e) => ot.close(() => e())), await ft();
-		}
-	};
-}, $ = j({ scope: "voltro:serve" }), Sn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Cn = ke, wn = async (e) => {
-	let t = D(process.cwd());
-	if (M(t)) {
-		let n;
-		try {
-			let e = await import(je(t).href);
-			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
-		} catch (e) {
-			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
-		}
-		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
-	}
-	return Tn(e);
-}, Tn = async (d) => {
-	let f = Oe();
-	process.env.NODE_ENV || (process.env.NODE_ENV = "production"), Lt();
-	let m = process.cwd(), ie = Number(process.env.PORT ?? Cn(d, "--port") ?? 4e3), h = await xe(m);
-	mt(ft(h?.secrets)), await e({
-		rawEnv: h?.env,
-		appType: "api",
-		root: m,
-		log: $,
-		generateTypes: !1
-	}), f.mark("config");
-	let g = (process.env.DB_DIALECT ?? h?.store ?? "memory").toLowerCase(), oe = (g === "mariadb" || g === "postgres" || g === "mssql") && (process.env.CDC ?? "1") !== "0", v = g === "mariadb" ? "mariadb" : g === "mssql" ? "mssql" : void 0, le = De(m);
-	if (!i() && M(le)) try {
-		let e = await import(je(le).href);
-		if (e.modules) {
-			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Ae(m, n)] = r;
-			r(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
-		}
-	} catch (e) {
-		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
-	}
-	let x = await me(m), C = await fe(x, { cdc: oe && v !== void 0 }), he = x.filter((e) => ce.test(e)), ge = he.length > 0 ? await ee(he, $.child("webhooks")) : void 0, _e = s({
-		mix: C.featureMix,
-		plugins: h?.plugins ?? [],
-		cdc: oe && v !== void 0,
-		...v ? { cdcDialect: v } : {}
-	}), we = h?.analytics !== void 0 && h.analytics.kind !== "noop" && g !== "memory" ? (await n(g)).makeSqlLayer(S()) : void 0, E = await p({
-		spec: h?.analytics,
-		sqlLayer: we,
-		log: $
-	}), D = (() => {
-		let e = new Set(C.tables.map((e) => e.tableName)), t = [...C.tables];
-		for (let n of [..._e, ...E.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
-		return t;
-	})();
-	for (let e of D) wt(e);
-	let ke = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (Sn(ke, g, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await n(g)).makeSqlLayer(S()), t = await k.runPromise(St.SqlClient.pipe(k.flatMap((e) => Ht(e, D, {
-			appliedBy: `serve:${ke}`,
-			environment: "prod",
-			dialectId: g
-		})), k.provide(e)));
-		t.kind === "prod-mismatch" && ($.error(Vt(t, g)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Vt(t, g));
-	}
-	let j = ot(D);
-	f.mark("discover");
-	let N = await be(h, void 0), Ne = bt(N, g);
-	for (let e of ye({
-		dialect: String(h?.store ?? process.env.DB_DIALECT ?? "postgres"),
-		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
-		dbUrl: process.env.DB_URL,
-		tables: C.tables.map((e) => ({
-			tableName: e.tableName,
-			isReactive: e.isReactive === !0
-		})),
-		querySources: C.queries.flatMap((e) => {
-			let t = e.descriptor.source;
-			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
-		})
-	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
-	h?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = h.cache), h?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = h.cacheRedisUrl), h?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = h.cacheRedisDriver), h?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = h.cacheKeyPrefix);
-	let { service: Fe, invalidationBus: Ie, snapshotCache: Re, cache: P, backend: ze, dispose: F } = await Se({ env: process.env });
-	$.info(`cache backend resolved: ${ze}` + (ze === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), N.onChange((e) => {
-		k.runFork(Ie.publish(e.table));
-	}), h?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = h.kv), h?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = h.kvRedisUrl), h?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = h.kvKeyPrefix);
-	let { kv: Be, service: Ve } = await Ze({ store: N });
