@voltro/cli 0.24.0 → 0.25.0

package/dist/serveCommand-C4gzDZzc.js

@@ -1,1175 +0,0 @@
-import { ot as e, t } from "./inspectMetrics-dcC7gnxu.js";
-import { s as n } from "./seedRunner-D6eu-u5U.js";
-import { r, t as i } from "./appModuleLoader-C9r9mxZt.js";
-import { f as a, m as o, n as s, p as c, u as l } from "./frameworkTableAssembly-sg41s14F.js";
-import { l as u } from "./fileConventions-CBNPZVOV.js";
-import { p as d } from "./inspect-_ldwsAwH.js";
-import { A as f, B as p, C as ee, D as m, E as te, F as ne, G as re, H as h, I as g, J as ie, K as ae, L as _, M as oe, N as v, O as y, P as b, R as se, S as ce, T as le, U as ue, V as de, at as x, b as fe, c as pe, ct as me, dt as he, et as S, g as ge, h as C, i as _e, it as ve, j as ye, k as w, nt as T, o as E, ot as be, q as xe, r as Se, rt as D, st as Ce, t as we, tt as Te, u as Ee, ut as De, v as Oe, w as ke, x as Ae, y as je, z as O } from "./dev-NCuEhNxs.js";
-import { r as Me, u as k } from "./apiBuild-B2m4XK_8.js";
-import { t as A } from "./bootTiming-BdyP9nYw.js";
-import { n as Ne } from "./cliArgs-qdZSElM3.js";
-import { join as Pe } from "node:path";
-import { pathToFileURL as Fe } from "node:url";
-import { Cause as Ie, Effect as j, Layer as M, ManagedRuntime as Le } from "effect";
-import { createLogger as N } from "@voltro/logger";
-import { existsSync as Re } from "node:fs";
-import { AggregateRegistry as P, Dispatcher as ze, apiKeyManagementRoutes as Be, applySoftDeleteScope as Ve, applyTenantScope as He, attachAnalyticsMirror as Ue, awaitServerListening as We, bindMutation as F, bindStream as Ge, bindSubscription as I, buildTracingLayer as Ke, cancelWakeup as qe, compileCron as L, dataStoreApiKeyStore as Je, dataStoreIdempotencyStore as Ye, formatServerOnlyLeaks as Xe, frameworkApiKeyStrategy as Ze, installPolicyGuardResolver as Qe, loadResourceTuples as $e, makeActionRunner as R, makeAdvisoryLockCoordinator as et, makeApiKeyService as tt, makeApiKeyUsageBuffer as nt, makeApiKeyUsageFlusher as rt, makeAsyncKv as it, makeCoordinatedScheduler as at, makeEffectStoreLayer as ot, makeLazyWorkflowFacade as st, makeMutationOutputCodec as ct, makeMutationRunner as lt, makeOneShotQueryRunner as ut, makeQueryDescriptorProducer as dt, makeQueryReauthorizer as ft, makeQuerySubscriber as pt, makeSchemaRegistry as mt, makeWorkflowFacade as ht, makeWorkflowFacadeWithCallerContext as gt, makeWorkflowLayers as z, noopKv as _t, onProcessShutdown as vt, recordSubscriptionDelivery as yt, registerWakeup as bt, resolveSecretsBackend as xt, runProvidedEffect as St, setSecretsBackend as Ct, setSystemStoreHandle as wt, setTupleSource as Tt, singleCoordinator as Et, startRpcServer as Dt, startScheduler as B, workflowToRpc as V, wrapStoreWithBootCodec as Ot } from "@voltro/runtime";
-import { RpcGroup as kt } from "@effect/rpc";
-import { SqlClient as At } from "@effect/sql";
-import { and as jt, ensureTableRegistered as Mt, eq as H, or as Nt } from "@voltro/database";
-import { appStorageProvider as U, fromNodeReadable as Pt, getObjectStream as Ft, putObjectStream as W, toNodeReadable as It } from "@voltro/plugin-storage";
-import { AuthMiddleware as G, ConnectionInfoMiddleware as Lt, actionToRpc as K, anonymousSubject as Rt, isWireReachable as zt, mutationToRpc as Bt, queryToRpc as q, streamToRpc as Vt, workflowCancelDescriptor as Ht, workflowDomainEventsQueryDescriptor as Ut, workflowEventDeliveriesQueryDescriptor as J, workflowResumeDescriptor as Wt, workflowRunEventsQueryDescriptor as Y, workflowRunQueryDescriptor as Gt, workflowRunStepsQueryDescriptor as X, workflowRunsQueryDescriptor as Z, workflowSignalDescriptor as Kt, workflowUpdateDescriptor as qt } from "@voltro/protocol";
-import { assertProductionSessionSecret as Jt } from "@voltro/protocol/session";
-import { createHash as Yt, timingSafeEqual as Xt } from "node:crypto";
-import { declaredSnapshot as Zt, describeOutcome as Qt, runPlannedMigrations as $t } from "@voltro/database/sql";
-import { getAuthSessionStrategy as en } from "@voltro/plugin-auth";
-import { collectPublicApiRoutes as tn, restRoutesToHttpRoutes as nn } from "@voltro/protocol/rest";
-import { buildDeliverWebhookExecute as rn, buildWebhooksService as an, defaultIncomingPath as on, deliverWebhookWorkflow as sn, mountIncomingWebhook as cn } from "@voltro/plugin-webhooks";
-import { packBundle as ln, runExport as un, runImport as dn, storageBlobSink as fn, storageRefsBlobSource as pn, unpackBundle as mn, unpackBundleToDir as hn } from "@voltro/data-transfer";
-//#region src/bootRefusal.ts
-var gn = "VoltroBootRefusal", _n = (e) => {
-	let t = Error(e);
-	return t.name = gn, t;
-}, vn = "/_voltro/admin/import", yn = "/_voltro/admin/export", Q = (e, t) => ({
-	status: e,
-	contentType: "application/json; charset=utf-8",
-	body: JSON.stringify(t)
-}), bn = (e) => {
-	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
-	return n ? n[1] : null;
-}, xn = (e, t) => Xt(Yt("sha256").update(e).digest(), Yt("sha256").update(t).digest()), Sn = (e, t) => {
-	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
-	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let n = bn(e.headers);
-	return !n || !xn(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, Cn = N({ scope: "voltro:admin-import" }), wn = "VBUNDLE2", Tn = async function* (e) {
-	yield e;
-}, En = (e) => async (t) => {
-	let n = Sn(t, e.secret);
-	if (n) return n;
-	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === wn, c, l;
-	if (s) c = Tn(t.rawBody), l = "upload";
-	else {
-		let n;
-		try {
