@voltro/cli 0.33.0 → 0.34.0

package/dist/logsCmd-CCca3KRZ.js

@@ -0,0 +1,260 @@
+import { n as e } from "./runtimeRegistry-DMeKfTHP.js";
+import { r as t, t as n } from "./logFileSink-C_D2wRN1.js";
+import { n as r } from "./cliOutput-D1tSBoRM.js";
+import { a as i, i as a } from "./inspectFetch-Cm8_wVvp.js";
+import { ansi as o } from "@voltro/logger";
+//#region src/logsCmd.ts
+var s = (e) => {
+	let t = a(e);
+	if (t.error !== void 0) return { error: t.error };
+	let n = t.target, r = t.rest, i = {
+		tail: 100,
+		since: void 0,
+		level: void 0,
+		scope: void 0,
+		source: void 0,
+		filter: void 0,
+		traceId: void 0,
+		process: void 0,
+		format: "pretty",
+		color: process.stdout.isTTY === !0
+	};
+	for (let e = 0; e < r.length; e++) {
+		let t = r[e], n = () => r[++e];
+		switch (t) {
+			case "--tail": {
+				let e = n(), t = e === void 0 ? NaN : Number(e);
+				if (!Number.isFinite(t) || t <= 0) return { error: `--tail expects a positive number, got '${e ?? ""}'` };
+				i.tail = Math.floor(t);
+				break;
+			}
+			case "--since": {
+				let e = n();
+				if (e === void 0) return { error: "--since expects a value" };
+				let t = c(e);
+				if (t === null) return { error: `--since: unrecognised '${e}' (try '30s', '5m', '1h', or unix-ms)` };
+				i.since = t;
+				break;
+			}
+			case "--level": {
+				let e = n();
+				if (e === void 0) return { error: "--level expects a value" };
+				if (![
+					"trace",
+					"debug",
+					"info",
+					"warn",
+					"error",
+					"fatal"
+				].includes(e)) return { error: `--level: unknown '${e}'` };
+				i.level = e;
+				break;
+			}
+			case "--scope":
+				i.scope = n();
+				break;
+			case "--filter":
+				i.filter = n();
+				break;
+			case "--trace":
+				i.traceId = n();
+				break;
+			case "--process":
+				i.process = n();
+				break;
+			case "--source": {
+				let e = n();
+				if (e !== "server" && e !== "client") return { error: "--source: must be 'server' or 'client'" };
+				i.source = e;
+				break;
+			}
+			case "--format": {
+				let e = n();
+				if (e !== "pretty" && e !== "json" && e !== "text") return { error: "--format: must be 'pretty' | 'json' | 'text'" };
+				i.format = e;
+				break;
+			}
+			case "--no-color":
+				i.color = !1;
+				break;
+			case "--color":
+				i.color = !0;
+				break;
+			case "--help":
+			case "-h": return { error: "help" };
+			default: return { error: `unknown flag '${t}'` };
+		}
+	}
+	return {
+		...i,
+		target: n
+	};
+}, c = (e) => {
+	let t = /^(\d+)([smh])$/.exec(e);
+	if (t) {
+		let e = Number(t[1]), n = t[2], r = n === "s" ? 1e3 : n === "m" ? 6e4 : 36e5;
+		return Date.now() - e * r;
+	}
+	let n = Number(e);
+	return Number.isFinite(n) && n > 0 ? n : null;
+}, l = () => {