-	f.mark("store");
-	let Ke = Le({
-		store: N,
-		sink: E.sink,
-		log: $
-	}), qe = pe({
-		store: N,
-		dialect: g
-	}), I = h?.plugins ?? [], $e = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, et, tt;
-	g !== "memory" && (et = Me.make((await n(g)).makeSqlLayer(S())), tt = await et.runPromise(St.SqlClient));
-	let nt = Qe({
-		coordinator: [
-			"postgres",
-			"mariadb",
-			"mysql",
-			"mssql"
-		].includes(g) ? Je(N, $e, $) : _t,
-		replicaId: $e,
-		log: $
-	}), rt = [], it = {
-		...tt ? { sql: tt } : {},
-		scheduleCoordinated: (e, t, n) => {
-			let r = nt(e, t, n);
-			return rt.push(r), r;
-		}
-	};
-	for (let e of I) e.bindDataStore?.(N, it);
-	let at = I.filter((e) => typeof e.onChangeEvent == "function");
-	if (at.length > 0) {
-		let e = N.changeScope ?? "local";
-		N.onChange((t) => {
-			let n = {
-				table: t.table,
-				op: t.op,
-				new: t.new ?? null,
-				old: t.old ?? null,
-				...t.origin === void 0 ? {} : { origin: t.origin },
-				changeScope: e
-			};
-			for (let e of at) k.runFork(e.onChangeEvent(n).pipe(k.catchAllCause((t) => k.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: O.pretty(t) })))));
-		});
-	}
-	let st = Ce({
-		plugins: I,
-		appName: h?.name ?? "voltro-api",
-		appType: "api",
-		voltroVersion: process.env.npm_package_version ?? "0.0.0",
-		log: $
-	});
-	I.length && await st.activate(), f.mark("plugins");
-	let ct = await st.gatherObservability(), lt = await T(N, h, g, {
-		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
-		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
-		debug: () => {}
-	}), R = h?.apiKeys, ut = (typeof R == "object" ? R.prefix : void 0) ?? "voltro_", dt = R ? Ue(N) : void 0, pt = dt ? L({ flush: Xe(dt) }) : void 0;
-	pt && process.once("exit", () => {
-		pt.shutdown();
-	});
-	let ht = dt ? Ye(dt, {
-		prefix: ut,
-		...pt ? { usage: pt } : {}
-	}) : void 0, gt = ht ? [Ge(ht, { prefix: ut })] : [], vt = ve([...h?.auth?.strategies ?? [], ...gt], Ut(h?.plugins ?? []), h?.auth?.anonymousTenantRequired ?? !1, h?.auth?.resolveScopes, () => Ne), yt = [...h?.restRoutes ?? [], ...ht ? Pe(ht, (typeof R == "object" ? R.managementPath : void 0) ?? "/v1/api-keys") : []], z = h?.idempotency, xt = z ? {
-		store: We(N),
-		header: (typeof z == "object" ? z.header : void 0) ?? "Idempotency-Key",
-		ttlMs: (typeof z == "object" ? z.ttlMs : void 0) ?? 864e5
-	} : void 0, Ct = yt.length > 0 ? Gt(yt, {
-		store: N,
-		resolveSubject: (e) => vt({
-			headers: e,
-			clientId: -1
-		}),
-		...xt ? { idempotency: xt } : {}
-	}) : [], B = I.map((e) => e.services).filter((e) => e !== void 0), Tt = A.mergeAll(b({
-		analyticsLayer: E.layer,
-		cacheService: Fe,
-		kvService: Ve,
-		pluginServices: B,
-		userLayers: h?.layers ?? []
-	}), ue(h?.http ?? {})), V = h?.scheduling ?? {}, Et = V.trigger ?? "self", H = /* @__PURE__ */ new Set([
-		"postgres",
-		"mysql",
-		"mariadb",
-		"mssql"
-	]), U = V.coordination ?? (H.has(g) ? "advisoryLock" : "single"), W = U === "cluster" && H.has(g), Dt = W ? "cluster" : U === "advisoryLock" && H.has(g) ? "advisoryLock" : "single";
-	U === "cluster" && !W && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), U === "advisoryLock" && !H.has(g) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let Ot, G = C.workflows.length > 0 || C.workflowWorkers.length > 0 || C.eventTriggers.length > 0 || (ge?.outgoing.length ?? 0) > 0 || W, kt;
-	if (G) {
-		if (g === "mssql") {
-			let e = await Ee(process.cwd());
-			e && $.warn(e);
-		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: r, resolveRunnerStorage: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = W ? C.schedules.filter((e) => (e.trigger ?? Et) === "self").map((e) => t({
-			name: e.name,
-			cron: He(e),
-			execute: async () => {
-				await Ot?.fireFromCluster(e.name);
-			}
-		})) : [];
-		kt = g === "memory" ? e.layerMemory : await (async () => {
-			let e = await n(g), t = i({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