-			n = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-		} catch {
-			return Q(400, { error: "body must be a packed bundle archive or { bundleKey } JSON" });
-		}
-		if (typeof n.bundleKey != "string" || !n.bundleKey) return Q(400, { error: "body.bundleKey (string) is required for the storage transport" });
-		if (!e.openArchive) return Q(501, { error: "storage transport not configured on this instance" });
-		c = e.openArchive(n.bundleKey), l = "storage";
-	}
-	let u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-import-"));
-	try {
-		e.assetSink ? await mn(c, {
-			dir: p,
-			blobs: e.assetSink
-		}) : await hn(c, p);
-		let t = await j.runPromiseExit(dn({
-			store: e.store,
-			bundleDir: p,
-			...r ? { mode: r } : {},
-			...i ? { onConflict: i } : {},
-			...a ? { atomic: a } : {},
-			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
-			force: o,
-			onWarn: (e) => Cn.warn("admin.import", { message: e }),
-			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
-		}));
-		if (t._tag === "Failure") {
-			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
-			if (e && e._tag === "SchemaDriftError") {
-				let t = e;
-				return Cn.warn("admin.import refused (schema drift)", {
-					transport: l,
-					bundle: t.bundleFingerprint.slice(0, 16),
-					target: t.targetFingerprint.slice(0, 16)
-				}), Q(409, {
-					error: "schema drift",
-					bundleFingerprint: t.bundleFingerprint,
-					targetFingerprint: t.targetFingerprint,
-					diff: t.diff,
-					hint: "re-export against the current schema, or resend with x-import-force: 1"
-				});
-			}
-			throw Error(String(e?.message ?? e ?? "import failed"));
-		}
-		let n = t.value, s = n.tables.reduce((e, t) => e + t.rowCount, 0);
-		return Cn.info("admin.import", {
-			transport: l,
-			tables: n.tables.length,
-			rows: s,
-			mode: r ?? "upsert",
-			atomic: a
-		}), Q(200, {
-			tables: n.tables.length,
-			rows: s,
-			transport: l
-		});
-	} catch (e) {
-		return Cn.warn("admin.import failed", {
-			transport: l,
-			error: e?.message ?? String(e)
-		}), Q(500, {
-			error: "import failed",
-			message: e?.message ?? String(e)
-		});
-	} finally {
-		await d.rm(p, {
-			recursive: !0,
-			force: !0
-		});
-	}
-}, Dn = N({ scope: "voltro:admin-export" }), On = async (e) => {
-	let t = [];
-	for await (let n of e) t.push(Buffer.from(n));
-	return new Uint8Array(Buffer.concat(t));
-}, kn = (e) => typeof e.tenant == "string" && e.tenant ? {
-	kind: "tenant",
-	tenantId: e.tenant
-} : Array.isArray(e.tables) && e.tables.length ? {
-	kind: "tables",
-	tables: e.tables.filter((e) => typeof e == "string")
-} : { kind: "all" }, An = (e) => async (t) => {
-	let n = Sn(t, e.secret);
-	if (n) return n;
-	let r;
-	try {
-		r = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-	} catch {
-		return Q(400, { error: "body must be JSON: { profile?, tenant?, tables?, consistency?, compression?, bundleKey? }" });
-	}
-	let i = {};
-	if (typeof r.profile == "string" && r.profile) {
-		if (!e.loadProfile) return Q(501, { error: "server-side profiles not configured on this instance" });
-		try {
-			i = await e.loadProfile(r.profile);
-		} catch (e) {
-			return Q(400, {
-				error: `profile '${r.profile}' could not be loaded`,
-				message: e?.message ?? String(e)
-			});
-		}
-	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? kn(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-export-"));
-	try {
-		let t = await j.runPromise(un({
-			store: e.store,
-			snapshot: e.snapshot,
-			dialect: e.dialect,
-			outDir: p,
-			...i.subset ? { subset: i.subset } : {
-				scope: s,
-				...e.tenantTables && e.tenantTables.length > 0 ? { tenantTables: e.tenantTables } : {}
-			},
-			consistency: a,
-			...o ? { compression: o } : {},
-			...i.masking ? { masking: i.masking } : {}
-		})), n = t.tables.reduce((e, t) => e + t.rowCount, 0), u = t.masking?.transformed.length ?? 0;
-		if (c) {
-			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
-			let i = r.bundleKey;
-			return await e.putArchive(i, () => ln({
-				dir: p,
-				...l
-			})), Dn.info("admin.export", {
-				transport: "storage",
-				tables: t.tables.length,
-				rows: n,
-				masked: u,
-				bundleKey: i
-			}), Q(200, {
-				bundleKey: i,
-				tables: t.tables.length,
-				rows: n,
-				masked: u,
-				transport: "storage"
-			});
-		}
-		let d = await On(ln({
-			dir: p,
-			...l
-		}));
-		return Dn.info("admin.export", {
-			transport: "download",
-			tables: t.tables.length,
-			rows: n,
-			masked: u,
-			bytes: d.byteLength
-		}), {
-			status: 200,
-			contentType: "application/octet-stream",
-			body: d,
-			headers: {
-				"x-export-tables": String(t.tables.length),
-				"x-export-rows": String(n),
-				"x-export-masked": String(u)
-			}
-		};
-	} catch (e) {
-		return Dn.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
-			error: "export failed",
-			message: e?.message ?? String(e)
-		});
-	} finally {
-		await d.rm(p, {
-			recursive: !0,
-			force: !0
-		});
-	}
-}, jn = async (e) => {
-	let { resolve: t } = await import("node:path"), { existsSync: n } = await import("node:fs"), r = [
-		e,
-		`${e}.profile.ts`,
-		`data-profiles/${e}.ts`,
-		`data-profiles/${e}.profile.ts`
-	].map((e) => t(process.cwd(), e)), i = r.find((e) => n(e));
-	if (!i) throw Error(`data profile '${e}' not found (looked for: ${r.join(", ")})`);
-	let a = await import(i), o = a.default ?? a.profile;
-	if (!o) throw Error(`data profile '${i}' has no default export`);
-	return o;
