@voltro/cli 0.31.0 → 0.33.0

package/dist/serveCommand-DdaM4Hup.js

@@ -0,0 +1,1608 @@
+import { _t as e, ht as t, ot as n, t as r } from "./inspectMetrics-1xzTKAFx.js";
+import { n as i, s as a, t as o } from "./seedRunner-Bqxgp7HZ.js";
+import { r as s, t as c } from "./appModuleLoader-C9r9mxZt.js";
+import { $ as l, $t as u, A as d, At as f, B as p, Bt as ee, C as te, Ct as ne, D as m, Dt as h, E as g, Et as re, F as _, Ft as v, G as ie, H as ae, Ht as oe, I as se, It as ce, J as y, Jt as b, K as le, L as ue, Lt as x, M as de, Mt as fe, N as pe, Nt as me, O as he, Ot as ge, P as _e, Pt as ve, Q as ye, Qt as be, R as xe, S as Se, St as S, T as C, Tt as Ce, U as we, V as Te, Vt as Ee, W as w, X as De, Xt as T, Y as Oe, Yt as ke, Z as Ae, Zt as je, _ as Me, _t as Ne, at as Pe, b as Fe, bt as Ie, c as E, cn as Le, ct as Re, d as ze, dt as D, en as Be, et as Ve, ft as He, g as Ue, gt as We, h as Ge, ht as Ke, i as qe, in as Je, it as Ye, j as Xe, jt as Ze, k as O, kt as Qe, lt as $e, mt as et, nn as tt, nt, o as k, on as rt, ot as A, pt as it, q as at, r as j, rn as M, rt as ot, sn as st, st as ct, t as lt, tn as ut, tt as dt, u as ft, ut as pt, v as mt, vt as ht, w as gt, wt as _t, x as vt, xt as yt, y as N, yt as bt, zt as xt } from "./dev-C_P8FLSx.js";
+import { b as P, f as F, g as St, h as Ct, m as wt, r as Tt, y as Et } from "./frameworkTableAssembly-BwIrO5nv.js";
+import { S as Dt, c as Ot, n as kt, p as I, s as At } from "./fileConventions-Cof68_BL.js";
+import { m as jt } from "./inspect-BUUjt773.js";
+import { n as Mt, t as Nt } from "./startupRunner-DPGFchOa.js";
+import { r as Pt, u as L } from "./apiBuild-h9VHtnlw.js";
+import { t as Ft } from "./bootTiming-BdyP9nYw.js";
+import { n as R } from "./cliArgs-qdZSElM3.js";
+import { basename as z, join as It } from "node:path";
+import { pathToFileURL as Lt } from "node:url";
+import { Cause as Rt, Effect as B, Layer as V, ManagedRuntime as zt } from "effect";
+import { createLogger as H } from "@voltro/logger";
+import { existsSync as Bt } from "node:fs";
+import { AggregateRegistry as Vt, CostRegistry as Ht, Dispatcher as Ut, ExpectationRegistry as Wt, ExperimentRegistry as Gt, apiKeyManagementRoutes as Kt, attachAnalyticsMirror as qt, attachExpectations as Jt, attachExperiments as Yt, attachFinops as Xt, awaitServerListening as Zt, bindMutation as U, bindStream as Qt, bindSubscription as W, buildTracingLayer as $t, cancelWakeup as en, compileCron as tn, dataStoreApiKeyStore as nn, dataStoreIdempotencyStore as rn, formatServerOnlyLeaks as an, formatUnresolvedSources as on, frameworkApiKeyStrategy as sn, getCredentialExpiry as cn, installPolicyGuardResolver as ln, loadResourceTuples as un, makeActionRunner as dn, makeAdvisoryLockCoordinator as fn, makeApiKeyService as pn, makeApiKeyUsageBuffer as mn, makeApiKeyUsageFlusher as hn, makeAsyncKv as gn, makeCoordinatedScheduler as _n, makeEffectStoreLayer as vn, makeLazyWorkflowFacade as yn, makeMutationOutputCodec as bn, makeMutationRunner as xn, makeOneShotQueryRunner as Sn, makeQueryDescriptorProducer as Cn, makeQueryFinalizer as wn, makeQueryReauthorizer as Tn, makeQuerySubscriber as En, makeSchemaRegistry as Dn, makeWorkflowFacade as On, makeWorkflowFacadeWithCallerContext as kn, makeWorkflowLayers as An, noopKv as jn, onProcessShutdown as Mn, recordCredentialExpiry as Nn, recordSubscriptionDelivery as Pn, recordWorkflowRun as G, registerWakeup as Fn, resolveSecretsBackend as In, runProvidedEffect as Ln, setSecretsBackend as Rn, setSystemStoreHandle as zn, setTupleSource as Bn, singleCoordinator as Vn, startRpcServer as Hn, startScheduler as Un, stripForbiddenForWire as Wn, unresolvedSources as Gn, workflowToRpc as Kn, wrapStoreWithBootCodec as qn } from "@voltro/runtime";
+import { RpcGroup as Jn } from "@effect/rpc";
+import { SqlClient as Yn } from "@effect/sql";
+import { allRegisteredTables as Xn, and as Zn, ensureTableRegistered as Qn, eq as K, or as $n } from "@voltro/database";
+import { appStorageProvider as er, fromNodeReadable as tr, getObjectStream as nr, putObjectStream as rr, toNodeReadable as ir } from "@voltro/plugin-storage";
+import { AuthMiddleware as ar, ConnectionInfoMiddleware as or, actionToRpc as q, anonymousSubject as sr, isWireReachable as cr, mutationToRpc as lr, queryToRpc as J, streamToRpc as Y, workflowCancelDescriptor as X, workflowDomainEventsQueryDescriptor as ur, workflowEventDeliveriesQueryDescriptor as Z, workflowResumeDescriptor as dr, workflowRunEventsQueryDescriptor as fr, workflowRunQueryDescriptor as pr, workflowRunStepsQueryDescriptor as mr, workflowRunsQueryDescriptor as hr, workflowSignalDescriptor as gr, workflowUpdateDescriptor as _r } from "@voltro/protocol";
+import { isEnvContract as vr } from "@voltro/env";
+import { assertProductionSessionSecret as yr, sessionExpiryFromHeaders as br } from "@voltro/protocol/session";
+import { createHash as xr, timingSafeEqual as Sr } from "node:crypto";
+import { declaredSnapshot as Cr, describeOutcome as wr, runPlannedMigrations as Tr } from "@voltro/database/sql";
+import { buildDeliverWebhookExecute as Er, buildWebhooksService as Dr, defaultIncomingPath as Or, deliverWebhookWorkflow as kr, makeDeferredEmitHandler as Ar, mountIncomingWebhook as jr } from "@voltro/plugin-webhooks";
+import { getAuthSessionStrategy as Mr } from "@voltro/plugin-auth";
+import { collectPublicApiRoutes as Nr, restRoutesToHttpRoutes as Pr } from "@voltro/protocol/rest";
+import { registerEmailTemplates as Fr } from "@voltro/plugin-mail";
+import { channelFor as Ir, getBroadcastPlugin as Lr } from "@voltro/plugin-broadcast";
+import { packBundle as Rr, runExport as zr, runImport as Br, storageBlobSink as Vr, storageRefsBlobSource as Hr, unpackBundle as Ur, unpackBundleToDir as Wr } from "@voltro/data-transfer";
+//#region src/dbPoolReport.ts
+var Gr = (e, t, n = []) => {
+	let r = n.length, i = e === void 0 ? void 0 : e + r, a = i !== void 0 && t !== void 0 ? i * t : void 0, o = r === 0 ? " No connections outside the pool in this process." : ` PLUS ${r} outside the pool (${n.map((e) => e.reason).join("; ")}) — those do not come out of the pool budget, they come out of the DATABASE's.`;
+	return e === void 0 ? "db pool: max per replica UNSET (DB_MAX_CONNECTIONS) — each replica opens the driver's default pool, so the fleet total is that default × replicas. Set DB_MAX_CONNECTIONS so the total stays under your database's connection limit; the pool scales with replicaCount and the database does not." + o : `db pool: max=${e} per replica (DB_MAX_CONNECTIONS)` + (r === 0 ? "" : ` + ${r} = ${i}`) + (a === void 0 ? ` — the fleet opens up to ${r === 0 ? "max" : `(max + ${r})`} × replicas connections. Check that against your database's limit before raising replicaCount.` : ` × ${t} replicas = up to ${a} connections. Check that against your database's limit.`) + o;
+}, Kr = (e = process.env) => {
+	let t = e.REPLICA_COUNT;
+	if (t === void 0 || t === "") return;
+	let n = Number(t);
+	return Number.isInteger(n) && n > 0 ? n : void 0;
+}, qr = "/_voltro/admin/import", Jr = "/_voltro/admin/export", Q = (e, t) => ({
+	status: e,
+	contentType: "application/json; charset=utf-8",
+	body: JSON.stringify(t)
+}), Yr = (e) => {
+	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
+	return n ? n[1] : null;
+}, Xr = (e, t) => Sr(xr("sha256").update(e).digest(), xr("sha256").update(t).digest()), Zr = (e, t) => {
+	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
+	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
+	let n = Yr(e.headers);
+	return !n || !Xr(n, t) ? Q(401, { error: "unauthorized" }) : null;
+}, Qr = H({ scope: "voltro:admin-import" }), $r = "VBUNDLE2", ei = async function* (e) {
+	yield e;
+}, ti = (e) => async (t) => {
+	let n = Zr(t, e.secret);
+	if (n) return n;
