@voltro/cli 0.56.0 → 0.58.0

package/dist/serveCommand-DIJ3ma76.js

@@ -1,2485 +0,0 @@
-import { t as e } from "./nodeEnvironment-cGFAj1J8.js";
-import { t } from "./frameworkInspectState-CX2250XB.js";
-import { r as n, t as r } from "./appModuleLoader-C9r9mxZt.js";
-import { t as i } from "./bootRefusal-pgvDxlrU.js";
-import { n as a, r as o } from "./startupRunner-CEqQq7ax.js";
-import { n as s, t as c } from "./interruptedReplace-CwnkBb2X.js";
-import { $ as l, $t as u, A as d, At as f, Bt as ee, C as te, Ct as p, D as ne, Dn as m, Dt as re, E as ie, En as h, Et as ae, F as oe, Fn as se, Ft as ce, G as le, Gt as ue, H as g, I as de, In as _, It as fe, J as pe, Jt as me, K as he, Kt as ge, L as v, Lt as y, M as _e, Mn as ve, Mt as ye, N as be, Nn as xe, Nt as Se, O as Ce, On as we, Ot as Te, P as Ee, Pn as b, Pt as De, Q as Oe, Qt as ke, R as Ae, Rt as x, S as je, Sn as Me, St as Ne, T as Pe, Tn as Fe, Tt as Ie, U as Le, Ut as Re, Vt as ze, W as Be, X as S, Xt as C, Y as Ve, Yt as He, Z as Ue, Zt as We, _ as Ge, _n as Ke, _t as w, an as qe, at as Je, b as Ye, bn as Xe, bt as Ze, c as Qe, cn as $e, ct as et, d as tt, dn as nt, dt as rt, en as it, et as at, fn as ot, ft as st, g as ct, gn as lt, gt as ut, h as dt, hn as ft, ht as pt, i as T, in as mt, it as ht, j as E, jn as D, jt as gt, k as _t, kn as vt, kt as yt, ln as bt, lt as O, m as xt, mn as St, mt as Ct, nn as wt, nt as Tt, o as k, on as Et, ot as Dt, p as Ot, pn as kt, pt as At, q as jt, qt as Mt, r as Nt, rn as Pt, rt as Ft, sn as It, st as A, t as j, tn as Lt, tt as Rt, u as zt, un as Bt, ut as M, v as Vt, vn as Ht, vt as Ut, w as Wt, wn as Gt, wt as Kt, x as qt, xn as N, xt as Jt, y as Yt, yn as Xt, yt as Zt, z as Qt, zt as $t } from "./dev-Dw263KPu.js";
-import { Kt as en, Vt as tn, zt as P } from "./webDev-C53hJdcL.js";
-import { g as nn, s as rn } from "./inspect-CNYvNXPU.js";
-import { n as F } from "./cliArgs-D4p8n7EE.js";
-import { r as an } from "./appPort-B_HpJ_ck.js";
-import { r as on, u as sn } from "./apiBuild-Bdaetr37.js";
-import { r as I } from "./dialectDriver-czCHYpeH.js";
-import { i as cn, n as ln } from "./connectionConfig-Bk9IC7D0.js";
-import { c as un, n as dn, o as fn } from "./seedRunner-DISBKow-.js";
-import { d as pn, h as mn, m as hn, p as gn, r as _n } from "./frameworkTableAssembly-DNOFXfEQ.js";
-import { n as vn, r as yn, t as bn } from "./declaredSchemaGates-BlcwObhb.js";
-import { C as xn, a as Sn, h as Cn, l as wn, n as Tn, u as En, w as Dn } from "./fileConventions-l-RIXbx8.js";
-import { i as On, n as kn, t as An } from "./inspectMetrics-BY0Sjb2F.js";
-import { n as jn } from "./mssqlClusterPatch-_4cE_nun.js";
-import { i as Mn, n as Nn, r as Pn, t as Fn } from "./webhookDiscovery-CphsQe59.js";
-import { t as In } from "./bootTiming-BdyP9nYw.js";
-import { a as Ln, o as Rn, t as zn } from "./dataProfile-Du3ztYxv.js";
-import L, { basename as Bn, join as Vn } from "node:path";
-import { createWriteStream as Hn, existsSync as Un } from "node:fs";
-import { pathToFileURL as Wn } from "node:url";