-			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), r({
-				sqlClientLayer: e.makeSqlLayer(S()),
-				runnerStorage: t,
-				dialectId: e.id,
-				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
-				...a.length > 0 ? { extraShardingLayers: a } : {}
-			});
-		})();
-	}
-	let At = de(I, t()), K = x.filter((e) => /\.subscribe\.tsx?$/.test(e)), jt = K.length > 0 ? await ae(K, $) : [], q = x.filter((e) => /\.reaction\.tsx?$/.test(e)), Mt = q.length > 0 ? await w(q, $) : [], J = x.filter((e) => u.test(e)), Nt = J.length > 0 ? await se(J, $) : [], Y = x.filter((e) => /\.aggregate\.tsx?$/.test(e)), X = Y.length > 0 ? await ne(Y, $) : [], Z = te();
-	if (X.length > 0 && g !== "memory") try {
-		Z = _((await n(g)).makeSqlLayer(S()));
-	} catch (e) {
-		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
-	}
-	let Pt = g === "memory" ? _t : Je(N, `aggregate@${process.pid}`, $), Ft = [], It = [], Rt = x.filter((e) => l.test(e));
-	if (Rt.length > 0) {
-		let e = $.child("agent"), t = x.filter((e) => a.test(e));
-		t.length > 0 && await o(t, e);
-		let n = await c(Rt, e);
-		for (let e of n.agents) for (let t of Te(e)) (t.kind === "action" ? Ft : It).push({
-			file: t.file,
-			descriptor: t.descriptor,
-			executor: t.executor
-		});
-		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
-	}
-	f.mark("workflow");
-	let zt = await xn({
-		bootTiming: f,
-		discovered: {
-			queries: [...C.queries, ...It],
-			mutations: C.mutations,
-			actions: [...C.actions, ...Ft],
-			streams: C.streams,
-			workflows: C.workflows,
-			workflowWorkers: C.workflowWorkers,
-			eventTriggers: C.eventTriggers,
-			schedules: C.schedules,
-			subscribers: jt,
-			outboxHandlers: Nt,
-			connections: C.connections,
-			reactions: Mt,
-			aggregates: X,
-			...ge === void 0 ? {} : { webhooks: ge }
-		},
-		log: $,
-		analytics: E.sink,
-		aggregateStorage: Z,
-		aggregateCoordinator: Pt,
-		store: N,
-		kv: Be,
-		cache: P,
-		snapshotCache: Re,
-		schemaRegistry: j,
-		tenantScopedTables: C.tenantScopedTables,
-		softDeleteScopedTables: C.softDeleteScopedTables,
-		dataTransferSnapshot: Bt(D),
-		dataTransferDialect: g,
-		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? h?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => vt({
-			headers: e,
-			clientId: t
-		}),
-		httpRoutes: [...I.flatMap((e) => e.httpRoutes ?? []), ...Ct],
-		getStore: () => Ne,
-		...Tt ? { baseLayer: Tt } : {},
-		...kt === void 0 ? {} : { workflowEngineLayer: kt },
-		scheduleDefaultTrigger: Et,
-		scheduleCoordination: Dt,
-		scheduleArmSelf: !W,
-		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : h?.dormancy ?? "always-on",
-		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...At === void 0 ? {} : { scheduleFireInterceptor: At },
-		onSchedulerReady: (e) => {
-			Ot = e;
-		},
-		observability: ct,
-		port: ie,
-		...h?.transport?.wsPath ? { path: h.transport.wsPath } : {}
-	});
-	re(y([
-		C.queries,
-		C.mutations,
-		C.actions,
-		C.streams
-	]), (e) => {
-		$.warn(e);
-	}), $.info(`API listening on :${ie}`, {
-		dialect: g,
-		queries: C.queries.length,
-		mutations: C.mutations.length,
-		actions: C.actions.length,
-		streams: C.streams.length,
-		workflows: C.workflows.length,
-		workflowWorkers: C.workflowWorkers.length,
-		schedules: C.schedules.length,
-		scheduleCoordination: Dt
-	}), f.finish($);
-	let Wt = () => {
-		for (let e of rt) e.stop();
-		Ke.detach(), qe.stop(), F(), et?.dispose(), setTimeout(() => process.exit(0), 1e4).unref?.(), Promise.resolve(st.deactivate()).then(() => lt?.close()).then(() => E.dispose()).then(() => zt.close()).then(() => N.close?.()).then(() => process.exit(0)).catch((e) => {
-			console.error("serve: shutdown step failed, exiting anyway:", e), process.exit(0);
-		});
-	};
-	return process.on("SIGINT", Wt), process.on("SIGTERM", Wt), await new Promise(() => {}), 0;
-};
-//#endregion
-export { wn as n, vn as r, Tn as t };