-}, Mn = (e, t, n = {}) => (async function* () {
-	let r = await It((await j.runPromise(Ft(e, t).pipe(j.timeout(n.openTimeout ?? "30 seconds")))).stream), i = n.stallMs ?? 12e4, a, o = () => {
-		a && clearTimeout(a), a = setTimeout(() => r.destroy(/* @__PURE__ */ Error(`storage read stalled for ${i}ms reading '${t}'`)), i);
-	};
-	try {
-		o();
-		for await (let e of r) o(), yield e instanceof Uint8Array ? e : new Uint8Array(e);
-	} finally {
-		a && clearTimeout(a), r.destroy();
-	}
-})(), Nn = {
-	get: async () => void 0,
-	set: async () => {},
-	setWithTags: async () => {},
-	remove: async () => !1,
-	has: async () => !1,
-	clear: async () => {},
-	invalidateTag: async () => 0,
-	wrap: async (e, t, n) => n()
-}, Pn = async (e) => {
-	wt({
-		dataStore: e.store,
-		schemaRegistry: e.schemaRegistry
-	});
-	let t = new ze({
-		store: e.store,
-		...e.snapshotCache ? { cache: e.snapshotCache } : {},
-		recordDelivery: (e) => yt({
-			label: e.label,
-			kind: e.kind,
-			durationMs: e.durationMs,
-			rowCount: e.rowCount
-		})
-	}), n = e.cache ?? Nn, r = e.kv ?? _t, i, a, o, s = /* @__PURE__ */ new Map(), c = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, l = async (t, n, r) => {
-		let i = {
-			...r,
-			source: r.source ?? `workflow:${t}`
-		};
-		s.set(n, i);
-		try {
-			let r = await e.store.query({
-				table: "_voltro_workflow_start_contexts",
-				order: [],
-				predicate: H("executionId", n),
-				projection: ["id"],
-				skip: void 0,
-				take: 1
-			}), a = {
-				workflowName: t,
-				executionId: n,
-				subject: i.subject ?? null,
-				traceId: i.traceId ?? null,
-				source: i.source ?? null,
-				parentExecutionId: i.parentExecutionId ?? null,
-				parentClosePolicy: i.parentClosePolicy ?? null,
-				createdAt: /* @__PURE__ */ new Date()
-			};
-			r[0] === void 0 ? await e.store.insert("_voltro_workflow_start_contexts", {
-				id: c(),
-				...a
-			}) : await e.store.update("_voltro_workflow_start_contexts", r[0].id, a);
-		} catch (e) {
-			process.stderr.write(`[workflow] failed to persist start context for ${t}/${n}: ${e?.message ?? String(e)}\n`);
-		}
-	}, u = async (t, n) => {
-		let r = s.get(n);
-		if (r !== void 0) return r;
-		try {
-			let t = (await e.store.query({
-				table: "_voltro_workflow_start_contexts",
-				order: [],
-				predicate: H("executionId", n),
-				projection: void 0,
-				skip: void 0,
-				take: 1
-			}))[0];
-			if (t === void 0) return;
-			let r = {
-				...t.subject === null ? {} : { subject: t.subject },
-				...t.traceId === null ? {} : { traceId: t.traceId },
-				...t.source === null ? {} : { source: t.source },
-				...t.parentExecutionId === null ? {} : { parentExecutionId: t.parentExecutionId },
-				...t.parentClosePolicy === null ? {} : { parentClosePolicy: t.parentClosePolicy }
-			};
-			return s.set(n, r), r;
-		} catch (e) {
-			process.stderr.write(`[workflow] failed to load start context for ${n}: ${e?.message ?? String(e)}\n`);
-			return;
-		}
-	}, d = (e.discovered.workflows?.length ?? 0) > 0 ? st(() => i) : void 0, f = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, p = f || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", te = e.tenantIsolation === "namespace", ne = (e.log ?? N({ scope: "voltro:serve" })).child("webhooks"), re, g = e.discovered.webhooks;
-	if (g && g.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
-		let t = e.workflowEngineLayer, i = x({
-			store: e.store,
-			schemaRegistry: e.schemaRegistry,
-			cache: n,
-			kv: r
-		}), a = g.outgoing.map((e) => e.descriptor);
-		re = an(i, async (e) => {
-			let n = sn.execute(e).pipe(j.provide(sn.toLayer(rn(i, { events: a })).pipe(M.provideMerge(t))));
-			j.runPromise(n).catch((t) => {
-				ne.error("deliverWebhook workflow crashed", {
-					deliveryId: e.deliveryId,
-					targetId: e.targetId
-				}, t);
-			});
-		}, { events: a });
-	}
-	let ie = /* @__PURE__ */ new Map();
-	if (g) for (let e of g.incoming) {
-		let t = e.descriptor.path ?? on(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = cn(e.descriptor, {
-			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => d === void 0 ? void 0 : gt(d, {
-				traceId: `incoming:${e.descriptor.id}`,
-				source: `incoming:${e.descriptor.id}`
-			}),
-			log: (e) => {
-				let t = {
-					webhookId: e.webhookId,
-					status: e.status,
-					signatureOk: String(e.signatureOk),
-					idempotency: e.idempotency,
-					durationMs: e.durationMs
-				};
-				e.status >= 500 ? ne.error("incoming delivery failed", t) : e.status >= 400 ? ne.warn("incoming delivery rejected", t) : ne.info("incoming delivery handled", t);
-			}
-		});
-		ie.set(t, { handle: r });
-	}
-	Qe(), Tt((t) => $e(e.store, t.subjectId, t.resourceType, t.resourceId));
-	let ae = (e.discovered.outboxHandlers?.length ?? 0) > 0 ? de({
-		handlers: e.discovered.outboxHandlers ?? [],
-		store: e.store,
-		log: (e.log ?? N({ scope: "voltro:serve" })).child("outbox")
-	}) : void 0, _ = O({
-		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
-		store: e.store,
-		publicUrl: se(e.port ?? 4e3),
-		log: (e.log ?? N({ scope: "voltro:serve" })).child("connections")
-	}), b = ve({
-		store: e.store,
-		schemaRegistry: e.schemaRegistry,
-		cache: n,
-		kv: r,
-		...re === void 0 ? {} : { webhooksService: re },
-		...d === void 0 ? {} : { workflowsProxy: d },
-		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: te,
-		...ae === void 0 ? {} : { outbox: { nudge: ae.nudge } },
-		..._.active ? { connections: { registry: _.registry } } : {}
-	}), le = M.succeed(P, y), ue = (t, n) => {
