@voltro/cli 0.43.1 → 0.44.0

package/dist/serveCommand-C8xzYCwa.js

@@ -1,1776 +0,0 @@
-import { t as e } from "./nodeEnvironment-cGFAj1J8.js";
-import { t } from "./frameworkInspectState-CX2250XB.js";
-import { r as n, t as r } from "./appModuleLoader-C9r9mxZt.js";
-import { t as i } from "./bootRefusal-pgvDxlrU.js";
-import { n as a, r as o } from "./startupRunner-CEqQq7ax.js";
-import { $ as s, $t as ee, A as c, At as l, B as u, C as te, Ct as d, D as ne, Dt as f, E as re, Et as p, F as ie, Ft as m, G as h, Gt as ae, H as oe, I as se, It as ce, J as le, Jt as g, K as ue, Kt as _, L as de, Lt as fe, M as pe, Mt as v, N as me, Nt as he, O as ge, Ot as _e, P as ve, Pt as ye, Q as be, Qt as xe, R as Se, Rt as y, S as Ce, Sn as we, St as Te, T as Ee, Tt as De, U as Oe, Ut as b, V as ke, Vt as Ae, W as je, Wt as Me, X as Ne, Xt as Pe, Y as Fe, Yt as Ie, Z as Le, Zt as x, _ as Re, _n as ze, _t as S, an as Be, at as C, b as Ve, bn as He, bt as Ue, c as We, cn as w, ct as Ge, dn as Ke, dt as qe, en as Je, et as Ye, f as T, fn as E, ft as Xe, g as Ze, gn as Qe, gt as $e, h as et, ht as tt, i as nt, in as rt, it, j as at, jt as ot, k as st, kt as ct, ln as D, lt, m as ut, mn as dt, mt as O, nn as k, nt as ft, o as A, on as pt, ot as mt, p as ht, pn as gt, pt as _t, q as vt, qt as yt, r as bt, rn as xt, rt as St, sn as Ct, st as wt, t as Tt, tn as Et, tt as Dt, u as Ot, un as kt, ut as At, v as jt, vn as j, vt as M, w as N, wt as Mt, x as Nt, xn as Pt, xt as Ft, y as It, yn as Lt, yt as Rt, zt } from "./dev-B2rZfqxw.js";
-import { n as Bt } from "./cliArgs-D4p8n7EE.js";
-import { r as Vt } from "./appPort-B_HpJ_ck.js";
-import { ht as Ht, pt as P } from "./webDev-101csg6Q.js";
-import { r as F } from "./dialectDriver-czCHYpeH.js";
-import { i as Ut, n as Wt } from "./connectionConfig-Bk9IC7D0.js";
-import { c as Gt, n as Kt, o as qt } from "./seedRunner-IdHEprqf.js";
-import { C as I, S as Jt, _ as Yt, d as Xt, g as Zt, l as Qt, m as $t, r as en, u as tn, v as nn } from "./frameworkTableAssembly-oMPBKqlE.js";
-import { S as rn, c as an, n as on, p as sn, s as cn, x as ln } from "./fileConventions-Cof68_BL.js";
-import { h as un, o as dn } from "./inspect-B7U7Cl_Z.js";
-import { n as fn } from "./mssqlClusterPatch-_4cE_nun.js";
-import { i as pn, n as mn, r as hn, t as gn } from "./webhookDiscovery-CphsQe59.js";
-import { t as _n } from "./inspectMetrics-CfdKLh6t.js";
-import { r as vn, u as yn } from "./apiBuild-DF0f69Gf.js";
-import { t as bn } from "./bootTiming-BdyP9nYw.js";
-import { t as xn } from "./dataProfile-Cm0YVKSy.js";
-import { basename as Sn, join as Cn } from "node:path";
-import { existsSync as wn } from "node:fs";
-import { pathToFileURL as Tn } from "node:url";
-import { createLogger as L } from "@voltro/logger";
-import { AuthMiddleware as En, ConnectionInfoMiddleware as Dn, actionToRpc as R, anonymousSubject as On, isWireReachable as kn, mutationToRpc as z, queryToRpc as B, streamToRpc as An, wireErrorUnion as jn, workflowCancelDescriptor as Mn, workflowDomainEventsQueryDescriptor as V, workflowEventDeliveriesQueryDescriptor as Nn, workflowResumeDescriptor as Pn, workflowRunEventsQueryDescriptor as H, workflowRunQueryDescriptor as U, workflowRunStepsQueryDescriptor as Fn, workflowRunsQueryDescriptor as In, workflowSignalDescriptor as Ln, workflowUpdateDescriptor as Rn } from "@voltro/protocol";
-import { Cause as zn, Effect as W, Layer as G, ManagedRuntime as Bn } from "effect";
-import { SqlClient as Vn } from "@effect/sql";
-import { declaredSnapshot as Hn, describeOutcome as Un, pendingFileMigrationIds as Wn, runPlannedMigrations as Gn } from "@voltro/database/sql";
-import { RpcGroup as Kn } from "@effect/rpc";
-import { allRegisteredTables as qn, and as Jn, connectionIdentity as Yn, ensureTableRegistered as Xn, eq as K, or as Zn } from "@voltro/database";
-import { AggregateRegistry as Qn, CostRegistry as $n, DORMANCY_WAKEUP_TENANT as er, Dispatcher as tr, ExpectationRegistry as q, ExperimentRegistry as nr, apiKeyManagementRoutes as rr, attachAnalyticsMirror as ir, attachExpectations as ar, attachExperiments as or, attachFinops as sr, awaitServerListening as cr, bindMutation as J, bindStream as lr, bindSubscription as Y, buildTracingLayer as ur, cancelWakeup as dr, compileCron as fr, dataStoreApiKeyStore as pr, formatServerOnlyLeaks as mr, formatUnresolvedSources as hr, frameworkApiKeyStrategy as gr, getResourcePolicy as _r, installPolicyGuardResolver as vr, loadResourceTuples as yr, makeActionRunner as br, makeAdvisoryLockCoordinator as xr, makeApiKeyService as Sr, makeApiKeyUsageBuffer as Cr, makeApiKeyUsageFlusher as wr, makeAsyncKv as Tr, makeAuthMiddlewareLayers as Er, makeCoordinatedScheduler as Dr, makeEffectStoreLayer as Or, makeLazyWorkflowFacade as kr, makeMutationOutputCodec as Ar, makeMutationRunner as jr, makeOneShotQueryRunner as Mr, makeQueryDescriptorProducer as Nr, makeQueryFinalizer as Pr, makeQueryReauthorizer as Fr, makeQuerySubscriber as Ir, makeSchemaRegistry as Lr, makeWorkflowFacade as Rr, makeWorkflowFacadeWithCallerContext as X, makeWorkflowLayers as zr, noopKv as Br, onProcessShutdown as Vr, recordSubscriptionDelivery as Hr, recordWorkflowRun as Ur, registerDefaultTupleSource as Wr, registerWakeup as Gr, resolveSecretsBackend as Kr, runProvidedEffect as qr, setSecretsBackend as Jr, setSystemStoreHandle as Z, shutdownGraceMsFromEnv as Yr, singleCoordinator as Xr, startRpcServer as Zr, startScheduler as Qr, stripForbiddenForWire as $r, undoCaptureEnabled as ei, unresolvedSources as ti, withScopedRequest as ni, workflowToRpc as ri, wrapStoreWithBootCodec as ii } from "@voltro/runtime";
-import { appStorageProvider as ai, fromNodeReadable as oi, getObjectStream as si, putObjectStream as ci, toNodeReadable as li } from "@voltro/plugin-storage";
-import { isEnvContract as ui } from "@voltro/env";
-import { assertProductionSessionSecret as di } from "@voltro/protocol/session";
-import { createHash as fi, timingSafeEqual as pi } from "node:crypto";
-import { buildDeliverWebhookExecute as mi, buildWebhooksService as hi, defaultIncomingPath as gi, deliverWebhookWorkflow as _i, makeDeferredEmitHandler as vi, mountIncomingWebhook as yi } from "@voltro/plugin-webhooks";
-import { getAuthSessionStrategy as bi } from "@voltro/plugin-auth";
-import { registerEmailTemplates as xi } from "@voltro/plugin-mail";
-import { channelFor as Si, getBroadcastPlugin as Ci } from "@voltro/plugin-broadcast";
-import { packBundle as wi, runExport as Ti, runImport as Ei, storageBlobSink as Di, storageRefsBlobSource as Oi, unpackBundle as ki, unpackBundleToDir as Ai } from "@voltro/data-transfer";
-//#region src/serveDrain.ts
-var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t) => setTimeout(t, e)), Ni = (e) => {
-	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = 0;
-	e.on("connection", (e) => {
-		t.add(e), e.once("close", () => {
-			t.delete(e), n.delete(e);
-		});
-	}), e.on("upgrade", (e, t) => {
-		n.add(t);
-	}), e.on("request", (e, t) => {
-		r += 1, t.once("close", () => {
-			--r;
-		});
-	});
-	let i, a = async (t = {}) => {
-		let n = t.budgetMs ?? ji();
-		i ??= new Promise((t) => {
-			e.close(() => {
-				t();
-			});
-		}), e.closeIdleConnections();
-		let a = Date.now() + n;
-		for (; r > 0 && Date.now() < a;) await Mi(25), e.closeIdleConnections();
-		e.closeIdleConnections();
-	}, o = async () => {
-		i ??= new Promise((t) => {
-			e.close(() => {
-				t();
-			});
-		});
-		for (let e of t) if (n.has(e)) try {
-			e.write(Buffer.from([
-				136,
-				2,
-				3,
-				233
-			]));
-		} catch {}
-		else e.destroy();
-		for (let e = 0; t.size > 0 && e < 250; e += 25) await Mi(25);
-		for (let e of t) e.destroy();
-		await i;
-	};
-	return {
-		activeRequests: () => r,
-		drainRequests: a,
-		finish: o,
-		drain: async (e = {}) => {
-			await a(e), await o();
-		}
-	};
-}, Pi = "/_voltro/admin/import", Fi = "/_voltro/admin/export", Q = (e, t) => ({
-	status: e,
-	contentType: "application/json; charset=utf-8",
-	body: JSON.stringify(t)
-}), Ii = (e) => {
-	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
-	return n ? n[1] : null;
-}, Li = (e, t) => pi(fi("sha256").update(e).digest(), fi("sha256").update(t).digest()), Ri = (e, t) => {
-	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
-	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let n = Ii(e.headers);
