@voltro/cli 0.20.2 → 0.21.0

package/dist/serveCommand-BKqTKWTX.js

@@ -1,1136 +0,0 @@
-import { lt as e, t } from "./inspectMetrics-DvPNXmGA.js";
-import { s as n } from "./seedRunner-D6eu-u5U.js";
-import { r, t as i } from "./appModuleLoader-C9r9mxZt.js";
-import { f as a, m as o, n as s, p as c, u as l } from "./frameworkTableAssembly-sg41s14F.js";
-import { l as u } from "./fileConventions-CBNPZVOV.js";
-import { $ as d, A as ee, B as f, C as te, D as ne, E as p, F as re, G as m, I as ie, K as ae, L as h, M as g, N as oe, O as se, P as _, Q as v, R as y, S as ce, T as le, U as ue, V as de, W as b, _ as x, a as S, at as fe, b as pe, et as C, g as w, it as me, j as T, k as he, l as E, m as ge, n as _e, nt as ve, ot as ye, p as be, r as xe, rt as Se, s as Ce, tt as we, v as Te, w as Ee, x as De, y as Oe, z as D } from "./dev-OHLsAq4K.js";
-import { c as O, r as ke } from "./apiBuild-qZBEu59d.js";
-import { t as Ae } from "./bootTiming-BdyP9nYw.js";
-import { n as k } from "./cliArgs-qdZSElM3.js";
-import { join as A } from "node:path";
-import { pathToFileURL as je } from "node:url";
-import { Cause as Me, Effect as j, Layer as M, ManagedRuntime as Ne } from "effect";
-import { createLogger as N } from "@voltro/logger";
-import { existsSync as Pe } from "node:fs";
-import { AggregateRegistry as P, Dispatcher as Fe, apiKeyManagementRoutes as Ie, applySoftDeleteScope as Le, applyTenantScope as Re, attachAnalyticsMirror as ze, awaitServerListening as Be, bindMutation as F, bindStream as Ve, bindSubscription as I, buildTracingLayer as He, cancelWakeup as Ue, compileCron as We, dataStoreApiKeyStore as Ge, dataStoreIdempotencyStore as L, formatServerOnlyLeaks as Ke, frameworkApiKeyStrategy as qe, installPolicyGuardResolver as Je, loadResourceTuples as Ye, makeActionRunner as R, makeAdvisoryLockCoordinator as Xe, makeApiKeyService as Ze, makeApiKeyUsageBuffer as Qe, makeApiKeyUsageFlusher as $e, makeAsyncKv as et, makeCoordinatedScheduler as tt, makeEffectStoreLayer as nt, makeLazyWorkflowFacade as rt, makeMutationRunner as it, makeOneShotQueryRunner as at, makeQueryDescriptorProducer as ot, makeQueryReauthorizer as st, makeQuerySubscriber as ct, makeSchemaRegistry as lt, makeWorkflowFacade as ut, makeWorkflowFacadeWithCallerContext as dt, makeWorkflowLayers as ft, noopKv as z, recordSubscriptionDelivery as pt, registerWakeup as B, resolveSecretsBackend as mt, runProvidedEffect as ht, setSecretsBackend as gt, setSystemStoreHandle as _t, setTupleSource as vt, singleCoordinator as yt, startRpcServer as bt, startScheduler as xt, workflowToRpc as V, wrapStoreWithBootCodec as St } from "@voltro/runtime";
-import { RpcGroup as Ct } from "@effect/rpc";
-import { SqlClient as wt } from "@effect/sql";
-import { and as Tt, ensureTableRegistered as Et, eq as H, or as Dt } from "@voltro/database";
-import { appStorageProvider as U, fromNodeReadable as Ot, getObjectStream as kt, putObjectStream as At, toNodeReadable as W } from "@voltro/plugin-storage";
-import { AuthMiddleware as jt, ConnectionInfoMiddleware as Mt, actionToRpc as G, anonymousSubject as Nt, mutationToRpc as Pt, queryToRpc as K, streamToRpc as Ft, workflowCancelDescriptor as It, workflowDomainEventsQueryDescriptor as Lt, workflowEventDeliveriesQueryDescriptor as q, workflowResumeDescriptor as Rt, workflowRunEventsQueryDescriptor as J, workflowRunQueryDescriptor as Y, workflowRunStepsQueryDescriptor as X, workflowRunsQueryDescriptor as zt, workflowSignalDescriptor as Bt, workflowUpdateDescriptor as Z } from "@voltro/protocol";
-import { assertProductionSessionSecret as Vt } from "@voltro/protocol/session";
-import { createHash as Ht, timingSafeEqual as Ut } from "node:crypto";
-import { declaredSnapshot as Wt, describeOutcome as Gt, runPlannedMigrations as Kt } from "@voltro/database/sql";
-import { getAuthSessionStrategy as qt } from "@voltro/plugin-auth";
-import { collectPublicApiRoutes as Jt, restRoutesToHttpRoutes as Yt } from "@voltro/protocol/rest";
-import { buildDeliverWebhookExecute as Xt, buildWebhooksService as Zt, defaultIncomingPath as Qt, deliverWebhookWorkflow as $t, mountIncomingWebhook as en } from "@voltro/plugin-webhooks";
-import { packBundle as tn, runExport as nn, runImport as rn, storageBlobSink as an, storageRefsBlobSource as on, unpackBundle as sn, unpackBundleToDir as cn } from "@voltro/data-transfer";
-//#region src/bootRefusal.ts
-var ln = "VoltroBootRefusal", un = (e) => {
-	let t = Error(e);
-	return t.name = ln, t;
-}, dn = "/_voltro/admin/import", fn = "/_voltro/admin/export", Q = (e, t) => ({
-	status: e,
-	contentType: "application/json; charset=utf-8",
-	body: JSON.stringify(t)
-}), pn = (e) => {
-	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
-	return n ? n[1] : null;
-}, mn = (e, t) => Ut(Ht("sha256").update(e).digest(), Ht("sha256").update(t).digest()), hn = (e, t) => {
-	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
-	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let n = pn(e.headers);
-	return !n || !mn(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, gn = N({ scope: "voltro:admin-import" }), _n = "VBUNDLE2", vn = async function* (e) {
-	yield e;
-}, yn = (e) => async (t) => {
-	let n = hn(t, e.secret);
-	if (n) return n;
-	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === _n, c, l;
-	if (s) c = vn(t.rawBody), l = "upload";
-	else {
-		let n;
-		try {
-			n = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-		} catch {