-		let r = t.pipe(j.provide(ot(n)));
-		return (e.baseLayer ? r.pipe(j.provide(e.baseLayer)) : r).pipe(j.provide(le));
-	}, fe = (e, t) => St(ue(e, t)), pe = lt({
-		store: e.store,
-		buildContext: (e, t, n) => b(e, t, n),
-		runEffect: fe,
-		undoCapture: ee()
-	}), me = ce(), he = R({
-		buildContext: (e) => b(e),
-		runEffect: fe
-	}), ge = {
-		buildContext: (e) => b(e),
-		finalize: (t, n) => Ve(He(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
-		provideEffect: ue
-	}, C = dt(ge), _e = ut({
-		...ge,
-		queryRows: (t) => e.store.query(t)
-	}), ye = pt({
-		...ge,
-		subscribeDescriptor: (e, n, r) => t.subscribe(e, n, r),
-		subscribeComputed: (e, n, r) => t.subscribeComputed(e, n, r)
-	}), w = (e) => e.filter((e) => zt(e.descriptor)), T = {};
-	for (let n of [
-		...w(e.discovered.queries),
-		...me.queries,
-		..._.queries
-	]) T[n.descriptor.name] = (e) => I(C(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, ft(n, e));
-	for (let t of [
-		...w(e.discovered.mutations),
-		...me.mutations,
-		..._.mutations
-	]) {
-		let n = ct(t.descriptor.output);
-		T[t.descriptor.name] = (r) => F(async (e, n) => pe(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency);
-	}
-	for (let t of [...w(e.discovered.actions), ..._.actions]) {
-		let n = ct(t.descriptor.output);
-		T[t.descriptor.name] = (r) => F(async (e, n) => he(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency);
-	}
-	let E = () => `public-${Math.random().toString(36).slice(2, 10)}`, be = [
-		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => _e(e, t, {
-				subject: n.subject,
-				traceId: E()
-			}),
-			subscribe: (t, n, r) => ye(e, t, {
-				subject: n.subject,
-				traceId: E()
-			}, r)
-		})),
-		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => pe(e, t, {
-				subject: n.subject,
-				traceId: E()
-			})
-		})),
-		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => he(e, t, {
-				subject: n.subject,
-				traceId: E()
-			})
-		}))
-	], xe = be.length > 0 ? nn(tn(be), {
-		store: e.store,
-		resolveSubject: (t) => e.resolveSubject(t, -1)
-	}) : [], Se = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Ce = Se && Se.length >= 16 ? [{
-		method: "POST",
-		path: vn,
-		handle: En({
-			secret: Se,
-			store: e.store,
-			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-			assetSink: fn(U()),
-			openArchive: (e) => Mn(U(), e)
-		})
-	}, {
-		method: "POST",
-		path: yn,
-		handle: An({
-			secret: Se,
-			store: e.store,
-			snapshot: e.dataTransferSnapshot ?? { tables: [] },
-			dialect: e.dataTransferDialect ?? "memory",
-			tenantTables: [...e.tenantScopedTables],
-			loadProfile: jn,
-			assetSource: pn(U(), e.store),
-			putArchive: async (e, t) => {
-				let { Readable: n } = await import("node:stream"), r = U(), i = Pt("storage", () => n.from(t()));
-				await j.runPromise(W(r, e, i, { contentType: "application/octet-stream" }));
-			}
-		})
-	}] : [], we = [
-		...e.httpRoutes ?? [],
-		...xe,
-		...Ce,
-		..._.httpRoutes
-	];
-	for (let t of w(e.discovered.streams ?? [])) T[t.descriptor.name] = (n) => Ge((r) => {
-		let i = b(r), a = t.executor(n, i);
-		if (j.isEffect(a)) {
-			let t = a.pipe(j.provide(ot(i.store)));
-			return (e.baseLayer ? t.pipe(j.provide(e.baseLayer)) : t).pipe(j.provide(le));
-		}
-		return typeof a == "object" && a && typeof a.then == "function" ? j.promise(() => a) : a;
-	}, `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) T[t.definition.name] = (e) => F(async (e, n) => {
-		let r = n;
-		return gt(d, {
-			subject: r.subject,
-			traceId: r.traceId,
-			source: "workflow-rpc"
-		}).start(t.definition.name, e);
-	}, e, `workflow.${t.definition.name}`);
-	f && (T[Gt.name] = (e) => I(C({
-		descriptor: Gt,
-		executor: (e) => {
-			let t = e.id;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: Nt(H("id", t), H("executionId", t)),
-				take: 1,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Gt.name}`), T[Z.name] = (e) => I(C({
-		descriptor: Z,
-		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [H("tag", t.tag)], ...t.status === void 0 ? [] : [H("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : jt(...n),
-				take: r,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Z.name}`), T[X.name] = (e) => I(C({
-		descriptor: X,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_steps",
-				order: [{
-					column: "startedAt",
-					direction: "asc"
-				}],
-				predicate: H("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${X.name}`), T[Y.name] = (e) => I(C({
-		descriptor: Y,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_events",
-				order: [{
-					column: "occurredAt",
-					direction: "asc"
-				}],
-				predicate: H("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Y.name}`), T[Ut.name] = (e) => I(C({
-		descriptor: Ut,
-		executor: (e) => {
-			let t = e;
-			return {
-				table: "_voltro_workflow_events",
-				order: [{
-					column: "occurredAt",
-					direction: "desc"
-				}],
-				predicate: t.name === void 0 ? void 0 : H("name", t.name),
-				take: Math.max(1, Math.min(500, t.limit ?? 100)),
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${Ut.name}`), T[J.name] = (e) => I(C({
-		descriptor: J,
-		executor: (e) => {
-			let t = e.eventId;
-			return {
-				table: "_voltro_workflow_event_deliveries",
-				order: [{
-					column: "createdAt",
-					direction: "asc"
-				}],
-				predicate: H("eventId", t),