+	console.log("voltro logs — recent log records from every running voltro process"), console.log(""), console.log("Usage:"), console.log("  voltro logs [--tail N] [--since SPEC] [--level L] [--scope S]"), console.log("              [--source server|client] [--filter PAT] [--trace ID]"), console.log("              [--process NAME] [--format pretty|json|text] [--no-color]"), console.log(""), console.log("Examples:"), console.log("  voltro logs --tail 50"), console.log("  voltro logs --since 30s --level error"), console.log("  voltro logs --filter 'channels.create'"), console.log("  voltro logs --trace <traceId> --format json   # whole chain for one request"), console.log("  voltro logs --format json | jq '.[] | select(.level == \"error\")'");
+}, u = async (t) => {
+	let a = s(t);
+	if ("error" in a) return a.error !== "help" && console.error(`voltro logs: ${a.error}`), l(), a.error === "help" ? 0 : 2;
+	let c = a.target === void 0 ? await e() : {
+		version: 1,
+		apps: [i(a.target)]
+	}, u = a.process === void 0 ? c.apps : c.apps.filter((e) => e.name === a.process);
+	if (u.length === 0 && a.process !== void 0) {
+		let e = n(a.process);
+		e !== void 0 && (u = [{
+			id: `orphan:${a.process}`,
+			name: a.process,
+			kind: "api",
+			url: "",
+			pid: 0,
+			registeredAt: (/* @__PURE__ */ new Date(0)).toISOString(),
+			heartbeatAt: (/* @__PURE__ */ new Date(0)).toISOString(),
+			status: "booting",
+			logFile: e
+		}]);
+	}
+	if (u.length === 0) {
+		if (a.process !== void 0) {
+			console.error(`voltro logs: no running process named '${a.process}' and no orphan log file found`), console.error("  active processes:");
+			for (let e of c.apps) console.error(`    - ${e.name} (${e.kind} @ ${e.url})`);
+			return 1;
+		}
+		return console.error("voltro logs: no running voltro process found"), console.error("  start one with 'voltro dev' (or 'voltro start') and try again."), 1;
+	}
+	let f = u.map((e) => d(e, a)), p = await Promise.all(f), m = [], _ = [];
+	for (let e of p) e.kind === "ok" ? m.push(...e.records) : _.push({
+		name: e.name,
+		error: e.error
+	});
+	if (m.sort((e, t) => e.ts - t.ts), a.format === "json") return r(_.length > 0 ? {
+		records: m,
+		fetchErrors: _
+	} : { records: m }, { pretty: !1 }), +(_.length === u.length);
+	if (a.format === "text") {
+		for (let e of m) console.log(h(e));
+		for (let e of _) console.error(`# fetch failed: ${e.name}: ${e.error}`);
+		return +(_.length === u.length);
+	}
+	for (let e of m) console.log(g(e, a.color));
+	m.length === 0 && console.error("voltro logs: no records matched the given filters.");
+	for (let e of _) {
+		let t = `# fetch failed: ${e.name}: ${e.error}`;
+		console.error(a.color ? o.dim(t) : t);
+	}
+	return +(_.length === u.length);
+}, d = async (e, t) => {
+	if (e.status === "booting") return f(e, t, "process still booting");
+	let n = new URLSearchParams();
+	n.set("max", String(t.tail)), n.set("format", "json"), t.since !== void 0 && n.set("since", String(t.since)), t.level !== void 0 && n.set("level", t.level), t.scope !== void 0 && n.set("scope", t.scope), t.source !== void 0 && n.set("source", t.source), t.filter !== void 0 && n.set("filter", t.filter), t.traceId !== void 0 && n.set("trace", t.traceId);
+	let r = `${e.url.replace(/\/+$/, "")}/_voltro/inspect/logs?${n.toString()}`;
+	try {
+		let n = {};