-import { LoggerLayer as Gn, createLogger as R } from "@voltro/logger";
-import { AuthMiddleware as Kn, ConnectionInfoMiddleware as qn, actionToRpc as z, anonymousSubject as Jn, isWireReachable as Yn, mutationToRpc as Xn, queryToRpc as B, streamToRpc as Zn, wireErrorUnion as Qn, workflowCancelDescriptor as $n, workflowDomainEventsQueryDescriptor as er, workflowEventDeliveriesQueryDescriptor as tr, workflowResumeDescriptor as nr, workflowRunEventsQueryDescriptor as rr, workflowRunQueryDescriptor as ir, workflowRunStepsQueryDescriptor as V, workflowRunsQueryDescriptor as ar, workflowSignalDescriptor as or, workflowUpdateDescriptor as sr } from "@voltro/protocol";
-import { DATA_TRANSFERS_TABLE as H, _voltroDataTransfersTable as cr, allRegisteredTables as lr, and as ur, connectionIdentity as dr, derivedRowId as fr, describeTransferRun as pr, ensureTableRegistered as mr, eq as U, or as W } from "@voltro/database";
-import { appMode as hr, frameworkVersion as gr, instanceId as _r, replicaId as vr, resolveAdvertisedHost as yr, setProcessAdvertisedAddress as br, setProcessBootPath as xr } from "@voltro/protocol/identity";
-import { AggregateRegistry as Sr, CostRegistry as Cr, DORMANCY_WAKEUP_TENANT as wr, Dispatcher as Tr, ExpectationRegistry as Er, ExperimentRegistry as Dr, apiKeyManagementRoutes as Or, attachAnalyticsMirror as kr, attachExpectations as Ar, attachExperiments as jr, attachFinops as Mr, awaitServerListening as Nr, bindMutation as G, bindStream as Pr, bindSubscription as Fr, buildTracingLayer as Ir, cancelWakeup as Lr, compileCron as Rr, dataStoreApiKeyStore as zr, formatServerOnlyLeaks as Br, formatUnresolvedSources as Vr, frameworkApiKeyStrategy as Hr, getResourcePolicy as Ur, installPolicyGuardResolver as Wr, loadResourceTuples as Gr, makeActionRunner as Kr, makeAdvisoryLockCoordinator as qr, makeApiKeyService as Jr, makeApiKeyUsageBuffer as Yr, makeApiKeyUsageFlusher as Xr, makeAsyncKv as Zr, makeAuthMiddlewareLayers as Qr, makeCoordinatedScheduler as $r, makeEffectStoreLayer as ei, makeLazyWorkflowFacade as ti, makeMutationOutputCodec as ni, makeMutationRunner as ri, makeOneShotQueryRunner as ii, makeQueryDescriptorProducer as ai, makeQueryFinalizer as oi, makeQueryReauthorizer as si, makeQuerySubscriber as ci, makeSchemaRegistry as li, makeWorkflowFacade as ui, makeWorkflowFacadeWithCallerContext as di, makeWorkflowLayers as K, noopKv as fi, onProcessShutdown as pi, recordSubscriptionDelivery as mi, recordWorkflowRun as hi, registerDefaultTupleSource as gi, registerWakeup as _i, resolveSecretsBackend as vi, runProvidedEffect as yi, setSecretsBackend as bi, setSystemStoreHandle as xi, shutdownGraceMsFromEnv as q, singleCoordinator as Si, startRpcServer as Ci, startScheduler as wi, stripForbiddenForWire as Ti, undoCaptureEnabled as Ei, unresolvedSources as Di, withScopedRequest as Oi, workflowToRpc as ki, wrapStoreWithBootCodec as Ai } from "@voltro/runtime";
-import { assertProductionSessionSecret as ji } from "@voltro/protocol/session";
-import { Cause as Mi, Effect as J, Layer as Y, ManagedRuntime as Ni } from "effect";
