@voltro/cli 0.33.0 → 0.34.0

package/dist/serveCommand-B_isw7q4.js

@@ -0,0 +1,1647 @@
+import { t as e } from "./nodeEnvironment-cGFAj1J8.js";
+import { t } from "./frameworkInspectState-CX2250XB.js";
+import { r as n, t as r } from "./appModuleLoader-C9r9mxZt.js";
+import { n as i, t as a } from "./startupRunner-DPGFchOa.js";
+import { $ as o, $t as s, A as c, At as l, B as u, Bt as d, C as ee, Ct as f, D as te, Dt as p, E as ne, Et as re, F as ie, G as ae, Gt as oe, H as m, Ht as se, It as ce, J as le, Jt as ue, K as de, Kt as fe, L as pe, Lt as h, M as g, Mt as _, N as me, O as he, Ot as ge, P as _e, Pt as ve, Q as ye, Qt as be, R as xe, Rt as Se, S as v, St as Ce, T as we, Tt as Te, U as Ee, Ut as De, V as Oe, Vt as ke, W as Ae, Wt as y, X as je, Xt as Me, Y as b, Yt as Ne, Z as x, Zt as Pe, _ as Fe, _t as Ie, an as Le, at as Re, b as ze, bt as Be, c as Ve, cn as S, ct as He, dn as C, dt as Ue, en as We, et as Ge, f as Ke, fn as qe, ft as Je, g as Ye, gt as Xe, h as Ze, ht as Qe, i as $e, in as et, it as tt, j as nt, jt as w, k as rt, kt as it, ln as T, lt as at, m as ot, mt as st, nn as ct, nt as lt, o as E, on as ut, ot as dt, p as ft, pt, q as mt, qt as D, r as ht, rn as gt, rt as _t, st as O, t as k, tn as vt, tt as A, u as yt, un as bt, ut as xt, v as St, vt as Ct, w as wt, wt as Tt, x as Et, xt as Dt, y as Ot, yt as kt, z as At, zt as jt } from "./dev-CerMd0mW.js";
+import { n as Mt } from "./cliArgs-D4p8n7EE.js";
+import { r as Nt } from "./appPort-B_HpJ_ck.js";
+import { at as Pt, nt as j, st as M } from "./webDev-CBYvPqQr.js";
+import { r as N } from "./dialectDriver-CgXnDfec.js";
+import { n as Ft } from "./connectionConfig-UFlIEiys.js";
+import { c as It, n as Lt, o as Rt } from "./seedRunner-TFHHiToI.js";
+import { C as zt, S as Bt, _ as Vt, g as P, m as Ht, r as Ut, v as Wt } from "./frameworkTableAssembly-DkkP6BgC.js";
+import { S as Gt, c as Kt, n as F, p as qt, s as Jt, x as Yt } from "./fileConventions-Cof68_BL.js";
+import { h as Xt, o as Zt } from "./inspect-CBqFtAKA.js";
+import { n as Qt } from "./mssqlClusterPatch-_4cE_nun.js";
+import { i as $t, n as en, r as tn, t as nn } from "./webhookDiscovery-D7VaeMlz.js";
+import { t as rn } from "./inspectMetrics-CfdKLh6t.js";
+import { r as an, u as on } from "./apiBuild-DZF_f0_I.js";
+import { t as sn } from "./bootTiming-BdyP9nYw.js";
+import { t as cn } from "./dataProfile-dW-PsfLB.js";
+import { basename as ln, join as un } from "node:path";
+import { existsSync as dn } from "node:fs";
+import { pathToFileURL as fn } from "node:url";
+import { createLogger as I } from "@voltro/logger";
+import { AuthMiddleware as pn, ConnectionInfoMiddleware as mn, actionToRpc as L, anonymousSubject as hn, isWireReachable as gn, mutationToRpc as _n, queryToRpc as R, streamToRpc as vn, workflowCancelDescriptor as z, workflowDomainEventsQueryDescriptor as yn, workflowEventDeliveriesQueryDescriptor as B, workflowResumeDescriptor as V, workflowRunEventsQueryDescriptor as H, workflowRunQueryDescriptor as bn, workflowRunStepsQueryDescriptor as xn, workflowRunsQueryDescriptor as Sn, workflowSignalDescriptor as Cn, workflowUpdateDescriptor as wn } from "@voltro/protocol";
+import { Cause as Tn, Effect as U, Layer as W, ManagedRuntime as En } from "effect";
+import { SqlClient as Dn } from "@effect/sql";
+import { declaredSnapshot as On, describeOutcome as kn, pendingFileMigrationIds as An, runPlannedMigrations as jn } from "@voltro/database/sql";
+import { RpcGroup as Mn } from "@effect/rpc";
+import { allRegisteredTables as Nn, and as G, connectionIdentity as Pn, ensureTableRegistered as Fn, eq as K, or as In } from "@voltro/database";
+import { AggregateRegistry as Ln, CostRegistry as Rn, DORMANCY_WAKEUP_TENANT as zn, Dispatcher as q, ExpectationRegistry as Bn, ExperimentRegistry as Vn, apiKeyManagementRoutes as Hn, attachAnalyticsMirror as Un, attachExpectations as Wn, attachExperiments as Gn, attachFinops as Kn, awaitServerListening as qn, bindMutation as J, bindStream as Jn, bindSubscription as Y, buildTracingLayer as Yn, cancelWakeup as Xn, compileCron as Zn, dataStoreApiKeyStore as Qn, formatServerOnlyLeaks as $n, formatUnresolvedSources as er, frameworkApiKeyStrategy as tr, installPolicyGuardResolver as nr, loadResourceTuples as rr, makeActionRunner as ir, makeAdvisoryLockCoordinator as ar, makeApiKeyService as or, makeApiKeyUsageBuffer as sr, makeApiKeyUsageFlusher as cr, makeAsyncKv as lr, makeAuthMiddlewareLayers as ur, makeCoordinatedScheduler as dr, makeEffectStoreLayer as fr, makeLazyWorkflowFacade as pr, makeMutationOutputCodec as mr, makeMutationRunner as hr, makeOneShotQueryRunner as gr, makeQueryDescriptorProducer as _r, makeQueryFinalizer as vr, makeQueryReauthorizer as yr, makeQuerySubscriber as br, makeSchemaRegistry as xr, makeWorkflowFacade as X, makeWorkflowFacadeWithCallerContext as Sr, makeWorkflowLayers as Cr, noopKv as wr, onProcessShutdown as Tr, recordSubscriptionDelivery as Er, recordWorkflowRun as Z, registerWakeup as Dr, resolveSecretsBackend as Or, runProvidedEffect as kr, setSecretsBackend as Ar, setSystemStoreHandle as jr, setTupleSource as Mr, singleCoordinator as Nr, startRpcServer as Pr, startScheduler as Fr, stripForbiddenForWire as Ir, unresolvedSources as Lr, workflowToRpc as Rr, wrapStoreWithBootCodec as zr } from "@voltro/runtime";
+import { appStorageProvider as Br, fromNodeReadable as Vr, getObjectStream as Hr, putObjectStream as Ur, toNodeReadable as Wr } from "@voltro/plugin-storage";
+import { isEnvContract as Gr } from "@voltro/env";
+import { assertProductionSessionSecret as Kr } from "@voltro/protocol/session";
+import { createHash as qr, timingSafeEqual as Jr } from "node:crypto";
+import { buildDeliverWebhookExecute as Yr, buildWebhooksService as Xr, defaultIncomingPath as Zr, deliverWebhookWorkflow as Qr, makeDeferredEmitHandler as $r, mountIncomingWebhook as ei } from "@voltro/plugin-webhooks";
+import { getAuthSessionStrategy as ti } from "@voltro/plugin-auth";
+import { registerEmailTemplates as ni } from "@voltro/plugin-mail";
+import { channelFor as ri, getBroadcastPlugin as ii } from "@voltro/plugin-broadcast";
+import { packBundle as ai, runExport as oi, runImport as si, storageBlobSink as ci, storageRefsBlobSource as li, unpackBundle as ui, unpackBundleToDir as di } from "@voltro/data-transfer";
+//#region src/dbPoolReport.ts
+var fi = (e, t, n = [], r = 0) => {
+	let i = n.length, a = 1 + Math.max(0, r), o = e === void 0 ? void 0 : e * a + i, s = o !== void 0 && t !== void 0 ? o * t : void 0, c = i === 0 ? " No connections outside the pool in this process." : ` PLUS ${i} outside the pool (${n.map((e) => e.reason).join("; ")}) — those do not come out of the pool budget, they come out of the DATABASE's.`, l = r > 0 ? ` This process opens ${a} pools of that size — 1 primary + ${r} read replica(s) (DB_REPLICA_URLS), each with its own DB_MAX_CONNECTIONS.` : "";
+	if (e === void 0) return "db pool: max per replica UNSET (DB_MAX_CONNECTIONS) — each replica opens the driver's default pool, so the fleet total is that default × replicas. Set DB_MAX_CONNECTIONS so the total stays under your database's connection limit; the pool scales with replicaCount and the database does not." + l + c + pi;
+	let u = (r > 0 ? `max × ${a}` : "max") + (i === 0 ? "" : ` + ${i}`), d = r === 0 ? i === 0 ? "" : ` + ${i} = ${o}` : ` → ${u} = ${o} per pod`, ee = r === 0 && i === 0 ? "max" : `(${u})`;
+	return `db pool: max=${e} per replica (DB_MAX_CONNECTIONS)` + d + (s === void 0 ? ` — the fleet opens up to ${ee} × replicas connections. Check that against your database's limit before raising replicaCount.` : ` × ${t} replicas = up to ${s} connections. Check that against your database's limit.`) + l + c + pi;
+}, pi = " A rolling update runs BOTH generations at once, so budget for (replicas + surge), not replicas — a surge pod that cannot get a connection crashloops, and a rollout that never completes cannot free the connections it is waiting for.", mi = (e = process.env) => {
+	let t = e.REPLICA_COUNT;
+	if (t === void 0 || t === "") return;
+	let n = Number(t);