-			return Q(400, { error: "body must be a packed bundle archive or { bundleKey } JSON" });
-		}
-		if (typeof n.bundleKey != "string" || !n.bundleKey) return Q(400, { error: "body.bundleKey (string) is required for the storage transport" });
-		if (!e.openArchive) return Q(501, { error: "storage transport not configured on this instance" });
-		c = e.openArchive(n.bundleKey), l = "storage";
-	}
-	let u = await import("node:os"), d = await import("node:fs/promises"), ee = await import("node:path"), f = await d.mkdtemp(ee.join(u.tmpdir(), "voltro-admin-import-"));
-	try {
-		e.assetSink ? await sn(c, {
-			dir: f,
-			blobs: e.assetSink
-		}) : await cn(c, f);
-		let t = await j.runPromiseExit(rn({
-			store: e.store,
-			bundleDir: f,
-			...r ? { mode: r } : {},
-			...i ? { onConflict: i } : {},
-			...a ? { atomic: a } : {},
-			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
-			force: o,
-			onWarn: (e) => gn.warn("admin.import", { message: e }),
-			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
-		}));
-		if (t._tag === "Failure") {
-			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
-			if (e && e._tag === "SchemaDriftError") {
-				let t = e;
-				return gn.warn("admin.import refused (schema drift)", {
-					transport: l,
-					bundle: t.bundleFingerprint.slice(0, 16),
-					target: t.targetFingerprint.slice(0, 16)
-				}), Q(409, {
-					error: "schema drift",
-					bundleFingerprint: t.bundleFingerprint,
-					targetFingerprint: t.targetFingerprint,
-					diff: t.diff,
-					hint: "re-export against the current schema, or resend with x-import-force: 1"
-				});
-			}
-			throw Error(String(e?.message ?? e ?? "import failed"));
-		}
-		let n = t.value, s = n.tables.reduce((e, t) => e + t.rowCount, 0);
-		return gn.info("admin.import", {
-			transport: l,
-			tables: n.tables.length,
-			rows: s,
-			mode: r ?? "upsert",
-			atomic: a
-		}), Q(200, {
-			tables: n.tables.length,
-			rows: s,
-			transport: l
-		});
-	} catch (e) {
-		return gn.warn("admin.import failed", {
-			transport: l,
-			error: e?.message ?? String(e)
-		}), Q(500, {
-			error: "import failed",
-			message: e?.message ?? String(e)
-		});
-	} finally {
-		await d.rm(f, {
-			recursive: !0,
-			force: !0
-		});
-	}
-}, bn = N({ scope: "voltro:admin-export" }), xn = async (e) => {
-	let t = [];
-	for await (let n of e) t.push(Buffer.from(n));
-	return new Uint8Array(Buffer.concat(t));
-}, Sn = (e) => typeof e.tenant == "string" && e.tenant ? {
-	kind: "tenant",
-	tenantId: e.tenant
-} : Array.isArray(e.tables) && e.tables.length ? {
-	kind: "tables",
-	tables: e.tables.filter((e) => typeof e == "string")
-} : { kind: "all" }, Cn = (e) => async (t) => {
-	let n = hn(t, e.secret);
-	if (n) return n;
-	let r;
-	try {
-		r = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-	} catch {
-		return Q(400, { error: "body must be JSON: { profile?, tenant?, tables?, consistency?, compression?, bundleKey? }" });
-	}
-	let i = {};
-	if (typeof r.profile == "string" && r.profile) {
-		if (!e.loadProfile) return Q(501, { error: "server-side profiles not configured on this instance" });
-		try {
-			i = await e.loadProfile(r.profile);
-		} catch (e) {
-			return Q(400, {
-				error: `profile '${r.profile}' could not be loaded`,
-				message: e?.message ?? String(e)
-			});
-		}
-	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? Sn(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), ee = await import("node:path"), f = await d.mkdtemp(ee.join(u.tmpdir(), "voltro-admin-export-"));
-	try {
-		let t = await j.runPromise(nn({
-			store: e.store,
-			snapshot: e.snapshot,
-			dialect: e.dialect,
-			outDir: f,
-			...i.subset ? { subset: i.subset } : {
-				scope: s,
-				...e.tenantTables && e.tenantTables.length > 0 ? { tenantTables: e.tenantTables } : {}
-			},
-			consistency: a,
-			...o ? { compression: o } : {},
-			...i.masking ? { masking: i.masking } : {}
-		})), n = t.tables.reduce((e, t) => e + t.rowCount, 0), u = t.masking?.transformed.length ?? 0;
-		if (c) {
-			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
-			let i = r.bundleKey;
-			return await e.putArchive(i, () => tn({
-				dir: f,
-				...l
-			})), bn.info("admin.export", {
-				transport: "storage",
-				tables: t.tables.length,
-				rows: n,
-				masked: u,
-				bundleKey: i
-			}), Q(200, {
-				bundleKey: i,
-				tables: t.tables.length,
-				rows: n,
-				masked: u,
-				transport: "storage"
-			});
-		}
-		let d = await xn(tn({
-			dir: f,
-			...l
-		}));
-		return bn.info("admin.export", {
-			transport: "download",
-			tables: t.tables.length,
-			rows: n,
-			masked: u,
-			bytes: d.byteLength
-		}), {
-			status: 200,
-			contentType: "application/octet-stream",
-			body: d,
-			headers: {
-				"x-export-tables": String(t.tables.length),
-				"x-export-rows": String(n),
-				"x-export-masked": String(u)
-			}
-		};
-	} catch (e) {
-		return bn.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
-			error: "export failed",
-			message: e?.message ?? String(e)
-		});
-	} finally {
-		await d.rm(f, {
-			recursive: !0,
-			force: !0
-		});
-	}
-}, wn = async (e) => {
-	let { resolve: t } = await import("node:path"), { existsSync: n } = await import("node:fs"), r = [
-		e,
-		`${e}.profile.ts`,
-		`data-profiles/${e}.ts`,
-		`data-profiles/${e}.profile.ts`
-	].map((e) => t(process.cwd(), e)), i = r.find((e) => n(e));