-	return !n || !Li(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, zi = L({ scope: "voltro:admin-import" }), Bi = "VBUNDLE2", Vi = async function* (e) {
-	yield e;
-}, Hi = (e) => async (t) => {
-	let n = Ri(t, e.secret);
-	if (n) return n;
-	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.headers["x-import-dry-run"] === "1" || t.headers["x-import-dry-run"] === "true", ee = (t.headers["x-import-tables"] ?? "").split(",").map((e) => e.trim()).filter(Boolean), c = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === Bi, l, u;
-	if (c) l = Vi(t.rawBody), u = "upload";
-	else {
-		let n;
-		try {
-			n = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-		} catch {
-			return Q(400, { error: "body must be a packed bundle archive or { bundleKey } JSON" });
-		}
-		if (typeof n.bundleKey != "string" || !n.bundleKey) return Q(400, { error: "body.bundleKey (string) is required for the storage transport" });
-		if (!e.openArchive) return Q(501, { error: "storage transport not configured on this instance" });
-		l = e.openArchive(n.bundleKey), u = "storage";
-	}
-	let te = await import("node:os"), d = await import("node:fs/promises"), ne = await import("node:path"), f = await d.mkdtemp(ne.join(te.tmpdir(), "voltro-admin-import-"));
-	try {
-		e.assetSink ? await ki(l, {
-			dir: f,
-			blobs: e.assetSink
-		}) : await Ai(l, f);
-		let t = await W.runPromiseExit(Ei({
-			store: e.store,
-			bundleDir: f,
-			...r ? { mode: r } : {},
-			...i ? { onConflict: i } : {},
-			...a ? { atomic: a } : {},
-			...s ? { dryRun: s } : {},
-			...ee.length > 0 ? { tables: ee } : {},
-			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
-			force: o,
-			onWarn: (e) => zi.warn("admin.import", { message: e }),
-			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
-		}));
-		if (t._tag === "Failure") {
-			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
-			if (e && e._tag === "SchemaDriftError") {
-				let t = e;
-				return zi.warn("admin.import refused (schema drift)", {
-					transport: u,
-					bundle: t.bundleFingerprint.slice(0, 16),
-					target: t.targetFingerprint.slice(0, 16)
-				}), Q(409, {
-					error: "schema drift",
-					bundleFingerprint: t.bundleFingerprint,
-					targetFingerprint: t.targetFingerprint,
-					diff: t.diff,
-					hint: "each line above would break the load: a table or column the bundle carries that the target cannot take, or a column the target requires that the bundle has no value for. Fix the target schema, re-export against it, or resend with x-import-force: 1 to write anyway."
-				});
-			}
-			throw Error(String(e?.message ?? e ?? "import failed"));
-		}
-		let n = t.value, c = n.tables.reduce((e, t) => e + t.rowCount, 0);
-		return zi.info(s ? "admin.import (dry run — nothing written)" : "admin.import", {
-			transport: u,
-			tables: n.tables.length,
-			rows: c,
-			mode: r ?? "upsert",
-			atomic: a
-		}), Q(200, {
-			tables: n.tables.length,
-			rows: c,
-			transport: u,
-			...s ? {
-				dryRun: !0,
-				wrote: !1
-			} : {}
-		});
-	} catch (e) {
-		return zi.warn("admin.import failed", {
-			transport: u,
-			error: e?.message ?? String(e)
-		}), Q(500, {
-			error: "import failed",
-			message: e?.message ?? String(e)
-		});
-	} finally {
-		await d.rm(f, {
-			recursive: !0,
-			force: !0
-		});
-	}
-}, Ui = L({ scope: "voltro:admin-export" }), Wi = async (e) => {
-	let t = [];
-	for await (let n of e) t.push(Buffer.from(n));
-	return new Uint8Array(Buffer.concat(t));
-}, Gi = (e) => typeof e.tenant == "string" && e.tenant ? {
-	kind: "tenant",
-	tenantId: e.tenant
-} : Array.isArray(e.tables) && e.tables.length ? {
-	kind: "tables",
-	tables: e.tables.filter((e) => typeof e == "string")
-} : { kind: "all" }, Ki = (e) => async (t) => {
-	let n = Ri(t, e.secret);
-	if (n) return n;
-	let r;
-	try {
-		r = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-	} catch {
-		return Q(400, { error: "body must be JSON: { profile?, tenant?, tables?, consistency?, compression?, bundleKey? }" });
-	}
-	let i = {};
-	if (typeof r.profile == "string" && r.profile) {
-		if (!e.loadProfile) return Q(501, { error: "server-side profiles not configured on this instance" });
-		try {
-			i = await e.loadProfile(r.profile);
-		} catch (e) {
-			return Q(400, {
-				error: `profile '${r.profile}' could not be loaded`,
-				message: e?.message ?? String(e)
-			});
-		}
-	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? Gi(r), ee = typeof r.bundleKey == "string" && r.bundleKey.length > 0, c = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, l = await import("node:os"), u = await import("node:fs/promises"), te = await import("node:path"), d = await u.mkdtemp(te.join(l.tmpdir(), "voltro-admin-export-"));
-	try {
-		let t = await W.runPromise(Ti({
-			store: e.store,
-			snapshot: e.snapshot,
-			dialect: e.dialect,
-			outDir: d,
-			...i.subset ? { subset: i.subset } : {
-				scope: s,
-				...e.tenantTables && e.tenantTables.length > 0 ? { tenantTables: e.tenantTables } : {}
-			},
-			consistency: a,
-			...o ? { compression: o } : {},
-			...i.masking ? { masking: i.masking } : {}
-		})), n = t.tables.reduce((e, t) => e + t.rowCount, 0), l = t.masking?.transformed.length ?? 0;
-		if (ee) {
-			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
-			let i = r.bundleKey;
-			return await e.putArchive(i, () => wi({
-				dir: d,
-				...c
-			})), Ui.info("admin.export", {
-				transport: "storage",
-				tables: t.tables.length,
-				rows: n,
-				masked: l,
-				bundleKey: i
-			}), Q(200, {
-				bundleKey: i,
-				tables: t.tables.length,
-				rows: n,
-				masked: l,
-				transport: "storage"
-			});
-		}
-		let u = await Wi(wi({
-			dir: d,
-			...c
-		}));
-		return Ui.info("admin.export", {
-			transport: "download",
-			tables: t.tables.length,
-			rows: n,
-			masked: l,
-			bytes: u.byteLength
-		}), {
-			status: 200,
-			contentType: "application/octet-stream",
-			body: u,
-			headers: {
-				"x-export-tables": String(t.tables.length),
-				"x-export-rows": String(n),
-				"x-export-masked": String(l)
-			}
-		};
-	} catch (e) {
-		return Ui.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
-			error: "export failed",
-			message: e?.message ?? String(e)
-		});
-	} finally {
-		await u.rm(d, {
-			recursive: !0,
-			force: !0
-		});
-	}
-}, qi = (e, t, n = {}) => (async function* () {
-	let r = await W.runPromise(si(e, t).pipe(W.timeout(n.openTimeout ?? "30 seconds"))), i = await li(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
-		o && clearTimeout(o), o = setTimeout(() => i.destroy(/* @__PURE__ */ Error(`storage read stalled for ${a}ms reading '${t}'`)), a);
-	};
-	try {
-		s();
-		for await (let e of i) s(), yield e instanceof Uint8Array ? e : new Uint8Array(e);
-	} finally {
-		o && clearTimeout(o), i.destroy();
-	}
-})(), Ji = {
-	get: async () => void 0,
-	set: async () => {},
-	setWithTags: async () => {},
-	remove: async () => !1,
-	has: async () => !1,
-	clear: async () => {},
-	invalidateTag: async () => 0,
-	wrap: async (e, t, n) => n()
-}, Yi = async (e) => {
-	zt(e.appProcedures ?? e.discovered, {
-		defaultDeny: e.security?.defaultDeny ?? !0,
-		commandHint: "`voltro serve`"
-	}), Z({
-		dataStore: e.store,
-		schemaRegistry: e.schemaRegistry
-	});
-	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new tr({
-		store: e.store,
-		...e.snapshotCache ? { cache: e.snapshotCache } : {},
-		...e.reactive === void 0 ? {} : { reactive: e.reactive },
-		...t ? { recordCost: (e) => n?.record(e) } : {},
-		recordDelivery: (e) => Hr({
-			label: e.label,
-			kind: e.kind,
-			durationMs: e.durationMs,
-			rowCount: e.rowCount
-		})
-	}), i = e.cache ?? Ji, a = e.kv ?? Br, o, ee = () => void 0, c, te, d, ne, f, re, ce, le = ae({
-		store: e.store,
-		warn: (e, t) => {
-			process.stderr.write(`[workflow] ${e} ${JSON.stringify(t)}\n`);
-		}
-	}), ue = le.remember, de = le.resolve, fe = _({
-		authority: e.authority,
-		getStore: () => e.store
-	}), v = (e.discovered.workflows?.length ?? 0) > 0 ? kr(() => o) : void 0, he = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ge = he || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", _e = e.tenantIsolation === "namespace", ve = (e.log ?? L({ scope: "voltro:serve" })).child("webhooks"), xe, Se, y = e.discovered.webhooks;
-	if (y && y.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