+		process.env.VOLTRO_INSPECT_TOKEN !== void 0 && (n.authorization = `Bearer ${process.env.VOLTRO_INSPECT_TOKEN}`);
+		let i = await fetch(r, { headers: n });
+		if (!i.ok) return f(e, t, `HTTP ${i.status}`);
+		let a = await i.json(), o = Array.isArray(a.records) ? a.records : [];
+		return {
+			kind: "ok",
+			name: e.name,
+			records: o.map((t) => ({
+				...t,
+				process: e.name
+			}))
+		};
+	} catch (n) {
+		return f(e, t, n.message || String(n));
+	}
+}, f = async (e, n, r) => {
+	if (!e.logFile) return {
+		kind: "err",
+		name: e.name,
+		error: `${r} (no logFile on entry)`
+	};
+	try {
+		let r = n.since, i = { max: n.tail };
+		r !== void 0 && (i.since = r);
+		let a = await t(e.logFile, i), o = [], s = {
+			trace: 0,
+			debug: 1,
+			info: 2,
+			warn: 3,
+			error: 4,
+			fatal: 5
+		}, c = n.level === void 0 ? 0 : s[n.level], l = n.scope?.toLowerCase(), u = n.source, d = n.filter?.toLowerCase(), f = n.traceId;
+		for (let e of a) s[e.level] < c || u !== void 0 && e.source !== u || l !== void 0 && (e.scope === void 0 || !e.scope.toLowerCase().includes(l)) || d !== void 0 && !e.message.toLowerCase().includes(d) || f !== void 0 && e.fields.traceId !== f || o.push({
+			ts: e.ts,
+			level: e.level,
+			source: e.source,
+			message: e.message,
+			fields: e.fields,
+			...e.scope === void 0 ? {} : { scope: e.scope }
+		});
+		let p = o.length > n.tail ? o.slice(o.length - n.tail) : o;
+		return {
+			kind: "ok",
+			name: e.name,
+			records: p.map((t) => ({
+				...t,
+				process: e.name
+			}))
+		};
+	} catch (t) {
+		return {
+			kind: "err",
+			name: e.name,
+			error: `${r}; file read failed: ${t.message || String(t)}`
+		};
+	}
+}, p = {
+	trace: o.dim,
+	debug: o.cyan,
+	info: o.green,
+	warn: o.yellow,
+	error: o.red,
+	fatal: (e) => o.bgRed(o.white(e))
+}, m = {
+	trace: "TRACE",
+	debug: "DEBUG",
+	info: "INFO ",
+	warn: "WARN ",
+	error: "ERROR",
+	fatal: "FATAL"
+}, h = (e) => {
+	let t = _(e.ts), n = e.scope ?? "?", r = y(e.fields);
+	return `${t} ${m[e.level]} [${n}/${e.source}@${e.process}] ${e.message}${r}`;
+}, g = (e, t) => {
+	if (!t) return h(e);
+	let n = o.dim(_(e.ts)), r = e.scope ?? "?", i = p[e.level](m[e.level]), a = o.dim(`[${r}/${e.source}@${e.process}]`), s = e.level === "error" || e.level === "fatal" ? o.red(e.message) : e.message, c = y(e.fields);
+	return `${n} ${i} ${a} ${s}${c ? o.dim(c) : ""}`;
+}, _ = (e) => {
+	let t = new Date(e);
+	return `${String(t.getHours()).padStart(2, "0")}:${String(t.getMinutes()).padStart(2, "0")}:${String(t.getSeconds()).padStart(2, "0")}.${String(t.getMilliseconds()).padStart(3, "0")}`;
+}, v = 80, y = (e) => {
+	let t = Object.entries(e);
+	if (t.length === 0) return "";
+	let n = [];
+	for (let [e, r] of t) r !== void 0 && n.push(`${e}=${b(r)}`);
+	return n.length > 0 ? "  " + n.join(" ") : "";
+}, b = (e) => {
+	if (typeof e == "string") {
+		let t = e.length > v ? e.slice(0, v) + "…" : e;
+		return /[\s=]/.test(t) ? `"${t.replace(/"/g, "\\\"")}"` : t;
+	}
+	if (e === null) return "null";
+	if (typeof e == "number" || typeof e == "boolean") return String(e);