+	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === $r, c, l;
+	if (s) c = ei(t.rawBody), l = "upload";
+	else {
+		let n;
+		try {
+			n = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
+		} catch {
+			return Q(400, { error: "body must be a packed bundle archive or { bundleKey } JSON" });
+		}
+		if (typeof n.bundleKey != "string" || !n.bundleKey) return Q(400, { error: "body.bundleKey (string) is required for the storage transport" });
+		if (!e.openArchive) return Q(501, { error: "storage transport not configured on this instance" });
+		c = e.openArchive(n.bundleKey), l = "storage";
+	}
+	let u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-import-"));
+	try {
+		e.assetSink ? await Ur(c, {
+			dir: p,
+			blobs: e.assetSink
+		}) : await Wr(c, p);
+		let t = await B.runPromiseExit(Br({
+			store: e.store,
+			bundleDir: p,
+			...r ? { mode: r } : {},
+			...i ? { onConflict: i } : {},
+			...a ? { atomic: a } : {},
+			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
+			force: o,
+			onWarn: (e) => Qr.warn("admin.import", { message: e }),
+			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
+		}));
+		if (t._tag === "Failure") {
+			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
+			if (e && e._tag === "SchemaDriftError") {
+				let t = e;
+				return Qr.warn("admin.import refused (schema drift)", {
+					transport: l,
+					bundle: t.bundleFingerprint.slice(0, 16),
+					target: t.targetFingerprint.slice(0, 16)
+				}), Q(409, {
+					error: "schema drift",
+					bundleFingerprint: t.bundleFingerprint,
+					targetFingerprint: t.targetFingerprint,
+					diff: t.diff,
+					hint: "re-export against the current schema, or resend with x-import-force: 1"
+				});
+			}
+			throw Error(String(e?.message ?? e ?? "import failed"));
+		}
+		let n = t.value, s = n.tables.reduce((e, t) => e + t.rowCount, 0);
+		return Qr.info("admin.import", {
+			transport: l,
+			tables: n.tables.length,
+			rows: s,
+			mode: r ?? "upsert",
+			atomic: a
+		}), Q(200, {
+			tables: n.tables.length,
+			rows: s,
+			transport: l
+		});
+	} catch (e) {
+		return Qr.warn("admin.import failed", {
+			transport: l,
+			error: e?.message ?? String(e)
+		}), Q(500, {
+			error: "import failed",
+			message: e?.message ?? String(e)
+		});
+	} finally {
+		await d.rm(p, {
+			recursive: !0,
+			force: !0
+		});
+	}
+}, ni = H({ scope: "voltro:admin-export" }), ri = async (e) => {
+	let t = [];
+	for await (let n of e) t.push(Buffer.from(n));
+	return new Uint8Array(Buffer.concat(t));
+}, ii = (e) => typeof e.tenant == "string" && e.tenant ? {
+	kind: "tenant",
+	tenantId: e.tenant
+} : Array.isArray(e.tables) && e.tables.length ? {
+	kind: "tables",
+	tables: e.tables.filter((e) => typeof e == "string")
+} : { kind: "all" }, ai = (e) => async (t) => {
+	let n = Zr(t, e.secret);
+	if (n) return n;
+	let r;
+	try {
+		r = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
+	} catch {
+		return Q(400, { error: "body must be JSON: { profile?, tenant?, tables?, consistency?, compression?, bundleKey? }" });
+	}
+	let i = {};
+	if (typeof r.profile == "string" && r.profile) {
+		if (!e.loadProfile) return Q(501, { error: "server-side profiles not configured on this instance" });
+		try {
+			i = await e.loadProfile(r.profile);
+		} catch (e) {
+			return Q(400, {
+				error: `profile '${r.profile}' could not be loaded`,
+				message: e?.message ?? String(e)
+			});
+		}
+	}
+	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? ii(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-export-"));
+	try {
+		let t = await B.runPromise(zr({
+			store: e.store,
+			snapshot: e.snapshot,
+			dialect: e.dialect,
+			outDir: p,
+			...i.subset ? { subset: i.subset } : {
+				scope: s,
+				...e.tenantTables && e.tenantTables.length > 0 ? { tenantTables: e.tenantTables } : {}
+			},
+			consistency: a,
+			...o ? { compression: o } : {},
+			...i.masking ? { masking: i.masking } : {}
+		})), n = t.tables.reduce((e, t) => e + t.rowCount, 0), u = t.masking?.transformed.length ?? 0;
+		if (c) {
+			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
+			let i = r.bundleKey;
+			return await e.putArchive(i, () => Rr({
+				dir: p,
+				...l
+			})), ni.info("admin.export", {
+				transport: "storage",
+				tables: t.tables.length,
+				rows: n,
+				masked: u,
+				bundleKey: i
+			}), Q(200, {
+				bundleKey: i,
+				tables: t.tables.length,
+				rows: n,
+				masked: u,
+				transport: "storage"
+			});
+		}
+		let d = await ri(Rr({
+			dir: p,
+			...l
+		}));
+		return ni.info("admin.export", {
+			transport: "download",
+			tables: t.tables.length,
+			rows: n,
+			masked: u,
+			bytes: d.byteLength
+		}), {
+			status: 200,
+			contentType: "application/octet-stream",
+			body: d,
+			headers: {
+				"x-export-tables": String(t.tables.length),
+				"x-export-rows": String(n),
+				"x-export-masked": String(u)
+			}
+		};
+	} catch (e) {
+		return ni.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
+			error: "export failed",
+			message: e?.message ?? String(e)
+		});
+	} finally {
+		await d.rm(p, {
+			recursive: !0,
+			force: !0
+		});
+	}
+}, oi = async (e) => {
+	let { resolve: t } = await import("node:path"), { existsSync: n } = await import("node:fs"), r = [
+		e,
+		`${e}.profile.ts`,
+		`data-profiles/${e}.ts`,
+		`data-profiles/${e}.profile.ts`
+	].map((e) => t(process.cwd(), e)), i = r.find((e) => n(e));
+	if (!i) throw Error(`data profile '${e}' not found (looked for: ${r.join(", ")})`);
+	let a = await import(i), o = a.default ?? a.profile;
+	if (!o) throw Error(`data profile '${i}' has no default export`);
+	return o;
+}, si = (e, t, n = {}) => (async function* () {
+	let r = await ir((await B.runPromise(nr(e, t).pipe(B.timeout(n.openTimeout ?? "30 seconds")))).stream), i = n.stallMs ?? 12e4, a, o = () => {
+		a && clearTimeout(a), a = setTimeout(() => r.destroy(/* @__PURE__ */ Error(`storage read stalled for ${i}ms reading '${t}'`)), i);
+	};
+	try {
+		o();
+		for await (let e of r) o(), yield e instanceof Uint8Array ? e : new Uint8Array(e);
+	} finally {
+		a && clearTimeout(a), r.destroy();
+	}
+})(), ci = {
+	get: async () => void 0,
+	set: async () => {},
+	setWithTags: async () => {},
+	remove: async () => !1,
+	has: async () => !1,
+	clear: async () => {},
+	invalidateTag: async () => 0,
+	wrap: async (e, t, n) => n()
+}, li = async (e) => {
+	zn({
+		dataStore: e.store,
+		schemaRegistry: e.schemaRegistry
+	});
+	let t = (e.discovered.budgets?.length ?? 0) > 0, n, i = new Ut({
+		store: e.store,
+		...e.snapshotCache ? { cache: e.snapshotCache } : {},
+		...t ? { recordCost: (e) => n?.record(e) } : {},
+		recordDelivery: (e) => Pn({
+			label: e.label,
+			kind: e.kind,
+			durationMs: e.durationMs,
+			rowCount: e.rowCount
+		})
+	}), a = e.cache ?? ci, o = e.kv ?? jn, s, c = () => void 0, l, d, f, ee, te, ne, m, g = /* @__PURE__ */ new Map(), ie = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, oe = async (t, n, r) => {
+		let i = {
+			...r,
+			source: r.source ?? `workflow:${t}`
+		};
+		g.set(n, i);
+		try {
+			let r = await e.store.query({
+				table: "_voltro_workflow_start_contexts",
+				order: [],
+				predicate: K("executionId", n),
+				projection: ["id"],
+				skip: void 0,
+				take: 1
+			}), a = {
+				workflowName: t,
+				executionId: n,
+				subject: i.subject ?? null,
+				traceId: i.traceId ?? null,
+				source: i.source ?? null,
+				parentExecutionId: i.parentExecutionId ?? null,
+				parentClosePolicy: i.parentClosePolicy ?? null,
+				createdAt: /* @__PURE__ */ new Date()
+			};
+			r[0] === void 0 ? await e.store.insert("_voltro_workflow_start_contexts", {
+				id: ie(),
+				...a
+			}) : await e.store.update("_voltro_workflow_start_contexts", r[0].id, a);
+		} catch (e) {