-import { SqlClient as Pi } from "@effect/sql";
-import { declaredSnapshot as Fi, describeOutcome as Ii, pendingFileMigrationIds as Li, runPlannedMigrations as Ri } from "@voltro/database/sql";
-import zi, { tmpdir as Bi } from "node:os";
-import { RpcGroup as Vi } from "@effect/rpc";
-import { appStorageProvider as Hi, durabilityNotice as Ui, fromNodeReadable as Wi, getObjectStream as Gi, putObjectStream as Ki, toNodeReadable as qi } from "@voltro/plugin-storage";
-import { isEnvContract as Ji } from "@voltro/env";
-import X from "node:fs/promises";
-import { createHash as Yi, timingSafeEqual as Xi } from "node:crypto";
-import { channelFor as Zi, getBroadcastPlugin as Qi } from "@voltro/plugin-broadcast";
-import { buildDeliverWebhookExecute as $i, buildWebhooksService as ea, defaultIncomingPath as ta, deliverWebhookWorkflow as na, makeDeferredEmitHandler as ra, mountIncomingWebhook as ia } from "@voltro/plugin-webhooks";
-import { getAuthSessionStrategy as aa } from "@voltro/plugin-auth";
-import { registerEmailTemplates as oa } from "@voltro/plugin-mail";
-import { checkSchemaDrift as sa, decideStaging as ca, isEnvironmentLocal as la, packBundle as ua, peekBundle as da, runExport as fa, runImport as pa, storageBlobSink as ma, storageRefsBlobSource as ha, unpackBundle as ga, unpackBundleToDir as _a } from "@voltro/data-transfer";
-//#region \0rolldown/runtime.js
-var va = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy < "u" ? new Proxy(e, { get: (e, t) => (typeof require < "u" ? require : e)[t] }) : e)(function(e) {
-	if (typeof require < "u") return require.apply(this, arguments);
-	throw Error("Calling `require` for \"" + e + "\" in an environment that doesn't expose the `require` function. See https://rolldown.rs/in-depth/bundling-cjs#require-external-modules for more details.");
-}), ya = () => Math.max(500, Math.floor(q() * .6)), ba = (e) => new Promise((t) => setTimeout(t, e)), xa = (e) => {
-	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = 0;
-	e.on("connection", (e) => {
-		t.add(e), e.once("close", () => {
-			t.delete(e), n.delete(e);
-		});
-	}), e.on("upgrade", (e, t) => {
-		n.add(t);
-	}), e.on("request", (e, t) => {
-		r += 1, t.once("close", () => {
-			--r;
-		});
-	});
-	let i, a = async (t = {}) => {
-		let n = t.budgetMs ?? ya();
-		i ??= new Promise((t) => {
-			e.close(() => {
-				t();
-			});
-		}), e.closeIdleConnections();
-		let a = Date.now() + n;
-		for (; r > 0 && Date.now() < a;) await ba(25), e.closeIdleConnections();
-		e.closeIdleConnections();
-	}, o = async () => {
-		i ??= new Promise((t) => {
-			e.close(() => {
-				t();
-			});
-		});
-		for (let e of t) if (n.has(e)) try {
-			e.write(Buffer.from([
-				136,
-				2,
-				3,
-				233
-			]));
-		} catch {}
-		else e.destroy();
-		for (let e = 0; t.size > 0 && e < 250; e += 25) await ba(25);
-		for (let e of t) e.destroy();
-		await i;
-	};
-	return {
-		activeRequests: () => r,
-		drainRequests: a,
-		finish: o,
-		drain: async (e = {}) => {
-			await a(e), await o();
-		}
-	};