+	return Number.isInteger(n) && n > 0 ? n : void 0;
+}, hi = "/_voltro/admin/import", gi = "/_voltro/admin/export", Q = (e, t) => ({
+	status: e,
+	contentType: "application/json; charset=utf-8",
+	body: JSON.stringify(t)
+}), _i = (e) => {
+	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
+	return n ? n[1] : null;
+}, vi = (e, t) => Jr(qr("sha256").update(e).digest(), qr("sha256").update(t).digest()), yi = (e, t) => {
+	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
+	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
+	let n = _i(e.headers);
+	return !n || !vi(n, t) ? Q(401, { error: "unauthorized" }) : null;
+}, bi = I({ scope: "voltro:admin-import" }), xi = "VBUNDLE2", Si = async function* (e) {
+	yield e;
+}, Ci = (e) => async (t) => {
+	let n = yi(t, e.secret);
+	if (n) return n;
+	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === xi, c, l;
+	if (s) c = Si(t.rawBody), l = "upload";
+	else {
+		let n;
+		try {
+			n = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
+		} catch {
+			return Q(400, { error: "body must be a packed bundle archive or { bundleKey } JSON" });
+		}
+		if (typeof n.bundleKey != "string" || !n.bundleKey) return Q(400, { error: "body.bundleKey (string) is required for the storage transport" });
+		if (!e.openArchive) return Q(501, { error: "storage transport not configured on this instance" });
+		c = e.openArchive(n.bundleKey), l = "storage";
+	}
+	let u = await import("node:os"), d = await import("node:fs/promises"), ee = await import("node:path"), f = await d.mkdtemp(ee.join(u.tmpdir(), "voltro-admin-import-"));
+	try {
+		e.assetSink ? await ui(c, {
+			dir: f,
+			blobs: e.assetSink
+		}) : await di(c, f);
+		let t = await U.runPromiseExit(si({
+			store: e.store,
+			bundleDir: f,
+			...r ? { mode: r } : {},
+			...i ? { onConflict: i } : {},
+			...a ? { atomic: a } : {},
+			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
+			force: o,
+			onWarn: (e) => bi.warn("admin.import", { message: e }),
+			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
+		}));
+		if (t._tag === "Failure") {
+			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
+			if (e && e._tag === "SchemaDriftError") {
+				let t = e;
+				return bi.warn("admin.import refused (schema drift)", {
+					transport: l,
+					bundle: t.bundleFingerprint.slice(0, 16),
+					target: t.targetFingerprint.slice(0, 16)
+				}), Q(409, {
+					error: "schema drift",
+					bundleFingerprint: t.bundleFingerprint,
+					targetFingerprint: t.targetFingerprint,
+					diff: t.diff,
+					hint: "re-export against the current schema, or resend with x-import-force: 1"
+				});
+			}
+			throw Error(String(e?.message ?? e ?? "import failed"));
+		}
+		let n = t.value, s = n.tables.reduce((e, t) => e + t.rowCount, 0);
+		return bi.info("admin.import", {
+			transport: l,
+			tables: n.tables.length,
+			rows: s,
+			mode: r ?? "upsert",
+			atomic: a
+		}), Q(200, {
+			tables: n.tables.length,
+			rows: s,
+			transport: l
+		});
+	} catch (e) {
+		return bi.warn("admin.import failed", {
+			transport: l,
+			error: e?.message ?? String(e)
+		}), Q(500, {
+			error: "import failed",
+			message: e?.message ?? String(e)
+		});
+	} finally {
+		await d.rm(f, {
+			recursive: !0,
+			force: !0
+		});
+	}
+}, wi = I({ scope: "voltro:admin-export" }), Ti = async (e) => {
+	let t = [];
+	for await (let n of e) t.push(Buffer.from(n));
+	return new Uint8Array(Buffer.concat(t));
+}, Ei = (e) => typeof e.tenant == "string" && e.tenant ? {
+	kind: "tenant",
+	tenantId: e.tenant
+} : Array.isArray(e.tables) && e.tables.length ? {
+	kind: "tables",
+	tables: e.tables.filter((e) => typeof e == "string")
+} : { kind: "all" }, Di = (e) => async (t) => {
+	let n = yi(t, e.secret);
+	if (n) return n;
+	let r;
+	try {
+		r = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
+	} catch {
+		return Q(400, { error: "body must be JSON: { profile?, tenant?, tables?, consistency?, compression?, bundleKey? }" });
+	}
+	let i = {};
+	if (typeof r.profile == "string" && r.profile) {
+		if (!e.loadProfile) return Q(501, { error: "server-side profiles not configured on this instance" });
+		try {
+			i = await e.loadProfile(r.profile);
+		} catch (e) {
+			return Q(400, {
+				error: `profile '${r.profile}' could not be loaded`,
+				message: e?.message ?? String(e)
+			});
+		}
+	}
+	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? Ei(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), ee = await import("node:path"), f = await d.mkdtemp(ee.join(u.tmpdir(), "voltro-admin-export-"));
+	try {
+		let t = await U.runPromise(oi({
+			store: e.store,
+			snapshot: e.snapshot,
+			dialect: e.dialect,
+			outDir: f,
+			...i.subset ? { subset: i.subset } : {
+				scope: s,
+				...e.tenantTables && e.tenantTables.length > 0 ? { tenantTables: e.tenantTables } : {}
+			},
+			consistency: a,
+			...o ? { compression: o } : {},
+			...i.masking ? { masking: i.masking } : {}
+		})), n = t.tables.reduce((e, t) => e + t.rowCount, 0), u = t.masking?.transformed.length ?? 0;
+		if (c) {
+			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
+			let i = r.bundleKey;
+			return await e.putArchive(i, () => ai({
+				dir: f,
+				...l
+			})), wi.info("admin.export", {
+				transport: "storage",
+				tables: t.tables.length,
+				rows: n,
+				masked: u,
+				bundleKey: i
+			}), Q(200, {
+				bundleKey: i,
+				tables: t.tables.length,
+				rows: n,
+				masked: u,
+				transport: "storage"
+			});
+		}
+		let d = await Ti(ai({
+			dir: f,
+			...l
+		}));
+		return wi.info("admin.export", {
+			transport: "download",
+			tables: t.tables.length,
+			rows: n,
+			masked: u,
+			bytes: d.byteLength
+		}), {
+			status: 200,
+			contentType: "application/octet-stream",
+			body: d,
+			headers: {
+				"x-export-tables": String(t.tables.length),
+				"x-export-rows": String(n),
+				"x-export-masked": String(u)
+			}
+		};
+	} catch (e) {
+		return wi.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
+			error: "export failed",
+			message: e?.message ?? String(e)
+		});
+	} finally {
+		await d.rm(f, {
+			recursive: !0,
+			force: !0
+		});
+	}
+}, Oi = (e, t, n = {}) => (async function* () {
+	let r = await Wr((await U.runPromise(Hr(e, t).pipe(U.timeout(n.openTimeout ?? "30 seconds")))).stream), i = n.stallMs ?? 12e4, a, o = () => {
+		a && clearTimeout(a), a = setTimeout(() => r.destroy(/* @__PURE__ */ Error(`storage read stalled for ${i}ms reading '${t}'`)), i);
+	};
+	try {
+		o();
+		for await (let e of r) o(), yield e instanceof Uint8Array ? e : new Uint8Array(e);
+	} finally {
+		a && clearTimeout(a), r.destroy();
+	}
+})(), ki = {
+	get: async () => void 0,
+	set: async () => {},
+	setWithTags: async () => {},
+	remove: async () => !1,
+	has: async () => !1,
+	clear: async () => {},
+	invalidateTag: async () => 0,
+	wrap: async (e, t, n) => n()
+}, Ai = async (e) => {
+	_(e.appProcedures ?? e.discovered, {
+		defaultDeny: e.security?.defaultDeny ?? !0,
+		commandHint: "`voltro serve`"
+	}), jr({
+		dataStore: e.store,
+		schemaRegistry: e.schemaRegistry
+	});
+	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new q({
+		store: e.store,
+		...e.snapshotCache ? { cache: e.snapshotCache } : {},
+		...t ? { recordCost: (e) => n?.record(e) } : {},
+		recordDelivery: (e) => Er({
+			label: e.label,
+			kind: e.kind,
+			durationMs: e.durationMs,
+			rowCount: e.rowCount
+		})
+	}), i = e.cache ?? ki, a = e.kv ?? wr, o, ee = () => void 0, f, te, p, ne, ie, ae, oe, se = Se({
+		store: e.store,
+		warn: (e, t) => {
+			process.stderr.write(`[workflow] ${e} ${JSON.stringify(t)}\n`);
+		}
+	}), ce = se.remember, de = se.resolve, fe = jt({
+		authority: e.authority,
+		getStore: () => e.store
+	}), h = (e.discovered.workflows?.length ?? 0) > 0 ? pr(() => o) : void 0, he = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ge = he || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", _e = e.tenantIsolation === "namespace", ve = (e.log ?? I({ scope: "voltro:serve" })).child("webhooks"), ye, be, v = e.discovered.webhooks;