-	if (!i) throw Error(`data profile '${e}' not found (looked for: ${r.join(", ")})`);
-	let a = await import(i), o = a.default ?? a.profile;
-	if (!o) throw Error(`data profile '${i}' has no default export`);
-	return o;
-}, Tn = (e, t, n = {}) => (async function* () {
-	let r = await W((await j.runPromise(kt(e, t).pipe(j.timeout(n.openTimeout ?? "30 seconds")))).stream), i = n.stallMs ?? 12e4, a, o = () => {
-		a && clearTimeout(a), a = setTimeout(() => r.destroy(/* @__PURE__ */ Error(`storage read stalled for ${i}ms reading '${t}'`)), i);
-	};
-	try {
-		o();
-		for await (let e of r) o(), yield e instanceof Uint8Array ? e : new Uint8Array(e);
-	} finally {
-		a && clearTimeout(a), r.destroy();
-	}
-})(), En = {
-	get: async () => void 0,
-	set: async () => {},
-	setWithTags: async () => {},
-	remove: async () => !1,
-	has: async () => !1,
-	clear: async () => {},
-	invalidateTag: async () => 0,
-	wrap: async (e, t, n) => n()
-}, Dn = async (e) => {
-	_t({
-		dataStore: e.store,
-		schemaRegistry: e.schemaRegistry
-	});
-	let t = new Fe({
-		store: e.store,
-		...e.snapshotCache ? { cache: e.snapshotCache } : {},
-		recordDelivery: (e) => pt({
-			label: e.label,
-			kind: e.kind,
-			durationMs: e.durationMs,
-			rowCount: e.rowCount
-		})
-	}), n = e.cache ?? En, r = e.kv ?? z, i, a, o, s = /* @__PURE__ */ new Map(), c = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, l = async (t, n, r) => {
-		let i = {
-			...r,
-			source: r.source ?? `workflow:${t}`
-		};
-		s.set(n, i);
-		try {
-			let r = await e.store.query({
-				table: "_voltro_workflow_start_contexts",
-				order: [],
-				predicate: H("executionId", n),
-				projection: ["id"],
-				skip: void 0,
-				take: 1
-			}), a = {
-				workflowName: t,
-				executionId: n,
-				subject: i.subject ?? null,
-				traceId: i.traceId ?? null,
-				source: i.source ?? null,
-				parentExecutionId: i.parentExecutionId ?? null,
-				parentClosePolicy: i.parentClosePolicy ?? null,
-				createdAt: /* @__PURE__ */ new Date()
-			};
-			r[0] === void 0 ? await e.store.insert("_voltro_workflow_start_contexts", {
-				id: c(),
-				...a
-			}) : await e.store.update("_voltro_workflow_start_contexts", r[0].id, a);
-		} catch (e) {
-			process.stderr.write(`[workflow] failed to persist start context for ${t}/${n}: ${e?.message ?? String(e)}\n`);
-		}
-	}, u = async (t, n) => {
-		let r = s.get(n);
-		if (r !== void 0) return r;
-		try {
-			let t = (await e.store.query({
-				table: "_voltro_workflow_start_contexts",
-				order: [],
-				predicate: H("executionId", n),
-				projection: void 0,
-				skip: void 0,
-				take: 1
-			}))[0];
-			if (t === void 0) return;
-			let r = {
-				...t.subject === null ? {} : { subject: t.subject },
-				...t.traceId === null ? {} : { traceId: t.traceId },
-				...t.source === null ? {} : { source: t.source },
-				...t.parentExecutionId === null ? {} : { parentExecutionId: t.parentExecutionId },
-				...t.parentClosePolicy === null ? {} : { parentClosePolicy: t.parentClosePolicy }
-			};
-			return s.set(n, r), r;
-		} catch (e) {
-			process.stderr.write(`[workflow] failed to load start context for ${n}: ${e?.message ?? String(e)}\n`);
-			return;
-		}
-	}, d = (e.discovered.workflows?.length ?? 0) > 0 ? rt(() => i) : void 0, te = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ne = te || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", re = e.tenantIsolation === "namespace", m = (e.log ?? N({ scope: "voltro:serve" })).child("webhooks"), ae, g = e.discovered.webhooks;
-	if (g && g.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
-		let t = e.workflowEngineLayer, i = Se({
-			store: e.store,
-			schemaRegistry: e.schemaRegistry,
-			cache: n,
-			kv: r
-		}), a = g.outgoing.map((e) => e.descriptor);
-		ae = Zt(i, async (e) => {
-			let n = $t.execute(e).pipe(j.provide($t.toLayer(Xt(i, { events: a })).pipe(M.provideMerge(t))));
-			j.runPromise(n).catch((t) => {
-				m.error("deliverWebhook workflow crashed", {
-					deliveryId: e.deliveryId,
-					targetId: e.targetId
-				}, t);
-			});
-		}, { events: a });
-	}
-	let oe = /* @__PURE__ */ new Map();
-	if (g) for (let e of g.incoming) {
-		let t = e.descriptor.path ?? Qt(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = en(e.descriptor, {
-			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => d === void 0 ? void 0 : dt(d, {
-				traceId: `incoming:${e.descriptor.id}`,
-				source: `incoming:${e.descriptor.id}`
-			}),
-			log: (e) => {
-				let t = {
-					webhookId: e.webhookId,
-					status: e.status,
-					signatureOk: String(e.signatureOk),
-					idempotency: e.idempotency,
-					durationMs: e.durationMs
-				};
-				e.status >= 500 ? m.error("incoming delivery failed", t) : e.status >= 400 ? m.warn("incoming delivery rejected", t) : m.info("incoming delivery handled", t);
-			}
-		});
-		oe.set(t, { handle: r });
-	}
-	Je(), vt((t) => Ye(e.store, t.subjectId, t.resourceType, t.resourceId));
-	let se = (e.discovered.outboxHandlers?.length ?? 0) > 0 ? D({
-		handlers: e.discovered.outboxHandlers ?? [],
-		store: e.store,
-		log: (e.log ?? N({ scope: "voltro:serve" })).child("outbox")
-	}) : void 0, _ = h({
-		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
-		store: e.store,
-		publicUrl: ie(e.port ?? 4e3),
-		log: (e.log ?? N({ scope: "voltro:serve" })).child("connections")
-	}), y = ve({
-		store: e.store,
-		schemaRegistry: e.schemaRegistry,