-}, Sa = "/_voltro/admin/import", Ca = "/_voltro/admin/import/start", wa = "/_voltro/admin/export", Ta = "/_voltro/admin/export/download", Ea = "/_voltro/admin/transfers", Z = (e, t) => ({
-	status: e,
-	contentType: "application/json; charset=utf-8",
-	body: JSON.stringify(t)
-}), Da = (e) => {
-	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
-	return n ? n[1] : null;
-}, Oa = (e, t) => Xi(Yi("sha256").update(e).digest(), Yi("sha256").update(t).digest()), ka = (e, t, n = "POST") => {
-	if (e.method.toUpperCase() !== n) return Z(405, { error: "method not allowed" });
-	if (!t || t.length < 16) return Z(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let r = Da(e.headers);
-	return !r || !Oa(r, t) ? Z(401, { error: "unauthorized" }) : null;
-}, Aa = /^[A-Za-z0-9_-]{8,64}$/, ja = (e) => Aa.test(e), Ma = () => process.env.VOLTRO_IMPORT_UPLOAD_DIR ?? L.join(zi.tmpdir(), "voltro-import-uploads"), Na = (e) => L.join(Ma(), e), Pa = (e) => L.join(Na(e), "archive.bin"), Fa = (e) => L.join(Na(e), "meta.json"), Ia = async (e = Date.now()) => {
-	let t = 0;
-	try {
-		for (let n of await X.readdir(Ma())) {
-			if (n === ".runs") continue;
-			let r = await X.stat(Na(n)).catch(() => null);
-			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(Na(n), {
-				recursive: !0,
-				force: !0
-			}).catch(() => void 0), t++));
-		}
-	} catch {}
-	return t;
-}, La = async (e) => {
-	if (!ja(e)) return {
-		bytes: 0,
-		key: null,
-		runId: null
-	};
-	let t = await X.stat(Pa(e)).catch(() => null);
-	if (t === null) return {
-		bytes: 0,
-		key: null,
-		runId: null
-	};
-	let n = await Ra(e);
-	return {
-		bytes: t.size,
-		key: n.key ?? null,
-		runId: n.runId ?? null
-	};
-}, Ra = async (e) => {
-	try {
-		let t = await X.readFile(Fa(e), "utf8");
-		return JSON.parse(t);
-	} catch {
-		return {};
-	}
-}, za = async (e, t) => {
-	let n = Fa(e), r = `${n}.${process.pid}.${Math.random().toString(36).slice(2, 8)}.tmp`;
-	await X.writeFile(r, JSON.stringify(t)), await X.rename(r, n);
-}, Ba = async (e, t, n) => {
-	if (!ja(e)) return t;
-	await X.mkdir(Na(e), { recursive: !0 });
-	let r = await Ra(e), i = typeof r.runId == "string" && r.runId.length > 0 ? r.runId : null;
-	return i !== null && n?.takeOver !== !0 ? i : (await za(e, {
-		...r,
-		runId: t
-	}), t);
-}, Va = async (e) => {
-	if (!ja(e)) return;
-	let t = await Ra(e);
-	if (t.runId === void 0) return;
-	let { runId: n, ...r } = t;
-	await za(e, r).catch(() => void 0);
-}, Ha = async (e, t, n) => (await X.mkdir(Na(e), { recursive: !0 }), await X.writeFile(Pa(e), Buffer.from(t)), await za(e, {
-	...await Ra(e),
-	key: n,
-	startedAt: (/* @__PURE__ */ new Date()).toISOString()
-}), t.byteLength), Ua = (e) => `up-${Yi("sha256").update(e).digest("hex").slice(0, 32)}`, Wa = async (e) => {
-	if (!ja(e.id)) return {
-		reason: "bad-id",
-		message: `upload id must match ${String(Aa)}`
-	};
-	let t = await La(e.id);
-	if (t.key !== null && t.key !== e.key) return {
-		reason: "key-mismatch",
-		message: "this upload id already holds a different bundle. Use a new upload id, or delete the partial upload."