-		e.workflowEngineLayer;
-		let t = w({
-			store: e.store,
-			schemaRegistry: e.schemaRegistry,
-			cache: i,
-			kv: a
-		}), n = y.outgoing.map((e) => e.descriptor);
-		Se = _i.toLayer(mi(t, { events: n })), xe = hi(t, async (e) => {
-			let t = d;
-			if (t === void 0) {
-				ve.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
-					deliveryId: e.deliveryId,
-					targetId: e.targetId
-				});
-				return;
-			}
-			t.runPromise(_i.execute(e)).catch((t) => {
-				ve.error("deliverWebhook workflow crashed", {
-					deliveryId: e.deliveryId,
-					targetId: e.targetId
-				}, t);
-			});
-		}, { events: n });
-	}
-	let Ce = /* @__PURE__ */ new Map();
-	if (y) for (let e of y.incoming) {
-		let t = e.descriptor.path ?? gi(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = yi(e.descriptor, {
-			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => v === void 0 ? void 0 : X(v, {
-				traceId: `incoming:${e.descriptor.id}`,
-				source: `incoming:${e.descriptor.id}`
-			}),
-			log: (e) => {
-				let t = {
-					webhookId: e.webhookId,
-					status: e.status,
-					signatureOk: String(e.signatureOk),
-					idempotency: e.idempotency,
-					durationMs: e.durationMs
-				};
-				e.status >= 500 ? ve.error("incoming delivery failed", t) : e.status >= 400 ? ve.warn("incoming delivery rejected", t) : ve.info("incoming delivery handled", t);
-			}
-		});
-		Ce.set(t, { handle: r });
-	}
-	vr(), Wr((t) => yr(e.store, t.subjectId, t.resourceType, t.resourceId)) || L({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
-	let we = [], Te = [...e.discovered.outboxHandlers ?? [], ...mn((y?.outgoing.length ?? 0) + (y?.incoming.length ?? 0) + (y?.providers.length ?? 0), []) ? [{
-		file: "<framework>/webhooks",
-		id: "voltro-webhook-emit",
-		definition: vi(() => xe)
-	}] : []], Ee = Te.length > 0 ? Pe({
-		handlers: Te,
-		store: e.store,
-		log: (e.log ?? L({ scope: "voltro:serve" })).child("outbox"),
-		onChange: (t) => e.store.onChange((e) => t({
-			table: e.table,
-			op: e.op
-		})),
-		onShutdown: (e) => {
-			we.push(e);
-		}
-	}) : void 0, b = g({
-		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
-		store: e.store,
-		publicUrl: yt(e.port ?? 4e3),
-		log: (e.log ?? L({ scope: "voltro:serve" })).child("connections")
-	});
-	at({
-		events: e.discovered.events ?? [],
-		rpcTags: [
-			...e.discovered.queries.map((e) => e.descriptor.name),
-			...e.discovered.mutations.map((e) => e.descriptor.name),
-			...e.discovered.actions.map((e) => e.descriptor.name),
-			...(e.discovered.streams ?? []).map((e) => e.descriptor.name)
-		]
-	});
-	let Ae = (e.log ?? L({ scope: "voltro:serve" })).child("events"), Me = e.broadcastNamespace ?? Ze(e.plugins, void 0), Fe = Re(e.plugins, Me, Ae), Ie = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, ze = e.membership ?? jt(e.plugins, {
-		instanceId: Ie,
-		namespace: Me,
-		meta: { mode: "serve" },
-		logger: Ae
-	}), S = pe({
-		events: e.discovered.events ?? [],
-		origin: Ie,
-		...Fe.publishRemote === void 0 ? {} : { publishRemote: Fe.publishRemote }
-	}), Be = (e.discovered.events ?? []).length > 0 ? await Fe.attach(S.bus) : null, C = Ct({
-		store: e.store,
-		schemaRegistry: e.schemaRegistry,
-		cache: i,
-		kv: a,
-		...xe === void 0 ? {} : { webhooksService: xe },
-		...v === void 0 ? {} : { workflowsProxy: v },
-		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: _e,
-		...e.ensureTenantProvisioned === void 0 ? {} : { ensureTenantProvisioned: e.ensureTenantProvisioned },
-		...e.resolveResidentStore === void 0 ? {} : { resolveResidentStore: e.resolveResidentStore },
-		...Ee === void 0 ? {} : { outbox: { nudge: Ee.nudge } },
-		...b.active ? { connections: { registry: b.registry } } : {},
-		eventBus: S.bus
-	}), Ve = G.succeed(Qn, p), He = G.succeed(q, Ue), We = G.succeed($n, Rt), Ke = G.succeed(nr, Ft), Je = (t, n) => {
-		let r = t.pipe(W.provide(Or(n)));
-		return (e.baseLayer ? r.pipe(W.provide(e.baseLayer)) : r).pipe(W.provide(Ve)).pipe(W.provide(He)).pipe(W.provide(We)).pipe(W.provide(Ke));
-	}, Ye = (e, t) => {
-		let n = Je(e, t);
-		return qr(n);
-	}, T = _n(), E = vt(e.plugins ?? [], T), Xe = u({
-		plugins: e.plugins ?? [],
-		metrics: T,
-		log: e.log ?? L({ scope: "voltro:serve" })
-	}), Qe = h(e.plugins ?? [], T), $e = e.security?.defaultDeny ?? !0, et = jr({
-		store: e.store,
-		defaultDeny: $e,
-		recordMetric: (e) => {
-			T.record(e);
-		},
-		...E.mutation === void 0 ? {} : { interceptor: E.mutation },
-		buildContext: (e, t, n) => C(e, t, n),
-		runEffect: Ye,
-		undoCapture: be()
-	}), nt = Le();
-	{
-		let t = s();
-		t !== void 0 && (e.log ?? L({ scope: "voltro:serve" })).info(t);
-	}
-	let rt = Ne({
-		store: e.store,
-		...e.approvals === void 0 ? {} : { defaultExpiryMs: e.approvals.defaultExpiryMs }
-	}), it = br({
-		defaultDeny: $e,
-		buildContext: (e) => C(e),
-		runEffect: Ye,
-		recordMetric: (e) => {
-			T.record(e);
-		},
-		...E.action === void 0 ? {} : { interceptor: E.action }
-	}), st = Pr({
-		tenantScopedTables: e.tenantScopedTables,
-		softDeleteScopedTables: e.softDeleteScopedTables
-	}), ct = {
-		defaultDeny: $e,
-		buildContext: (e) => C(e),
-		finalize: (e, t) => st(e, t.subject),
-		provideEffect: Je,
-		...E.query === void 0 ? {} : { interceptor: E.query }
-	}, D = Nr(ct), ut = Mr({
-		...ct,
-		queryRows: (t, n) => e.store.query(t).then((e) => $r(t.table, e, n.subject))
-	}), dt = Ir({
-		...ct,
-		subscribeDescriptor: (e, t, n) => r.subscribe(e, t, n),
-		subscribeComputed: (e, t, n) => r.subscribeComputed(e, t, n)
-	}), O = (e) => e.filter((e) => kn(e.descriptor)), k = {};
-	for (let t of [
-		...O(e.discovered.queries),
-		...nt.queries,
-		...rt.queries,
-		...b.queries
-	]) k[t.descriptor.name] = (e) => Y(D(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, Fr(t, e));
-	for (let t of [
-		...O(e.discovered.mutations),
-		...nt.mutations,
-		...rt.mutations,
-		...b.mutations
-	]) {
-		let n = Ar(t.descriptor.output);
-		k[t.descriptor.name] = (r) => J(async (e, n) => et(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, jn(t.descriptor, "mutation"));
-	}
-	for (let t of [...O(e.discovered.actions), ...b.actions]) {
-		let n = Ar(t.descriptor.output);
-		k[t.descriptor.name] = (r) => J(async (e, n) => it(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, jn(t.descriptor, "action"));
-	}
-	let ft = () => `public-${Math.random().toString(36).slice(2, 10)}`, A = [
-		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => ut(e, t, {
-				subject: n.subject,
-				traceId: ft()
-			}),
-			subscribe: (t, n, r) => dt(e, t, {
-				subject: n.subject,
-				traceId: ft()
-			}, r)
-		})),
-		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => et(e, t, {
-				subject: n.subject,
-				traceId: ft()
-			})
-		})),
-		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => it(e, t, {
-				subject: n.subject,
-				traceId: ft()
-			})
-		}))
-	], mt = {
-		candidates: m({
-			queries: e.discovered.queries,
-			mutations: e.discovered.mutations,
-			actions: e.discovered.actions,
-			descriptorOf: (e) => e.descriptor,
-			runQuery: (e, t, n) => Promise.resolve(ut(e, t, n)),
-			runMutation: (e, t, n) => Promise.resolve(et(e, t, n)),
-			runAction: (e, t, n) => Promise.resolve(it(e, t, n))
-		}),
-		policy: e.agents?.tools ?? {},
-		mcpEnabled: e.agents?.mcp === !0,
-		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject)
-	}, ht = Et({
-		...e.restRoutes === void 0 ? {} : { restRoutes: e.restRoutes },
-		publicApiEntries: A,
-		store: e.store,
-		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject),
-		...e.idempotency === void 0 ? {} : { idempotency: e.idempotency },
-		log: e.log ?? L({ scope: "voltro:serve" })
-	}), gt = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, _t = gt && gt.length >= 16 ? [{
-		method: "POST",
-		path: Pi,
-		handle: Hi({
-			secret: gt,
-			store: e.store,
-			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-			assetSink: Di(ai()),
-			openArchive: (e) => qi(ai(), e)
-		})
-	}, {
-		method: "POST",
-		path: Fi,
-		handle: Ki({
-			secret: gt,
-			store: e.store,
-			snapshot: e.dataTransferSnapshot ?? { tables: [] },
-			dialect: e.dataTransferDialect ?? "memory",
-			tenantTables: [...e.tenantScopedTables],
-			loadProfile: xn,
-			assetSource: Oi(ai(), e.store),
-			putArchive: async (e, t) => {