+			process.stderr.write(`[workflow] failed to persist start context for ${t}/${n}: ${e?.message ?? String(e)}\n`);
+		}
+	}, ue = async (t, n) => {
+		let r = g.get(n);
+		if (r !== void 0) return r;
+		try {
+			let t = (await e.store.query({
+				table: "_voltro_workflow_start_contexts",
+				order: [],
+				predicate: K("executionId", n),
+				projection: void 0,
+				skip: void 0,
+				take: 1
+			}))[0];
+			if (t === void 0) return;
+			let r = {
+				...t.subject === null ? {} : { subject: t.subject },
+				...t.traceId === null ? {} : { traceId: t.traceId },
+				...t.source === null ? {} : { source: t.source },
+				...t.parentExecutionId === null ? {} : { parentExecutionId: t.parentExecutionId },
+				...t.parentClosePolicy === null ? {} : { parentClosePolicy: t.parentClosePolicy }
+			};
+			return g.set(n, r), r;
+		} catch (e) {
+			process.stderr.write(`[workflow] failed to load start context for ${n}: ${e?.message ?? String(e)}\n`);
+			return;
+		}
+	}, x = (e.discovered.workflows?.length ?? 0) > 0 ? yn(() => s) : void 0, he = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ge = he || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", ve = e.tenantIsolation === "namespace", ye = (e.log ?? H({ scope: "voltro:serve" })).child("webhooks"), xe, Se, C = e.discovered.webhooks;
+	if (C && C.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
+		e.workflowEngineLayer;
+		let t = u({
+			store: e.store,
+			schemaRegistry: e.schemaRegistry,
+			cache: a,
+			kv: o
+		}), n = C.outgoing.map((e) => e.descriptor);
+		Se = kr.toLayer(Er(t, { events: n })), xe = Dr(t, async (e) => {
+			let t = f;
+			if (t === void 0) {
+				ye.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
+					deliveryId: e.deliveryId,
+					targetId: e.targetId
+				});
+				return;
+			}
+			t.runPromise(kr.execute(e)).catch((t) => {
+				ye.error("deliverWebhook workflow crashed", {
+					deliveryId: e.deliveryId,
+					targetId: e.targetId
+				}, t);
+			});
+		}, { events: n });
+	}
+	let Ce = /* @__PURE__ */ new Map();
+	if (C) for (let e of C.incoming) {
+		let t = e.descriptor.path ?? Or(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = jr(e.descriptor, {
+			resolveSecret: async () => process.env[n] ?? null,
+			resolveWorkflows: () => x === void 0 ? void 0 : kn(x, {
+				traceId: `incoming:${e.descriptor.id}`,
+				source: `incoming:${e.descriptor.id}`
+			}),
+			log: (e) => {
+				let t = {
+					webhookId: e.webhookId,
+					status: e.status,
+					signatureOk: String(e.signatureOk),
+					idempotency: e.idempotency,
+					durationMs: e.durationMs
+				};
+				e.status >= 500 ? ye.error("incoming delivery failed", t) : e.status >= 400 ? ye.warn("incoming delivery rejected", t) : ye.info("incoming delivery handled", t);
+			}
+		});
+		Ce.set(t, { handle: r });
+	}
+	ln(), Bn((t) => un(e.store, t.subjectId, t.resourceType, t.resourceId));
+	let Ee = [...e.discovered.outboxHandlers ?? [], ...He((C?.outgoing.length ?? 0) + (C?.incoming.length ?? 0) + (C?.providers.length ?? 0), []) ? [{
+		file: "<framework>/webhooks",
+		id: "voltro-webhook-emit",
+		definition: Ar(() => xe)
+	}] : []], De = Ee.length > 0 ? v({
+		handlers: Ee,
+		store: e.store,
+		log: (e.log ?? H({ scope: "voltro:serve" })).child("outbox")
+	}) : void 0, T = me({
+		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
+		store: e.store,
+		publicUrl: fe(e.port ?? 4e3),
+		log: (e.log ?? H({ scope: "voltro:serve" })).child("connections")
+	});
+	de({
+		events: e.discovered.events ?? [],
+		rpcTags: [
+			...e.discovered.queries.map((e) => e.descriptor.name),
+			...e.discovered.mutations.map((e) => e.descriptor.name),
+			...e.discovered.actions.map((e) => e.descriptor.name),
+			...(e.discovered.streams ?? []).map((e) => e.descriptor.name)
+		]
+	});
+	let ke = (e.log ?? H({ scope: "voltro:serve" })).child("events"), Ae = e.broadcastNamespace ?? mt(e.plugins, void 0), Me = N(e.plugins, Ae, ke), Pe = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Ie = e.membership ?? Fe(e.plugins, {
+		instanceId: Pe,
+		namespace: Ae,
+		meta: { mode: "serve" },
+		logger: ke
+	}), E = pe({
+		events: e.discovered.events ?? [],
+		origin: Pe,
+		...Me.publishRemote === void 0 ? {} : { publishRemote: Me.publishRemote }
+	}), ze = (e.discovered.events ?? []).length > 0 ? await Me.attach(E.bus) : null, D = be({
+		store: e.store,
+		schemaRegistry: e.schemaRegistry,
+		cache: a,
+		kv: o,
+		...xe === void 0 ? {} : { webhooksService: xe },
+		...x === void 0 ? {} : { workflowsProxy: x },
+		eventTriggers: e.discovered.eventTriggers ?? [],
+		namespaceIsolationOn: ve,
+		...De === void 0 ? {} : { outbox: { nudge: De.nudge } },
+		...T.active ? { connections: { registry: T.registry } } : {},
+		eventBus: E.bus
+	}), Be = V.succeed(Vt, S), Ue = V.succeed(Wt, We), Ge = V.succeed(Ht, Ke), qe = V.succeed(Gt, Ne), Je = (t, n) => {
+		let r = t.pipe(B.provide(vn(n)));
+		return (e.baseLayer ? r.pipe(B.provide(e.baseLayer)) : r).pipe(B.provide(Be)).pipe(B.provide(Ue)).pipe(B.provide(Ge)).pipe(B.provide(qe));
+	}, Xe = (e, t) => Ln(Je(e, t)), Ze = r(), O = le(e.plugins ?? [], Ze), Qe = w(e.plugins ?? [], Ze), $e = xn({
+		store: e.store,
+		recordMetric: (e) => {
+			Ze.record(e);
+		},
+		...O.mutation === void 0 ? {} : { interceptor: O.mutation },
+		buildContext: (e, t, n) => D(e, t, n),
+		runEffect: Xe,
+		undoCapture: Oe()
+	}), et = y(), tt = dn({
+		buildContext: (e) => D(e),
+		runEffect: Xe,
+		recordMetric: (e) => {
+			Ze.record(e);
+		},
+		...O.action === void 0 ? {} : { interceptor: O.action }
+	}), k = wn({
+		tenantScopedTables: e.tenantScopedTables,
+		softDeleteScopedTables: e.softDeleteScopedTables
+	}), rt = {
+		buildContext: (e) => D(e),
+		finalize: (e, t) => k(e, t.subject),
+		provideEffect: Je,
+		...O.query === void 0 ? {} : { interceptor: O.query }
+	}, A = Cn(rt), it = Sn({
+		...rt,
+		queryRows: (t, n) => e.store.query(t).then((e) => Wn(t.table, e, n.subject))
+	}), at = En({
+		...rt,
+		subscribeDescriptor: (e, t, n) => i.subscribe(e, t, n),
+		subscribeComputed: (e, t, n) => i.subscribeComputed(e, t, n)
+	}), j = (e) => e.filter((e) => cr(e.descriptor)), M = {};
+	for (let t of [
+		...j(e.discovered.queries),
+		...et.queries,
+		...T.queries
+	]) M[t.descriptor.name] = (e) => W(A(t, e), i, `subscription.${t.descriptor.name}`, void 0, void 0, Tn(t, e));
+	for (let t of [
+		...j(e.discovered.mutations),
+		...et.mutations,
+		...T.mutations
+	]) {
+		let n = bn(t.descriptor.output);
+		M[t.descriptor.name] = (r) => U(async (e, n) => $e(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, t.descriptor.error);
+	}
+	for (let t of [...j(e.discovered.actions), ...T.actions]) {
+		let n = bn(t.descriptor.output);
+		M[t.descriptor.name] = (r) => U(async (e, n) => tt(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, t.descriptor.error);
+	}
+	let st = () => `public-${Math.random().toString(36).slice(2, 10)}`, ct = [
+		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+			descriptor: e.descriptor,
+			invoke: (t, n) => it(e, t, {
+				subject: n.subject,
+				traceId: st()
+			}),
+			subscribe: (t, n, r) => at(e, t, {
+				subject: n.subject,
+				traceId: st()
+			}, r)
+		})),
+		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+			descriptor: e.descriptor,
+			invoke: (t, n) => $e(e, t, {
+				subject: n.subject,
+				traceId: st()
+			})
+		})),
+		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+			descriptor: e.descriptor,
+			invoke: (t, n) => tt(e, t, {
+				subject: n.subject,
+				traceId: st()
+			})
+		}))
+	], lt = ct.length > 0 ? Pr(Nr(ct), {
+		store: e.store,
+		resolveSubject: (t) => e.resolveSubject(t, -1)
+	}) : [], ut = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, ft = ut && ut.length >= 16 ? [{
+		method: "POST",
+		path: qr,
+		handle: ti({
+			secret: ut,