-	};
-	if (e.offset !== t.bytes) return {
-		reason: "offset-mismatch",
-		message: `chunk starts at ${e.offset} but the server holds ${t.bytes} byte(s)`,
-		expectedOffset: t.bytes
-	};
-	if (await X.mkdir(Na(e.id), { recursive: !0 }), t.key === null) {
-		let t = await Ra(e.id);
-		await za(e.id, {
-			...t,
-			key: e.key,
-			startedAt: (/* @__PURE__ */ new Date()).toISOString()
-		});
-	}
-	return await new Promise((t, n) => {
-		let r = Hn(Pa(e.id), { flags: "a" });
-		r.on("error", n), r.on("finish", () => t()), r.end(Buffer.from(e.bytes));
-	}), { total: t.bytes + e.bytes.byteLength };
-}, Ga = async (e) => {
-	let t = await X.stat(Pa(e));
-	return {
-		path: Pa(e),
-		bytes: t.size
-	};
-}, Ka = () => L.join(Ma(), ".runs"), qa = (e) => L.join(Ka(), `${e}.bin`), Ja = async (e, t) => {
-	if (!ja(e)) return null;
-	let n = Pa(e), r = await X.stat(n).catch(() => null);
-	if (r === null || r.size === 0) return null;
-	await X.mkdir(Ka(), { recursive: !0 });
-	let i = qa(t);
-	return await X.rename(n, i), i;
-}, Ya = async (e) => {
-	await X.rm(qa(e), { force: !0 }).catch(() => void 0);
-}, Q = R({ scope: "voltro:admin-import" }), Xa = "VBUNDLE2", Za = (e) => {
-	let t = e.req.headers["x-import-rollback-key"];
-	if (e.mode !== "replace") return { options: {} };
-	if (typeof t != "string" || t.length === 0) return Q.warn("admin.import: no rollback capture — this run empties the target first, and nothing was asked to be kept. Send `x-import-rollback-key: <storage key>` (voltro data import --rollback-key <key>) to have the instance store the target's current rows before deleting them."), { options: {} };
-	if (e.deps.putArchive === void 0) return {
-		options: {},
-		refusal: Z(409, {
-			error: "rollback capture requested but this instance has no object storage configured",
-			hint: "A capture written to the pod would not survive the failure it exists for. Configure storage (the same one the storage-push export uses), or re-send without `x-import-rollback-key` to accept that a run which does not finish can leave the target emptied. Note that CONFIGURED is not the same question as SURVIVES: a `filesystem` provider pointed at a container directory with no volume behind it passes this check and dies with the pod. The run says so when it can observe it — the capture path being on the same filesystem as `/`."
-		})
-	};
-	let n = Vn(Bi(), `voltro-rollback-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`), r = e.deps.putArchive;
-	return {
-		key: t,
-		options: {
-			rollbackDir: n,
-			onRollbackCaptured: async () => {
-				let e = Ui(n);
-				e !== void 0 && Q.warn(`admin.import: ${e}`), await r(t, () => ua({ dir: n })), Q.info("admin.import: rollback capture stored", { bundleKey: t });
-			}
-		}
-	};
-}, Qa = (e) => {
-	let t = e["x-import-mode"], n = e["x-import-atomic"];
-	return {
-		mode: t,
-		onConflict: e["x-import-on-conflict"],
-		atomic: n === "0" || n === "false" ? !1 : n === "1" || n === "true" || t === "replace",
-		force: e["x-import-force"] === "1" || e["x-import-force"] === "true",
-		dryRun: e["x-import-dry-run"] === "1" || e["x-import-dry-run"] === "true",
-		tables: (e["x-import-tables"] ?? "").split(",").map((e) => e.trim()).filter(Boolean)
-	};
-}, $a = async (e, t) => {
-	if (typeof t.bundleKey == "string" && t.bundleKey !== "") {
-		if (!e.openArchive) return { refusal: Z(501, { error: "storage transport not configured on this instance" }) };