-				let { Readable: n } = await import("node:stream"), r = ai(), i = oi("storage", () => n.from(t()));
-				await W.runPromise(ci(r, e, i, { contentType: "application/octet-stream" }));
-			}
-		})
-	}] : [], bt = [
-		...e.httpRoutes ?? [],
-		...ht.httpRoutes,
-		..._t,
-		...b.httpRoutes
-	];
-	Object.assign(k, S.handlers);
-	for (let t of O(e.discovered.streams ?? [])) k[t.descriptor.name] = (n) => lr((r) => ni(r, (r) => {
-		let i = C(r), a = t.executor(n, i);
-		if (W.isEffect(a)) {
-			let t = a.pipe(W.provide(Or(i.store)));
-			return (e.baseLayer ? t.pipe(W.provide(e.baseLayer)) : t).pipe(W.provide(Ve)).pipe(W.provide(He)).pipe(W.provide(We)).pipe(W.provide(Ke));
-		}
-		return typeof a == "object" && a && typeof a.then == "function" ? W.promise(() => a) : a;
-	}), `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) k[t.definition.name] = (e) => J(async (e, n) => {
-		let r = n;
-		return X(v, {
-			subject: r.subject,
-			traceId: r.traceId,
-			source: "workflow-rpc"
-		}).start(t.definition.name, e);
-	}, e, `workflow.${t.definition.name}`);
-	he && (k[U.name] = (e) => Y(D({
-		descriptor: U,
-		executor: (e) => {
-			let t = e.id;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: Zn(K("id", t), K("executionId", t)),
-				take: 1,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), r, `subscription.${U.name}`), k[In.name] = (e) => Y(D({
-		descriptor: In,
-		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [K("tag", t.tag)], ...t.status === void 0 ? [] : [K("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : Jn(...n),
-				take: r,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), r, `subscription.${In.name}`), k[Fn.name] = (e) => Y(D({
-		descriptor: Fn,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_steps",
-				order: [{
-					column: "startedAt",
-					direction: "asc"
-				}],
-				predicate: K("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), r, `subscription.${Fn.name}`), k[H.name] = (e) => Y(D({
-		descriptor: H,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_events",
-				order: [{
-					column: "occurredAt",
-					direction: "asc"
-				}],
-				predicate: K("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), r, `subscription.${H.name}`), k[V.name] = (e) => Y(D({
-		descriptor: V,
-		executor: (e) => {
-			let t = e;
-			return {
-				table: "_voltro_workflow_events",
-				order: [{
-					column: "occurredAt",
-					direction: "desc"
-				}],
-				predicate: t.name === void 0 ? void 0 : K("name", t.name),
-				take: Math.max(1, Math.min(500, t.limit ?? 100)),
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), r, `subscription.${V.name}`), k[Nn.name] = (e) => Y(D({
-		descriptor: Nn,
-		executor: (e) => {
-			let t = e.eventId;
-			return {
-				table: "_voltro_workflow_event_deliveries",
-				order: [{
-					column: "createdAt",
-					direction: "asc"
-				}],
-				predicate: K("eventId", t),
-				take: 500,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), r, `subscription.${Nn.name}`), k[Mn.name] = (t) => J(async (t, n) => {
-		let r = t;
-		return await pt(e.store, n.subject, { executionId: r.executionId }), await v.cancel(r.workflowName, r.executionId), await Nt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Mn.name}`), k[Pn.name] = (t) => J(async (t, n) => {
-		let r = t;
-		return await pt(e.store, n.subject, { executionId: r.executionId }), await v.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Pn.name}`), k[Ln.name] = (t) => J(async (t, n) => {
-		let r = t;
-		return await pt(e.store, n.subject, { id: r.id }), v.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${Ln.name}`), k[Rn.name] = (t) => J(async (t, n) => {
-		let r = t;
-		return await pt(e.store, n.subject, { id: r.id }), v.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${Rn.name}`));
-	let St = [
-		...O(e.discovered.queries).map((e) => B(e.descriptor)),
-		...O(e.discovered.mutations).map((e) => z(e.descriptor)),
-		...O(e.discovered.actions).map((e) => R(e.descriptor)),
-		...nt.queries.map((e) => B(e.descriptor)),
-		...nt.mutations.map((e) => z(e.descriptor)),
-		...rt.queries.map((e) => B(e.descriptor)),
-		...rt.mutations.map((e) => z(e.descriptor)),
-		...b.queries.map((e) => B(e.descriptor)),
-		...b.mutations.map((e) => z(e.descriptor)),
-		...b.actions.map((e) => R(e.descriptor)),
-		...O(e.discovered.streams ?? []).map((e) => An(e.descriptor)),
-		...S.rpcs,
-		...(e.discovered.workflows ?? []).map((e) => ri(e.definition)),
-		...he ? [
-			B(U),
-			B(In),
-			B(Fn),
-			B(H),
-			B(V),
-			B(Nn),
-			R(Mn),
-			R(Pn),
-			R(Ln),
-			R(Rn)
-		] : []
-	], Tt = Kn.make(...St).middleware(En).middleware(Dn), Dt = Er({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), Ot = e.dormancyTenantId ?? er, kt = e.dormancy === "sleep" ? {
-		register: (t, n, r) => Gr(e.store, {
-			tenantId: r ?? Ot,
-			kind: "workflow",
-			refId: t,
-			wakeAt: n
-		}),
-		cancel: (t, n) => dr(e.store, {
-			tenantId: n ?? Ot,
-			kind: "workflow",
-			refId: t
-		}).then(() => {})
-	} : void 0, M = ge ? await import("@voltro/workflow") : void 0, N = M?.makeWorkflowRunRecorder({
-		store: e.store,
-		...e.workflowRecording === void 0 ? {} : { recording: e.workflowRecording },
-		...kt === void 0 ? {} : { wakeups: kt }
-	}), Mt = async (t, n) => {
-		await M.closeWorkflowChildrenForParent({
-			store: e.store,
-			parentExecutionId: t,
-			parentStatus: n,
-			recorder: N,
-			log: { warn: (e, t) => {
-				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-			} },
-			interruptChild: async (t, n) => {
-				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
-				if (!r) throw Error(`Unknown child workflow: ${t}`);
-				if (!d) throw Error("Workflow runtime is not ready");
-				await d.runPromise(r.definition.interrupt(n));
-			}
-		});
-	}, Nt = async (t, n, r) => {
-		let i = (await e.store.query({
-			table: "_voltro_workflow_runs",
-			order: [],
-			predicate: K("executionId", n),
-			projection: void 0,
-			skip: void 0,
-			take: 1
-		}))[0];
-		if (i === void 0) return;
-		let a = await e.store.update("_voltro_workflow_runs", i.id, {
-			status: "cancelled",
-			cancelled: !0,
-			completedAt: /* @__PURE__ */ new Date()
-		}), o = i.subject?.tenantId ?? void 0;
-		a && await N.recordEvent({
-			runId: i.id,
-			eventType: "run-cancelled",
-			payload: {
-				reason: r,
-				workflowName: t,
-				executionId: n,
-				...o == null ? {} : { tenantId: o }
-			}
-		}), a && await Mt(n, "cancelled");
-	}, Pt = [
-		...zr(e.discovered.workflows ?? [], {
-			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? C({
-				subject: t.subject,
-				traceId: t.traceId
-			}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-			resolveStartContext: de,
-			...fe === void 0 ? {} : { resolveAuthority: fe }
-		}, (t, n, r) => {
-			let i = M.getWorkflowVersionMetadata(t.definition);
-			return M.wrapWorkflowExecuteWithRunRecording({
-				name: t.definition.name,
-				store: e.store,
-				subject: r.subject,
-				source: r.source ?? null,
-				traceId: r.traceId,
-				workflowVersion: i.version,
-				workflowCompatibleVersions: i.compatibleWith,
-				workflowPatches: i.patches,
-				parentExecutionId: r?.parentExecutionId ?? null,
-				parentClosePolicy: r?.parentClosePolicy ?? null,
-				onParentClose: ({ executionId: e, status: t }) => Mt(e, t),
-				...Ge(t.definition),
-				onTerminal: async ({ executionId: e }) => {
-					await te?.gate.release(e);
-				},
-				recorder: N,
-				pluginWorkflowStepLayer: Qe,
-				recordRun: Ur
-			}, n);
-		}),
-		...e.discovered.workflowWorkers ?? [],
-		...Se === void 0 ? [] : [Se]
-	], It = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...Se === void 0 ? [] : ["voltro.deliverWebhook"]], Lt = Pt.length > 0 ? G.mergeAll(...Pt) : G.empty;
-	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || Se !== void 0) && e.workflowEngineLayer !== void 0) {
-		let t = Lt.pipe(G.provideMerge(e.workflowEngineLayer));
-		d = Bn.make(e.baseLayer === void 0 ? t : t.pipe(G.provideMerge(e.baseLayer))), await d.runPromise(W.void), (e.log ?? L({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${It.length} entity type(s) registered`, { entities: It });
-		let n = await import("@voltro/workflow/cluster"), r = (e) => d.runPromise(n.redriveFailedRun(e)), i = (e) => d.runPromise(n.resumeRunFromStep(e));
-		re = await j({