-				take: 500,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), t, `subscription.${J.name}`), T[Ht.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await D(e.store, n.subject, { executionId: r.executionId }), await d.cancel(r.workflowName, r.executionId), await Pe(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Ht.name}`), T[Wt.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await D(e.store, n.subject, { executionId: r.executionId }), await d.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Wt.name}`), T[Kt.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await D(e.store, n.subject, { id: r.id }), d.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${Kt.name}`), T[qt.name] = (t) => F(async (t, n) => {
-		let r = t;
-		return await D(e.store, n.subject, { id: r.id }), d.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${qt.name}`));
-	let Te = [
-		...w(e.discovered.queries).map((e) => q(e.descriptor)),
-		...w(e.discovered.mutations).map((e) => Bt(e.descriptor)),
-		...w(e.discovered.actions).map((e) => K(e.descriptor)),
-		...me.queries.map((e) => q(e.descriptor)),
-		...me.mutations.map((e) => Bt(e.descriptor)),
-		..._.queries.map((e) => q(e.descriptor)),
-		..._.mutations.map((e) => Bt(e.descriptor)),
-		..._.actions.map((e) => K(e.descriptor)),
-		...w(e.discovered.streams ?? []).map((e) => Vt(e.descriptor)),
-		...(e.discovered.workflows ?? []).map((e) => V(e.definition)),
-		...f ? [
-			q(Gt),
-			q(Z),
-			q(X),
-			q(Y),
-			q(Ut),
-			q(J),
-			K(Ht),
-			K(Wt),
-			K(Kt),
-			K(qt)
-		] : []
-	], Ee = kt.make(...Te).middleware(G).middleware(Lt), De = M.succeed(G, G.of(({ headers: t, clientId: n }) => j.promise(() => e.resolveSubject(t, n)))), ke = M.succeed(Lt, Lt.of(({ headers: e, clientId: t }) => j.succeed({
-		clientId: t,
-		...e["idempotency-key"] ? { idempotencyKey: e["idempotency-key"] } : {}
-	}))), Ae = e.dormancyTenantId ?? "default", Me = e.dormancy === "sleep" ? {
-		register: (t, n, r) => bt(e.store, {
-			tenantId: r ?? Ae,
-			kind: "workflow",
-			refId: t,
-			wakeAt: n
-		}),
-		cancel: (t, n) => qe(e.store, {
-			tenantId: n ?? Ae,
-			kind: "workflow",
-			refId: t
-		}).then(() => {})
-	} : void 0, k = p ? await import("@voltro/workflow") : void 0, A = k?.makeWorkflowRunRecorder({
-		store: e.store,
-		...Me === void 0 ? {} : { wakeups: Me }
-	}), Ne = async (t, n) => {
-		await k.closeWorkflowChildrenForParent({
-			store: e.store,
-			parentExecutionId: t,
-			parentStatus: n,
-			recorder: A,
-			log: { warn: (e, t) => {
-				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-			} },
-			interruptChild: async (t, n) => {
-				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
-				if (!r) throw Error(`Unknown child workflow: ${t}`);
-				if (!a) throw Error("Workflow runtime is not ready");
-				await a.runPromise(r.definition.interrupt(n));
-			}
-		});
-	}, Pe = async (t, n, r) => {
-		let i = (await e.store.query({
-			table: "_voltro_workflow_runs",
-			order: [],
-			predicate: H("executionId", n),
-			projection: void 0,
-			skip: void 0,
-			take: 1
-		}))[0];
-		if (i === void 0) return;
-		let a = await e.store.update("_voltro_workflow_runs", i.id, {
-			status: "cancelled",
-			cancelled: !0,
-			completedAt: /* @__PURE__ */ new Date()
-		}), o = i.subject?.tenantId ?? void 0;
-		a && await A.recordEvent({
-			runId: i.id,
-			eventType: "run-cancelled",
-			payload: {
-				reason: r,
-				workflowName: t,
-				executionId: n,
-				...o == null ? {} : { tenantId: o }
-			}
-		}), a && await Ne(n, "cancelled");
-	}, Fe = [...z(e.discovered.workflows ?? [], {
-		buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? b({
-			subject: t.subject,
-			traceId: t.traceId
-		}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-		resolveStartContext: u
-	}, (t, n, r) => {
-		let i = k.getWorkflowVersionMetadata(t.definition);
-		return k.wrapWorkflowExecuteWithRunRecording({
-			name: t.definition.name,
-			store: e.store,
-			subject: r.subject,
-			source: r.source ?? null,
-			traceId: r.traceId,
-			workflowVersion: i.version,
-			workflowCompatibleVersions: i.compatibleWith,
-			workflowPatches: i.patches,
-			parentExecutionId: r?.parentExecutionId ?? null,
-			parentClosePolicy: r?.parentClosePolicy ?? null,
-			onParentClose: ({ executionId: e, status: t }) => Ne(e, t),
-			recorder: A
-		}, n);
-	}), ...e.discovered.workflowWorkers ?? []], Ie = Fe.length > 0 ? M.mergeAll(...Fe) : M.empty;
-	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster") && e.workflowEngineLayer !== void 0) {
-		let t = Ie.pipe(M.provideMerge(e.workflowEngineLayer));
-		a = Le.make(e.baseLayer === void 0 ? t : t.pipe(M.provideMerge(e.baseLayer))), await a.runPromise(j.void), i = (e.discovered.workflows?.length ?? 0) > 0 ? ht({
-			workflows: e.discovered.workflows ?? [],
-			runEffect: (e) => a.runPromise(e),
-			rememberStartContext: l,
-			signal: async (t, n, r) => {
-				let i = await k.sendWorkflowSignal({
-					store: e.store,
-					recorder: A,
-					target: t,
-					signalName: n,
-					payload: r
-				});
-				return await a.runPromise(k.completeSuspendingSignal({
-					store: e.store,
-					target: t,
-					signalName: n,
-					payload: r
-				})).catch(() => {}), i;
-			},
-			update: (t, n, r, i) => k.sendWorkflowUpdate({
-				store: e.store,
-				recorder: A,
-				target: t,
-				updateName: n,
-				payload: r,
-				...i === void 0 ? {} : { options: i }
-			}),
-			listRuns: (t) => Oe(e.store, t),
-			retry: (t, n) => je({
-				store: e.store,
-				workflows: e.discovered.workflows ?? [],
-				runPromise: (e) => a.runPromise(e)
-			}, t, n)
-		}) : void 0;
-	}