+	try {
+		let t = JSON.stringify(e);
+		return t.length > v ? t.slice(0, v) + "…" : t;
+	} catch {
+		return "[unserialisable]";
+	}
+};
+//#endregion
+export { u as runLogsCommand };

package/dist/manifestBuild-ChsKAhmn.js

@@ -0,0 +1,2 @@
+import { t as e } from "./manifestBuild-sxpwdKY1.js";
+export { e as buildRpcEntry };

package/dist/{manifestBuild-BLrVuSlM.js → manifestBuild-sxpwdKY1.js}

@@ -1,4 +1,4 @@
-import { N as e } from "./inspect-BUUjt773.js";
+import { P as e } from "./inspect-CBqFtAKA.js";
 import { JSONSchema as t } from "effect";
 //#region src/manifestBuild.ts
 var n = (e) => {

package/dist/metaCommands-7MJfZ5cf.js

@@ -0,0 +1,196 @@
+import { i as e, n as t, r as n } from "./cliArgs-D4p8n7EE.js";
+import { t as r } from "./cliRuntime-Dh7UDinH.js";
+import { n as i } from "./renderProfile-1OWWAAtx.js";
+import { a, i as o } from "./projectScaffold-LMMtaavR.js";
+import { t as s } from "./discover-C9XKJDco.js";
+import { basename as c, join as l, relative as u, resolve as d } from "node:path";
+import { createLogger as f } from "@voltro/logger";
+import { Effect as p } from "effect";
+import { readFile as m, readdir as h } from "node:fs/promises";
+import { generateKeyPairSync as g, randomBytes as _ } from "node:crypto";
+//#region src/deploy/classify.ts
+var v = /* @__PURE__ */ new Set([
+	"node_modules",
+	"dist",
+	"build",
+	".turbo",
+	".vite",
+	".framework",
+	".git"
+]), y = /\btype\s*:\s*['"](web|api)['"]/, b = /\bname\s*:\s*['"]([^'"]+)['"]/, x = (e, t) => {
+	if (e === "api") return {
+		target: "container",
+		reason: "api — always-on (reactive WebSocket + Postgres)"
+	};
+	if (!t) return {
+		target: "container",
+		reason: "web — no render profile available (assuming a runtime is needed)"
+	};
+	if (t.staticSafe) return {
+		target: "static-cdn",
+		reason: "web — all pages static/spa → CDN"
+	};
+	let n = [];
+	return t.counts.ssr > 0 && n.push(`${t.counts.ssr} ssr`), t.counts.isr > 0 && n.push(`${t.counts.isr} isr`), t.dynamicMissing.length > 0 && n.push(`${t.dynamicMissing.length} dynamic w/o getStaticPaths`), {
+		target: "container",
+		reason: `web — needs a runtime (${n.join(", ")})`
+	};
+}, S = (e) => p.gen(function* () {
+	let t = yield* p.promise(() => m(l(e, "app.config.ts"), "utf8").catch(() => "")), n = y.exec(t)?.[1] ?? "api", r = b.exec(t)?.[1] ?? c(e), a = n === "web" ? yield* p.promise(() => i(e)) : null, { target: o, reason: s } = x(n, a);
+	return {
+		dir: e,
+		name: r,
+		appType: n,
+		target: o,
+		reason: s,
+		...a ? { profile: a } : {}
+	};
+}), C = (e) => p.promise(async () => {
+	let t = [], n = async (e) => {
+		let r;
+		try {
+			r = await h(e, { withFileTypes: !0 });
+		} catch {
+			return;
+		}
+		r.some((e) => e.isFile() && e.name === "app.config.ts") && t.push(e);
+		for (let t of r) t.isDirectory() && !v.has(t.name) && await n(l(e, t.name));
+	};
+	return await n(e), t;
+}), w = (e) => p.gen(function* () {
+	let t = yield* C(e);
+	return {
+		apps: yield* p.forEach(t, (t) => S(t).pipe(p.map((n) => ({
+			...n,
+			dir: u(e, t) || "."