+	if (v && v.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
+		e.workflowEngineLayer;
+		let t = vt({
+			store: e.store,
+			schemaRegistry: e.schemaRegistry,
+			cache: i,
+			kv: a
+		}), n = v.outgoing.map((e) => e.descriptor);
+		be = Qr.toLayer(Yr(t, { events: n })), ye = Xr(t, async (e) => {
+			let t = p;
+			if (t === void 0) {
+				ve.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
+					deliveryId: e.deliveryId,
+					targetId: e.targetId
+				});
+				return;
+			}
+			t.runPromise(Qr.execute(e)).catch((t) => {
+				ve.error("deliverWebhook workflow crashed", {
+					deliveryId: e.deliveryId,
+					targetId: e.targetId
+				}, t);
+			});
+		}, { events: n });
+	}
+	let Ce = /* @__PURE__ */ new Map();
+	if (v) for (let e of v.incoming) {
+		let t = e.descriptor.path ?? Zr(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = ei(e.descriptor, {
+			resolveSecret: async () => process.env[n] ?? null,
+			resolveWorkflows: () => h === void 0 ? void 0 : Sr(h, {
+				traceId: `incoming:${e.descriptor.id}`,
+				source: `incoming:${e.descriptor.id}`
+			}),
+			log: (e) => {
+				let t = {
+					webhookId: e.webhookId,
+					status: e.status,
+					signatureOk: String(e.signatureOk),
+					idempotency: e.idempotency,
+					durationMs: e.durationMs
+				};
+				e.status >= 500 ? ve.error("incoming delivery failed", t) : e.status >= 400 ? ve.warn("incoming delivery rejected", t) : ve.info("incoming delivery handled", t);
+			}
+		});
+		Ce.set(t, { handle: r });
+	}
+	nr(), Mr((t) => rr(e.store, t.subjectId, t.resourceType, t.resourceId));
+	let we = [], Ee = [...e.discovered.outboxHandlers ?? [], ...en((v?.outgoing.length ?? 0) + (v?.incoming.length ?? 0) + (v?.providers.length ?? 0), []) ? [{
+		file: "<framework>/webhooks",
+		id: "voltro-webhook-emit",
+		definition: $r(() => ye)
+	}] : []], Ne = Ee.length > 0 ? De({
+		handlers: Ee,
+		store: e.store,
+		log: (e.log ?? I({ scope: "voltro:serve" })).child("outbox"),
+		onChange: (t) => e.store.onChange((e) => t({
+			table: e.table,
+			op: e.op
+		})),
+		onShutdown: (e) => {
+			we.push(e);
+		}
+	}) : void 0, x = ke({
+		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
+		store: e.store,
+		publicUrl: d(e.port ?? 4e3),
+		log: (e.log ?? I({ scope: "voltro:serve" })).child("connections")
+	});
+	rt({
+		events: e.discovered.events ?? [],
+		rpcTags: [
+			...e.discovered.queries.map((e) => e.descriptor.name),
+			...e.discovered.mutations.map((e) => e.descriptor.name),
+			...e.discovered.actions.map((e) => e.descriptor.name),
+			...(e.discovered.streams ?? []).map((e) => e.descriptor.name)
+		]
+	});
+	let Pe = (e.log ?? I({ scope: "voltro:serve" })).child("events"), Ie = e.broadcastNamespace ?? Ze(e.plugins, void 0), Le = Ye(e.plugins, Ie, Pe), ze = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Ve = e.membership ?? Fe(e.plugins, {
+		instanceId: ze,
+		namespace: Ie,
+		meta: { mode: "serve" },
+		logger: Pe
+	}), S = c({
+		events: e.discovered.events ?? [],
+		origin: ze,
+		...Le.publishRemote === void 0 ? {} : { publishRemote: Le.publishRemote }
+	}), He = (e.discovered.events ?? []).length > 0 ? await Le.attach(S.bus) : null, C = We({
+		store: e.store,
+		schemaRegistry: e.schemaRegistry,
+		cache: i,
+		kv: a,
+		...ye === void 0 ? {} : { webhooksService: ye },
+		...h === void 0 ? {} : { workflowsProxy: h },
+		eventTriggers: e.discovered.eventTriggers ?? [],
+		namespaceIsolationOn: _e,
+		...Ne === void 0 ? {} : { outbox: { nudge: Ne.nudge } },
+		...x.active ? { connections: { registry: x.registry } } : {},
+		eventBus: S.bus
+	}), Ge = W.succeed(Ln, Dt), Ke = W.succeed(Bn, Qe), qe = W.succeed(Rn, st), Je = W.succeed(Vn, Xe), $e = (t, n) => {
+		let r = t.pipe(U.provide(fr(n)));
+		return (e.baseLayer ? r.pipe(U.provide(e.baseLayer)) : r).pipe(U.provide(Ge)).pipe(U.provide(Ke)).pipe(U.provide(qe)).pipe(U.provide(Je));
+	}, et = (e, t) => kr($e(e, t)), w = rn(), T = Ae(e.plugins ?? [], w), at = pe({
+		plugins: e.plugins ?? [],
+		metrics: w,
+		log: e.log ?? I({ scope: "voltro:serve" })
+	}), ot = m(e.plugins ?? [], w), ct = hr({
+		store: e.store,
+		recordMetric: (e) => {
+			w.record(e);
+		},
+		...T.mutation === void 0 ? {} : { interceptor: T.mutation },
+		buildContext: (e, t, n) => C(e, t, n),
+		runEffect: et,
+		undoCapture: b()
+	}), lt = le();
+	{
+		let t = je();
+		t !== void 0 && (e.log ?? I({ scope: "voltro:serve" })).info(t);
+	}
+	let E = mt({
+		store: e.store,
+		...e.approvals === void 0 ? {} : { defaultExpiryMs: e.approvals.defaultExpiryMs }
+	}), ut = ir({
+		buildContext: (e) => C(e),
+		runEffect: et,
+		recordMetric: (e) => {
+			w.record(e);
+		},
+		...T.action === void 0 ? {} : { interceptor: T.action }
+	}), ft = vr({
+		tenantScopedTables: e.tenantScopedTables,
+		softDeleteScopedTables: e.softDeleteScopedTables
+	}), pt = {
+		buildContext: (e) => C(e),
+		finalize: (e, t) => ft(e, t.subject),
+		provideEffect: $e,
+		...T.query === void 0 ? {} : { interceptor: T.query }
+	}, D = _r(pt), ht = gr({
+		...pt,
+		queryRows: (t, n) => e.store.query(t).then((e) => Ir(t.table, e, n.subject))
+	}), gt = br({
+		...pt,
+		subscribeDescriptor: (e, t, n) => r.subscribe(e, t, n),
+		subscribeComputed: (e, t, n) => r.subscribeComputed(e, t, n)
+	}), k = (e) => e.filter((e) => gn(e.descriptor)), A = {};
+	for (let t of [
+		...k(e.discovered.queries),
+		...lt.queries,
+		...E.queries,
+		...x.queries
+	]) A[t.descriptor.name] = (e) => Y(D(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, yr(t, e));
+	for (let t of [
+		...k(e.discovered.mutations),
+		...lt.mutations,
+		...E.mutations,
+		...x.mutations
+	]) {
+		let n = mr(t.descriptor.output);
+		A[t.descriptor.name] = (r) => J(async (e, n) => ct(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, t.descriptor.error);
+	}
+	for (let t of [...k(e.discovered.actions), ...x.actions]) {
+		let n = mr(t.descriptor.output);
+		A[t.descriptor.name] = (r) => J(async (e, n) => ut(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, t.descriptor.error);
+	}
+	let yt = () => `public-${Math.random().toString(36).slice(2, 10)}`, xt = [
+		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+			descriptor: e.descriptor,
+			invoke: (t, n) => ht(e, t, {
+				subject: n.subject,
+				traceId: yt()
+			}),
+			subscribe: (t, n, r) => gt(e, t, {
+				subject: n.subject,
+				traceId: yt()
+			}, r)
+		})),
+		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+			descriptor: e.descriptor,
+			invoke: (t, n) => ct(e, t, {
+				subject: n.subject,
+				traceId: yt()
+			})
+		})),
+		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+			descriptor: e.descriptor,
+			invoke: (t, n) => ut(e, t, {
+				subject: n.subject,
+				traceId: yt()
+			})
+		}))
+	], St = {
+		candidates: l({
+			queries: e.discovered.queries,
+			mutations: e.discovered.mutations,
+			actions: e.discovered.actions,
+			descriptorOf: (e) => e.descriptor,
+			runQuery: (e, t, n) => Promise.resolve(ht(e, t, n)),
+			runMutation: (e, t, n) => Promise.resolve(ct(e, t, n)),
+			runAction: (e, t, n) => Promise.resolve(ut(e, t, n))
+		}),
+		policy: e.agents?.tools ?? {},
+		mcpEnabled: e.agents?.mcp === !0,
+		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject)
+	}, Ct = ue({
+		...e.restRoutes === void 0 ? {} : { restRoutes: e.restRoutes },
+		publicApiEntries: xt,
+		store: e.store,
+		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject),
+		...e.idempotency === void 0 ? {} : { idempotency: e.idempotency },
+		log: e.log ?? I({ scope: "voltro:serve" })
+	}), wt = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Tt = wt && wt.length >= 16 ? [{
+		method: "POST",
+		path: hi,
+		handle: Ci({
+			secret: wt,
+			store: e.store,
+			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
+			assetSink: ci(Br()),
+			openArchive: (e) => Oi(Br(), e)
+		})
+	}, {
+		method: "POST",
+		path: gi,
+		handle: Di({
+			secret: wt,
+			store: e.store,
+			snapshot: e.dataTransferSnapshot ?? { tables: [] },
+			dialect: e.dataTransferDialect ?? "memory",
+			tenantTables: [...e.tenantScopedTables],
+			loadProfile: cn,