-	let Re = M.mergeAll(Ee.toLayer(T), De, ke), Be = S(T, e.discovered.queries.map((e) => e.descriptor.name), f), Ue = M.mergeAll(Ee.toLayer(Be), De, ke), L = e.observability, Je = await Ke({
-		...L && L.spanProcessors.length > 0 ? { extraSpanProcessors: L.spanProcessors } : {},
-		...L && L.metricReaders.length > 0 ? { extraMetricReaders: L.metricReaders } : {},
-		...L && Object.keys(L.resourceAttributes).length > 0 ? { resourceAttributes: L.resourceAttributes } : {},
-		...L && L.sampler !== void 0 ? { sampler: L.sampler } : {}
-	}), Ye = !1, Xe = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Ze, shutdown: tt } = Dt({
-		group: Ee,
-		handlersLayer: Re,
-		httpHandlersLayer: Ue,
-		port: e.port ?? 4e3,
-		...e.host === void 0 ? {} : { host: e.host },
-		path: e.path ?? "/ws",
-		tracerLayer: Je.layer,
-		healthCheck: {
-			isReady: () => Ye,
-			...Xe ? { ping: Xe } : {}
-		},
-		...we.length > 0 ? { httpRoutes: we } : {},
-		...e.getStore === void 0 ? {} : { getStore: e.getStore },
-		...ie.size > 0 ? { webhookRoutes: ie } : {},
-		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
-	});
-	if (await We(Ze), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? et(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Et;
-		o = await B(e.discovered.schedules ?? [], {
-			store: e.store,
-			coordinator: t,
-			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
-			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`,
-			armSelf: e.scheduleArmSelf ?? !0,
-			dormancy: e.dormancy ?? "always-on",
-			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
-			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => b({
-				subject: r,
-				traceId: t
-			}, e.store, void 0, `schedule:${n}`),
-			log: {
-				info: (e, t) => {
-					process.stdout.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				warn: (e, t) => {
-					process.stderr.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				error: (e, t) => {
-					process.stderr.write(`[schedule] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				debug: () => {}
-			},
-			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
-			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
-		}), e.onSchedulerReady?.(o);
-	}
-	let nt = e.log ?? N({ scope: "voltro:serve" }), rt, it;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (rt = h(e.discovered.subscribers ?? [], e.store, nt.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = nt.child("reaction");
-		it = oe(e.discovered.reactions ?? [], e.store, {
-			runAct: async (n, r) => {
-				if (n.kind === "workflow") {
-					if (d === void 0) {
-						t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
-						return;
-					}
-					let e = r.new ?? r.old ?? {};
-					await gt(d, {
-						traceId: `reaction:${n.workflow}`,
-						source: `reaction:${n.workflow}`
-					}).start(n.workflow, e);
-					return;
-				}
-				await v(n.agent, r, {
-					findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-					runAction: (e, t, n) => Promise.resolve(he(e, t, n)),
-					makeSubject: (e) => Rt(e),
-					now: () => Date.now(),
-					log: t
-				});
-			},
-			checkBudget: async (n, r) => {
-				try {
-					let { requireAiBudget: t } = await import("@voltro/ai");
-					return (await j.runPromise(j.either(t(e.store, {
-						tenantId: n,
-						limitUsd: r
-					}))))._tag === "Right";
-				} catch (e) {
-					return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
-				}
-			}
-		}, t);
-	}
-	let at;
-	return (e.discovered.aggregates?.length ?? 0) > 0 && (at = await m({
-		discovered: e.discovered.aggregates ?? [],
-		store: e.store,
-		log: nt.child("aggregate"),
-		...e.analytics === void 0 ? {} : { analytics: e.analytics },
-		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
-		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), le = M.succeed(P, at.registry)), Ye = !0, e.bootTiming?.mark("ready"), {
-		dispatcher: t,
-		server: Ze,
-		scheduler: o,
-		close: async () => {
-			Ye = !1, at?.detach(), it?.(), rt?.(), await o?.shutdown(), t.close(), await a?.dispose(), await new Promise((e) => Ze.close(() => e())), await tt();
-		}
-	};
-}, $ = N({ scope: "voltro:serve" }), Fn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", In = Ne, Ln = async (e) => {
-	let t = k(process.cwd());
-	if (Re(t)) {
-		let n;
-		try {
-			let e = await import(Fe(t).href);
-			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
-		} catch (e) {
-			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
-		}
-		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
-	}
-	return Rn(e);
-}, Rn = async (ee) => {
-	let m = A();
-	process.env.NODE_ENV || (process.env.NODE_ENV = "production");
-	try {
-		Jt();
-	} catch (e) {
-		throw _n(e instanceof Error ? e.message : String(e));
-	}
-	let h = process.cwd(), oe = Number(process.env.PORT ?? In(ee, "--port") ?? 4e3), v = await pe(h);
-	Ct(xt(v?.secrets)), await e({
-		rawEnv: v?.env,
-		appType: "api",
-		root: h,
-		log: $,
-		generateTypes: !1
-	}), m.mark("config");
-	let y = (process.env.DB_DIALECT ?? v?.store ?? "memory").toLowerCase(), se = (y === "mariadb" || y === "postgres" || y === "mssql") && (process.env.CDC ?? "1") !== "0", ce = y === "mariadb" ? "mariadb" : y === "mssql" ? "mssql" : void 0, de = Me(h);
-	if (!i() && Re(de)) try {
-		let e = await import(Fe(de).href);
-		if (e.modules) {
-			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Pe(h, n)] = r;
-			r(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
-		}
-	} catch (e) {