-			provider: Ci(e.plugins ?? [])?.broadcast?.provider,
-			crossReplica: Ci(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
-			namespace: Me,
-			replicaId: crypto.randomUUID(),
-			pollStorage: () => d.runPromise(n.pollWorkflowStorage),
-			onChange: (t) => e.store.onChange((e) => t({
-				table: e.table,
-				op: e.op,
-				...e.origin === void 0 ? {} : { origin: e.origin }
-			})),
-			log: (e.log ?? L({ scope: "voltro:serve" })).child("workflow")
-		}), ne = async (t) => {
-			let n = await oe({
-				store: e.store,
-				workflows: e.discovered.workflows ?? [],
-				runRedrive: r
-			}, t.runId);
-			return n.statusReset && await N.recordEvent({
-				runId: t.runId,
-				eventType: "run-redriven",
-				payload: {
-					reason: "inspect.redrive",
-					activitiesReset: n.outcome.activitiesReset
-				}
-			}), {
-				redriven: n.outcome.redriven,
-				activitiesReset: n.outcome.activitiesReset,
-				reason: n.outcome.reason
-			};
-		}, f = async (t) => {
-			let n = await Oe({
-				store: e.store,
-				workflows: e.discovered.workflows ?? [],
-				runResume: i
-			}, t.runId, t.step);
-			return n.statusReset && await N.recordEvent({
-				runId: t.runId,
-				eventType: "run-redriven",
-				payload: {
-					reason: "inspect.resume-from-step",
-					step: n.stepName,
-					activitiesReset: n.outcome.activitiesReset
-				}
-			}), {
-				redriven: n.outcome.redriven,
-				stepName: n.stepName,
-				activitiesReset: n.outcome.activitiesReset,
-				reason: n.outcome.reason
-			};
-		};
-		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? xr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Xr, s = Dr({
-			coordinator: a,
-			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`
-		}), l = {
-			info: (e, t) => {
-				process.stdout.write(`[flow-control] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-			},
-			warn: (e, t) => {
-				process.stderr.write(`[flow-control] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-			},
-			error: (e, t) => {
-				process.stderr.write(`[flow-control] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
-			}
-		}, u, p = () => {
-			if (u !== void 0) return u;
-			if (o !== void 0 && N !== void 0) return u = ie({
-				store: e.store,
-				log: I,
-				workflows: e.discovered.workflows ?? [],
-				workflowsProxy: o,
-				workflowRuntime: d,
-				workflowRunRecorder: N,
-				closeChildrenForParent: Mt
-			}), u;
-		};
-		ee = p, te = tt({
-			store: e.store,
-			onChange: (t) => e.store.onChange((e) => t({
-				table: e.table,
-				op: e.op
-			})),
-			...e.scheduling === void 0 ? {} : {
-				disarmWhenIdle: e.scheduling.disarmWhenIdle,
-				drainIntervalMs: e.scheduling.admissionDrainMs,
-				cancelSweepIntervalMs: e.scheduling.cancelSweepMs,
-				stalenessSweepIntervalMs: e.scheduling.stalenessSweepMs
-			},
-			workflows: e.discovered.workflows ?? [],
-			facade: () => o,
-			cancelRunWithReason: p,
-			recordRunEvent: () => N?.recordEvent,
-			...e.workflowStaleness === void 0 ? {} : { staleness: e.workflowStaleness },
-			...e.workflowSuspendSignalHintMs === void 0 ? {} : { suspendSignalHintMs: e.workflowSuspendSignalHintMs },
-			scheduleCoordinated: s,
-			onAbandoned: async (t) => {
-				await wt({
-					workflows: e.discovered.workflows ?? [],
-					facade: () => o,
-					log: l,
-					...t
-				});
-			},
-			log: l
-		});
-		let m = te;
-		m !== void 0 && Vr(() => m.stop()), c = qe({
-			store: e.store,
-			onChange: (t) => e.store.onChange((e) => t({
-				table: e.table,
-				op: e.op
-			})),
-			...e.scheduling === void 0 ? {} : {
-				disarmWhenIdle: e.scheduling.disarmWhenIdle,
-				tickIntervalMs: e.scheduling.inferenceTickMs
-			},
-			enabled: (e.discovered.workflows?.length ?? 0) > 0,
-			resumeSignal: () => d === void 0 || M === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
-				await d.runPromise(M.completeSuspendingSignal({
-					store: e.store,
-					target: At(t, n),
-					signalName: r,
-					payload: i
-				}));
-			},
-			runEffect: (e) => d.runPromise(e),
-			scheduleCoordinated: s,
-			log: l
-		});
-		let h = c;
-		h !== void 0 && Vr(() => h.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? Rr({
-			workflows: e.discovered.workflows ?? [],
-			runEffect: (e) => d.runPromise(e),
-			onEnqueue: () => re?.publishWake(),
-			...m === void 0 ? {} : {
-				admitStart: m.gate.admitStart,
-				startPayloadSchema: m.gate.startPayloadSchema,
-				parkDelayedStart: m.gate.parkDelayed
-			},
-			rememberStartContext: ue,
-			signal: async (t, n, r) => {
-				let i = await M.sendWorkflowSignal({
-					store: e.store,
-					recorder: N,
-					target: t,
-					signalName: n,
-					payload: r
-				});
-				return await d.runPromise(M.completeSuspendingSignal({
-					store: e.store,
-					target: t,
-					signalName: n,
-					payload: r
-				})).catch(() => {}), i;
-			},
-			update: (t, n, r, i) => M.sendWorkflowUpdate({
-				store: e.store,
-				recorder: N,
-				target: t,
-				updateName: n,
-				payload: r,
-				...i === void 0 ? {} : { options: i }
-			}),
-			listRuns: (t) => ke(e.store, t),
-			retry: (t, n) => je({
-				store: e.store,
-				workflows: e.discovered.workflows ?? [],
-				runPromise: (e) => d.runPromise(e)
-			}, t, n),
-			redrive: (t) => oe({
-				store: e.store,
-				workflows: e.discovered.workflows ?? [],
-				runRedrive: r
-			}, t).then((e) => e.outcome)
-		}) : void 0;
-	}
-	let Bt = G.mergeAll(Tt.toLayer(k), Dt), Vt = xt(k, e.discovered.queries.map((e) => e.descriptor.name), he), Ht = G.mergeAll(Tt.toLayer(Vt), Dt), P = e.observability, F = await ur({
-		...e.appName === void 0 ? {} : { serviceName: e.appName },
-		...P && P.spanProcessors.length > 0 ? { extraSpanProcessors: P.spanProcessors } : {},
-		...P && P.metricReaders.length > 0 ? { extraMetricReaders: P.metricReaders } : {},
-		...P && Object.keys(P.resourceAttributes).length > 0 ? { resourceAttributes: P.resourceAttributes } : {},
-		...P && P.sampler !== void 0 ? { sampler: P.sampler } : {}
-	}), Ut = !1, Wt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Gt, shutdown: Kt } = Zr({
-		group: Tt,
-		handlersLayer: Bt,
-		httpHandlersLayer: Ht,
-		port: e.port ?? 4e3,
-		...e.host === void 0 ? {} : { host: e.host },
-		path: e.path ?? "/ws",
-		tracerLayer: F.layer,
-		security: ye(e),
-		...Xe,
-		healthCheck: {
-			isReady: () => Ut,
-			...Wt ? { ping: Wt } : {}
-		},
-		...bt.length > 0 ? { httpRoutes: bt } : {},
-		...e.getStore === void 0 ? {} : { getStore: e.getStore },
-		...Ce.size > 0 ? { webhookRoutes: Ce } : {},
-		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
-	}), qt = Ni(Gt);
-	if (await cr(Gt), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? xr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Xr;
-		ce = await Qr(e.discovered.schedules ?? [], {
-			store: e.store,
-			coordinator: t,
-			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
-			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`,
-			armSelf: e.scheduleArmSelf ?? !0,
-			dormancy: e.dormancy ?? "always-on",
-			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
-			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => C({
-				subject: r,
-				traceId: t
-			}, e.store, void 0, `schedule:${n}`),
-			log: {
-				info: (e, t) => {
-					process.stdout.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				warn: (e, t) => {
-					process.stderr.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				error: (e, t) => {
-					process.stderr.write(`[schedule] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
-				},
-				debug: () => {}
-			},
-			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
-			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
-		}), e.onSchedulerReady?.(ce);
-	}
-	let I = e.log ?? L({ scope: "voltro:serve" }), Jt, Yt;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (Jt = x(e.discovered.subscribers ?? [], e.store, I.child("subscribe"), e.schemaRegistry, S.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = I.child("reaction"), n = async (n, r) => {
-			if (n.kind === "workflow") {
-				if (v === void 0) {
-					t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
-					return;
-				}
-				let e = n.payload === void 0 ? r.new ?? r.old ?? {} : n.payload(r);
-				await X(v, {
-					traceId: `reaction:${n.workflow}`,
-					source: `reaction:${n.workflow}`
-				}).start(n.workflow, e);
-				return;