+			assetSource: li(Br(), e.store),
+			putArchive: async (e, t) => {
+				let { Readable: n } = await import("node:stream"), r = Br(), i = Vr("storage", () => n.from(t()));
+				await U.runPromise(Ur(r, e, i, { contentType: "application/octet-stream" }));
+			}
+		})
+	}] : [], Et = [
+		...e.httpRoutes ?? [],
+		...Ct.httpRoutes,
+		...Tt,
+		...x.httpRoutes
+	];
+	Object.assign(A, S.handlers);
+	for (let t of k(e.discovered.streams ?? [])) A[t.descriptor.name] = (n) => Jn((r) => {
+		let i = C(r), a = t.executor(n, i);
+		if (U.isEffect(a)) {
+			let t = a.pipe(U.provide(fr(i.store)));
+			return (e.baseLayer ? t.pipe(U.provide(e.baseLayer)) : t).pipe(U.provide(Ge)).pipe(U.provide(Ke)).pipe(U.provide(qe)).pipe(U.provide(Je));
+		}
+		return typeof a == "object" && a && typeof a.then == "function" ? U.promise(() => a) : a;
+	}, `stream.${t.descriptor.name}`);
+	for (let t of e.discovered.workflows ?? []) A[t.definition.name] = (e) => J(async (e, n) => {
+		let r = n;
+		return Sr(h, {
+			subject: r.subject,
+			traceId: r.traceId,
+			source: "workflow-rpc"
+		}).start(t.definition.name, e);
+	}, e, `workflow.${t.definition.name}`);
+	he && (A[bn.name] = (e) => Y(D({
+		descriptor: bn,
+		executor: (e) => {
+			let t = e.id;
+			return {
+				table: "_voltro_workflow_runs",
+				order: [{
+					column: "startedAt",
+					direction: "desc"
+				}],
+				predicate: In(K("id", t), K("executionId", t)),
+				take: 1,
+				skip: void 0,
+				projection: void 0
+			};
+		}
+	}, e), r, `subscription.${bn.name}`), A[Sn.name] = (e) => Y(D({
+		descriptor: Sn,
+		executor: (e) => {
+			let t = e, n = [...t.tag === void 0 ? [] : [K("tag", t.tag)], ...t.status === void 0 ? [] : [K("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
+			return {
+				table: "_voltro_workflow_runs",
+				order: [{
+					column: "startedAt",
+					direction: "desc"
+				}],
+				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : G(...n),
+				take: r,
+				skip: void 0,
+				projection: void 0
+			};
+		}
+	}, e), r, `subscription.${Sn.name}`), A[xn.name] = (e) => Y(D({
+		descriptor: xn,
+		executor: (e) => {
+			let t = e.runId;
+			return {
+				table: "_voltro_workflow_run_steps",
+				order: [{
+					column: "startedAt",
+					direction: "asc"
+				}],
+				predicate: K("runId", t),
+				take: 1e3,
+				skip: void 0,
+				projection: void 0
+			};
+		}
+	}, e), r, `subscription.${xn.name}`), A[H.name] = (e) => Y(D({
+		descriptor: H,
+		executor: (e) => {
+			let t = e.runId;
+			return {
+				table: "_voltro_workflow_run_events",
+				order: [{
+					column: "occurredAt",
+					direction: "asc"
+				}],
+				predicate: K("runId", t),
+				take: 1e3,
+				skip: void 0,
+				projection: void 0
+			};
+		}
+	}, e), r, `subscription.${H.name}`), A[yn.name] = (e) => Y(D({
+		descriptor: yn,
+		executor: (e) => {
+			let t = e;
+			return {
+				table: "_voltro_workflow_events",
+				order: [{
+					column: "occurredAt",
+					direction: "desc"
+				}],
+				predicate: t.name === void 0 ? void 0 : K("name", t.name),
+				take: Math.max(1, Math.min(500, t.limit ?? 100)),
+				skip: void 0,
+				projection: void 0
+			};
+		}
+	}, e), r, `subscription.${yn.name}`), A[B.name] = (e) => Y(D({
+		descriptor: B,
+		executor: (e) => {
+			let t = e.eventId;
+			return {
+				table: "_voltro_workflow_event_deliveries",
+				order: [{
+					column: "createdAt",
+					direction: "asc"
+				}],
+				predicate: K("eventId", t),
+				take: 500,
+				skip: void 0,
+				projection: void 0
+			};
+		}
+	}, e), r, `subscription.${B.name}`), A[z.name] = (t) => J(async (t, n) => {
+		let r = t;
+		return await s(e.store, n.subject, { executionId: r.executionId }), await h.cancel(r.workflowName, r.executionId), await Ft(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
+	}, t, `action.${z.name}`), A[V.name] = (t) => J(async (t, n) => {
+		let r = t;
+		return await s(e.store, n.subject, { executionId: r.executionId }), await h.resume(r.workflowName, r.executionId), { ok: !0 };
+	}, t, `action.${V.name}`), A[Cn.name] = (t) => J(async (t, n) => {
+		let r = t;
+		return await s(e.store, n.subject, { id: r.id }), h.signal({ id: r.id }, r.signalName, r.payload);
+	}, t, `action.${Cn.name}`), A[wn.name] = (t) => J(async (t, n) => {
+		let r = t;
+		return await s(e.store, n.subject, { id: r.id }), h.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
+	}, t, `action.${wn.name}`));
+	let Ot = [
+		...k(e.discovered.queries).map((e) => R(e.descriptor)),
+		...k(e.discovered.mutations).map((e) => _n(e.descriptor)),
+		...k(e.discovered.actions).map((e) => L(e.descriptor)),
+		...lt.queries.map((e) => R(e.descriptor)),
+		...lt.mutations.map((e) => _n(e.descriptor)),
+		...E.queries.map((e) => R(e.descriptor)),
+		...E.mutations.map((e) => _n(e.descriptor)),
+		...x.queries.map((e) => R(e.descriptor)),
+		...x.mutations.map((e) => _n(e.descriptor)),
+		...x.actions.map((e) => L(e.descriptor)),
+		...k(e.discovered.streams ?? []).map((e) => vn(e.descriptor)),
+		...S.rpcs,
+		...(e.discovered.workflows ?? []).map((e) => Rr(e.definition)),
+		...he ? [
+			R(bn),
+			R(Sn),
+			R(xn),
+			R(H),
+			R(yn),
+			R(B),
+			L(z),
+			L(V),
+			L(Cn),
+			L(wn)
+		] : []
+	], kt = Mn.make(...Ot).middleware(pn).middleware(mn), Mt = ur({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), Nt = e.dormancyTenantId ?? zn, Pt = e.dormancy === "sleep" ? {
+		register: (t, n, r) => Dr(e.store, {
+			tenantId: r ?? Nt,
+			kind: "workflow",
+			refId: t,
+			wakeAt: n
+		}),
+		cancel: (t, n) => Xn(e.store, {
+			tenantId: n ?? Nt,
+			kind: "workflow",
+			refId: t
+		}).then(() => {})
+	} : void 0, j = ge ? await import("@voltro/workflow") : void 0, M = j?.makeWorkflowRunRecorder({
+		store: e.store,
+		...Pt === void 0 ? {} : { wakeups: Pt }
+	}), N = async (t, n) => {
+		await j.closeWorkflowChildrenForParent({
+			store: e.store,
+			parentExecutionId: t,
+			parentStatus: n,
+			recorder: M,
+			log: { warn: (e, t) => {
+				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+			} },
+			interruptChild: async (t, n) => {
+				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
+				if (!r) throw Error(`Unknown child workflow: ${t}`);
+				if (!p) throw Error("Workflow runtime is not ready");
+				await p.runPromise(r.definition.interrupt(n));
+			}
+		});
+	}, Ft = async (t, n, r) => {
+		let i = (await e.store.query({
+			table: "_voltro_workflow_runs",
+			order: [],
+			predicate: K("executionId", n),
+			projection: void 0,
+			skip: void 0,
+			take: 1
+		}))[0];
+		if (i === void 0) return;
+		let a = await e.store.update("_voltro_workflow_runs", i.id, {
+			status: "cancelled",
+			cancelled: !0,
+			completedAt: /* @__PURE__ */ new Date()
+		}), o = i.subject?.tenantId ?? void 0;
+		a && await M.recordEvent({
+			runId: i.id,
+			eventType: "run-cancelled",
+			payload: {
+				reason: r,
+				workflowName: t,
+				executionId: n,
+				...o == null ? {} : { tenantId: o }
+			}
+		}), a && await N(n, "cancelled");
+	}, It = [
+		...Cr(e.discovered.workflows ?? [], {
+			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? C({
+				subject: t.subject,
+				traceId: t.traceId
+			}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
+			resolveStartContext: de,
+			...fe === void 0 ? {} : { resolveAuthority: fe }
+		}, (t, n, r) => {
+			let i = j.getWorkflowVersionMetadata(t.definition);
+			return j.wrapWorkflowExecuteWithRunRecording({
+				name: t.definition.name,
+				store: e.store,
+				subject: r.subject,
+				source: r.source ?? null,
+				traceId: r.traceId,
+				workflowVersion: i.version,
+				workflowCompatibleVersions: i.compatibleWith,
+				workflowPatches: i.patches,
+				parentExecutionId: r?.parentExecutionId ?? null,
+				parentClosePolicy: r?.parentClosePolicy ?? null,
+				onParentClose: ({ executionId: e, status: t }) => N(e, t),
+				...tt(t.definition),
+				onTerminal: async ({ executionId: e }) => {
+					await te?.gate.release(e);
+				},
+				recorder: M,
+				pluginWorkflowStepLayer: ot,
+				recordRun: Z
+			}, n);
+		}),
+		...e.discovered.workflowWorkers ?? [],