-		let n = e.openArchive, r = t.bundleKey;
-		return {
-			source: () => n(r),
-			transport: "storage",
-			uploadId: Ua(r)
-		};
-	}
-	let n = t.uploadId;
-	if (typeof n != "string" || !ja(n)) return { refusal: Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" }) };
-	let r = await Ga(n).catch(() => null);
-	return r === null || r.bytes === 0 ? { refusal: Z(409, {
-		error: "no such upload",
-		message: `this instance holds no bytes for upload '${n}'. Upload the bundle first, or re-upload if it has expired.`
-	}) } : {
-		source: () => eo(r.path),
-		transport: "upload",
-		uploadId: n
-	};
-}, eo = (e) => {
-	let { createReadStream: t } = va("node:fs");
-	return t(e);
-}, to = (e) => async (t) => {
-	let n = ka(t, e.secret);
-	if (n) return n;
-	let r = Qa(t.headers), i = Za({
-		req: t,
-		mode: r.mode,
-		deps: e
-	});
-	if (i.refusal !== void 0) return i.refusal;
-	if (t.headers["x-import-preflight"] === "1" || t.headers["x-import-preflight"] === "true") {
-		let n;
-		try {
-			n = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-		} catch {
-			return Z(400, { error: "a preflight body must be JSON: { tables: string[] } or { bundleKey: string }" });
-		}
-		let a = Array.isArray(n.tables) ? n.tables.filter((e) => typeof e == "string") : [];
-		if (a.length === 0 && typeof n.bundleKey == "string" && n.bundleKey !== "" && e.openArchive && (a = [...await no(e.openArchive(n.bundleKey))]), a.length === 0) return Z(400, {
-			error: "a preflight needs { tables: string[] } — the bundle's table names, so the staging decision can be made against them",
-			hint: "or { bundleKey } on an instance with storage configured, where this endpoint reads the table list out of the archive itself"
-		});
-		let o = ca({
-			mode: r.mode ?? "upsert",
-			...e.dialect === void 0 ? {} : { targetDialect: e.dialect },
-			...e.snapshot === void 0 ? {} : { targetSnapshot: e.snapshot },
-			bundleTables: a,
-			isSkipped: la,
-			canRunSql: !0
-		});
-		return Z(200, {
-			preflight: !0,
-			mode: r.mode ?? "upsert",
-			atomic: r.atomic,
-			staged: o.active,
-			...o.blocker === void 0 ? {} : { reason: o.blocker },
-			stagedTables: o.tables.length,
-			rollback: i.key === void 0 ? { taken: !1 } : {
-				taken: !0,
-				key: i.key
-			},
-			dialect: e.dialect ?? null
-		});
-	}
-	let a = t.headers["x-import-upload-id"];
-	if (a !== void 0 && a !== "") {
-		if (Ia(), t.headers["x-import-probe"] === "1") {
-			let e = await La(a);
-			return Z(200, {
-				uploadId: a,
-				bytes: e.bytes,
-				...e.runId === null ? {} : { runId: e.runId }
-			});
-		}
-		let e = t.headers["x-import-upload-key"] ?? "", n = Number(t.headers["x-import-chunk-offset"] ?? "0");
-		if (e === "" || !Number.isFinite(n) || n < 0) return Z(400, { error: "a chunked upload needs x-import-upload-key and a numeric x-import-chunk-offset" });
-		let r = await Wa({
-			id: a,
-			key: e,
-			offset: n,
-			bytes: t.rawBody
-		});
-		if ("reason" in r) return Q.warn("admin.import chunk refused", {
-			uploadId: a,
-			reason: r.reason
-		}), Z(409, {
-			error: "chunk refused",
-			reason: r.reason,
-			message: r.message,
-			...r.expectedOffset === void 0 ? {} : { expectedOffset: r.expectedOffset }
-		});
-		let i = t.headers["x-import-chunk-final"] === "1";
-		return Z(202, {
-			uploadId: a,
-			bytes: r.total,
-			complete: i
-		});
-	}