-		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
-	}
-	let x = await C(h), S = await Ee(x, { cdc: se && ce !== void 0 });
-	{
-		let e = _(S.serverOnlyLeaks, g(process.env, "strict"), Xe, "`voltro serve`");
-		if (e.action === "fail") throw _n(e.message ?? "");
-		e.action === "warn" && $.warn(e.message ?? "");
-	}
-	let ve = x.filter((e) => le.test(e)), D = ve.length > 0 ? await te(ve, $.child("webhooks")) : void 0, Oe = s({
-		mix: S.featureMix,
-		plugins: v?.plugins ?? [],
-		cdc: se && ce !== void 0,
-		...ce ? { cdcDialect: ce } : {}
-	}), je = v?.analytics !== void 0 && v.analytics.kind !== "noop" && y !== "memory" ? (await n(y)).makeSqlLayer(E()) : void 0, O = await ae({
-		spec: v?.analytics,
-		sqlLayer: je,
-		log: $
-	}), k = (() => {
-		let e = new Set(S.tables.map((e) => e.tableName)), t = [...S.tables];
-		for (let n of [...Oe, ...O.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
-		return t;
-	})();
-	for (let e of k) Mt(e);
-	let Ne = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (Fn(Ne, y, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await n(y)).makeSqlLayer(E()), t = await j.runPromise(At.SqlClient.pipe(j.flatMap((e) => $t(e, k, {
-			appliedBy: `serve:${Ne}`,
-			environment: "prod",
-			dialectId: y
-		})), j.provide(e)));
-		t.kind === "prod-mismatch" && ($.error(Qt(t, y)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Qt(t, y));
-	}
-	let N = mt(k);
-	m.mark("discover");
-	let P = await _e(v, void 0), ze = Ot(P, y);
-	for (let e of me({
-		dialect: String(v?.store ?? process.env.DB_DIALECT ?? "postgres"),
-		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
-		dbUrl: process.env.DB_URL,
-		tables: S.tables.map((e) => ({
-			tableName: e.tableName,
-			isReactive: e.isReactive === !0
-		})),
-		querySources: S.queries.flatMap((e) => {
-			let t = e.descriptor.source;
-			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
-		})
-	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
-	v?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = v.cache), v?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = v.cacheRedisUrl), v?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = v.cacheRedisDriver), v?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = v.cacheKeyPrefix);
-	let { service: Ve, invalidationBus: He, snapshotCache: We, cache: F, backend: Ge, dispose: I } = await Ce({ env: process.env });
-	$.info(`cache backend resolved: ${Ge}` + (Ge === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), P.onChange((e) => {
-		j.runFork(He.publish(e.table));
-	}), v?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = v.kv), v?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = v.kvRedisUrl), v?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = v.kvKeyPrefix);
-	let { kv: Ke, service: qe } = await it({ store: P });
-	m.mark("store");
-	let Qe = Ue({
-		store: P,
-		sink: O.sink,
-		log: $
-	}), $e = be({
-		store: P,
-		dialect: y
-	}), R = v?.plugins ?? [], ot = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, st, ct;
-	y !== "memory" && (st = Le.make((await n(y)).makeSqlLayer(E())), ct = await st.runPromise(At.SqlClient));
-	let lt = at({
-		coordinator: [
-			"postgres",
-			"mariadb",
-			"mysql",
-			"mssql"
-		].includes(y) ? et(P, ot, $) : Et,
-		replicaId: ot,
-		log: $
-	}), ut = [], dt = {
-		...ct ? { sql: ct } : {},
-		scheduleCoordinated: (e, t, n) => {
-			let r = lt(e, t, n);
-			return ut.push(r), r;
-		}
-	};
-	for (let e of R) e.bindDataStore?.(P, dt);
-	let ft = R.filter((e) => typeof e.onChangeEvent == "function");
-	if (ft.length > 0) {
-		let e = P.changeScope ?? "local";
-		P.onChange((t) => {
-			let n = ne(t, e);
-			for (let e of ft) j.runFork(e.onChangeEvent(n).pipe(j.catchAllCause((t) => j.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Ie.pretty(t) })))));
-		});
-	}
-	let pt = Ae({
-		plugins: R,
-		appName: v?.name ?? "voltro-api",
-		appType: "api",
-		voltroVersion: process.env.npm_package_version ?? "0.0.0",
-		log: $
-	});
-	R.length && await pt.activate(), m.mark("plugins");
-	let ht = await pt.gatherObservability(), gt = await ge(P, v, y, {
-		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
-		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
-		debug: () => {}
-	}), z = v?.apiKeys, _t = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", yt = z ? Je(P) : void 0, bt = yt ? nt({ flush: rt(yt) }) : void 0;
-	bt && vt(() => bt.shutdown());
-	let St = yt ? tt(yt, {
-		prefix: _t,
-		...bt ? { usage: bt } : {}
-	}) : void 0, wt = St ? [Ze(St, { prefix: _t })] : [], Tt = Se([...v?.auth?.strategies ?? [], ...wt], en(v?.plugins ?? []), v?.auth?.anonymousTenantRequired ?? !1, v?.auth?.resolveScopes, () => ze), Dt = [...v?.restRoutes ?? [], ...St ? Be(St, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], B = v?.idempotency, V = B ? {
-		store: Ye(P),
-		header: (typeof B == "object" ? B.header : void 0) ?? "Idempotency-Key",
-		ttlMs: (typeof B == "object" ? B.ttlMs : void 0) ?? 864e5
-	} : void 0, kt = Dt.length > 0 ? nn(Dt, {
-		store: P,
-		resolveSubject: (e) => Tt({
-			headers: e,
-			clientId: -1
-		}),
-		...V ? { idempotency: V } : {}
-	}) : [], jt = R.map((e) => e.services).filter((e) => e !== void 0), H = M.mergeAll(T({
-		analyticsLayer: O.layer,
-		cacheService: Ve,
-		kvService: qe,
-		pluginServices: jt,
-		userLayers: v?.layers ?? []
-	}), Te(v?.http ?? {})), Nt = v?.scheduling ?? {}, U = Nt.trigger ?? "self", Pt = /* @__PURE__ */ new Set([
-		"postgres",
-		"mysql",
-		"mariadb",
-		"mssql"