+		})))),
+		functions: (yield* s(e)).map((t) => u(e, t))
+	};
+}), T = (e) => {
+	let t = ["Deploy plan (auto-detected targets):", ""];
+	if (e.apps.length === 0 && e.functions.length === 0) return ["No apps or *.serverless.ts functions found here."];
+	for (let n of e.apps) t.push(`  ${n.dir}  [${n.appType}]  → ${n.target}`), t.push(`      ${n.reason}`);
+	if (e.functions.length > 0) {
+		t.push(`  ${e.functions.length} serverless function(s)  → functions`);
+		for (let n of e.functions) t.push(`      ${n}`);
+	}
+	let n = new Set(e.apps.map((e) => e.target));
+	return e.functions.length > 0 && n.add("functions"), t.push("", `Tiers: ${[...n].join(" + ") || "none"}.`), t;
+}, E = (e) => p.gen(function* () {
+	let t = yield* w(e);
+	return yield* p.sync(() => {
+		for (let e of T(t)) console.log(e);
+	}), 0;
+}), D = (e) => r(E(process.cwd()), { scope: "voltro:deploy" }), O = f({ scope: "voltro:init" }), k = async (t) => {
+	let n = e(t, []);
+	if (n.length > 0) return O.error("init takes no arguments — it initialises the current directory", {
+		got: n,
+		hint: "to scaffold a project, run: voltro create-project <name>"
+	}), 2;
+	let r = d(process.cwd()), i = a(r);
+	if (i && i !== r) return O.error("already inside a pnpm workspace — refusing to nest a second root", {
+		workspaceRoot: i,
+		cwd: r,
+		hint: `run \`voltro create-project <name>\` from ${u(r, i) || i}`
+	}), 1;
+	let s;
+	try {
+		s = await o(r);
+	} catch (e) {
+		return O.error("init failed", { error: e instanceof Error ? e.message : String(e) }), 1;
+	}
+	if (s.written.length === 0 && !s.gitInitialised) console.log(`✓ ${s.root} is already a Voltro workspace root — nothing to do.`);
+	else {
+		console.log(`✓ initialised Voltro workspace root at ${s.root}`);
+		for (let e of s.written) console.log(`  · ${e}`);
+		s.gitInitialised && console.log("  · git init");
+	}
+	return console.log(), console.log("Next steps:"), console.log("  voltro create-project <name>   # scaffold apps/<name>/{api,web}"), console.log("  pnpm install"), console.log("  pnpm dev"), 0;
+}, A = {
+	"data-transfer": {
+		env: "VOLTRO_DATA_TRANSFER_SECRET",
+		encoding: "base64url",
+		bytes: 32,
+		note: "gates POST /_voltro/admin/{export,import} (≥16 required; 32 = strong margin)"
+	},
+	session: {
+		env: "VOLTRO_SESSION_SECRET",
+		encoding: "base64url",
+		bytes: 32,
+		note: "signs session cookies (signSession/verifySession)"
+	},
+	"bundle-key": {
+		env: "VOLTRO_BUNDLE_KEY",
+		encoding: "base64url",
+		bytes: 32,
+		note: "encrypts .vbundle exports (voltro data export --encrypt)"
+	},
+	"field-encryption": {
+		env: "VOLTRO_FIELD_ENCRYPTION_KEY",
+		encoding: "hex",
+		bytes: 32,
+		note: "encrypts .encrypted() columns — a raw 64-hex AES-256 key (no KDF)"
+	},
+	storage: {
+		env: "VOLTRO_STORAGE_SECRET",
+		encoding: "base64url",
+		bytes: 32,
+		note: "signs storage grant tokens (private-file pre-auth)"
+	},
+	inspect: {
+		env: "VOLTRO_INSPECT_TOKEN",
+		encoding: "base64url",
+		bytes: 32,
+		note: "bearer token for /_voltro/inspect/*"
+	},
+	webhook: {
+		env: "VOLTRO_WEBHOOK_SECRET_<ID>",
+		encoding: "base64url",
+		bytes: 32,
+		note: "HMAC secret an incoming *.webhook.tsx receiver verifies signatures with"
+	}
+}, j = {
+	transfer: "data-transfer",
+	bundle: "bundle-key",
+	field: "field-encryption",
+	"session-secret": "session"
+}, M = () => {