+			store: e.store,
+			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
+			assetSink: Vr(er()),
+			openArchive: (e) => si(er(), e)
+		})
+	}, {
+		method: "POST",
+		path: Jr,
+		handle: ai({
+			secret: ut,
+			store: e.store,
+			snapshot: e.dataTransferSnapshot ?? { tables: [] },
+			dialect: e.dataTransferDialect ?? "memory",
+			tenantTables: [...e.tenantScopedTables],
+			loadProfile: oi,
+			assetSource: Hr(er(), e.store),
+			putArchive: async (e, t) => {
+				let { Readable: n } = await import("node:stream"), r = er(), i = tr("storage", () => n.from(t()));
+				await B.runPromise(rr(r, e, i, { contentType: "application/octet-stream" }));
+			}
+		})
+	}] : [], pt = [
+		...e.httpRoutes ?? [],
+		...lt,
+		...ft,
+		...T.httpRoutes
+	];
+	Object.assign(M, E.handlers);
+	for (let t of j(e.discovered.streams ?? [])) M[t.descriptor.name] = (n) => Qt((r) => {
+		let i = D(r), a = t.executor(n, i);
+		if (B.isEffect(a)) {
+			let t = a.pipe(B.provide(vn(i.store)));
+			return (e.baseLayer ? t.pipe(B.provide(e.baseLayer)) : t).pipe(B.provide(Be)).pipe(B.provide(Ue)).pipe(B.provide(Ge)).pipe(B.provide(qe));
+		}
+		return typeof a == "object" && a && typeof a.then == "function" ? B.promise(() => a) : a;
+	}, `stream.${t.descriptor.name}`);
+	for (let t of e.discovered.workflows ?? []) M[t.definition.name] = (e) => U(async (e, n) => {
+		let r = n;
+		return kn(x, {
+			subject: r.subject,
+			traceId: r.traceId,
+			source: "workflow-rpc"
+		}).start(t.definition.name, e);
+	}, e, `workflow.${t.definition.name}`);
+	he && (M[pr.name] = (e) => W(A({
+		descriptor: pr,
+		executor: (e) => {
+			let t = e.id;
+			return {
+				table: "_voltro_workflow_runs",
+				order: [{
+					column: "startedAt",
+					direction: "desc"
+				}],
+				predicate: $n(K("id", t), K("executionId", t)),
+				take: 1,
+				skip: void 0,
+				projection: void 0
+			};
+		}
+	}, e), i, `subscription.${pr.name}`), M[hr.name] = (e) => W(A({
+		descriptor: hr,
+		executor: (e) => {
+			let t = e, n = [...t.tag === void 0 ? [] : [K("tag", t.tag)], ...t.status === void 0 ? [] : [K("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
+			return {
+				table: "_voltro_workflow_runs",
+				order: [{
+					column: "startedAt",
+					direction: "desc"
+				}],
+				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : Zn(...n),
+				take: r,
+				skip: void 0,
+				projection: void 0
+			};
+		}
+	}, e), i, `subscription.${hr.name}`), M[mr.name] = (e) => W(A({
+		descriptor: mr,
+		executor: (e) => {
+			let t = e.runId;
+			return {
+				table: "_voltro_workflow_run_steps",
+				order: [{
+					column: "startedAt",
+					direction: "asc"
+				}],
+				predicate: K("runId", t),
+				take: 1e3,
+				skip: void 0,
+				projection: void 0
+			};
+		}
+	}, e), i, `subscription.${mr.name}`), M[fr.name] = (e) => W(A({
+		descriptor: fr,
+		executor: (e) => {
+			let t = e.runId;
+			return {
+				table: "_voltro_workflow_run_events",
+				order: [{
+					column: "occurredAt",
+					direction: "asc"
+				}],
+				predicate: K("runId", t),
+				take: 1e3,
+				skip: void 0,
+				projection: void 0
+			};
+		}
+	}, e), i, `subscription.${fr.name}`), M[ur.name] = (e) => W(A({
+		descriptor: ur,
+		executor: (e) => {
+			let t = e;
+			return {
+				table: "_voltro_workflow_events",
+				order: [{
+					column: "occurredAt",
+					direction: "desc"
+				}],
+				predicate: t.name === void 0 ? void 0 : K("name", t.name),
+				take: Math.max(1, Math.min(500, t.limit ?? 100)),
+				skip: void 0,
+				projection: void 0
+			};
+		}
+	}, e), i, `subscription.${ur.name}`), M[Z.name] = (e) => W(A({
+		descriptor: Z,
+		executor: (e) => {
+			let t = e.eventId;
+			return {
+				table: "_voltro_workflow_event_deliveries",
+				order: [{
+					column: "createdAt",
+					direction: "asc"
+				}],
+				predicate: K("eventId", t),
+				take: 500,
+				skip: void 0,
+				projection: void 0
+			};
+		}
+	}, e), i, `subscription.${Z.name}`), M[X.name] = (t) => U(async (t, n) => {
+		let r = t;
+		return await je(e.store, n.subject, { executionId: r.executionId }), await x.cancel(r.workflowName, r.executionId), await Ct(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
+	}, t, `action.${X.name}`), M[dr.name] = (t) => U(async (t, n) => {
+		let r = t;
+		return await je(e.store, n.subject, { executionId: r.executionId }), await x.resume(r.workflowName, r.executionId), { ok: !0 };
+	}, t, `action.${dr.name}`), M[gr.name] = (t) => U(async (t, n) => {
+		let r = t;
+		return await je(e.store, n.subject, { id: r.id }), x.signal({ id: r.id }, r.signalName, r.payload);
+	}, t, `action.${gr.name}`), M[_r.name] = (t) => U(async (t, n) => {
+		let r = t;
+		return await je(e.store, n.subject, { id: r.id }), x.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
+	}, t, `action.${_r.name}`));
+	let ht = [
+		...j(e.discovered.queries).map((e) => J(e.descriptor)),
+		...j(e.discovered.mutations).map((e) => lr(e.descriptor)),
+		...j(e.discovered.actions).map((e) => q(e.descriptor)),
+		...et.queries.map((e) => J(e.descriptor)),
+		...et.mutations.map((e) => lr(e.descriptor)),
+		...T.queries.map((e) => J(e.descriptor)),
+		...T.mutations.map((e) => lr(e.descriptor)),
+		...T.actions.map((e) => q(e.descriptor)),
+		...j(e.discovered.streams ?? []).map((e) => Y(e.descriptor)),
+		...E.rpcs,
+		...(e.discovered.workflows ?? []).map((e) => Kn(e.definition)),
+		...he ? [
+			J(pr),
+			J(hr),
+			J(mr),
+			J(fr),
+			J(ur),
+			J(Z),
+			q(X),
+			q(dr),
+			q(gr),
+			q(_r)
+		] : []
+	], gt = Jn.make(...ht).middleware(ar).middleware(or), _t = V.succeed(ar, ar.of(({ headers: t, clientId: n }) => B.promise(() => e.resolveSubject(t, n)))), vt = V.succeed(or, or.of(({ headers: e, clientId: t }) => B.sync(() => {
+		let n = cn(t) ?? br(e);
+		return {
+			clientId: t,
+			...e["idempotency-key"] ? { idempotencyKey: e["idempotency-key"] } : {},
+			...n === void 0 ? {} : { credentialExpiresAt: n }
+		};
+	}))), bt = e.dormancyTenantId ?? "default", xt = e.dormancy === "sleep" ? {
+		register: (t, n, r) => Fn(e.store, {
+			tenantId: r ?? bt,
+			kind: "workflow",
+			refId: t,
+			wakeAt: n
+		}),
+		cancel: (t, n) => en(e.store, {
+			tenantId: n ?? bt,
+			kind: "workflow",
+			refId: t
+		}).then(() => {})
+	} : void 0, P = ge ? await import("@voltro/workflow") : void 0, F = P?.makeWorkflowRunRecorder({
+		store: e.store,
+		...xt === void 0 ? {} : { wakeups: xt }
+	}), St = async (t, n) => {
+		await P.closeWorkflowChildrenForParent({
+			store: e.store,
+			parentExecutionId: t,
+			parentStatus: n,
+			recorder: F,
+			log: { warn: (e, t) => {
+				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+			} },
+			interruptChild: async (t, n) => {
+				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
+				if (!r) throw Error(`Unknown child workflow: ${t}`);
+				if (!f) throw Error("Workflow runtime is not ready");
+				await f.runPromise(r.definition.interrupt(n));
+			}
+		});
+	}, Ct = async (t, n, r) => {
+		let i = (await e.store.query({
+			table: "_voltro_workflow_runs",
+			order: [],
+			predicate: K("executionId", n),
+			projection: void 0,
+			skip: void 0,
+			take: 1
+		}))[0];
+		if (i === void 0) return;
+		let a = await e.store.update("_voltro_workflow_runs", i.id, {
+			status: "cancelled",
+			cancelled: !0,
+			completedAt: /* @__PURE__ */ new Date()
+		}), o = i.subject?.tenantId ?? void 0;
+		a && await F.recordEvent({
+			runId: i.id,
+			eventType: "run-cancelled",
+			payload: {
+				reason: r,
+				workflowName: t,
+				executionId: n,
+				...o == null ? {} : { tenantId: o }
+			}
+		}), a && await St(n, "cancelled");
+	}, wt = [
+		...An(e.discovered.workflows ?? [], {
+			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? D({
+				subject: t.subject,
+				traceId: t.traceId