+		...be === void 0 ? [] : [be]
+	], Lt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...be === void 0 ? [] : ["voltro.deliverWebhook"]], Rt = It.length > 0 ? W.mergeAll(...It) : W.empty;
+	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || be !== void 0) && e.workflowEngineLayer !== void 0) {
+		let t = Rt.pipe(W.provideMerge(e.workflowEngineLayer));
+		p = En.make(e.baseLayer === void 0 ? t : t.pipe(W.provideMerge(e.baseLayer))), await p.runPromise(U.void), (e.log ?? I({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Lt.length} entity type(s) registered`, { entities: Lt });
+		let n = await import("@voltro/workflow/cluster"), r = (e) => p.runPromise(n.redriveFailedRun(e)), i = (e) => p.runPromise(n.resumeRunFromStep(e));
+		ae = await bt({
+			provider: ii(e.plugins ?? [])?.broadcast?.provider,
+			crossReplica: ii(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
+			namespace: Ie,
+			replicaId: crypto.randomUUID(),
+			pollStorage: () => p.runPromise(n.pollWorkflowStorage),
+			log: (e.log ?? I({ scope: "voltro:serve" })).child("workflow")
+		}), ne = async (t) => {
+			let n = await At({
+				store: e.store,
+				workflows: e.discovered.workflows ?? [],
+				runRedrive: r
+			}, t.runId);
+			return n.statusReset && await M.recordEvent({
+				runId: t.runId,
+				eventType: "run-redriven",
+				payload: {
+					reason: "inspect.redrive",
+					activitiesReset: n.outcome.activitiesReset
+				}
+			}), {
+				redriven: n.outcome.redriven,
+				activitiesReset: n.outcome.activitiesReset,
+				reason: n.outcome.reason
+			};
+		}, ie = async (t) => {
+			let n = await u({
+				store: e.store,
+				workflows: e.discovered.workflows ?? [],
+				runResume: i
+			}, t.runId, t.step);
+			return n.statusReset && await M.recordEvent({
+				runId: t.runId,
+				eventType: "run-redriven",
+				payload: {
+					reason: "inspect.resume-from-step",
+					step: n.stepName,
+					activitiesReset: n.outcome.activitiesReset
+				}
+			}), {
+				redriven: n.outcome.redriven,
+				stepName: n.stepName,
+				activitiesReset: n.outcome.activitiesReset,
+				reason: n.outcome.reason
+			};
+		};
+		let a = dr({
+			coordinator: (e.scheduleCoordination ?? "single") === "advisoryLock" ? ar(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Nr,
+			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`
+		}), s = {
+			info: (e, t) => {
+				process.stdout.write(`[flow-control] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+			},
+			warn: (e, t) => {
+				process.stderr.write(`[flow-control] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+			},
+			error: (e, t) => {
+				process.stderr.write(`[flow-control] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
+			}
+		}, c, l = () => {
+			if (c !== void 0) return c;
+			if (!(o === void 0 || M === void 0)) return c = g({
+				store: e.store,
+				log: F,
+				workflows: e.discovered.workflows ?? [],
+				workflowsProxy: o,
+				workflowRuntime: p,
+				workflowRunRecorder: M,
+				closeChildrenForParent: N
+			}), c;
+		};
+		ee = l, te = Ue({
+			store: e.store,
+			onChange: (t) => e.store.onChange((e) => t({
+				table: e.table,
+				op: e.op
+			})),
+			...e.scheduling === void 0 ? {} : {
+				disarmWhenIdle: e.scheduling.disarmWhenIdle,
+				drainIntervalMs: e.scheduling.admissionDrainMs,
+				cancelSweepIntervalMs: e.scheduling.cancelSweepMs,
+				stalenessSweepIntervalMs: e.scheduling.stalenessSweepMs
+			},
+			workflows: e.discovered.workflows ?? [],
+			facade: () => o,
+			cancelRunWithReason: l,
+			recordRunEvent: () => M?.recordEvent,
+			...e.workflowStaleness === void 0 ? {} : { staleness: e.workflowStaleness },
+			scheduleCoordinated: a,
+			onAbandoned: async (t) => {
+				await _t({
+					workflows: e.discovered.workflows ?? [],
+					facade: () => o,
+					log: s,
+					...t
+				});
+			},
+			log: s
+		});
+		let d = te;
+		d !== void 0 && Tr(() => d.stop()), f = O({
+			store: e.store,
+			onChange: (t) => e.store.onChange((e) => t({
+				table: e.table,
+				op: e.op
+			})),
+			...e.scheduling === void 0 ? {} : {
+				disarmWhenIdle: e.scheduling.disarmWhenIdle,
+				tickIntervalMs: e.scheduling.inferenceTickMs
+			},
+			enabled: (e.discovered.workflows?.length ?? 0) > 0,
+			resumeSignal: () => p === void 0 || j === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
+				await p.runPromise(j.completeSuspendingSignal({
+					store: e.store,
+					target: dt(t, n),
+					signalName: r,
+					payload: i
+				}));
+			},
+			runEffect: (e) => p.runPromise(e),
+			scheduleCoordinated: a,
+			log: s
+		});
+		let re = f;
+		re !== void 0 && Tr(() => re.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? X({
+			workflows: e.discovered.workflows ?? [],
+			runEffect: (e) => p.runPromise(e),
+			onEnqueue: () => ae?.publishWake(),
+			...d === void 0 ? {} : {
+				admitStart: d.gate.admitStart,
+				startPayloadSchema: d.gate.startPayloadSchema
+			},
+			rememberStartContext: ce,
+			signal: async (t, n, r) => {
+				let i = await j.sendWorkflowSignal({
+					store: e.store,
+					recorder: M,
+					target: t,
+					signalName: n,
+					payload: r
+				});
+				return await p.runPromise(j.completeSuspendingSignal({
+					store: e.store,
+					target: t,
+					signalName: n,
+					payload: r
+				})).catch(() => {}), i;
+			},
+			update: (t, n, r, i) => j.sendWorkflowUpdate({
+				store: e.store,
+				recorder: M,
+				target: t,
+				updateName: n,
+				payload: r,
+				...i === void 0 ? {} : { options: i }
+			}),
+			listRuns: (t) => xe(e.store, t),
+			retry: (t, n) => Oe({
+				store: e.store,
+				workflows: e.discovered.workflows ?? [],
+				runPromise: (e) => p.runPromise(e)
+			}, t, n),
+			redrive: (t) => At({
+				store: e.store,
+				workflows: e.discovered.workflows ?? [],
+				runRedrive: r
+			}, t).then((e) => e.outcome)
+		}) : void 0;
+	}
+	let zt = W.mergeAll(kt.toLayer(A), Mt), Bt = Me(A, e.discovered.queries.map((e) => e.descriptor.name), he), Vt = W.mergeAll(kt.toLayer(Bt), Mt), P = e.observability, Ht = await Yn({
+		...e.appName === void 0 ? {} : { serviceName: e.appName },
+		...P && P.spanProcessors.length > 0 ? { extraSpanProcessors: P.spanProcessors } : {},
+		...P && P.metricReaders.length > 0 ? { extraMetricReaders: P.metricReaders } : {},
+		...P && Object.keys(P.resourceAttributes).length > 0 ? { resourceAttributes: P.resourceAttributes } : {},
+		...P && P.sampler !== void 0 ? { sampler: P.sampler } : {}
+	}), Ut = !1, Wt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Gt, shutdown: Kt } = Pr({
+		group: kt,
+		handlersLayer: zt,
+		httpHandlersLayer: Vt,
+		port: e.port ?? 4e3,
+		...e.host === void 0 ? {} : { host: e.host },
+		path: e.path ?? "/ws",
+		tracerLayer: Ht.layer,
+		security: it(e),
+		...at,
+		healthCheck: {
+			isReady: () => Ut,
+			...Wt ? { ping: Wt } : {}
+		},
+		...Et.length > 0 ? { httpRoutes: Et } : {},
+		...e.getStore === void 0 ? {} : { getStore: e.getStore },
+		...Ce.size > 0 ? { webhookRoutes: Ce } : {},
+		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
+	});
+	if (await qn(Gt), (e.discovered.schedules?.length ?? 0) > 0) {
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? ar(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Nr;
+		oe = await Fr(e.discovered.schedules ?? [], {
+			store: e.store,
+			coordinator: t,
+			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
+			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`,
+			armSelf: e.scheduleArmSelf ?? !0,
+			dormancy: e.dormancy ?? "always-on",
+			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
+			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => C({
+				subject: r,
+				traceId: t
+			}, e.store, void 0, `schedule:${n}`),
+			log: {
+				info: (e, t) => {
+					process.stdout.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+				},
+				warn: (e, t) => {
+					process.stderr.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+				},
+				error: (e, t) => {
+					process.stderr.write(`[schedule] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
+				},