-	]), Ft = Nt.coordination ?? (Pt.has(y) ? "advisoryLock" : "single"), W = Ft === "cluster" && Pt.has(y), It = W ? "cluster" : Ft === "advisoryLock" && Pt.has(y) ? "advisoryLock" : "single";
-	Ft === "cluster" && !W && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), Ft === "advisoryLock" && !Pt.has(y) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let G, Lt = S.workflows.length > 0 || S.workflowWorkers.length > 0 || S.eventTriggers.length > 0 || (D?.outgoing.length ?? 0) > 0 || W, K;
-	if (Lt) {
-		if (y === "mssql") {
-			let e = await re(process.cwd());
-			e && $.warn(e);
-		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: r, resolveRunnerStorage: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = W ? S.schedules.filter((e) => (e.trigger ?? U) === "self").map((e) => t({
-			name: e.name,
-			cron: L(e),
-			execute: async () => {
-				await G?.fireFromCluster(e.name);
-			}
-		})) : [];
-		K = y === "memory" ? e.layerMemory : await (async () => {
-			let e = await n(y), t = i({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
-			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), r({
-				sqlClientLayer: e.makeSqlLayer(E()),
-				runnerStorage: t,
-				dialectId: e.id,
-				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
-				...a.length > 0 ? { extraShardingLayers: a } : {}
-			});
-		})();
-	}
-	let Rt = fe(R, t()), zt = x.filter((e) => /\.subscribe\.tsx?$/.test(e)), Bt = zt.length > 0 ? await ue(zt, $) : [], q = x.filter((e) => /\.reaction\.tsx?$/.test(e)), Vt = q.length > 0 ? await b(q, $) : [], Ht = x.filter((e) => u.test(e)), Ut = Ht.length > 0 ? await p(Ht, $) : [], J = x.filter((e) => /\.aggregate\.tsx?$/.test(e)), Wt = J.length > 0 ? await w(J, $) : [], Y = f();
-	if (Wt.length > 0 && y !== "memory") try {
-		Y = ye((await n(y)).makeSqlLayer(E()));
-	} catch (e) {
-		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
-	}
-	let Gt = y === "memory" ? Et : et(P, `aggregate@${process.pid}`, $), X = [], Z = [], Kt = x.filter((e) => l.test(e));
-	if (Kt.length > 0) {
-		let e = $.child("agent"), t = x.filter((e) => a.test(e));
-		t.length > 0 && await o(t, e);
-		let n = await c(Kt, e);
-		for (let e of n.agents) for (let t of ke(e)) (t.kind === "action" ? X : Z).push({
-			file: t.file,
-			descriptor: t.descriptor,
-			executor: t.executor
-		});
-		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
-	}
-	m.mark("workflow");
-	let qt = await Pn({
-		bootTiming: m,
-		...V ? { idempotency: {
-			store: V.store,
-			ttlMs: V.ttlMs
-		} } : {},
-		discovered: {
-			queries: [...S.queries, ...Z],
-			mutations: S.mutations,
-			actions: [...S.actions, ...X],
-			streams: S.streams,
-			workflows: S.workflows,
-			workflowWorkers: S.workflowWorkers,
-			eventTriggers: S.eventTriggers,
-			schedules: S.schedules,
-			subscribers: Bt,
-			outboxHandlers: Ut,
-			connections: S.connections,
-			reactions: Vt,
-			aggregates: Wt,
-			...D === void 0 ? {} : { webhooks: D }
-		},
-		log: $,
-		analytics: O.sink,
-		aggregateStorage: Y,
-		aggregateCoordinator: Gt,
-		store: P,
-		kv: Ke,
-		cache: F,
-		snapshotCache: We,
-		schemaRegistry: N,
-		tenantScopedTables: S.tenantScopedTables,
-		softDeleteScopedTables: S.softDeleteScopedTables,
-		dataTransferSnapshot: Zt(k),
-		dataTransferDialect: y,
-		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? v?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => Tt({
-			headers: e,
-			clientId: t
-		}),
-		httpRoutes: [...R.flatMap((e) => e.httpRoutes ?? []), ...kt],
-		getStore: () => ze,
-		...H ? { baseLayer: H } : {},
-		...K === void 0 ? {} : { workflowEngineLayer: K },
-		scheduleDefaultTrigger: U,
-		scheduleCoordination: It,
-		scheduleArmSelf: !W,
-		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : v?.dormancy ?? "always-on",
-		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...Rt === void 0 ? {} : { scheduleFireInterceptor: Rt },
-		onSchedulerReady: (e) => {
-			G = e;
-		},
-		inspectRoute: { handle: (e, t, n, r) => d(e, {
-			kind: "api",
-			meta: {
-				name: v?.name ?? "voltro-api",
-				voltroVersion: we,
-				port: oe,
-				mode: "start",
-				store: y,
-				cdc: se ? "on" : "off"
-			},
-			rpc: De(S, h),
-			workflows: he(S, h),
-			inspectFireSchedule: async ({ name: e, trigger: t }) => {
-				if (!G) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
-				return { runId: await G.fireNow(e, t) ?? null };
-			}
-		}, t, {
-			method: n,
-			...r === void 0 ? {} : { body: r }
-		}) ?? {
-			status: 404,
-			contentType: "application/json",
-			body: JSON.stringify({ error: "not an inspect route" })
-		} },
-		observability: ht,
-		port: oe,
-		...v?.transport?.wsPath ? { path: v.transport.wsPath } : {}
-	});
-	return ie(xe([
-		S.queries,
-		S.mutations,
-		S.actions,
-		S.streams
-	]), (e) => {
-		$.warn(e);
-	}), $.info(`API listening on :${oe}`, {
-		dialect: y,
-		queries: S.queries.length,
-		mutations: S.mutations.length,
-		actions: S.actions.length,
-		streams: S.streams.length,
-		workflows: S.workflows.length,
-		workflowWorkers: S.workflowWorkers.length,
-		schedules: S.schedules.length,
-		scheduleCoordination: It
-	}), m.finish($), vt(async () => {
-		for (let e of ut) e.stop();
-		Qe.detach(), $e.stop(), I(), st?.dispose();
-		try {
-			await pt.deactivate(), await gt?.close(), await O.dispose(), await qt.close(), await P.close?.();
-		} catch (e) {
-			console.error("serve: shutdown step failed, exiting anyway:", e);
-		}
-	}), await new Promise(() => {}), 0;
-};
-//#endregion
-export { Ln as n, jn as r, Rn as t };