+			}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
+			resolveStartContext: ue
+		}, (t, n, r) => {
+			let i = P.getWorkflowVersionMetadata(t.definition);
+			return P.wrapWorkflowExecuteWithRunRecording({
+				name: t.definition.name,
+				store: e.store,
+				subject: r.subject,
+				source: r.source ?? null,
+				traceId: r.traceId,
+				workflowVersion: i.version,
+				workflowCompatibleVersions: i.compatibleWith,
+				workflowPatches: i.patches,
+				parentExecutionId: r?.parentExecutionId ?? null,
+				parentClosePolicy: r?.parentClosePolicy ?? null,
+				onParentClose: ({ executionId: e, status: t }) => St(e, t),
+				...dt(t.definition),
+				onTerminal: async ({ executionId: e }) => {
+					await d?.gate.release(e);
+				},
+				recorder: F,
+				pluginWorkflowStepLayer: Qe,
+				recordRun: G
+			}, n);
+		}),
+		...e.discovered.workflowWorkers ?? [],
+		...Se === void 0 ? [] : [Se]
+	], Tt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...Se === void 0 ? [] : ["voltro.deliverWebhook"]], Et = wt.length > 0 ? V.mergeAll(...wt) : V.empty;
+	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || Se !== void 0) && e.workflowEngineLayer !== void 0) {
+		let t = Et.pipe(V.provideMerge(e.workflowEngineLayer));
+		f = zt.make(e.baseLayer === void 0 ? t : t.pipe(V.provideMerge(e.baseLayer))), await f.runPromise(B.void), (e.log ?? H({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Tt.length} entity type(s) registered`, { entities: Tt });
+		let n = await import("@voltro/workflow/cluster"), r = (e) => f.runPromise(n.redriveFailedRun(e)), i = (e) => f.runPromise(n.resumeRunFromStep(e));
+		ne = await Le({
+			provider: Lr(e.plugins ?? [])?.broadcast?.provider,
+			crossReplica: Lr(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
+			namespace: Ae,
+			replicaId: crypto.randomUUID(),
+			pollStorage: () => f.runPromise(n.pollWorkflowStorage),
+			log: (e.log ?? H({ scope: "voltro:serve" })).child("workflow")
+		}), ee = async (t) => {
+			let n = await Te({
+				store: e.store,
+				workflows: e.discovered.workflows ?? [],
+				runRedrive: r
+			}, t.runId);
+			return n.statusReset && await F.recordEvent({
+				runId: t.runId,
+				eventType: "run-redriven",
+				payload: {
+					reason: "inspect.redrive",
+					activitiesReset: n.outcome.activitiesReset
+				}
+			}), {
+				redriven: n.outcome.redriven,
+				activitiesReset: n.outcome.activitiesReset,
+				reason: n.outcome.reason
+			};
+		}, te = async (t) => {
+			let n = await ae({
+				store: e.store,
+				workflows: e.discovered.workflows ?? [],
+				runResume: i
+			}, t.runId, t.step);
+			return n.statusReset && await F.recordEvent({
+				runId: t.runId,
+				eventType: "run-redriven",
+				payload: {
+					reason: "inspect.resume-from-step",
+					step: n.stepName,
+					activitiesReset: n.outcome.activitiesReset
+				}
+			}), {
+				redriven: n.outcome.redriven,
+				stepName: n.stepName,
+				activitiesReset: n.outcome.activitiesReset,
+				reason: n.outcome.reason
+			};
+		};
+		let a = _n({
+			coordinator: (e.scheduleCoordination ?? "single") === "advisoryLock" ? fn(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Vn,
+			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`
+		}), o = {
+			info: (e, t) => {
+				process.stdout.write(`[flow-control] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+			},
+			warn: (e, t) => {
+				process.stderr.write(`[flow-control] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+			},
+			error: (e, t) => {
+				process.stderr.write(`[flow-control] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
+			}
+		}, u, m = () => {
+			if (u !== void 0) return u;
+			if (!(s === void 0 || F === void 0)) return u = _({
+				store: e.store,
+				log: L,
+				workflows: e.discovered.workflows ?? [],
+				workflowsProxy: s,
+				workflowRuntime: f,
+				workflowRunRecorder: F,
+				closeChildrenForParent: St
+			}), u;
+		};
+		c = m, d = Re({
+			store: e.store,
+			onChange: (t) => e.store.onChange((e) => t({
+				table: e.table,
+				op: e.op
+			})),
+			...e.scheduling === void 0 ? {} : {
+				disarmWhenIdle: e.scheduling.disarmWhenIdle,
+				drainIntervalMs: e.scheduling.admissionDrainMs,
+				cancelSweepIntervalMs: e.scheduling.cancelSweepMs
+			},
+			workflows: e.discovered.workflows ?? [],
+			facade: () => s,
+			cancelRunWithReason: m,
+			scheduleCoordinated: a,
+			onAbandoned: async (t) => {
+				await Ve({
+					workflows: e.discovered.workflows ?? [],
+					facade: () => s,
+					log: o,
+					...t
+				});
+			},
+			log: o
+		});
+		let h = d;
+		h !== void 0 && Mn(() => h.stop()), l = Ye({
+			store: e.store,
+			onChange: (t) => e.store.onChange((e) => t({
+				table: e.table,
+				op: e.op
+			})),
+			...e.scheduling === void 0 ? {} : {
+				disarmWhenIdle: e.scheduling.disarmWhenIdle,
+				tickIntervalMs: e.scheduling.inferenceTickMs
+			},
+			enabled: (e.discovered.workflows?.length ?? 0) > 0,
+			resumeSignal: () => f === void 0 || P === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
+				await f.runPromise(P.completeSuspendingSignal({
+					store: e.store,
+					target: ot(t, n),
+					signalName: r,
+					payload: i
+				}));
+			},
+			runEffect: (e) => f.runPromise(e),
+			scheduleCoordinated: a,
+			log: o
+		});
+		let g = l;
+		g !== void 0 && Mn(() => g.stop()), s = (e.discovered.workflows?.length ?? 0) > 0 ? On({
+			workflows: e.discovered.workflows ?? [],
+			runEffect: (e) => f.runPromise(e),
+			onEnqueue: () => ne?.publishWake(),
+			...h === void 0 ? {} : {
+				admitStart: h.gate.admitStart,
+				startPayloadSchema: h.gate.startPayloadSchema
+			},
+			rememberStartContext: oe,
+			signal: async (t, n, r) => {
+				let i = await P.sendWorkflowSignal({
+					store: e.store,
+					recorder: F,
+					target: t,
+					signalName: n,
+					payload: r
+				});
+				return await f.runPromise(P.completeSuspendingSignal({
+					store: e.store,
+					target: t,
+					signalName: n,
+					payload: r
+				})).catch(() => {}), i;
+			},
+			update: (t, n, r, i) => P.sendWorkflowUpdate({
+				store: e.store,
+				recorder: F,
+				target: t,
+				updateName: n,
+				payload: r,
+				...i === void 0 ? {} : { options: i }
+			}),
+			listRuns: (t) => p(e.store, t),
+			retry: (t, n) => we({
+				store: e.store,
+				workflows: e.discovered.workflows ?? [],
+				runPromise: (e) => f.runPromise(e)
+			}, t, n),
+			redrive: (t) => Te({
+				store: e.store,
+				workflows: e.discovered.workflows ?? [],
+				runRedrive: r
+			}, t).then((e) => e.outcome)
+		}) : void 0;
+	}
+	let Dt = V.mergeAll(gt.toLayer(M), _t, vt), Ot = b(M, e.discovered.queries.map((e) => e.descriptor.name), he), kt = V.mergeAll(gt.toLayer(Ot), _t, vt), I = e.observability, At = await $t({
+		...e.appName === void 0 ? {} : { serviceName: e.appName },
+		...I && I.spanProcessors.length > 0 ? { extraSpanProcessors: I.spanProcessors } : {},
+		...I && I.metricReaders.length > 0 ? { extraMetricReaders: I.metricReaders } : {},
+		...I && Object.keys(I.resourceAttributes).length > 0 ? { resourceAttributes: I.resourceAttributes } : {},
+		...I && I.sampler !== void 0 ? { sampler: I.sampler } : {}
+	}), jt = !1, Mt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Nt, shutdown: Pt } = Hn({
+		group: gt,
+		handlersLayer: Dt,
+		httpHandlersLayer: kt,
+		port: e.port ?? 4e3,
+		...e.host === void 0 ? {} : { host: e.host },
+		path: e.path ?? "/ws",
+		tracerLayer: At.layer,
+		healthCheck: {
+			isReady: () => jt,
+			...Mt ? { ping: Mt } : {}
+		},
+		...pt.length > 0 ? { httpRoutes: pt } : {},
+		...e.getStore === void 0 ? {} : { getStore: e.getStore },
+		...Ce.size > 0 ? { webhookRoutes: Ce } : {},
+		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
+	});
+	if (await Zt(Nt), (e.discovered.schedules?.length ?? 0) > 0) {