+				debug: () => {}
+			},
+			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
+			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
+		}), e.onSchedulerReady?.(oe);
+	}
+	let F = e.log ?? I({ scope: "voltro:serve" }), qt, Jt;
+	if ((e.discovered.subscribers?.length ?? 0) > 0 && (qt = y(e.discovered.subscribers ?? [], e.store, F.child("subscribe"), e.schemaRegistry, S.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
+		let t = F.child("reaction"), n = async (n, r) => {
+			if (n.kind === "workflow") {
+				if (h === void 0) {
+					t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
+					return;
+				}
+				let e = n.payload === void 0 ? r.new ?? r.old ?? {} : n.payload(r);
+				await Sr(h, {
+					traceId: `reaction:${n.workflow}`,
+					source: `reaction:${n.workflow}`
+				}).start(n.workflow, e);
+				return;
+			}
+			await re(n.agent, r, {
+				findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
+				runAction: (e, t, n) => Promise.resolve(ut(e, t, n)),
+				makeSubject: (e) => hn(e),
+				now: () => Date.now(),
+				log: t
+			});
+		}, r = async (n, r) => {
+			try {
+				let { requireAiBudget: t } = await import("@voltro/ai");
+				return (await U.runPromise(U.either(t(e.store, {
+					tenantId: n,
+					limitUsd: r
+				}))))._tag === "Right";
+			} catch (e) {
+				return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
+			}
+		}, i = Re(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
+		Jt = Te(e.discovered.reactions ?? [], e.store, {
+			runAct: n,
+			checkBudget: r,
+			claimRateSlot: (e) => i.claim(e)
+		}, t);
+	}
+	let Yt;
+	(e.discovered.aggregates?.length ?? 0) > 0 && (Yt = await Be({
+		discovered: e.discovered.aggregates ?? [],
+		store: e.store,
+		log: F.child("aggregate"),
+		...e.analytics === void 0 ? {} : { analytics: e.analytics },
+		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
+		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
+	}), Ge = W.succeed(Ln, Yt.registry));
+	let Xt;
+	(e.discovered.expectations?.length ?? 0) > 0 && (Xt = Wn({
+		discovered: e.discovered.expectations ?? [],
+		store: e.store,
+		log: F.child("expectation")
+	}), Ke = W.succeed(Bn, Xt.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = Kn({
+		discovered: e.discovered.budgets ?? [],
+		log: F.child("finops")
+	}), qe = W.succeed(Rn, n.registry));
+	let Zt;
+	return (e.discovered.experiments?.length ?? 0) > 0 && (Zt = Gn({
+		discovered: e.discovered.experiments ?? [],
+		store: e.store,
+		log: F.child("experiment")
+	}), Je = W.succeed(Vn, Zt.registry)), Ut = !0, e.bootTiming?.mark("ready"), {
+		dispatcher: r,
+		server: Gt,
+		scheduler: oe,
+		eventsSnapshot: nt(S.bus, S.declared),
+		membersSnapshot: () => ({
+			members: Ve.membership.list(),
+			capturedAt: Date.now()
+		}),
+		agentTools: () => St,
+		rpcMetrics: () => w,
+		webhooksService: () => ye,
+		runCanceller: () => ee(),
+		flowControlHealth: () => te?.cancelHealth(),
+		inferenceHealth: () => f?.health(),
+		workflowWriteActions: () => h === void 0 || M === void 0 ? void 0 : me({
+			store: e.store,
+			log: F,
+			workflows: e.discovered.workflows ?? [],
+			workflowsProxy: o,
+			workflowRuntime: p,
+			workflowRunRecorder: M,
+			closeChildrenForParent: N
+		}),
+		redriveWorkflowRun: (e) => ne ? ne(e) : Promise.reject(/* @__PURE__ */ Error("redrive: this app registers no workflows")),
+		resumeWorkflowRunFromStep: (e) => ie ? ie(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
+		close: async () => {
+			Ut = !1;
+			for (let e of we) try {
+				await e();
+			} catch (e) {
+				F.warn("serve: teardown step failed", {}, e);
+			}
+			await He?.detach(), await Ve.detach(), Yt?.detach(), Xt?.detach(), n?.detach(), Zt?.detach(), Jt?.(), qt?.(), await oe?.shutdown(), r.close(), await ae?.detach(), await p?.dispose(), await new Promise((e) => Gt.close(() => e())), await Kt();
+		}
+	};
+}, $ = I({ scope: "voltro:serve" }), ji = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Mi = Mt, Ni = async (e) => {
+	let t = on(process.cwd());
+	if (dn(t)) {
+		let n;
+		try {
+			let e = await import(fn(t).href);
+			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
+		} catch (e) {
+			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
+		}
+		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
+	}
+	return Pi(e);
+}, Pi = async (s) => {
+	let c = sn();
+	e("serve");
+	try {
+		Kr();
+	} catch (e) {
+		throw j(e instanceof Error ? e.message : String(e));
+	}
+	let l = process.cwd(), u = await Ve(l), d = Nt({
+		kind: "api",
+		configPort: u?.port,
+		env: process.env,
+		flagPort: Mi(s, "--port")
+	});
+	for (let e of d.warnings) $.warn(e);
+	let re = d.port;
+	Ar(Or(u?.secrets)), await M({
+		rawEnv: u?.env,
+		appType: "api",
+		root: l,
+		log: $,
+		generateTypes: !1
+	}), c.mark("config");
+	let m = (process.env.DB_DIALECT ?? u?.store ?? "memory").toLowerCase(), le = (m === "mariadb" || m === "postgres" || m === "mssql") && (process.env.CDC ?? "1") !== "0", ue = m === "mariadb" ? "mariadb" : m === "mssql" ? "mssql" : void 0, pe = an(l);
+	if (!r() && dn(pe)) try {
+		let e = await import(fn(pe).href);
+		if (e.modules) {
+			let t = {};
+			for (let [n, r] of Object.entries(e.modules)) t[un(l, n)] = r;
+			n(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
+		}
+	} catch (e) {
+		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
+	}
+	let g = await Ke(l), _ = await yt(g, { cdc: le && ue !== void 0 }), me = w(_);
+	{
+		let e = /* @__PURE__ */ new Set([
+			..._.queries.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
+			..._.mutations.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
+			..._.actions.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name)
+		]);
+		Bt(zt(u?.plugins ?? []), [
+			..._.queries.map((e) => e.descriptor.name),
+			..._.mutations.map((e) => e.descriptor.name),
+			..._.actions.map((e) => e.descriptor.name),
+			..._.streams.map((e) => e.descriptor.name)
+		], e);
+		let t = h(_.serverOnlyLeaks, ce(process.env, "strict"), $n, "`voltro serve`");
+		if (t.action === "fail") throw j(t.message ?? "");
+		t.action === "warn" && $.warn(t.message ?? "");
+	}
+	let xe = g.filter((e) => nn.test(e)), Se = xe.length > 0 ? await tn(xe, $.child("webhooks")) : {
+		outgoing: [],
+		incoming: [],
+		providers: []
+	}, Te = $t(_.events), De = Se.outgoing.length + Se.incoming.length + Se.providers.length + Te.length === 0 ? void 0 : {
+		...Se,
+		outgoing: [...Se.outgoing, ...Te]
+	}, Oe = Ut({
+		mix: _.featureMix,
+		plugins: u?.plugins ?? [],
+		cdc: le && ue !== void 0,
+		...ue ? { cdcDialect: ue } : {}
+	}), ke = u?.analytics !== void 0 && u.analytics.kind !== "noop" && m !== "memory" ? (await N(m)).makeSqlLayer(E()) : void 0, Ae = await fe({
+		spec: u?.analytics,
+		sqlLayer: ke,
+		log: $
+	}), y = (() => {
+		let e = new Set(_.tables.map((e) => e.tableName)), t = [..._.tables];
+		for (let n of [...Oe, ...Ae.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
+		return t;
+	})();
+	for (let e of y) Fn(e);
+	{
+		let e = er(Lr(_.queries.map((e) => ({
+			name: e.descriptor.name,
+			source: e.descriptor.source
+		})), new Set(y.flatMap((e) => {
+			let t = e.tableName;
+			return t === void 0 ? [] : [t];
+		}))));
+		e !== void 0 && $.warn(e);
+	}
+	let je = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (ji(je, m, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await N(m)).makeSqlLayer(E()), t = await U.runPromise(Dn.SqlClient.pipe(U.flatMap((e) => An(e, l)), U.provide(e), U.catchAll(() => U.succeed([]))));
+		t.length > 0 && ($.error(`serve: refusing to boot — ${t.length} pending file-based migration(s) have never run against this database. They perform the changes a schema diff cannot infer (data moves, backfills, table splits), so the declarative fingerprint check below cannot see them and would have let this process serve un-migrated data.`, { pending: t }), $.error("Run them from your pre-deploy job — `voltro db migrate .` (schema + files) or `voltro db files .` (files alone) — or set VOLTRO_AUTO_MIGRATE=0 to bypass every boot schema check. `voltro serve` never applies them itself: a rolling deploy would start N replicas and each would try."), process.exit(1));