+	let { publicKey: e, privateKey: t } = g("ed25519", {
+		publicKeyEncoding: {
+			type: "spki",
+			format: "pem"
+		},
+		privateKeyEncoding: {
+			type: "pkcs8",
+			format: "pem"
+		}
+	});
+	return {
+		publicKey: String(e).trimEnd(),
+		privateKey: String(t).trimEnd()
+	};
+}, N = async (r) => {
+	let i = e(r, ["--bytes"]), a = i[0] ?? "generate";
+	if (a === "help" || r.includes("--help") || r.includes("-h")) return console.log("voltro secret generate [purpose] [--bytes <n>] [--raw]"), console.log("  no purpose  → a fresh base64url secret (default 32 bytes)"), console.log("  purpose     → the right env var + format for that secret, as `NAME=value` (‑‑raw = value only)"), console.log("voltro secret list                        # the framework secret env vars this can generate"), console.log("voltro secret keypair                     # an Ed25519 license signing keypair (private + public PEM)"), console.log(""), console.log("purposes: " + Object.keys(A).join(", ")), console.log("Encrypted per-environment secret storage lives in Voltro Cloud — see `voltro cloud`."), 0;
+	if (a === "list") {
+		let e = Math.max(...Object.values(A).map((e) => e.env.length));
+		for (let [t, n] of Object.entries(A)) console.log(`${n.env.padEnd(e)}  ${t.padEnd(16)} ${n.note}`);
+		return 0;
+	}
+	if (a === "keypair") {
+		let { publicKey: e, privateKey: t } = M();
+		return console.log("VOLTRO_LICENSE_SIGNING_KEY (Ed25519 private, cloud-only — signs licenses, NEVER ship):"), console.log(t), console.log(""), console.log("VOLTRO_LICENSE_PUBLIC_KEY (Ed25519 public — ship to apps for offline verify):"), console.log(e), console.error("# Ed25519 license keypair (@voltro/plugin-licensing). Keep the private key secret in the cloud; the public key is safe to embed in apps."), 0;
+	}
+	if (a !== "generate") return console.error(`voltro secret: unknown subcommand "${a}" (try: generate, keypair, list, help)`), 1;
+	let o = i[1];
+	if (o) {
+		let e = A[j[o] ?? o];
+		if (!e) return console.error(`voltro secret generate: unknown purpose "${o}" (try: ${Object.keys(A).join(", ")}, or omit for a generic secret)`), 1;
+		let t = _(e.bytes).toString(e.encoding);
+		return console.log(r.includes("--raw") ? t : `${e.env}=${t}`), console.error(`# ${e.note}. Add to your environment (a lower env's value MUST differ from prod); never commit it.`), 0;
+	}
+	let s = n(r, "--bytes") ? Number(t(r, "--bytes")) : 32;
+	return !Number.isInteger(s) || s < 16 || s > 1024 ? (console.error("voltro secret generate: --bytes must be an integer in [16, 1024]"), 1) : (console.log(_(s).toString("base64url")), 0);
+}, P = async (e) => e[0] === "plan" ? D(e.slice(1)) : (console.log("Deploy a Voltro project:"), console.log(""), console.log("  Plan        →  voltro deploy plan         (auto-detect the target tier per app + function)"), console.log("  Self-host   →  voltro baseline set helm   (or `compose`), then your CI/CD"), console.log("                 ships the generated chart/images. See the Deployment docs."), console.log("  Managed     →  voltro cloud deploy        (Voltro Cloud control plane)"), console.log("  Serverless  →  voltro serverless deploy   (*.serverless.ts → self-host / Cloudflare / Scaleway)"), console.log("  Static      →  voltro static deploy       (./dist → Cloudflare Pages / S3 / Netlify)"), 0), F = async (e) => (console.log("Voltro collects no telemetry."), console.log("There is no anonymous usage reporting, no phone-home, and nothing to opt out of."), console.log("Diagnostics stay local: `voltro logs`, `voltro traces`, and the `/_voltro/inspect/*` surface."), 0);