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? fn(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Vn;
+		m = await Un(e.discovered.schedules ?? [], {
+			store: e.store,
+			coordinator: t,
+			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
+			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`,
+			armSelf: e.scheduleArmSelf ?? !0,
+			dormancy: e.dormancy ?? "always-on",
+			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
+			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => D({
+				subject: r,
+				traceId: t
+			}, e.store, void 0, `schedule:${n}`),
+			log: {
+				info: (e, t) => {
+					process.stdout.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+				},
+				warn: (e, t) => {
+					process.stderr.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+				},
+				error: (e, t) => {
+					process.stderr.write(`[schedule] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
+				},
+				debug: () => {}
+			},
+			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
+			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
+		}), e.onSchedulerReady?.(m);
+	}
+	let L = e.log ?? H({ scope: "voltro:serve" }), Ft, R;
+	if ((e.discovered.subscribers?.length ?? 0) > 0 && (Ft = ce(e.discovered.subscribers ?? [], e.store, L.child("subscribe"), e.schemaRegistry, E.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
+		let t = L.child("reaction"), n = async (n, r) => {
+			if (n.kind === "workflow") {
+				if (x === void 0) {
+					t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
+					return;
+				}
+				let e = n.payload === void 0 ? r.new ?? r.old ?? {} : n.payload(r);
+				await kn(x, {
+					traceId: `reaction:${n.workflow}`,
+					source: `reaction:${n.workflow}`
+				}).start(n.workflow, e);
+				return;
+			}
+			await h(n.agent, r, {
+				findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
+				runAction: (e, t, n) => Promise.resolve(tt(e, t, n)),
+				makeSubject: (e) => sr(e),
+				now: () => Date.now(),
+				log: t
+			});
+		}, r = async (n, r) => {
+			try {
+				let { requireAiBudget: t } = await import("@voltro/ai");
+				return (await B.runPromise(B.either(t(e.store, {
+					tenantId: n,
+					limitUsd: r
+				}))))._tag === "Right";
+			} catch (e) {
+				return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
+			}
+		}, i = nt(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
+		R = re(e.discovered.reactions ?? [], e.store, {
+			runAct: n,
+			checkBudget: r,
+			claimRateSlot: (e) => i.claim(e)
+		}, t);
+	}
+	let z;
+	(e.discovered.aggregates?.length ?? 0) > 0 && (z = await yt({
+		discovered: e.discovered.aggregates ?? [],
+		store: e.store,
+		log: L.child("aggregate"),
+		...e.analytics === void 0 ? {} : { analytics: e.analytics },
+		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
+		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
+	}), Be = V.succeed(Vt, z.registry));
+	let It;
+	(e.discovered.expectations?.length ?? 0) > 0 && (It = Jt({
+		discovered: e.discovered.expectations ?? [],
+		store: e.store,
+		log: L.child("expectation")
+	}), Ue = V.succeed(Wt, It.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = Xt({
+		discovered: e.discovered.budgets ?? [],
+		log: L.child("finops")
+	}), Ge = V.succeed(Ht, n.registry));
+	let Lt;
+	return (e.discovered.experiments?.length ?? 0) > 0 && (Lt = Yt({
+		discovered: e.discovered.experiments ?? [],
+		store: e.store,
+		log: L.child("experiment")
+	}), qe = V.succeed(Gt, Lt.registry)), jt = !0, e.bootTiming?.mark("ready"), {
+		dispatcher: i,
+		server: Nt,
+		scheduler: m,
+		eventsSnapshot: _e(E.bus, E.declared),
+		membersSnapshot: () => ({
+			members: Ie.membership.list(),
+			capturedAt: Date.now()
+		}),
+		rpcMetrics: () => Ze,
+		webhooksService: () => xe,
+		runCanceller: () => c(),
+		flowControlHealth: () => d?.cancelHealth(),
+		inferenceHealth: () => l?.health(),
+		workflowWriteActions: () => x === void 0 || F === void 0 ? void 0 : se({
+			store: e.store,
+			log: L,
+			workflows: e.discovered.workflows ?? [],
+			workflowsProxy: s,
+			workflowRuntime: f,
+			workflowRunRecorder: F,
+			closeChildrenForParent: St
+		}),
+		redriveWorkflowRun: (e) => ee ? ee(e) : Promise.reject(/* @__PURE__ */ Error("redrive: this app registers no workflows")),
+		resumeWorkflowRunFromStep: (e) => te ? te(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
+		close: async () => {
+			jt = !1, await ze?.detach(), await Ie.detach(), z?.detach(), It?.detach(), n?.detach(), Lt?.detach(), R?.(), Ft?.(), await m?.shutdown(), i.close(), await ne?.detach(), await f?.dispose(), await new Promise((e) => Nt.close(() => e())), await Pt();
+		}
+	};
+}, $ = H({ scope: "voltro:serve" }), ui = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", di = R, fi = async (e) => {
+	let t = L(process.cwd());
+	if (Bt(t)) {
+		let n;
+		try {
+			let e = await import(Lt(t).href);
+			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
+		} catch (e) {
+			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
+		}
+		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
+	}
+	return pi(e);
+}, pi = async (u) => {
+	let p = Ft();
+	process.env.NODE_ENV || (process.env.NODE_ENV = "production");
+	try {
+		yr();
+	} catch (e) {
+		throw n(e instanceof Error ? e.message : String(e));
+	}
+	let h = process.cwd(), re = Number(process.env.PORT ?? di(u, "--port") ?? 4e3), _ = await E(h);
+	Rn(In(_?.secrets)), await e({
+		rawEnv: _?.env,
+		appType: "api",
+		root: h,
+		log: $,
+		generateTypes: !1
+	}), p.mark("config");
+	let v = (process.env.DB_DIALECT ?? _?.store ?? "memory").toLowerCase(), ae = (v === "mariadb" || v === "postgres" || v === "mssql") && (process.env.CDC ?? "1") !== "0", se = v === "mariadb" ? "mariadb" : v === "mssql" ? "mssql" : void 0, ce = Pt(h);
+	if (!c() && Bt(ce)) try {
+		let e = await import(Lt(ce).href);
+		if (e.modules) {
+			let t = {};
+			for (let [n, r] of Object.entries(e.modules)) t[It(h, n)] = r;
+			s(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
+		}
+	} catch (e) {
+		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
+	}
+	let y = await Ge(h), b = await ft(y, { cdc: ae && se !== void 0 });
+	{
+		let e = /* @__PURE__ */ new Set([
+			...b.queries.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
+			...b.mutations.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
+			...b.actions.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name)
+		]);
+		Et(P(_?.plugins ?? []), [
+			...b.queries.map((e) => e.descriptor.name),
+			...b.mutations.map((e) => e.descriptor.name),
+			...b.actions.map((e) => e.descriptor.name),
+			...b.streams.map((e) => e.descriptor.name)
+		], e);
+		let t = Ze(b.serverOnlyLeaks, f(process.env, "strict"), an, "`voltro serve`");
+		if (t.action === "fail") throw n(t.message ?? "");
+		t.action === "warn" && $.warn(t.message ?? "");
+	}
+	let le = y.filter((e) => D.test(e)), de = le.length > 0 ? await it(le, $.child("webhooks")) : {
+		outgoing: [],
+		incoming: [],
+		providers: []
+	}, fe = et(b.events), pe = de.outgoing.length + de.incoming.length + de.providers.length + fe.length === 0 ? void 0 : {
+		...de,
+		outgoing: [...de.outgoing, ...fe]
+	}, me = Tt({
+		mix: b.featureMix,
+		plugins: _?.plugins ?? [],
+		cdc: ae && se !== void 0,
+		...se ? { cdcDialect: se } : {}
+	}), _e = _?.analytics !== void 0 && _.analytics.kind !== "noop" && v !== "memory" ? (await a(v)).makeSqlLayer(k()) : void 0, be = await ee({
+		spec: _?.analytics,
+		sqlLayer: _e,
+		log: $
+	}), S = (() => {
+		let e = new Set(b.tables.map((e) => e.tableName)), t = [...b.tables];
+		for (let n of [...me, ...be.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
+		return t;
+	})();
+	for (let e of S) Qn(e);
+	{
+		let e = on(Gn(b.queries.map((e) => ({
+			name: e.descriptor.name,