-			}
-			await ot(n.agent, r, {
-				findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-				runAction: (e, t, n) => Promise.resolve(it(e, t, n)),
-				makeSubject: (e) => On(e),
-				now: () => Date.now(),
-				log: t
-			});
-		}, r = async (n, r) => {
-			try {
-				let { requireAiBudget: t } = await import("@voltro/ai");
-				return (await W.runPromise(W.either(t(e.store, {
-					tenantId: n,
-					limitUsd: r
-				}))))._tag === "Right";
-			} catch (e) {
-				return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
-			}
-		}, i = lt(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
-		Yt = l(e.discovered.reactions ?? [], e.store, {
-			runAct: n,
-			checkBudget: r,
-			claimRateSlot: (e) => i.claim(e)
-		}, t);
-	}
-	let Xt;
-	(e.discovered.aggregates?.length ?? 0) > 0 && (Xt = await De({
-		discovered: e.discovered.aggregates ?? [],
-		store: e.store,
-		log: I.child("aggregate"),
-		...e.analytics === void 0 ? {} : { analytics: e.analytics },
-		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
-		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), Ve = G.succeed(Qn, Xt.registry));
-	let Zt;
-	(e.discovered.expectations?.length ?? 0) > 0 && (Zt = ar({
-		discovered: e.discovered.expectations ?? [],
-		store: e.store,
-		log: I.child("expectation")
-	}), He = G.succeed(q, Zt.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = sr({
-		discovered: e.discovered.budgets ?? [],
-		log: I.child("finops")
-	}), We = G.succeed($n, n.registry));
-	let Qt;
-	return (e.discovered.experiments?.length ?? 0) > 0 && (Qt = or({
-		discovered: e.discovered.experiments ?? [],
-		store: e.store,
-		log: I.child("experiment")
-	}), Ke = G.succeed(nr, Qt.registry)), Ut = !0, e.bootTiming?.mark("ready"), {
-		dispatcher: r,
-		server: Gt,
-		scheduler: ce,
-		eventsSnapshot: me(S.bus, S.declared),
-		membersSnapshot: () => ({
-			members: ze.membership.list(),
-			capturedAt: Date.now()
-		}),
-		agentTools: () => mt,
-		rpcMetrics: () => T,
-		webhooksService: () => xe,
-		runCanceller: () => ee(),
-		flowControlHealth: () => te?.cancelHealth(),
-		inferenceHealth: () => c?.health(),
-		workflowWriteActions: () => v === void 0 || N === void 0 ? void 0 : se({
-			store: e.store,
-			log: I,
-			workflows: e.discovered.workflows ?? [],
-			workflowsProxy: o,
-			workflowRuntime: d,
-			workflowRunRecorder: N,
-			closeChildrenForParent: Mt
-		}),
-		redriveWorkflowRun: (e) => ne ? ne(e) : Promise.reject(/* @__PURE__ */ Error("redrive: this app registers no workflows")),
-		resumeWorkflowRunFromStep: (e) => f ? f(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
-		close: async () => {
-			Ut = !1, await qt.drainRequests();
-			for (let e of we) try {
-				await e();
-			} catch (e) {
-				I.warn("serve: teardown step failed", {}, e);
-			}
-			await Be?.detach(), await ze.detach(), Xt?.detach(), Zt?.detach(), n?.detach(), Qt?.detach(), Yt?.(), Jt?.(), await ce?.shutdown(), r.close(), await re?.detach(), await d?.dispose(), await Kt(), await qt.finish();
-		}
-	};
-}, $ = L({ scope: "voltro:serve" }), Xi = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Zi = Bt, Qi = async (e) => {
-	let t = yn(process.cwd());
-	if (wn(t)) {
-		let n;
-		try {
-			let e = await import(Tn(t).href);
-			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
-		} catch (e) {
-			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
-		}
-		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
-	}
-	return $i(e);
-}, $i = async (s) => {
-	let l = bn();
-	e("serve");
-	try {
-		di();
-	} catch (e) {
-		throw i(e instanceof Error ? e.message : String(e));
-	}
-	let u = process.cwd(), p = await We(u), ie = Vt({
-		kind: "api",
-		configPort: p?.port,
-		env: process.env,
-		flagPort: Zi(s, "--port")
-	});
-	for (let e of ie.warnings) $.warn(e);
-	let m = ie.port;
-	Jr(Kr(p?.secrets)), await Ht({
-		rawEnv: p?.env,
-		appType: "api",
-		root: u,
-		log: $,
-		generateTypes: !1
-	}), l.mark("config");
-	let h = (process.env.DB_DIALECT ?? p?.store ?? "memory").toLowerCase(), ae = (h === "mariadb" || h === "postgres" || h === "mssql") && (process.env.CDC ?? "1") !== "0", oe = h === "mariadb" ? "mariadb" : h === "mssql" ? "mssql" : void 0, se = vn(u);
-	if (!r() && wn(se)) try {
-		let e = await import(Tn(se).href);
-		if (e.modules) {
-			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Cn(u, n)] = r;
-			n(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
-		}
-	} catch (e) {
-		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
-	}
-	let g = await T(u), _ = await Ot(g, { cdc: ae && oe !== void 0 }), pe = y(_);
-	{
-		let e = /* @__PURE__ */ new Set([
-			..._.queries.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
-			..._.mutations.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
-			..._.actions.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name)
-		]);
-		Jt(I(p?.plugins ?? []), [
-			..._.queries.map((e) => e.descriptor.name),
-			..._.mutations.map((e) => e.descriptor.name),
-			..._.actions.map((e) => e.descriptor.name),
-			..._.streams.map((e) => e.descriptor.name)
-		], e);
-		let t = Me(_.serverOnlyLeaks, b(process.env, "strict"), mr, "`voltro serve`");
-		if (t.action === "fail") throw i(t.message ?? "");
-		t.action === "warn" && $.warn(t.message ?? "");
-	}
-	let me = g.filter((e) => gn.test(e)), be = me.length > 0 ? await hn(me, $.child("webhooks")) : {
-		outgoing: [],
-		incoming: [],
-		providers: []
-	}, De = pn(_.events), Oe = be.outgoing.length + be.incoming.length + be.providers.length + De.length === 0 ? void 0 : {
-		...be,
-		outgoing: [...be.outgoing, ...De]
-	}, ke = tn({
-		nodeEnv: process.env.NODE_ENV,
-		cdcDialect: oe,
-		declared: p?.schema
-	}), je = Xt({
-		gates: ke,
-		runtime: {
-			traces: ve(),
-			undo: ei()
-		}
-	});
-	if (je !== void 0) throw i(`serve: ${je}`);
-	let Ne = en({
-		mix: _.featureMix,
-		plugins: p?.plugins ?? [],
-		gates: ke,
-		...oe ? { cdcDialect: oe } : {}
-	}), Pe = p?.analytics !== void 0 && p.analytics.kind !== "noop" && h !== "memory" ? (await F(h)).makeSqlLayer(A()) : void 0, Le = await ee({
-		spec: p?.analytics,
-		sqlLayer: Pe,
-		log: $
-	}), x = (() => {
-		let e = new Set(_.tables.map((e) => e.tableName)), t = [..._.tables];
-		for (let n of [...Ne, ...Le.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
-		return t;
-	})();
-	for (let e of x) Xn(e);
-	{
-		let e = hr(ti(_.queries.map((e) => ({
-			name: e.descriptor.name,
-			source: e.descriptor.source
-		})), new Set(x.flatMap((e) => {
-			let t = e.tableName;
-			return t === void 0 ? [] : [t];
-		}))));
-		e !== void 0 && $.warn(e);
-	}
-	let Re = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (Xi(Re, h, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await F(h)).makeSqlLayer(A()), t = await W.runPromise(Vn.SqlClient.pipe(W.flatMap((e) => Wn(e, u)), W.provide(e), W.catchAll(() => W.succeed([]))));
-		t.length > 0 && ($.error(`serve: refusing to boot — ${t.length} pending file-based migration(s) have never run against this database. They perform the changes a schema diff cannot infer (data moves, backfills, table splits), so the declarative fingerprint check below cannot see them and would have let this process serve un-migrated data.`, { pending: t }), $.error("Run them from your pre-deploy job — `voltro db migrate .` (schema + files) or `voltro db files .` (files alone) — or set VOLTRO_AUTO_MIGRATE=0 to bypass every boot schema check. `voltro serve` never applies them itself: a rolling deploy would start N replicas and each would try."), process.exit(1));
-		let n = await W.runPromise(Vn.SqlClient.pipe(W.flatMap((e) => Gn(e, x, {
-			appliedBy: `serve:${Re}`,
-			environment: "prod",
-			dialectId: h
-		})), W.provide(e)));
-		n.kind === "prod-mismatch" && ($.error(Un(n, h)), $.error(Qt({
-			gates: ke,
-			nodeEnv: process.env.NODE_ENV,
-			cdcDialect: oe,
-			declared: p?.schema
-		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Un(n, h));
-	}
-	await qt({
-		dialectId: h,
-		tables: x,
-		mode: Gt(p?.reactiveTriggers),
-		lockSchema: A().schema,
-		makeLayer: async () => (await F(h)).makeSqlLayer(A()),
-		log: {
-			info: (e, t) => $.info(e, t ?? {}),
-			warn: (e, t) => $.warn(e, t ?? {})
-		}
-	});
-	let Ue = Lr(x);
-	l.mark("discover");
-	let w = await nt(p, void 0), Ge = ii(w, h);
-	for (let e of dt({