-		cache: n,
-		kv: r,
-		...ae === void 0 ? {} : { webhooksService: ae },
-		...d === void 0 ? {} : { workflowsProxy: d },
-		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: re,
-		...se === void 0 ? {} : { outbox: { nudge: se.nudge } },
-		..._.active ? { connections: { registry: _.registry } } : {}
-	}), ce = M.succeed(P, p), ue = (t, n) => {
-		let r = t.pipe(j.provide(nt(n)));
-		return ht((e.baseLayer ? r.pipe(j.provide(e.baseLayer)) : r).pipe(j.provide(ce)));
-	}, de = it({
-		store: e.store,
-		buildContext: (e, t, n) => y(e, t, n),
-		runEffect: ue,
-		undoCapture: De()
-	}), b = pe(), S = R({
-		buildContext: (e) => y(e),
-		runEffect: ue
-	}), fe = {
-		buildContext: (e) => y(e),
-		finalize: (t, n) => Le(Re(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
-		provideEffect: (e, t) => e.pipe(j.provide(nt(t)))
-	}, C = ot(fe), me = at({
-		...fe,
-		queryRows: (t) => e.store.query(t)
-	}), he = ct({
-		...fe,
-		subscribeDescriptor: (e, n, r) => t.subscribe(e, n, r),
-		subscribeComputed: (e, n, r) => t.subscribeComputed(e, n, r)
-	}), E = {};
-	for (let n of [
-		...e.discovered.queries,
-		...b.queries,
-		..._.queries
-	]) E[n.descriptor.name] = (e) => I(C(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, st(n, e));
-	for (let t of [
-		...e.discovered.mutations,
-		...b.mutations,
-		..._.mutations
-	]) E[t.descriptor.name] = (e) => F(async (e, n) => de(t, e, n), e, `mutation.${t.descriptor.name}`);
-	for (let t of [...e.discovered.actions, ..._.actions]) E[t.descriptor.name] = (e) => F(async (e, n) => S(t, e, n), e, `action.${t.descriptor.name}`);
-	let ge = () => `public-${Math.random().toString(36).slice(2, 10)}`, _e = [
-		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => me(e, t, {
-				subject: n.subject,
-				traceId: ge()
-			}),
-			subscribe: (t, n, r) => he(e, t, {
-				subject: n.subject,
-				traceId: ge()
-			}, r)
-		})),
-		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => de(e, t, {
-				subject: n.subject,
-				traceId: ge()
-			})
-		})),
-		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => S(e, t, {
-				subject: n.subject,
-				traceId: ge()
-			})
-		}))
-	], ye = _e.length > 0 ? Yt(Jt(_e), {
-		store: e.store,
-		resolveSubject: (t) => e.resolveSubject(t, -1)
-	}) : [], be = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, xe = be && be.length >= 16 ? [{
-		method: "POST",
-		path: dn,
-		handle: yn({
-			secret: be,
-			store: e.store,
-			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-			assetSink: an(U()),
-			openArchive: (e) => Tn(U(), e)
-		})
-	}, {
-		method: "POST",
-		path: fn,
-		handle: Cn({
-			secret: be,
-			store: e.store,
-			snapshot: e.dataTransferSnapshot ?? { tables: [] },
-			dialect: e.dataTransferDialect ?? "memory",
-			tenantTables: [...e.tenantScopedTables],
-			loadProfile: wn,
-			assetSource: on(U(), e.store),
-			putArchive: async (e, t) => {
-				let { Readable: n } = await import("node:stream"), r = U(), i = Ot("storage", () => n.from(t()));
-				await j.runPromise(At(r, e, i, { contentType: "application/octet-stream" }));
-			}
-		})
-	}] : [], Ce = [
-		...e.httpRoutes ?? [],
-		...ye,
-		...xe,
-		..._.httpRoutes
-	];
-	for (let t of e.discovered.streams ?? []) E[t.descriptor.name] = (n) => Ve((r) => {
-		let i = y(r), a = t.executor(n, i);
-		if (j.isEffect(a)) {
-			let t = a.pipe(j.provide(nt(i.store)));
-			return (e.baseLayer ? t.pipe(j.provide(e.baseLayer)) : t).pipe(j.provide(ce));
-		}
-		return typeof a == "object" && a && typeof a.then == "function" ? j.promise(() => a) : a;
-	}, `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) E[t.definition.name] = (e) => F(async (e, n) => {
-		let r = n;
-		return dt(d, {
-			subject: r.subject,
-			traceId: r.traceId,
-			source: "workflow-rpc"
-		}).start(t.definition.name, e);
-	}, e, `workflow.${t.definition.name}`);
-	te && (E[Y.name] = (e) => I(C({
-		descriptor: Y,
-		executor: (e) => {
-			let t = e.id;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: Dt(H("id", t), H("executionId", t)),
-				take: 1,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Y.name}`), E[zt.name] = (e) => I(C({
-		descriptor: zt,
-		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [H("tag", t.tag)], ...t.status === void 0 ? [] : [H("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : Tt(...n),
-				take: r,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${zt.name}`), E[X.name] = (e) => I(C({
-		descriptor: X,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_steps",
-				order: [{
-					column: "startedAt",
-					direction: "asc"
-				}],
-				predicate: H("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${X.name}`), E[J.name] = (e) => I(C({
-		descriptor: J,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_events",
-				order: [{
-					column: "occurredAt",
-					direction: "asc"
-				}],
-				predicate: H("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${J.name}`), E[Lt.name] = (e) => I(C({
-		descriptor: Lt,
-		executor: (e) => {
-			let t = e;
-			return {
-				table: "_voltro_workflow_events",
-				order: [{
-					column: "occurredAt",
-					direction: "desc"
-				}],
-				predicate: t.name === void 0 ? void 0 : H("name", t.name),
-				take: Math.max(1, Math.min(500, t.limit ?? 100)),
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Lt.name}`), E[q.name] = (e) => I(C({
-		descriptor: q,
-		executor: (e) => {