+		let n = await U.runPromise(Dn.SqlClient.pipe(U.flatMap((e) => jn(e, y, {
+			appliedBy: `serve:${je}`,
+			environment: "prod",
+			dialectId: m
+		})), U.provide(e)));
+		n.kind === "prod-mismatch" && ($.error(kn(n, m)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(kn(n, m));
+	}
+	await Rt({
+		dialectId: m,
+		tables: y,
+		mode: It(u?.reactiveTriggers),
+		makeLayer: async () => (await N(m)).makeSqlLayer(E()),
+		log: {
+			info: (e, t) => $.info(e, t ?? {}),
+			warn: (e, t) => $.warn(e, t ?? {})
+		}
+	});
+	let Me = xr(y);
+	c.mark("discover");
+	let b = await $e(u, void 0), Re = zr(b, m);
+	for (let e of ut({
+		dialect: String(u?.store ?? process.env.DB_DIALECT ?? "postgres"),
+		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
+		dbUrl: process.env.DB_URL,
+		crossReplicaBus: ii(u?.plugins ?? [])?.broadcast.crossReplica === !0,
+		tables: _.tables.map((e) => ({
+			tableName: e.tableName,
+			isReactive: e.isReactive === !0
+		})),
+		querySources: _.queries.flatMap((e) => {
+			let t = e.descriptor.source;
+			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
+		})
+	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
+	{
+		let e = Le(et({
+			tables: Nn().map((e) => ({ tableName: e.tableName })),
+			queries: _.queries.map((e) => ({
+				name: e.descriptor.name,
+				source: e.descriptor.source
+			}))
+		}));
+		e !== void 0 && $.warn(e);
+	}
+	u?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = u.cache), u?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = u.cacheRedisUrl), u?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = u.cacheRedisDriver), u?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = u.cacheKeyPrefix);
+	let { service: Be, invalidationBus: Ue, snapshotCache: We, cache: Ye, semantic: Xe, evictSource: Qe, backend: tt, stats: nt, dispose: rt } = await gt({
+		env: process.env,
+		semantic: u?.cacheSemantic ?? !1
+	});
+	Xe !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${tt}` + (tt === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), b.onChange((e) => {
+		if (U.runFork(Ue.publish(e.table)), Qe !== void 0) {
+			let t = (e.new ?? e.old)?.id;
+			Qe({
+				table: e.table,
+				op: e.op,
+				...t === void 0 ? {} : { id: t }
+			});
+		}
+	}), u?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = u.kv), u?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = u.kvRedisUrl), u?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = u.kvKeyPrefix);
+	let { kv: st, service: dt } = await lr({ store: b });
+	$.info(fi(Ft(), mi(), m === "postgres" && (process.env.CDC ?? "1") !== "0" ? [{ reason: "CDC LISTEN consumer" }] : [], t.replicationSnapshot()?.replicaCount ?? 0)), c.mark("store");
+	let mt = Un({
+		store: b,
+		sink: Ae.sink,
+		log: $
+	}), _t = ct({
+		store: b,
+		dialect: m,
+		log: { info: (e) => $.info(e) }
+	}), O = u?.plugins ?? [], vt = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, bt, Dt;
+	m !== "memory" && (bt = En.make((await N(m)).makeSqlLayer(E())), Dt = await bt.runPromise(Dn.SqlClient));
+	let At = [
+		"postgres",
+		"mariadb",
+		"mysql",
+		"mssql"
+	].includes(m) ? ar(b, vt, $) : Nr, jt = pt(u?.scheduling), Mt = dr({
+		maxIdleIntervalMs: jt.pollCeilingMs,
+		coordinator: At,
+		replicaId: vt,
+		log: $
+	}), en = [], on = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, cn = ii(u?.plugins ?? [])?.broadcast?.provider, I = Ze(u?.plugins, u?.name ?? ln(l));
+	{
+		let e = ot(u?.plugins, u?.name ?? ln(l));
+		e !== void 0 && $.warn(e);
+	}
+	let pn = Fe(u?.plugins, {
+		instanceId: on,
+		namespace: I,
+		meta: { mode: "serve" },
+		logger: $
+	}), mn = {
+		...Dt ? { sql: Dt } : {},
+		instanceId: on,
+		membership: pn.membership,
+		...cn === void 0 ? {} : { broadcast: cn },
+		broadcastChannels: { presence: ri(I, "presence") },
+		scheduleCoordinated: (e, t, n) => {
+			let r = Mt(e, t, n);
+			return en.push(r), r;
+		}
+	};
+	for (let e of O) e.bindDataStore?.(b, mn);
+	he({
+		store: b,
+		...te(),
+		log: $
+	});
+	let L = O.filter((e) => typeof e.onChangeEvent == "function");
+	if (L.length > 0) {
+		let e = b.changeScope ?? "local";
+		b.onChange((t) => {
+			let n = ge(t, e);
+			for (let e of L) U.runFork(e.onChangeEvent(n).pipe(U.catchAllCause((t) => U.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Tn.pretty(t) })))));
+		});
+	}
+	let hn = ae({
+		plugins: O,
+		appName: u?.name ?? "voltro-api",
+		appType: "api",
+		voltroVersion: process.env.npm_package_version ?? "0.0.0",
+		log: $
+	});
+	O.length && await hn.activate(), c.mark("plugins");
+	let gn = await hn.gatherObservability(), _n = {
+		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
+		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
+		debug: () => {}
+	}, R, vn = await ft(b, u, m, I, _n, (e, t) => {
+		R?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
+	}), z = u?.apiKeys, yn = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", B = z ? Qn(b) : void 0, V = B ? sr({ flush: cr(B) }) : void 0;
+	V && Tr(() => V.shutdown());
+	let H = B ? or(B, {
+		prefix: yn,
+		...V ? { usage: V } : {}
+	}) : void 0, bn = H ? [tr(H, { prefix: yn })] : [], xn = ht([...u?.auth?.strategies ?? [], ...bn], ti(u?.plugins ?? []), u?.auth?.anonymousTenantRequired ?? !1, u?.auth, () => Re), Sn = [...u?.restRoutes ?? [], ...H ? Hn(H, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], Cn = Ne(u?.idempotency, b), wn = O.map((e) => e.services).filter((e) => e !== void 0), Mn = W.mergeAll(be({
+		analyticsLayer: Ae.layer,
+		cacheService: Be,
+		kvService: dt,
+		...Xe === void 0 ? {} : { semanticCache: Xe },
+		pluginServices: wn,
+		userLayers: u?.layers ?? []
+	}), Pe(u?.http ?? {})), G = await Ge({
+		files: g,
+		store: b,
+		log: $,
+		seedPolicy: "report",
+		seedPattern: Yt,
+		loadSeedFiles: Lt,
+		startupPattern: Gt,
+		loadStartupFiles: a,
+		runStartups: i,
+		emailPattern: A,
+		loadEmailFiles: lt,
+		registerEmailTemplates: ni
+	});
+	(G.startupCount > 0 || G.emailCount > 0) && $.info("boot lifecycle", {
+		startups: G.startupCount,
+		emailTemplates: G.emailCount
+	}), G.startups !== void 0 && Tr(async () => {
+		await G.startups.stop();
+	});
+	let K = o({
+		schedules: _.schedules,
+		seeds: G.seeds,
+		store: b,
+		log: $.child("seeds")
+	}), In = u?.scheduling ?? {}, Ln = In.trigger ?? "self", Rn = /* @__PURE__ */ new Set([
+		"postgres",
+		"mysql",
+		"mariadb",
+		"mssql"
+	]), zn = In.coordination ?? (Rn.has(m) ? "advisoryLock" : "single"), q = zn === "cluster" && Rn.has(m), Bn = q ? "cluster" : zn === "advisoryLock" && Rn.has(m) ? "advisoryLock" : "single";
+	zn === "cluster" && !q && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), zn === "advisoryLock" && !Rn.has(m) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
+	let Vn, Wn = _.workflows.length > 0 || _.workflowWorkers.length > 0 || _.eventTriggers.length > 0 || (De?.outgoing.length ?? 0) > 0 || q, Gn;
+	if (Wn) {
+		if (m === "mssql") {
+			let e = await Qt(process.cwd());
+			e && $.warn(e);
+		}
+		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = q ? K.filter((e) => (e.trigger ?? Ln) === "self").map((e) => t({
+			name: e.name,
+			cron: Zn(e),
+			execute: async () => {
+				await Vn?.fireFromCluster(e.name);
+			}
+		})) : [];
+		Gn = m === "memory" ? e.layerMemory : await (async () => {
+			let e = await N(m), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
+			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
+				sqlClientLayer: e.makeSqlLayer(E()),
+				runnerStorage: t,
+				dialectId: e.id,
+				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
+				...i(),
+				...a.length > 0 ? { extraShardingLayers: a } : {}
+			});
+		})();
+	}
+	let Kn = Ee(O, rn()), qn = g.filter((e) => /\.subscribe\.tsx?$/.test(e)), J = qn.length > 0 ? await oe(qn, $) : [], Jn = g.filter((e) => /\.reaction\.tsx?$/.test(e)), Y = Jn.length > 0 ? await p(Jn, $) : [], Yn = g.filter((e) => qt.test(e)), Xn = Yn.length > 0 ? await se(Yn, $) : [], nr = g.filter((e) => /\.aggregate\.tsx?$/.test(e)), rr = nr.length > 0 ? await Ce(nr, $) : [], ir = f();