-		dialect: String(p?.store ?? process.env.DB_DIALECT ?? "postgres"),
-		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
-		dbUrl: process.env.DB_URL,
-		crossReplicaBus: Ci(p?.plugins ?? [])?.broadcast.crossReplica === !0,
-		tables: _.tables.map((e) => ({
-			tableName: e.tableName,
-			isReactive: e.isReactive === !0
-		})),
-		querySources: _.queries.flatMap((e) => {
-			let t = e.descriptor.source;
-			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
-		})
-	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
-	{
-		let e = E({
-			tables: qn().map((e) => ({ tableName: e.tableName })),
-			queries: _.queries.map((e) => ({
-				name: e.descriptor.name,
-				source: e.descriptor.source
-			}))
-		}), t = gt(e);
-		t !== void 0 && $.warn(t);
-	}
-	p?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = p.cache), p?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = p.cacheRedisUrl), p?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = p.cacheRedisDriver), p?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = p.cacheKeyPrefix);
-	let { service: qe, invalidationBus: tt, snapshotCache: at, cache: ot, semantic: lt, evictSource: pt, backend: vt, stats: yt, dispose: xt } = await Ke({
-		env: process.env,
-		semantic: p?.cacheSemantic ?? !1
-	});
-	lt !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${vt}` + (vt === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), w.onChange((e) => {
-		if (W.runFork(tt.publish(e.table)), pt !== void 0) {
-			let t = (e.new ?? e.old)?.id;
-			pt({
-				table: e.table,
-				op: e.op,
-				...t === void 0 ? {} : { id: t }
-			});
-		}
-	}), p?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = p.kv), p?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = p.kvRedisUrl), p?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = p.kvKeyPrefix);
-	let { kv: Ct, service: wt } = await Tr({ store: w });
-	He({
-		log: $,
-		max: Wt(),
-		outOfPool: Lt(h, (process.env.CDC ?? "1") !== "0"),
-		readPools: t.replicationSnapshot()?.replicaCount ?? 0,
-		always: !0
-	}), l.mark("store");
-	let Et = ir({
-		store: w,
-		sink: Le.sink,
-		log: $
-	}), At = kt({
-		store: w,
-		dialect: h,
-		log: { info: (e) => $.info(e) }
-	}), j = p?.plugins ?? [], Ft = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Rt, zt;
-	h !== "memory" && (Rt = Bn.make((await F(h)).makeSqlLayer(A())), zt = await Rt.runPromise(Vn.SqlClient));
-	let Bt = [
-		"postgres",
-		"mariadb",
-		"mysql",
-		"mssql"
-	].includes(h) ? xr(w, Ft, $) : Xr, mn = S(p?.scheduling), yn = Dr({
-		maxIdleIntervalMs: mn.pollCeilingMs,
-		coordinator: Bt,
-		replicaId: Ft,
-		log: $
-	}), xn = [], L = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, En = Ci(p?.plugins ?? [])?.broadcast?.provider, Dn = Ze(p?.plugins, p?.name ?? Sn(u));
-	{
-		let e = et(p?.plugins, p?.name ?? Sn(u));
-		e !== void 0 && $.warn(e);
-	}
-	let R = jt(p?.plugins, {
-		instanceId: L,
-		namespace: Dn,
-		meta: { mode: "serve" },
-		logger: $
-	}), On = {
-		...zt ? { sql: zt } : {},
-		instanceId: L,
-		membership: R.membership,
-		...En === void 0 ? {} : { broadcast: En },
-		broadcastChannels: { presence: Si(Dn, "presence") },
-		scheduleCoordinated: (e, t, n) => {
-			let r = yn(e, t, n);
-			return xn.push(r), r;
-		}
-	};
-	for (let e of j) e.bindDataStore?.(Ge, On);
-	c({
-		store: w,
-		...st(),
-		log: $
-	});
-	let kn = j.filter((e) => typeof e.onChangeEvent == "function");
-	if (kn.length > 0) {
-		let e = w.changeScope ?? "local";
-		w.onChange((t) => {
-			let n = he(t, e);
-			for (let e of kn) W.runFork(e.onChangeEvent(n).pipe(W.catchAllCause((t) => W.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: zn.pretty(t) })))));
-		});
-	}
-	let z = le({
-		plugins: j,
-		appName: p?.name ?? "voltro-api",
-		appType: "api",
-		voltroVersion: process.env.npm_package_version ?? "0.0.0",
-		log: $
-	});
-	j.length && await z.activate(), l.mark("plugins");
-	let B = await z.gatherObservability(), An = {
-		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
-		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
-		debug: () => {}
-	}, jn, Mn = await ht(w, p, h, Dn, An, (e, t) => {
-		jn?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
-	}), V = p?.apiKeys, Nn = (typeof V == "object" ? V.prefix : void 0) ?? "voltro_", Pn = V ? pr(w) : void 0, H = Pn ? Cr({ flush: wr(Pn) }) : void 0;
-	H && Vr(() => H.shutdown());
-	let U = Pn ? Sr(Pn, {
-		prefix: Nn,
-		...H ? { usage: H } : {}
-	}) : void 0, Fn = U ? [gr(U, { prefix: Nn })] : [], In = bt([...p?.auth?.strategies ?? [], ...Fn], bi(p?.plugins ?? []), p?.auth?.anonymousTenantRequired ?? !1, p?.auth, () => Ge), Ln = [...p?.restRoutes ?? [], ...U ? rr(U, (typeof V == "object" ? V.managementPath : void 0) ?? "/v1/api-keys") : []], Rn = k(p?.idempotency, w), Kn = j.map((e) => e.services).filter((e) => e !== void 0), Jn = G.mergeAll(Be({
-		analyticsLayer: Le.layer,
-		cacheService: qe,
-		kvService: wt,
-		...lt === void 0 ? {} : { semanticCache: lt },
-		pluginServices: Kn,
-		userLayers: p?.layers ?? []
-	}), rt(p?.http ?? {})), K = await it({
-		files: g,
-		store: w,
-		log: $,
-		seedPolicy: "report",
-		seedPattern: ln,
-		loadSeedFiles: Kt,
-		startupPattern: rn,
-		loadStartupFiles: a,
-		runStartups: o,
-		emailPattern: C,
-		loadEmailFiles: mt,
-		registerEmailTemplates: xi
-	});
-	(K.startupCount > 0 || K.emailCount > 0) && $.info("boot lifecycle", {
-		startups: K.startupCount,
-		emailTemplates: K.emailCount
-	}), K.startups !== void 0 && Vr(async () => {
-		await K.startups.stop();
-	}), ce({
-		demands: fe(pe),
-		isRegistered: (e) => _r(e) !== void 0
-	});
-	let Zn = ft({
-		schedules: St({
-			schedules: _.schedules,
-			seeds: K.seeds,
-			store: w,
-			log: $.child("seeds")
-		}),
-		workflows: _.workflows ?? [],
-		log: $.child("workflow-schedules")
-	}), Qn = p?.scheduling ?? {}, $n = Qn.trigger ?? "self", er = /* @__PURE__ */ new Set([
-		"postgres",
-		"mysql",
-		"mariadb",
-		"mssql"
-	]), tr = Qn.coordination ?? (er.has(h) ? "advisoryLock" : "single"), q = tr === "cluster" && er.has(h), nr = q ? "cluster" : tr === "advisoryLock" && er.has(h) ? "advisoryLock" : "single";
-	tr === "cluster" && !q && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), tr === "advisoryLock" && !er.has(h) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let ar, or = _.workflows.length > 0 || _.workflowWorkers.length > 0 || _.eventTriggers.length > 0 || (Oe?.outgoing.length ?? 0) > 0 || q, sr;
-	if (or) {
-		if (h === "mssql") {
-			let e = await fn(process.cwd());
-			e && $.warn(e);
-		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = q ? Zn.filter((e) => (e.trigger ?? $n) === "self").map((e) => t({
-			name: e.name,
-			cron: fr(e),
-			execute: async () => {
-				await ar?.fireFromCluster(e.name);
-			}
-		})) : [];
-		sr = h === "memory" ? e.layerMemory : await (async () => {
-			let e = await F(h), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
-			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
-				sqlClientLayer: e.makeSqlLayer(A()),
-				runnerStorage: t,
-				dialectId: e.id,
-				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
-				...i(),
-				...a.length > 0 ? { extraShardingLayers: a } : {}
-			});
-		})();
-	}
-	let cr = ue(j, _n()), J = g.filter((e) => /\.subscribe\.tsx?$/.test(e)), lr = J.length > 0 ? await xe(J, $) : [], Y = g.filter((e) => /\.reaction\.tsx?$/.test(e)), ur = Y.length > 0 ? await v(Y, $) : [], dr = g.filter((e) => sn.test(e)), vr = dr.length > 0 ? await Ie(dr, $) : [], yr = g.filter((e) => /\.aggregate\.tsx?$/.test(e)), br = yr.length > 0 ? await f(yr, $) : [], Er = _e();
-	if (br.length > 0 && h !== "memory") try {
-		let e = (await F(h)).makeSqlLayer(A());
-		Er = ct(e);
-	} catch (e) {
-		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
-	}
-	let Or = h === "memory" ? Xr : xr(w, `aggregate@${process.pid}`, $), kr = g.filter((e) => cn.test(e)), Ar = kr.length > 0 ? await d(kr, $) : [], jr = g.filter((e) => on.test(e)), Mr = jr.length > 0 ? await Te(jr, $) : [], Nr = g.filter((e) => an.test(e)), Pr = Nr.length > 0 ? await Mt(Nr, $) : [], Fr = [], Ir = [], Rr = g.filter((e) => $t.test(e));
-	if (Rr.length > 0) {
-		let e = $.child("agent"), t = g.filter((e) => Zt.test(e));
-		t.length > 0 && await nn(t, e);
-		let n = await Yt(Rr, e);
-		for (let e of n.agents) for (let t of Ye(e)) (t.kind === "action" ? Fr : Ir).push({