-			let t = e.eventId;
-			return {
-				table: "_voltro_workflow_event_deliveries",
-				order: [{
-					column: "createdAt",
-					direction: "asc"
-				}],
-				predicate: H("eventId", t),
-				take: 500,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${q.name}`), E[It.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await we(e.store, n.subject, { executionId: r.executionId }), await d.cancel(r.workflowName, r.executionId), await Me(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${It.name}`), E[Rt.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await we(e.store, n.subject, { executionId: r.executionId }), await d.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Rt.name}`), E[Bt.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await we(e.store, n.subject, { id: r.id }), d.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${Bt.name}`), E[Z.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await we(e.store, n.subject, { id: r.id }), d.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${Z.name}`));
-	let Te = [
-		...e.discovered.queries.map((e) => K(e.descriptor)),
-		...e.discovered.mutations.map((e) => Pt(e.descriptor)),
-		...e.discovered.actions.map((e) => G(e.descriptor)),
-		...b.queries.map((e) => K(e.descriptor)),
-		...b.mutations.map((e) => Pt(e.descriptor)),
-		..._.queries.map((e) => K(e.descriptor)),
-		..._.mutations.map((e) => Pt(e.descriptor)),
-		..._.actions.map((e) => G(e.descriptor)),
-		...(e.discovered.streams ?? []).map((e) => Ft(e.descriptor)),
-		...(e.discovered.workflows ?? []).map((e) => V(e.definition)),
-		...te ? [
-			K(Y),
-			K(zt),
-			K(X),
-			K(J),
-			K(Lt),
-			K(q),
-			G(It),
-			G(Rt),
-			G(Bt),
-			G(Z)
-		] : []
-	], Ee = Ct.make(...Te).middleware(jt).middleware(Mt), Oe = M.succeed(jt, jt.of(({ headers: t, clientId: n }) => j.promise(() => e.resolveSubject(t, n)))), O = M.succeed(Mt, Mt.of(({ clientId: e }) => j.succeed({ clientId: e }))), ke = e.dormancyTenantId ?? "default", Ae = e.dormancy === "sleep" ? {
-		register: (t, n, r) => B(e.store, {
-			tenantId: r ?? ke,
-			kind: "workflow",
-			refId: t,
-			wakeAt: n
-		}),
-		cancel: (t, n) => Ue(e.store, {
-			tenantId: n ?? ke,
-			kind: "workflow",
-			refId: t
-		}).then(() => {})
-	} : void 0, k = ne ? await import("@voltro/workflow") : void 0, A = k?.makeWorkflowRunRecorder({
-		store: e.store,
-		...Ae === void 0 ? {} : { wakeups: Ae }
-	}), je = async (t, n) => {
-		await k.closeWorkflowChildrenForParent({
-			store: e.store,
-			parentExecutionId: t,
-			parentStatus: n,
-			recorder: A,
-			log: { warn: (e, t) => {
-				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-			} },
-			interruptChild: async (t, n) => {
-				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
-				if (!r) throw Error(`Unknown child workflow: ${t}`);
-				if (!a) throw Error("Workflow runtime is not ready");
-				await a.runPromise(r.definition.interrupt(n));
-			}
-		});
-	}, Me = async (t, n, r) => {
-		let i = (await e.store.query({
-			table: "_voltro_workflow_runs",
-			order: [],
-			predicate: H("executionId", n),
-			projection: void 0,
-			skip: void 0,
-			take: 1
-		}))[0];
-		if (i === void 0) return;
-		let a = await e.store.update("_voltro_workflow_runs", i.id, {
-			status: "cancelled",
-			cancelled: !0,
-			completedAt: /* @__PURE__ */ new Date()
-		}), o = i.subject?.tenantId ?? void 0;
-		a && await A.recordEvent({
-			runId: i.id,
-			eventType: "run-cancelled",
-			payload: {
-				reason: r,
-				workflowName: t,
-				executionId: n,
-				...o == null ? {} : { tenantId: o }
-			}
-		}), a && await je(n, "cancelled");
-	}, Pe = [...ft(e.discovered.workflows ?? [], {
-		buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? y({
-			subject: t.subject,
-			traceId: t.traceId
-		}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-		resolveStartContext: u
-	}, (t, n, r) => {
-		let i = k.getWorkflowVersionMetadata(t.definition);
-		return k.wrapWorkflowExecuteWithRunRecording({
-			name: t.definition.name,
-			store: e.store,
-			subject: r.subject,
-			source: r.source ?? null,
-			traceId: r.traceId,
-			workflowVersion: i.version,
-			workflowCompatibleVersions: i.compatibleWith,
-			workflowPatches: i.patches,
-			parentExecutionId: r?.parentExecutionId ?? null,
-			parentClosePolicy: r?.parentClosePolicy ?? null,
-			onParentClose: ({ executionId: e, status: t }) => je(e, t),
-			recorder: A
-		}, n);
-	}), ...e.discovered.workflowWorkers ?? []], Ie = Pe.length > 0 ? M.mergeAll(...Pe) : M.empty;
-	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster") && e.workflowEngineLayer !== void 0) {
-		let t = Ie.pipe(M.provideMerge(e.workflowEngineLayer));
-		a = Ne.make(e.baseLayer === void 0 ? t : t.pipe(M.provideMerge(e.baseLayer))), await a.runPromise(j.void), i = (e.discovered.workflows?.length ?? 0) > 0 ? ut({
-			workflows: e.discovered.workflows ?? [],
-			runEffect: (e) => a.runPromise(e),
-			rememberStartContext: l,
-			signal: async (t, n, r) => {
-				let i = await k.sendWorkflowSignal({
-					store: e.store,
-					recorder: A,
-					target: t,
-					signalName: n,
-					payload: r
-				});
-				return await a.runPromise(k.completeSuspendingSignal({
-					store: e.store,
-					target: t,
-					signalName: n,
-					payload: r
-				})).catch(() => {}), i;
-			},
-			update: (t, n, r, i) => k.sendWorkflowUpdate({
-				store: e.store,
-				recorder: A,