+	if (rr.length > 0 && m !== "memory") try {
+		ir = Tt((await N(m)).makeSqlLayer(E()));
+	} catch (e) {
+		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
+	}
+	let ur = m === "memory" ? Nr : ar(b, `aggregate@${process.pid}`, $), fr = g.filter((e) => Jt.test(e)), pr = fr.length > 0 ? await Ct(fr, $) : [], mr = g.filter((e) => F.test(e)), hr = mr.length > 0 ? await Ie(mr, $) : [], gr = g.filter((e) => Kt.test(e)), _r = gr.length > 0 ? await kt(gr, $) : [], vr = [], yr = [], br = g.filter((e) => Ht.test(e));
+	if (br.length > 0) {
+		let e = $.child("agent"), t = g.filter((e) => P.test(e));
+		t.length > 0 && await Wt(t, e);
+		let n = await Vt(br, e);
+		for (let e of n.agents) for (let t of x(e)) (t.kind === "action" ? vr : yr).push({
+			file: t.file,
+			descriptor: t.descriptor,
+			executor: t.executor
+		});
+		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
+	}
+	c.mark("workflow");
+	let X = () => {
+		let e = Z.workflowWriteActions();
+		if (e === void 0) throw Error("workflow actions: this app registers no workflows");
+		return e;
+	}, Sr = Pn({
+		dialect: m,
+		...E()
+	}), Cr = m === "memory" ? void 0 : (await N(m)).makeSqlLayer(E()), wr = async () => ye({
+		sqlLayer: Cr,
+		declared: y,
+		log: $
+	}), Er = {
+		kind: "api",
+		meta: {
+			name: u?.name ?? "voltro-api",
+			voltroVersion: k,
+			port: re,
+			mode: "start",
+			store: m,
+			cdc: le ? "on" : "off",
+			...Sr === void 0 ? {} : { databaseId: Sr }
+		},
+		rpc: S(_, l),
+		workflows: T(_, l),
+		migrations: wr,
+		events: () => Z.eventsSnapshot(),
+		agentTools: () => Z.agentTools(),
+		invariantChecks: () => ({
+			mode: "serve",
+			accessGate: me,
+			config: u,
+			serverOnlyLeaks: _.serverOnlyLeaks,
+			migrations: wr
+		}),
+		members: () => Z.membersSnapshot(),
+		inspectFireSchedule: async ({ name: e, trigger: t }) => {
+			if (!Vn) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
+			return { runId: await Vn.fireNow(e, t) ?? null };
+		},
+		...De === void 0 ? {} : { webhooks: () => ne({
+			store: b,
+			discoveredWebhooks: De
+		}) },
+		plugins: () => ({
+			plugins: hn.snapshot(),
+			capturedAt: Date.now()
+		}),
+		env: () => Pt(u?.name ?? ln(l), {
+			...u?.env !== void 0 && Gr(u.env) ? { contract: u.env } : {},
+			plugins: u?.plugins ?? []
+		}),
+		dataCache: () => Ot({
+			stats: nt,
+			backendKind: tt
+		}),
+		subscriptions: () => ze(() => R),
+		inspectTables: () => _e(_.tables),
+		inspectRows: ie({
+			store: b,
+			tables: _.tables,
+			mask: !0
+		}),
+		metrics: (e) => Z.rpcMetrics().snapshot(e),
+		cluster: () => St({
+			store: b,
+			dialect: m,
+			useClusterCron: q,
+			scheduleCoordChoice: zn
+		}),
+		inspectSchedules: () => wt({
+			schedules: K,
+			defaultTrigger: Ln,
+			coordination: Bn
+		}),
+		inspectScheduleRuns: (e) => ee(b, e),
+		...v(b, {
+			controls: xt(_.workflows ?? []),
+			active: (_.workflows?.length ?? 0) > 0,
+			cancellation: () => Z.flowControlHealth()
+		}),
+		webhookActions: Et(() => Z.webhooksService()),
+		inspectStartWorkflow: (e) => X().inspectStartWorkflow(e),
+		inspectCancelWorkflowRun: (e) => X().inspectCancelWorkflowRun(e),
+		inspectSuspendWorkflowRun: (e) => X().inspectSuspendWorkflowRun(e),
+		inspectResumeWorkflowRun: (e) => X().inspectResumeWorkflowRun(e),
+		inspectDiscardWorkflowRun: (e) => X().inspectDiscardWorkflowRun(e),
+		inspectRetryWorkflowRun: (e) => X().inspectRetryWorkflowRun(e),
+		inspectSignalWorkflowRun: (e) => X().inspectSignalWorkflowRun(e),
+		inspectUpdateWorkflowRun: (e) => X().inspectUpdateWorkflowRun(e),
+		inspectInferences: (e) => He({
+			store: b,
+			active: (_.workflows?.length ?? 0) > 0,
+			dispatcher: () => Z.inferenceHealth()
+		}, e.limit === void 0 ? {} : { limit: e.limit }),
+		...at({
+			store: b,
+			cancelRun: async (e) => await Z.runCanceller()?.(e) ?? !1,
+			retryRun: async (e) => X().inspectRetryWorkflowRun({ runId: e }),
+			redriveRun: async (e) => Z.redriveWorkflowRun({ runId: e }),
+			log: $
+		}),
+		inspectRedriveWorkflowRun: (e) => Z.redriveWorkflowRun(e),
+		inspectResumeWorkflowRunFromStep: (e) => Z.resumeWorkflowRunFromStep(e)
+	}, Z = await Ai({
+		bootTiming: c,
+		broadcastNamespace: I,
+		scheduling: (() => {
+			let e = jt;
+			return {
+				admissionDrainMs: e.admissionDrainMs,
+				inferenceTickMs: e.inferenceTickMs,
+				cancelSweepMs: e.cancelSweepMs,
+				stalenessSweepMs: e.stalenessSweepMs,
+				disarmWhenIdle: Je({
+					changeScope: b.changeScope,
+					broadcastAttached: vn !== void 0
+				})
+			};
+		})(),
+		...u?.workflows?.staleness === void 0 ? {} : { workflowStaleness: u.workflows.staleness },
+		membership: {
+			...pn,
+			instanceId: on
+		},
+		security: {
+			defaultDeny: ve(u),
+			...it(u)
+		},
+		approvals: { defaultExpiryMs: de(u) },
+		...u?.plugins === void 0 ? {} : { plugins: u.plugins },
+		...Cn ? { idempotency: Cn } : {},
+		restRoutes: Sn,
+		appProcedures: me,
+		discovered: {
+			queries: [..._.queries, ...yr],
+			mutations: _.mutations,
+			actions: [..._.actions, ...vr],
+			streams: _.streams,
+			events: _.events,
+			workflows: _.workflows,
+			workflowWorkers: _.workflowWorkers,
+			eventTriggers: _.eventTriggers,
+			schedules: K,
+			subscribers: J,
+			outboxHandlers: Xn,
+			connections: _.connections,
+			reactions: Y,
+			aggregates: rr,
+			expectations: pr,
+			budgets: hr,
+			experiments: _r,
+			...De === void 0 ? {} : { webhooks: De }
+		},
+		log: $,
+		analytics: Ae.sink,
+		aggregateStorage: ir,
+		aggregateCoordinator: ur,
+		store: b,
+		kv: st,
+		cache: Ye,
+		snapshotCache: We,
+		schemaRegistry: Me,
+		tenantScopedTables: _.tenantScopedTables,
+		softDeleteScopedTables: _.softDeleteScopedTables,
+		dataTransferSnapshot: On(y),
+		dataTransferDialect: m,
+		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? u?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
+		resolveSubject: (e, t) => xn({
+			headers: e,
+			clientId: t
+		}),
+		...u?.auth === void 0 ? {} : { authority: u.auth },
+		...u?.agents === void 0 ? {} : { agents: u.agents },
+		httpRoutes: O.flatMap((e) => e.httpRoutes ?? []),
+		getStore: () => Re,
+		...Mn ? { baseLayer: Mn } : {},
+		...Gn === void 0 ? {} : { workflowEngineLayer: Gn },
+		scheduleDefaultTrigger: Ln,
+		scheduleCoordination: Bn,
+		scheduleArmSelf: !q,
+		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : u?.dormancy ?? "always-on",
+		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
+		...Kn === void 0 ? {} : { scheduleFireInterceptor: Kn },
+		onSchedulerReady: (e) => {
+			Vn = e;
+		},
+		inspectRoute: { handle: async (e, t, n, r) => await we(e, Er, t, {
+			method: n,
+			...r === void 0 ? {} : { body: r }
+		}) || ((n === "GET" ? await Zt(e, Er, t, { method: n }) : null) ?? Xt(e, Er, t, {
+			method: n,
+			...r === void 0 ? {} : { body: r }
+		}) ?? {
+			status: 404,
+			contentType: "application/json",
+			body: JSON.stringify({ error: "not an inspect route" })
+		}) },
+		...u?.name === void 0 ? {} : { appName: u.name },
+		observability: gn,
+		port: re,
+		...u?.transport?.wsPath ? { path: u.transport.wsPath } : {}
+	});
+	return R = Z.dispatcher, qe(C([
+		_.queries,
+		_.mutations,
+		_.actions,
+		_.streams
+	]), (e) => {
+		$.warn(e);
+	}), $.info(`API listening on :${re}`, {
+		dialect: m,
+		queries: _.queries.length,
+		mutations: _.mutations.length,
+		actions: _.actions.length,
+		streams: _.streams.length,
+		workflows: _.workflows.length,
+		workflowWorkers: _.workflowWorkers.length,
+		schedules: K.length,
+		scheduleCoordination: Bn
+	}), c.finish($), Tr(async () => {
+		for (let e of en) e.stop();
+		_t.stop(), rt(), bt?.dispose();
+		try {
+			await hn.deactivate(), await vn?.close(), await D({
+				mirror: mt,
+				log: $
+			}), await Ae.dispose(), await Z.close(), await b.close?.();
+		} catch (e) {
+			console.error("serve: shutdown step failed, exiting anyway:", e);
+		}
+	}), await new Promise(() => {}), 0;
+};
+//#endregion
+export { Ni as n, ji as r, Pi as t };