+//#endregion
+export { P as runDeploy, k as runInit, N as runSecret, F as runTelemetry };

package/dist/migrate-CBwOt_iV.js

@@ -0,0 +1,83 @@
+import { t as e } from "./cliError-BmdYnghb.js";
+import { r as t } from "./dialectDriver-CgXnDfec.js";
+import { a as n, r } from "./connectionConfig-UFlIEiys.js";
+import { n as i, o as a, y as o } from "./frameworkTableAssembly-DkkP6BgC.js";
+import { t as s } from "./cliRuntime-Dh7UDinH.js";
+import { join as c, relative as l, resolve as u } from "node:path";
+import { pathToFileURL as d } from "node:url";
+import { Effect as f } from "effect";
+import { runMigrate as p } from "@voltro/database/sql";
+import { actorsTable as m, registerCoreTables as h } from "@voltro/database";
+import { FileSystem as g } from "@effect/platform";
+//#region src/migrate.ts
+var _ = /* @__PURE__ */ new Set([
+	"node_modules",
+	"dist",
+	"build",
+	".turbo",
+	".vite",
+	".next",
+	".git"
+]), v = /\.entity\.ts$|\.schema\.ts$|^schema\.ts$/, y = (e) => f.gen(function* () {
+	let t = yield* g.FileSystem, n = [], r = (e) => f.gen(function* () {
+		let i = yield* t.readDirectory(e).pipe(f.orElseSucceed(() => []));
+		for (let a of i) {
+			if (_.has(a)) continue;
+			let i = c(e, a), o = yield* t.stat(i).pipe(f.orElseSucceed(() => null));
+			o && (o.type === "Directory" ? yield* r(i) : o.type === "File" && v.test(a) && n.push(i));
+		}
+	});
+	return yield* r(e), n;
+}), b = (e) => typeof e == "object" && !!e && "tableName" in e && "fields" in e && "isReactive" in e && typeof e.tableName == "string", x = (e) => f.gen(function* () {
+	let t = [];
+	for (let n of e) {
+		let e = yield* f.promise(() => import(d(n).href));
+		for (let n of Object.values(e)) b(n) && t.push(n);
+	}
+	return t;
+}), S = (e) => f.gen(function* () {
+	yield* f.logInfo("starting migration", { root: e });
+	let t = yield* y(e);
+	if (t.length === 0) return yield* f.logError("no schema files found", {
+		hint: "looked for *.entity.ts / *.schema.ts / schema.ts under the project root",
+		root: e
+	}), 1;
+	yield* f.logInfo(`discovered ${t.length} schema file(s)`, { files: t.map((t) => l(e, t)) });
+	let n = yield* x(t), r = yield* f.promise(() => i({ root: e })), s = [...n, ...r];
+	if (yield* f.logInfo(`tables to apply: ${s.length}`, {
+		user: n.map((e) => e.tableName),
+		framework: r.map((e) => e.tableName)
+	}), s.length === 0) return yield* f.logWarning("no table descriptors discovered, nothing to apply"), 0;
+	s.some((e) => e.tableName === "actors") || (s = [m, ...s]);
+	let c = new Map(s.map((e) => [e.tableName, e])), u = c.get("actors"), d = c.get("tenants");
+	(u !== void 0 || d !== void 0) && h({
+		...u === void 0 ? {} : { actors: () => u },
+		...d === void 0 ? {} : { tenants: () => d }
+	});
+	let g = yield* f.promise(() => w()), _ = g.makeSqlLayer(C());
+	yield* f.promise(() => p(s, _, g.id));
+	let v = yield* f.promise(() => a(e)), b = [], S = yield* o(v, (e, t) => {
+		b.push({
+			message: e,
+			fields: t ?? {}
+		});
+	}).pipe(f.provide(_), f.match({
+		onFailure: (e) => e,
+		onSuccess: () => void 0
+	}));
+	for (let e of b) yield* f.logInfo(e.message, e.fields);
+	return S === void 0 ? (yield* f.logInfo(`applied ${s.length} table(s) to ${g.id}`, {