-				target: t,
-				updateName: n,
-				payload: r,
-				...i === void 0 ? {} : { options: i }
-			}),
-			listRuns: (t) => w(e.store, t),
-			retry: (t, n) => x({
-				store: e.store,
-				workflows: e.discovered.workflows ?? [],
-				runPromise: (e) => a.runPromise(e)
-			}, t, n)
-		}) : void 0;
-	}
-	let ze = M.mergeAll(Ee.toLayer(E), Oe, O), We = v(E, e.discovered.queries.map((e) => e.descriptor.name), te), Ge = M.mergeAll(Ee.toLayer(We), Oe, O), L = e.observability, Ke = await He({
-		...L && L.spanProcessors.length > 0 ? { extraSpanProcessors: L.spanProcessors } : {},
-		...L && L.metricReaders.length > 0 ? { extraMetricReaders: L.metricReaders } : {},
-		...L && Object.keys(L.resourceAttributes).length > 0 ? { resourceAttributes: L.resourceAttributes } : {},
-		...L && L.sampler !== void 0 ? { sampler: L.sampler } : {}
-	}), qe = !1, Ze = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Qe, shutdown: $e } = bt({
-		group: Ee,
-		handlersLayer: ze,
-		httpHandlersLayer: Ge,
-		port: e.port ?? 4e3,
-		path: e.path ?? "/ws",
-		tracerLayer: Ke.layer,
-		healthCheck: {
-			isReady: () => qe,
-			...Ze ? { ping: Ze } : {}
-		},
-		...Ce.length > 0 ? { httpRoutes: Ce } : {},
-		...e.getStore === void 0 ? {} : { getStore: e.getStore },
-		...oe.size > 0 ? { webhookRoutes: oe } : {}
-	});
-	if (await Be(Qe), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Xe(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : yt;
-		o = await xt(e.discovered.schedules ?? [], {
-			store: e.store,
-			coordinator: t,
-			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
-			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`,
-			armSelf: e.scheduleArmSelf ?? !0,
-			dormancy: e.dormancy ?? "always-on",
-			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
-			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => y({
-				subject: r,
-				traceId: t
-			}, e.store, void 0, `schedule:${n}`),
-			log: {
-				info: (e, t) => {
-					process.stdout.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				warn: (e, t) => {
-					process.stderr.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				error: (e, t) => {
-					process.stderr.write(`[schedule] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				debug: () => {}
-			},
-			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
-			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
-		}), e.onSchedulerReady?.(o);
-	}
-	let et = e.log ?? N({ scope: "voltro:serve" }), tt, lt;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (tt = f(e.discovered.subscribers ?? [], e.store, et.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = et.child("reaction");
-		lt = ee(e.discovered.reactions ?? [], e.store, {
-			runAct: async (n, r) => {
-				if (n.kind === "workflow") {
-					if (d === void 0) {
-						t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
-						return;
-					}
-					let e = r.new ?? r.old ?? {};
-					await dt(d, {
-						traceId: `reaction:${n.workflow}`,
-						source: `reaction:${n.workflow}`
-					}).start(n.workflow, e);
-					return;
-				}
-				await T(n.agent, r, {
-					findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-					runAction: (e, t, n) => Promise.resolve(S(e, t, n)),
-					makeSubject: (e) => Nt(e),
-					now: () => Date.now(),
-					log: t
-				});
-			},
-			checkBudget: async (n, r) => {
-				try {
-					let { requireAiBudget: t } = await import("@voltro/ai");
-					return (await j.runPromise(j.either(t(e.store, {
-						tenantId: n,
-						limitUsd: r
-					}))))._tag === "Right";
-				} catch (e) {
-					return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
-				}
-			}
-		}, t);
-	}
-	let mt;
-	return (e.discovered.aggregates?.length ?? 0) > 0 && (mt = await le({
-		discovered: e.discovered.aggregates ?? [],
-		store: e.store,
-		log: et.child("aggregate"),
-		...e.analytics === void 0 ? {} : { analytics: e.analytics },
-		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
-		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), ce = M.succeed(P, mt.registry)), qe = !0, e.bootTiming?.mark("ready"), {
-		dispatcher: t,
-		server: Qe,
-		scheduler: o,
-		close: async () => {
-			qe = !1, mt?.detach(), lt?.(), tt?.(), await o?.shutdown(), t.close(), await a?.dispose(), await new Promise((e) => Qe.close(() => e())), await $e();
-		}
-	};
-}, $ = N({ scope: "voltro:serve" }), On = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", kn = k, An = async (e) => {
-	let t = O(process.cwd());
-	if (Pe(t)) {
-		let n;
-		try {
-			let e = await import(je(t).href);
-			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
-		} catch (e) {
-			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
-		}
-		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
-	}
-	return jn(e);
-}, jn = async (ee) => {
-	let f = Ae();
-	process.env.NODE_ENV || (process.env.NODE_ENV = "production");
-	try {
-		Vt();
-	} catch (e) {
-		throw un(e instanceof Error ? e.message : String(e));
-	}
-	let p = process.cwd(), ie = Number(process.env.PORT ?? kn(ee, "--port") ?? 4e3), h = await Ce(p);
-	gt(mt(h?.secrets)), await e({
-		rawEnv: h?.env,
-		appType: "api",
-		root: p,
-		log: $,
-		generateTypes: !1
-	}), f.mark("config");
-	let v = (process.env.DB_DIALECT ?? h?.store ?? "memory").toLowerCase(), le = (v === "mariadb" || v === "postgres" || v === "mssql") && (process.env.CDC ?? "1") !== "0", x = v === "mariadb" ? "mariadb" : v === "mssql" ? "mssql" : void 0, pe = ke(p);