+			source: e.descriptor.source
+		})), new Set(S.flatMap((e) => {
+			let t = e.tableName;
+			return t === void 0 ? [] : [t];
+		}))));
+		e !== void 0 && $.warn(e);
+	}
+	let we = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (ui(we, v, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await a(v)).makeSqlLayer(k()), t = await B.runPromise(Yn.SqlClient.pipe(B.flatMap((e) => Tr(e, S, {
+			appliedBy: `serve:${we}`,
+			environment: "prod",
+			dialectId: v
+		})), B.provide(e)));
+		t.kind === "prod-mismatch" && ($.error(wr(t, v)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(wr(t, v));
+	}
+	let Te = Dn(S);
+	p.mark("discover");
+	let w = await qe(_, void 0), Oe = qn(w, v);
+	for (let e of Je({
+		dialect: String(_?.store ?? process.env.DB_DIALECT ?? "postgres"),
+		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
+		dbUrl: process.env.DB_URL,
+		tables: b.tables.map((e) => ({
+			tableName: e.tableName,
+			isReactive: e.isReactive === !0
+		})),
+		querySources: b.queries.flatMap((e) => {
+			let t = e.descriptor.source;
+			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
+		})
+	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
+	{
+		let e = M(tt({
+			tables: Xn().map((e) => ({ tableName: e.tableName })),
+			queries: b.queries.map((e) => ({
+				name: e.descriptor.name,
+				source: e.descriptor.source
+			}))
+		}));
+		e !== void 0 && $.warn(e);
+	}
+	_?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = _.cache), _?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = _.cacheRedisUrl), _?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = _.cacheRedisDriver), _?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = _.cacheKeyPrefix);
+	let { service: je, invalidationBus: Ne, snapshotCache: Le, cache: Re, semantic: Ve, evictSource: He, backend: We, stats: Ke, dispose: Ye } = await ut({
+		env: process.env,
+		semantic: _?.cacheSemantic ?? !1
+	});
+	Ve !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${We}` + (We === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), w.onChange((e) => {
+		if (B.runFork(Ne.publish(e.table)), He !== void 0) {
+			let t = (e.new ?? e.old)?.id;
+			He({
+				table: e.table,
+				op: e.op,
+				...t === void 0 ? {} : { id: t }
+			});
+		}
+	}), _?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = _.kv), _?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = _.kvRedisUrl), _?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = _.kvKeyPrefix);
+	let { kv: nt, service: ot } = await gn({ store: w });
+	$.info(Gr(ze(), Kr(), v === "postgres" && (process.env.CDC ?? "1") !== "0" ? [{ reason: "CDC LISTEN consumer" }] : [])), p.mark("store");
+	let dt = qt({
+		store: w,
+		sink: be.sink,
+		log: $
+	}), yt = Be({
+		store: w,
+		dialect: v,
+		log: { info: (e) => $.info(e) }
+	}), N = _?.plugins ?? [], L = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, R, H;
+	v !== "memory" && (R = zt.make((await a(v)).makeSqlLayer(k())), H = await R.runPromise(Yn.SqlClient));
+	let Vt = [
+		"postgres",
+		"mariadb",
+		"mysql",
+		"mssql"
+	].includes(v) ? fn(w, L, $) : Vn, Ht = pt(_?.scheduling), Ut = _n({
+		maxIdleIntervalMs: Ht.pollCeilingMs,
+		coordinator: Vt,
+		replicaId: L,
+		log: $
+	}), Wt = [], Gt = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Jt = Lr(_?.plugins ?? [])?.broadcast?.provider, Yt = mt(_?.plugins, _?.name ?? z(h));
+	{
+		let e = Me(_?.plugins, _?.name ?? z(h));
+		e !== void 0 && $.warn(e);
+	}
+	let Xt = Fe(_?.plugins, {
+		instanceId: Gt,
+		namespace: Yt,
+		meta: { mode: "serve" },
+		logger: $
+	}), Zt = {
+		...H ? { sql: H } : {},
+		instanceId: Gt,
+		membership: Xt.membership,
+		...Jt === void 0 ? {} : { broadcast: Jt },
+		broadcastChannels: { presence: Ir(Yt, "presence") },
+		scheduleCoordinated: (e, t, n) => {
+			let r = Ut(e, t, n);
+			return Wt.push(r), r;
+		}
+	};
+	for (let e of N) e.bindDataStore?.(w, Zt);
+	Xe({
+		store: w,
+		...d(),
+		log: $
+	});
+	let U = N.filter((e) => typeof e.onChangeEvent == "function");
+	if (U.length > 0) {
+		let e = w.changeScope ?? "local";
+		w.onChange((t) => {
+			let n = Qe(t, e);
+			for (let e of U) B.runFork(e.onChangeEvent(n).pipe(B.catchAllCause((t) => B.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Rt.pretty(t) })))));
+		});
+	}
+	let Qt = at({
+		plugins: N,
+		appName: _?.name ?? "voltro-api",
+		appType: "api",
+		voltroVersion: process.env.npm_package_version ?? "0.0.0",
+		log: $
+	});
+	N.length && await Qt.activate(), p.mark("plugins");
+	let W = await Qt.gatherObservability(), $t = {
+		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
+		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
+		debug: () => {}
+	}, en, cn = await Ue(w, _, v, Yt, $t, (e, t) => {
+		en?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
+	}), ln = _?.apiKeys, un = (typeof ln == "object" ? ln.prefix : void 0) ?? "voltro_", dn = ln ? nn(w) : void 0, vn = dn ? mn({ flush: hn(dn) }) : void 0;
+	vn && Mn(() => vn.shutdown());
+	let yn = dn ? pn(dn, {
+		prefix: un,
+		...vn ? { usage: vn } : {}
+	}) : void 0, bn = yn ? [sn(yn, { prefix: un })] : [], xn = j([..._?.auth?.strategies ?? [], ...bn], Mr(_?.plugins ?? []), _?.auth?.anonymousTenantRequired ?? !1, _?.auth?.resolveScopes, () => Oe), Sn = [..._?.restRoutes ?? [], ...yn ? Kt(yn, (typeof ln == "object" ? ln.managementPath : void 0) ?? "/v1/api-keys") : []], Cn = _?.idempotency, wn = Cn ? {
+		store: rn(w),
+		header: (typeof Cn == "object" ? Cn.header : void 0) ?? "Idempotency-Key",
+		ttlMs: (typeof Cn == "object" ? Cn.ttlMs : void 0) ?? 864e5
+	} : void 0, Tn = Sn.length > 0 ? Pr(Sn, {
+		store: w,
+		resolveSubject: async (e) => (await xn({
+			headers: e,
+			clientId: -1
+		})).subject,
+		...wn ? { idempotency: wn } : {}
+	}) : [], En = N.map((e) => e.services).filter((e) => e !== void 0), On = V.mergeAll(T({
+		analyticsLayer: be.layer,
+		cacheService: je,
+		kvService: ot,
+		...Ve === void 0 ? {} : { semanticCache: Ve },
+		pluginServices: En,
+		userLayers: _?.layers ?? []
+	}), ke(_?.http ?? {})), kn = _?.scheduling ?? {}, An = kn.trigger ?? "self", jn = /* @__PURE__ */ new Set([
+		"postgres",
+		"mysql",
+		"mariadb",
+		"mssql"
+	]), Pn = kn.coordination ?? (jn.has(v) ? "advisoryLock" : "single"), G = Pn === "cluster" && jn.has(v), Fn = G ? "cluster" : Pn === "advisoryLock" && jn.has(v) ? "advisoryLock" : "single";
+	Pn === "cluster" && !G && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), Pn === "advisoryLock" && !jn.has(v) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
+	let Ln, zn = b.workflows.length > 0 || b.workflowWorkers.length > 0 || b.eventTriggers.length > 0 || (pe?.outgoing.length ?? 0) > 0 || G, Bn;
+	if (zn) {
+		if (v === "mssql") {
+			let e = await xt(process.cwd());
+			e && $.warn(e);
+		}
+		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), o = G ? b.schedules.filter((e) => (e.trigger ?? An) === "self").map((e) => t({
+			name: e.name,
+			cron: tn(e),
+			execute: async () => {
+				await Ln?.fireFromCluster(e.name);
+			}
+		})) : [];
+		Bn = v === "memory" ? e.layerMemory : await (async () => {
+			let e = await a(v), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
+			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
+				sqlClientLayer: e.makeSqlLayer(k()),
+				runnerStorage: t,
+				dialectId: e.id,
+				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
+				...i(),
+				...o.length > 0 ? { extraShardingLayers: o } : {}
+			});
+		})();
+	}
+	let Hn = ie(N, r()), Un = y.filter((e) => /\.subscribe\.tsx?$/.test(e)), Wn = Un.length > 0 ? await x(Un, $) : [], Kn = y.filter((e) => /\.reaction\.tsx?$/.test(e)), Jn = Kn.length > 0 ? await ge(Kn, $) : [], Zn = y.filter((e) => I.test(e)), K = Zn.length > 0 ? await ve(Zn, $) : [], $n = y.filter((e) => /\.aggregate\.tsx?$/.test(e)), er = $n.length > 0 ? await ne($n, $) : [], tr = _t();