+		count: s.length,
+		dialect: g.id
+	}), 0) : (yield* f.logError("a plugin migration FAILED — the tables were created, the plugin steps were not", { error: S instanceof Error ? S.message : String(S) }), 1);
+}), C = () => (r() && console.warn("voltro migrate: no DB_URL/DB_HOST set — defaulting to postgres://app@localhost:5432/app"), n("migration")), w = async () => {
+	let n = (process.env.DB_DIALECT ?? "postgres").toLowerCase();
+	if (n === "memory") throw new e("voltro migrate: cannot migrate against an in-memory store. Set DB_DIALECT to one of: postgres, sqlite, mysql, mariadb, mssql, turso.");
+	return t(n);
+}, T = async (e) => {
+	if (e.includes("--create-only")) return s(S(u(e.find((e) => !e.startsWith("-")) ?? process.cwd())), { scope: "voltro:migrate" });
+	let { runDbCommand: t } = await import("./dbCommand-CpdKLeQq.js");
+	return t(["apply", ...e]);
+};
+//#endregion
+export { T as runMigrateCommand };

package/dist/mssqlClusterPatch-_4cE_nun.js

@@ -0,0 +1,44 @@
+import { dirname as e, join as t, resolve as n } from "node:path";
+import { existsSync as r, promises as i } from "node:fs";
+import { fileURLToPath as a } from "node:url";
+//#region src/mssqlClusterPatch.ts
+var o = "@effect/cluster@0.60.0", s = "@effect__cluster@0.60.0.patch", c = `patches/${s}`, l = e(a(import.meta.url)), u = [n(l, "..", "templates", "patches", s), n(l, "..", "..", "templates", "patches", s)], d = async () => {
+	for (let e of u) if (r(e)) return i.readFile(e, "utf8");
+	throw Error(`@effect/cluster patch asset not found (looked in: ${u.join(", ")}). This is a packaging bug — the CLI should ship it under templates/patches/.`);
+}, f = (e) => RegExp(`['"]?${o.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}['"]?\\s*:`).test(e), p = (e) => {
+	if (f(e)) return null;
+	let t = `  '${o}': ${c}`, n = /^patchedDependencies:[ \t]*\n/m;
+	return n.test(e) ? e.replace(n, (e) => `${e}${t}\n`) : `${e}${e.endsWith("\n") ? "" : "\n"}\npatchedDependencies:\n${t}\n`;
+}, m = (i) => {
+	let a = n(i);
+	for (let n = 0; n < 12; n++) {
+		if (r(t(a, "pnpm-workspace.yaml"))) return a;
+		let n = e(a);
+		if (n === a) break;
+		a = n;
+	}
+	return null;
+}, h = async (e) => {
+	let t = m(e);
+	if (!t) return null;
+	let n = await g(t);
+	return n.fullyWired ? null : `mssql + durable cluster workflows need the @effect/cluster patch, which a plain install cannot carry. Run \`voltro add mssql\` then \`pnpm install\` to wire it (missing: ${[n.patchFilePresent ? null : c, n.pnpmEntryPresent ? null : "patchedDependencies in pnpm-workspace.yaml"].filter(Boolean).join(" + ")}). Without it, workflow message/runner storage misbehaves on SQL Server.`;
+}, g = async (e) => {
+	let n = r(t(e, c)), a = t(e, "pnpm-workspace.yaml"), o = r(a) && f(await i.readFile(a, "utf8"));
+	return {
+		patchFilePresent: n,
+		pnpmEntryPresent: o,
+		fullyWired: n && o
+	};
+}, _ = async (n) => {
+	let a = [], s = t(n, c), l = await d();
+	(r(s) ? await i.readFile(s, "utf8") : null) !== l && (await i.mkdir(e(s), { recursive: !0 }), await i.writeFile(s, l, "utf8"), a.push(`patch file → ${c}`));
+	let u = t(n, "pnpm-workspace.yaml");
+	if (r(u)) {
+		let e = p(await i.readFile(u, "utf8"));
+		e !== null && (await i.writeFile(u, e, "utf8"), a.push(`patchedDependencies['${o}'] → pnpm-workspace.yaml`));
+	}
+	return a;
+};
+//#endregion
+export { h as n, _ as t };