-	if (!i() && Pe(pe)) try {
-		let e = await import(je(pe).href);
-		if (e.modules) {
-			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[A(p, n)] = r;
-			r(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
-		}
-	} catch (e) {
-		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
-	}
-	let w = await be(p), T = await E(w, { cdc: le && x !== void 0 });
-	{
-		let e = re(T.serverOnlyLeaks, _(process.env, "strict"), Ke, "`voltro serve`");
-		if (e.action === "fail") throw un(e.message ?? "");
-		e.action === "warn" && $.warn(e.message ?? "");
-	}
-	let ve = w.filter((e) => te.test(e)), Se = ve.length > 0 ? await Ee(ve, $.child("webhooks")) : void 0, we = s({
-		mix: T.featureMix,
-		plugins: h?.plugins ?? [],
-		cdc: le && x !== void 0,
-		...x ? { cdcDialect: x } : {}
-	}), De = h?.analytics !== void 0 && h.analytics.kind !== "noop" && v !== "memory" ? (await n(v)).makeSqlLayer(S()) : void 0, D = await b({
-		spec: h?.analytics,
-		sqlLayer: De,
-		log: $
-	}), O = (() => {
-		let e = new Set(T.tables.map((e) => e.tableName)), t = [...T.tables];
-		for (let n of [...we, ...D.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
-		return t;
-	})();
-	for (let e of O) Et(e);
-	let k = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (On(k, v, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await n(v)).makeSqlLayer(S()), t = await j.runPromise(wt.SqlClient.pipe(j.flatMap((e) => Kt(e, O, {
-			appliedBy: `serve:${k}`,
-			environment: "prod",
-			dialectId: v
-		})), j.provide(e)));
-		t.kind === "prod-mismatch" && ($.error(Gt(t, v)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Gt(t, v));
-	}
-	let N = lt(O);
-	f.mark("discover");
-	let P = await xe(h, void 0), Fe = St(P, v);
-	for (let e of ye({
-		dialect: String(h?.store ?? process.env.DB_DIALECT ?? "postgres"),
-		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
-		dbUrl: process.env.DB_URL,
-		tables: T.tables.map((e) => ({
-			tableName: e.tableName,
-			isReactive: e.isReactive === !0
-		})),
-		querySources: T.queries.flatMap((e) => {
-			let t = e.descriptor.source;
-			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
-		})
-	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
-	h?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = h.cache), h?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = h.cacheRedisUrl), h?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = h.cacheRedisDriver), h?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = h.cacheKeyPrefix);
-	let { service: Le, invalidationBus: Re, snapshotCache: Be, cache: F, backend: Ve, dispose: I } = await fe({ env: process.env });
-	$.info(`cache backend resolved: ${Ve}` + (Ve === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), P.onChange((e) => {
-		j.runFork(Re.publish(e.table));
-	}), h?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = h.kv), h?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = h.kvRedisUrl), h?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = h.kvKeyPrefix);
-	let { kv: He, service: Ue } = await et({ store: P });
-	f.mark("store");
-	let Je = ze({
-		store: P,
-		sink: D.sink,
-		log: $
-	}), Ye = me({
-		store: P,
-		dialect: v
-	}), R = h?.plugins ?? [], nt = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, rt, it;
-	v !== "memory" && (rt = Ne.make((await n(v)).makeSqlLayer(S())), it = await rt.runPromise(wt.SqlClient));
-	let at = tt({
-		coordinator: [
-			"postgres",
-			"mariadb",
-			"mysql",
-			"mssql"
-		].includes(v) ? Xe(P, nt, $) : yt,
-		replicaId: nt,
-		log: $
-	}), ot = [], st = {
-		...it ? { sql: it } : {},
-		scheduleCoordinated: (e, t, n) => {
-			let r = at(e, t, n);
-			return ot.push(r), r;
-		}
-	};
-	for (let e of R) e.bindDataStore?.(P, st);
-	let ct = R.filter((e) => typeof e.onChangeEvent == "function");
-	if (ct.length > 0) {
-		let e = P.changeScope ?? "local";
-		P.onChange((t) => {
-			let n = oe(t, e);
-			for (let e of ct) j.runFork(e.onChangeEvent(n).pipe(j.catchAllCause((t) => j.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Me.pretty(t) })))));
-		});
-	}
-	let ut = Oe({
-		plugins: R,
-		appName: h?.name ?? "voltro-api",
-		appType: "api",
-		voltroVersion: process.env.npm_package_version ?? "0.0.0",
-		log: $
-	});
-	R.length && await ut.activate(), f.mark("plugins");
-	let dt = await ut.gatherObservability(), ft = await ge(P, h, v, {
-		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
-		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
-		debug: () => {}
-	}), z = h?.apiKeys, pt = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", B = z ? Ge(P) : void 0, ht = B ? Qe({ flush: $e(B) }) : void 0;
-	ht && process.once("exit", () => {
-		ht.shutdown();
-	});
-	let _t = B ? Ze(B, {
-		prefix: pt,
-		...ht ? { usage: ht } : {}
-	}) : void 0, vt = _t ? [qe(_t, { prefix: pt })] : [], bt = _e([...h?.auth?.strategies ?? [], ...vt], qt(h?.plugins ?? []), h?.auth?.anonymousTenantRequired ?? !1, h?.auth?.resolveScopes, () => Fe), xt = [...h?.restRoutes ?? [], ..._t ? Ie(_t, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], V = h?.idempotency, Ct = V ? {
-		store: L(P),
-		header: (typeof V == "object" ? V.header : void 0) ?? "Idempotency-Key",
-		ttlMs: (typeof V == "object" ? V.ttlMs : void 0) ?? 864e5
-	} : void 0, Tt = xt.length > 0 ? Yt(xt, {
-		store: P,
-		resolveSubject: (e) => bt({
-			headers: e,
-			clientId: -1