-			file: t.file,
-			descriptor: t.descriptor,
-			executor: t.executor
-		});
-		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
-	}
-	l.mark("workflow");
-	let X = () => {
-		let e = Z.workflowWriteActions();
-		if (e === void 0) throw Error("workflow actions: this app registers no workflows");
-		return e;
-	}, zr = Yn({
-		dialect: h,
-		...A()
-	}), Br = h === "memory" ? void 0 : (await F(h)).makeSqlLayer(A()), Hr = async () => Dt({
-		sqlLayer: Br,
-		declared: x,
-		log: $
-	}), Ur = {
-		kind: "api",
-		meta: {
-			name: p?.name ?? "voltro-api",
-			voltroVersion: Tt,
-			port: m,
-			mode: "start",
-			store: h,
-			cdc: ae ? "on" : "off",
-			...zr === void 0 ? {} : { databaseId: zr }
-		},
-		rpc: Qe(_, u),
-		workflows: ze(_, u),
-		migrations: Hr,
-		events: () => Z.eventsSnapshot(),
-		agentTools: () => Z.agentTools(),
-		invariantChecks: () => ({
-			mode: "serve",
-			accessGate: pe,
-			config: p,
-			serverOnlyLeaks: _.serverOnlyLeaks,
-			migrations: Hr
-		}),
-		members: () => Z.membersSnapshot(),
-		inspectFireSchedule: async ({ name: e, trigger: t }) => {
-			if (!ar) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
-			return { runId: await ar.fireNow(e, t) ?? null };
-		},
-		inspectBackfillSchedule: re({
-			getHandle: () => ar,
-			getSchedules: () => Zn
-		}),
-		...Oe === void 0 ? {} : { webhooks: () => ge({
-			store: w,
-			discoveredWebhooks: Oe
-		}) },
-		plugins: () => ({
-			plugins: z.snapshot(),
-			capturedAt: Date.now()
-		}),
-		env: () => P(p?.name ?? Sn(u), {
-			...p?.env !== void 0 && ui(p.env) ? { contract: p.env } : {},
-			plugins: p?.plugins ?? []
-		}),
-		dataCache: () => Ve({
-			stats: yt,
-			backendKind: vt
-		}),
-		subscriptions: () => Nt(() => jn),
-		inspectTables: () => de(_.tables),
-		inspectRows: Se({
-			store: w,
-			tables: _.tables,
-			mask: !0
-		}),
-		metrics: (e) => Z.rpcMetrics().snapshot(e),
-		cluster: () => It({
-			store: w,
-			dialect: h,
-			useClusterCron: q,
-			scheduleCoordChoice: tr
-		}),
-		inspectSchedules: () => Ee({
-			schedules: Zn,
-			defaultTrigger: $n,
-			coordination: nr
-		}),
-		inspectScheduleRuns: (e) => N(w, e),
-		...te(w, {
-			controls: O(_.workflows ?? []),
-			active: (_.workflows?.length ?? 0) > 0,
-			cancellation: () => Z.flowControlHealth()
-		}),
-		webhookActions: Ce(() => Z.webhooksService()),
-		inspectStartWorkflow: (e) => X().inspectStartWorkflow(e),
-		inspectCancelWorkflowRun: (e) => X().inspectCancelWorkflowRun(e),
-		inspectSuspendWorkflowRun: (e) => X().inspectSuspendWorkflowRun(e),
-		inspectResumeWorkflowRun: (e) => X().inspectResumeWorkflowRun(e),
-		inspectDiscardWorkflowRun: (e) => X().inspectDiscardWorkflowRun(e),
-		inspectRetryWorkflowRun: (e) => X().inspectRetryWorkflowRun(e),
-		inspectSignalWorkflowRun: (e) => X().inspectSignalWorkflowRun(e),
-		inspectUpdateWorkflowRun: (e) => X().inspectUpdateWorkflowRun(e),
-		inspectInferences: (e) => Xe({
-			store: w,
-			active: (_.workflows?.length ?? 0) > 0,
-			dispatcher: () => Z.inferenceHealth()
-		}, e.limit === void 0 ? {} : { limit: e.limit }),
-		..._t({
-			store: w,
-			cancelRun: async (e) => await Z.runCanceller()?.(e) ?? !1,
-			retryRun: async (e) => X().inspectRetryWorkflowRun({ runId: e }),
-			redriveRun: async (e) => Z.redriveWorkflowRun({ runId: e }),
-			log: $
-		}),
-		inspectRedriveWorkflowRun: (e) => Z.redriveWorkflowRun(e),
-		inspectResumeWorkflowRunFromStep: (e) => Z.resumeWorkflowRunFromStep(e)
-	}, Wr = (process.env.VOLTRO_TENANT_ISOLATION ?? p?.tenancy?.isolation) === "namespace", Gr = Wr && h !== "memory" ? await (async () => {
-		let e = await F(h);
-		return D({
-			tables: x,
-			sqlLayer: e.makeSqlLayer(A()),
-			dialect: h,
-			options: { retryFilter: e.retryFilter },
-			log: {
-				info: (e, t) => $.info(e, t),
-				error: (e, t, n) => $.error(e, t ?? {}, n)
-			}
-		});
-	})() : void 0, qr = await ut({
-		input: p?.tenancy?.residency,
-		namespaceIsolationOn: Wr,
-		makeStoreForUrl: (e, t) => nt(p, void 0, Ut(A(), t)),
-		log: {
-			info: (e, t) => $.info(e, t),
-			warn: (e, t) => $.warn(e, t)
-		}
-	});
-	qr !== void 0 && Vr(async () => {
-		await qr.close();
-	});
-	let Z = await Yi({
-		bootTiming: l,
-		broadcastNamespace: Dn,
-		scheduling: (() => {
-			let e = mn;
-			return {
-				admissionDrainMs: e.admissionDrainMs,
-				inferenceTickMs: e.inferenceTickMs,
-				cancelSweepMs: e.cancelSweepMs,
-				stalenessSweepMs: e.stalenessSweepMs,
-				disarmWhenIdle: $e({
-					changeScope: w.changeScope,
-					broadcastAttached: Mn !== void 0
-				})
-			};
-		})(),
-		...p?.workflows?.staleness === void 0 ? {} : { workflowStaleness: p.workflows.staleness },
-		...p?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: p.workflows.suspendSignalHintMs },
-		workflowRecording: M(p?.workflows?.recording),
-		membership: {
-			...R,
-			instanceId: L
-		},
-		security: {
-			defaultDeny: Ae(p),
-			...ye(p)
-		},
-		approvals: { defaultExpiryMs: Fe(p) },
-		...p?.plugins === void 0 ? {} : { plugins: p.plugins },
-		...Rn ? { idempotency: Rn } : {},
-		restRoutes: Ln,
-		appProcedures: pe,
-		discovered: {
-			queries: [..._.queries, ...Ir],
-			mutations: _.mutations,
-			actions: [..._.actions, ...Fr],
-			streams: _.streams,
-			events: _.events,
-			workflows: _.workflows,
-			workflowWorkers: _.workflowWorkers,
-			eventTriggers: _.eventTriggers,
-			schedules: Zn,
-			subscribers: lr,
-			outboxHandlers: vr,
-			connections: _.connections,
-			reactions: ur,
-			aggregates: br,
-			expectations: Ar,
-			budgets: Mr,
-			experiments: Pr,
-			...Oe === void 0 ? {} : { webhooks: Oe }
-		},
-		log: $,
-		analytics: Le.sink,
-		aggregateStorage: Er,
-		aggregateCoordinator: Or,
-		store: w,
-		kv: Ct,
-		cache: ot,
-		snapshotCache: at,
-		...p?.reactive === void 0 ? {} : { reactive: p.reactive },
-		schemaRegistry: Ue,
-		tenantScopedTables: _.tenantScopedTables,
-		softDeleteScopedTables: _.softDeleteScopedTables,
-		dataTransferSnapshot: Hn(x, h),
-		dataTransferDialect: h,
-		...Gr === void 0 ? {} : { ensureTenantProvisioned: Gr.ensure },
-		...qr === void 0 ? {} : { resolveResidentStore: qr.resolveStore },
-		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? p?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => In({
-			headers: e,
-			clientId: t
-		}),
-		...p?.auth === void 0 ? {} : { authority: p.auth },
-		...p?.agents === void 0 ? {} : { agents: p.agents },
-		httpRoutes: j.flatMap((e) => e.httpRoutes ?? []),
-		getStore: () => Ge,
-		...Jn ? { baseLayer: Jn } : {},
-		...sr === void 0 ? {} : { workflowEngineLayer: sr },
-		scheduleDefaultTrigger: $n,
-		scheduleCoordination: nr,
-		scheduleArmSelf: !q,
-		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : p?.dormancy ?? "always-on",
-		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...cr === void 0 ? {} : { scheduleFireInterceptor: cr },
-		onSchedulerReady: (e) => {
-			ar = e;
-		},
-		inspectRoute: { handle: async (e, t, n, r) => await ne(e, Ur, t, {
-			method: n,
-			...r === void 0 ? {} : { body: r }
-		}) || ((n === "GET" ? await dn(e, Ur, t, { method: n }) : null) ?? un(e, Ur, t, {
-			method: n,
-			...r === void 0 ? {} : { body: r }
-		}) ?? {
-			status: 404,
-			contentType: "application/json",
-			body: JSON.stringify({ error: "not an inspect route" })
-		}) },
-		...p?.name === void 0 ? {} : { appName: p.name },
-		observability: B,
-		port: m,
-		...p?.transport?.wsPath ? { path: p.transport.wsPath } : {}
-	});
-	return jn = Z.dispatcher, we(Pt([
-		_.queries,
-		_.mutations,
-		_.actions,
-		_.streams
-	]), (e) => {
-		$.warn(e);
-	}), $.info(`API listening on :${m}`, {
-		dialect: h,
-		queries: _.queries.length,
-		mutations: _.mutations.length,
-		actions: _.actions.length,
-		streams: _.streams.length,
-		workflows: _.workflows.length,
-		workflowWorkers: _.workflowWorkers.length,
-		schedules: Zn.length,
-		scheduleCoordination: nr
-	}), l.finish($), Vr(async () => {
-		for (let e of xn) e.stop();
-		At.stop();
-		try {
-			await Z.close(), xt(), Rt?.dispose(), await z.deactivate(), await Mn?.close(), await Je({
-				mirror: Et,
-				log: $
-			}), await Le.dispose(), await w.close?.();
-		} catch (e) {
-			console.error("serve: shutdown step failed, exiting anyway:", e);
-		}
-	}), await new Promise(() => {}), 0;
-};
-//#endregion
-export { Qi as n, Xi as r, $i as t };