+	if (er.length > 0 && v !== "memory") try {
+		tr = Ce((await a(v)).makeSqlLayer(k()));
+	} catch (e) {
+		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
+	}
+	let nr = v === "memory" ? Vn : fn(w, `aggregate@${process.pid}`, $), rr = y.filter((e) => At.test(e)), ir = rr.length > 0 ? await bt(rr, $) : [], ar = y.filter((e) => kt.test(e)), or = ar.length > 0 ? await ht(ar, $) : [], q = y.filter((e) => Ot.test(e)), sr = q.length > 0 ? await Ie(q, $) : [], cr = [], lr = [], J = y.filter((e) => F.test(e));
+	if (J.length > 0) {
+		let e = $.child("agent"), t = y.filter((e) => wt.test(e));
+		t.length > 0 && await St(t, e);
+		let n = await Ct(J, e);
+		for (let e of n.agents) for (let t of De(e)) (t.kind === "action" ? cr : lr).push({
+			file: t.file,
+			descriptor: t.descriptor,
+			executor: t.executor
+		});
+		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
+	}
+	p.mark("workflow");
+	let Y = () => {
+		let e = Z.workflowWriteActions();
+		if (e === void 0) throw Error("workflow actions: this app registers no workflows");
+		return e;
+	}, X = await Ae({
+		files: y,
+		store: w,
+		log: $,
+		seedPolicy: "report",
+		seedPattern: o,
+		loadSeedFiles: i,
+		startupPattern: Dt,
+		loadStartupFiles: Nt,
+		runStartups: Mt,
+		emailPattern: ye,
+		loadEmailFiles: l,
+		registerEmailTemplates: Fr
+	});
+	(X.startupCount > 0 || X.emailCount > 0) && $.info("boot lifecycle", {
+		startups: X.startupCount,
+		emailTemplates: X.emailCount
+	}), X.startups !== void 0 && Mn(async () => {
+		await X.startups.stop();
+	});
+	let ur = {
+		kind: "api",
+		meta: {
+			name: _?.name ?? "voltro-api",
+			voltroVersion: lt,
+			port: re,
+			mode: "start",
+			store: v,
+			cdc: ae ? "on" : "off"
+		},
+		rpc: rt(b, h),
+		workflows: st(b, h),
+		events: () => Z.eventsSnapshot(),
+		members: () => Z.membersSnapshot(),
+		inspectFireSchedule: async ({ name: e, trigger: t }) => {
+			if (!Ln) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
+			return { runId: await Ln.fireNow(e, t) ?? null };
+		},
+		...pe === void 0 ? {} : { webhooks: () => O({
+			store: w,
+			discoveredWebhooks: pe
+		}) },
+		plugins: () => ({
+			plugins: Qt.snapshot(),
+			capturedAt: Date.now()
+		}),
+		env: () => t(_?.name ?? z(h), {
+			..._?.env !== void 0 && vr(_.env) ? { contract: _.env } : {},
+			plugins: _?.plugins ?? []
+		}),
+		dataCache: () => Se({
+			stats: Ke,
+			backendKind: We
+		}),
+		subscriptions: () => te(() => en),
+		inspectTables: () => ue(b.tables),
+		inspectRows: xe({
+			store: w,
+			tables: b.tables,
+			mask: !0
+		}),
+		metrics: (e) => Z.rpcMetrics().snapshot(e),
+		cluster: () => vt({
+			store: w,
+			dialect: v,
+			useClusterCron: G,
+			scheduleCoordChoice: Pn
+		}),
+		inspectSchedules: () => m({
+			schedules: b.schedules,
+			defaultTrigger: An,
+			coordination: Fn
+		}),
+		inspectScheduleRuns: (e) => g(w, e),
+		...C(w, {
+			controls: ct(b.workflows ?? []),
+			active: (b.workflows?.length ?? 0) > 0,
+			cancellation: () => Z.flowControlHealth()
+		}),
+		webhookActions: gt(() => Z.webhooksService()),
+		inspectStartWorkflow: (e) => Y().inspectStartWorkflow(e),
+		inspectCancelWorkflowRun: (e) => Y().inspectCancelWorkflowRun(e),
+		inspectSuspendWorkflowRun: (e) => Y().inspectSuspendWorkflowRun(e),
+		inspectResumeWorkflowRun: (e) => Y().inspectResumeWorkflowRun(e),
+		inspectDiscardWorkflowRun: (e) => Y().inspectDiscardWorkflowRun(e),
+		inspectRetryWorkflowRun: (e) => Y().inspectRetryWorkflowRun(e),
+		inspectSignalWorkflowRun: (e) => Y().inspectSignalWorkflowRun(e),
+		inspectUpdateWorkflowRun: (e) => Y().inspectUpdateWorkflowRun(e),
+		inspectInferences: (e) => Pe({
+			store: w,
+			active: (b.workflows?.length ?? 0) > 0,
+			dispatcher: () => Z.inferenceHealth()
+		}, e.limit === void 0 ? {} : { limit: e.limit }),
+		...A({
+			store: w,
+			cancelRun: async (e) => await Z.runCanceller()?.(e) ?? !1,
+			retryRun: async (e) => Y().inspectRetryWorkflowRun({ runId: e }),
+			redriveRun: async (e) => Z.redriveWorkflowRun({ runId: e }),
+			log: $
+		}),
+		inspectRedriveWorkflowRun: (e) => Z.redriveWorkflowRun(e),
+		inspectResumeWorkflowRunFromStep: (e) => Z.resumeWorkflowRunFromStep(e)
+	}, Z = await li({
+		bootTiming: p,
+		broadcastNamespace: Yt,
+		scheduling: (() => {
+			let e = Ht;
+			return {
+				admissionDrainMs: e.admissionDrainMs,
+				inferenceTickMs: e.inferenceTickMs,
+				cancelSweepMs: e.cancelSweepMs,
+				disarmWhenIdle: $e({
+					changeScope: w.changeScope,
+					broadcastAttached: cn !== void 0
+				})
+			};
+		})(),
+		membership: {
+			...Xt,
+			instanceId: Gt
+		},
+		..._?.plugins === void 0 ? {} : { plugins: _.plugins },
+		...wn ? { idempotency: {
+			store: wn.store,
+			ttlMs: wn.ttlMs
+		} } : {},
+		discovered: {
+			queries: [...b.queries, ...lr],
+			mutations: b.mutations,
+			actions: [...b.actions, ...cr],
+			streams: b.streams,
+			events: b.events,
+			workflows: b.workflows,
+			workflowWorkers: b.workflowWorkers,
+			eventTriggers: b.eventTriggers,
+			schedules: b.schedules,
+			subscribers: Wn,
+			outboxHandlers: K,
+			connections: b.connections,
+			reactions: Jn,
+			aggregates: er,
+			expectations: ir,
+			budgets: or,
+			experiments: sr,
+			...pe === void 0 ? {} : { webhooks: pe }
+		},
+		log: $,
+		analytics: be.sink,
+		aggregateStorage: tr,
+		aggregateCoordinator: nr,
+		store: w,
+		kv: nt,
+		cache: Re,
+		snapshotCache: Le,
+		schemaRegistry: Te,
+		tenantScopedTables: b.tenantScopedTables,
+		softDeleteScopedTables: b.softDeleteScopedTables,
+		dataTransferSnapshot: Cr(S),
+		dataTransferDialect: v,
+		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? _?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
+		resolveSubject: async (e, t) => {
+			let n = await xn({
+				headers: e,
+				clientId: t
+			});
+			return Nn(t, n.credentialExpiresAt), n.subject;
+		},
+		httpRoutes: [...N.flatMap((e) => e.httpRoutes ?? []), ...Tn],
+		getStore: () => Oe,
+		...On ? { baseLayer: On } : {},
+		...Bn === void 0 ? {} : { workflowEngineLayer: Bn },
+		scheduleDefaultTrigger: An,
+		scheduleCoordination: Fn,
+		scheduleArmSelf: !G,
+		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : _?.dormancy ?? "always-on",
+		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
+		...Hn === void 0 ? {} : { scheduleFireInterceptor: Hn },
+		onSchedulerReady: (e) => {
+			Ln = e;
+		},
+		inspectRoute: { handle: async (e, t, n, r) => await he(e, ur, t, {
+			method: n,
+			...r === void 0 ? {} : { body: r }
+		}) || (jt(e, ur, t, {
+			method: n,
+			...r === void 0 ? {} : { body: r }
+		}) ?? {
+			status: 404,
+			contentType: "application/json",
+			body: JSON.stringify({ error: "not an inspect route" })
+		}) },
+		..._?.name === void 0 ? {} : { appName: _.name },
+		observability: W,
+		port: re,
+		..._?.transport?.wsPath ? { path: _.transport.wsPath } : {}
+	});
+	return en = Z.dispatcher, oe(Ee([
+		b.queries,
+		b.mutations,
+		b.actions,
+		b.streams
+	]), (e) => {
+		$.warn(e);
+	}), $.info(`API listening on :${re}`, {
+		dialect: v,
+		queries: b.queries.length,
+		mutations: b.mutations.length,
+		actions: b.actions.length,
+		streams: b.streams.length,
+		workflows: b.workflows.length,
+		workflowWorkers: b.workflowWorkers.length,
+		schedules: b.schedules.length,
+		scheduleCoordination: Fn
+	}), p.finish($), Mn(async () => {
+		for (let e of Wt) e.stop();
+		dt.detach(), yt.stop(), Ye(), R?.dispose();
+		try {
+			await Qt.deactivate(), await cn?.close(), await be.dispose(), await Z.close(), await w.close?.();
+		} catch (e) {
+			console.error("serve: shutdown step failed, exiting anyway:", e);
+		}
+	}), await new Promise(() => {}), 0;
+};
+//#endregion
+export { fi as n, oi as r, pi as t };