-		}),
-		...Ct ? { idempotency: Ct } : {}
-	}) : [], H = R.map((e) => e.services).filter((e) => e !== void 0), Dt = M.mergeAll(C({
-		analyticsLayer: D.layer,
-		cacheService: Le,
-		kvService: Ue,
-		pluginServices: H,
-		userLayers: h?.layers ?? []
-	}), d(h?.http ?? {})), U = h?.scheduling ?? {}, Ot = U.trigger ?? "self", kt = /* @__PURE__ */ new Set([
-		"postgres",
-		"mysql",
-		"mariadb",
-		"mssql"
-	]), At = U.coordination ?? (kt.has(v) ? "advisoryLock" : "single"), W = At === "cluster" && kt.has(v), jt = W ? "cluster" : At === "advisoryLock" && kt.has(v) ? "advisoryLock" : "single";
-	At === "cluster" && !W && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), At === "advisoryLock" && !kt.has(v) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let Mt, G = T.workflows.length > 0 || T.workflowWorkers.length > 0 || T.eventTriggers.length > 0 || (Se?.outgoing.length ?? 0) > 0 || W, Nt;
-	if (G) {
-		if (v === "mssql") {
-			let e = await ue(process.cwd());
-			e && $.warn(e);
-		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: r, resolveRunnerStorage: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = W ? T.schedules.filter((e) => (e.trigger ?? Ot) === "self").map((e) => t({
-			name: e.name,
-			cron: We(e),
-			execute: async () => {
-				await Mt?.fireFromCluster(e.name);
-			}
-		})) : [];
-		Nt = v === "memory" ? e.layerMemory : await (async () => {
-			let e = await n(v), t = i({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
-			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), r({
-				sqlClientLayer: e.makeSqlLayer(S()),
-				runnerStorage: t,
-				dialectId: e.id,
-				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
-				...a.length > 0 ? { extraShardingLayers: a } : {}
-			});
-		})();
-	}
-	let Pt = Te(R, t()), K = w.filter((e) => /\.subscribe\.tsx?$/.test(e)), Ft = K.length > 0 ? await de(K, $) : [], It = w.filter((e) => /\.reaction\.tsx?$/.test(e)), Lt = It.length > 0 ? await g(It, $) : [], q = w.filter((e) => u.test(e)), Rt = q.length > 0 ? await y(q, $) : [], J = w.filter((e) => /\.aggregate\.tsx?$/.test(e)), Y = J.length > 0 ? await ne(J, $) : [], X = se();
-	if (Y.length > 0 && v !== "memory") try {
-		X = he((await n(v)).makeSqlLayer(S()));
-	} catch (e) {
-		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
-	}
-	let zt = v === "memory" ? yt : Xe(P, `aggregate@${process.pid}`, $), Bt = [], Z = [], Ht = w.filter((e) => l.test(e));
-	if (Ht.length > 0) {
-		let e = $.child("agent"), t = w.filter((e) => a.test(e));
-		t.length > 0 && await o(t, e);
-		let n = await c(Ht, e);
-		for (let e of n.agents) for (let t of ce(e)) (t.kind === "action" ? Bt : Z).push({
-			file: t.file,
-			descriptor: t.descriptor,
-			executor: t.executor
-		});
-		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
-	}
-	f.mark("workflow");
-	let Ut = await Dn({
-		bootTiming: f,
-		discovered: {
-			queries: [...T.queries, ...Z],
-			mutations: T.mutations,
-			actions: [...T.actions, ...Bt],
-			streams: T.streams,
-			workflows: T.workflows,
-			workflowWorkers: T.workflowWorkers,
-			eventTriggers: T.eventTriggers,
-			schedules: T.schedules,
-			subscribers: Ft,
-			outboxHandlers: Rt,
-			connections: T.connections,
-			reactions: Lt,
-			aggregates: Y,
-			...Se === void 0 ? {} : { webhooks: Se }
-		},
-		log: $,
-		analytics: D.sink,
-		aggregateStorage: X,
-		aggregateCoordinator: zt,
-		store: P,
-		kv: He,
-		cache: F,
-		snapshotCache: Be,
-		schemaRegistry: N,
-		tenantScopedTables: T.tenantScopedTables,
-		softDeleteScopedTables: T.softDeleteScopedTables,
-		dataTransferSnapshot: Wt(O),
-		dataTransferDialect: v,
-		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? h?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => bt({
-			headers: e,
-			clientId: t
-		}),
-		httpRoutes: [...R.flatMap((e) => e.httpRoutes ?? []), ...Tt],
-		getStore: () => Fe,
-		...Dt ? { baseLayer: Dt } : {},
-		...Nt === void 0 ? {} : { workflowEngineLayer: Nt },
-		scheduleDefaultTrigger: Ot,
-		scheduleCoordination: jt,
-		scheduleArmSelf: !W,
-		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : h?.dormancy ?? "always-on",
-		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...Pt === void 0 ? {} : { scheduleFireInterceptor: Pt },
-		onSchedulerReady: (e) => {
-			Mt = e;
-		},
-		observability: dt,
-		port: ie,
-		...h?.transport?.wsPath ? { path: h.transport.wsPath } : {}
-	});
-	ae(m([
-		T.queries,
-		T.mutations,
-		T.actions,
-		T.streams
-	]), (e) => {
-		$.warn(e);
-	}), $.info(`API listening on :${ie}`, {
-		dialect: v,
-		queries: T.queries.length,
-		mutations: T.mutations.length,
-		actions: T.actions.length,
-		streams: T.streams.length,
-		workflows: T.workflows.length,
-		workflowWorkers: T.workflowWorkers.length,
-		schedules: T.schedules.length,
-		scheduleCoordination: jt
-	}), f.finish($);
-	let Jt = () => {
-		for (let e of ot) e.stop();
-		Je.detach(), Ye.stop(), I(), rt?.dispose(), setTimeout(() => process.exit(0), 1e4).unref?.(), Promise.resolve(ut.deactivate()).then(() => ft?.close()).then(() => D.dispose()).then(() => Ut.close()).then(() => P.close?.()).then(() => process.exit(0)).catch((e) => {
-			console.error("serve: shutdown step failed, exiting anyway:", e), process.exit(0);
-		});
-	};
-	return process.on("SIGINT", Jt), process.on("SIGTERM", Jt), await new Promise(() => {}), 0;
-};
-//#endregion
-export { An as n, wn as r, jn as t };