-	if (t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === Xa) {
-		Ia();
-		let e = Yi("sha256").update(Buffer.from(t.rawBody)).digest("hex"), n = Ua(e);
-		return Z(202, {
-			uploadId: n,
-			bytes: await Ha(n, t.rawBody, e),
-			complete: !0
-		});
-	}
-	let o;
-	try {
-		o = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-	} catch {
-		return Z(400, { error: "body must be a packed bundle archive or { bundleKey } JSON" });
-	}
-	return typeof o.bundleKey != "string" || !o.bundleKey ? Z(400, { error: "body.bundleKey (string) is required for the storage transport" }) : e.openArchive ? Z(202, {
-		uploadId: Ua(o.bundleKey),
-		bundleKey: o.bundleKey,
-		complete: !0
-	}) : Z(501, { error: "storage transport not configured on this instance" });
-}, no = async (e) => {
-	let t = await da(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => void 0);
-	if (t === void 0) return [];
-	try {
-		return (JSON.parse(Buffer.from(t).toString("utf8")).tables ?? []).map((e) => e.name).filter((e) => typeof e == "string");
-	} catch {
-		return [];
-	}
-}, ro = (e) => async (t) => {
-	let n = ka(t, e.secret);
-	if (n) return n;
-	let r = Qa(t.headers), i = Za({
-		req: t,
-		mode: r.mode,
-		deps: e
-	});
-	if (i.refusal !== void 0) return i.refusal;
-	let a;
-	try {
-		a = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-	} catch {
-		return Z(400, { error: "body must be JSON: { uploadId } or { bundleKey }" });
-	}
-	let o = typeof a.bundleKey == "string" && a.bundleKey !== "" ? Ua(a.bundleKey) : typeof a.uploadId == "string" ? a.uploadId : "";
-	if (!ja(o)) return Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" });
-	let s = fr("dimp", `${o}-${Date.now()}-${Math.random()}`), c = await Ba(o, s);
-	if (c !== s) {
-		let t = await Ln(e.store, c);
-		if (Rn(t) === void 0 && t !== null) return Q.info("admin.import start: already running", {
-			uploadId: o,
-			runId: c
-		}), Z(202, {
-			runId: c,
-			uploadId: o,
-			alreadyStarted: !0
-		});
-		Q.info("admin.import start: taking over a claim whose run is not running", {
-			uploadId: o,
-			staleRunId: c,
-			outcome: Rn(t) ?? "no record"
-		}), c = await Ba(o, s, { takeOver: !0 });
-	}
-	let l = async (e) => (await Va(o).catch(() => void 0), e), u = await $a(e, {
-		...typeof a.uploadId == "string" ? { uploadId: a.uploadId } : {},
-		...typeof a.bundleKey == "string" ? { bundleKey: a.bundleKey } : {}
-	});
-	if ("refusal" in u) return l(u.refusal);
-	if (e.snapshot !== void 0 && !r.force) {
-		let t = await io(u.source());
-		if (t !== null) {
-			let n = sa(t.source?.schemaFingerprint ?? "", e.snapshot, ao(t));
-			if (n.drifted) return Q.warn("admin.import refused (schema drift)", {
-				transport: u.transport,
-				bundle: n.bundleFingerprint.slice(0, 16),
-				target: n.targetFingerprint.slice(0, 16)
-			}), l(Z(409, {
-				error: "schema drift",
-				bundleFingerprint: n.bundleFingerprint,
-				targetFingerprint: n.targetFingerprint,
-				diff: n.diff,
-				hint: "each line above would break the load: a table or column the bundle carries that the target cannot take, or a column the target requires that the bundle has no value for. Fix the target schema, re-export against it, or resend with x-import-force: 1 to write anyway."
-			}));
-		}
-	}
-	let d = null;
-	if (u.transport === "upload" && (d = await Ja(u.uploadId, c), d === null)) return l(Z(409, {
-		error: "no such upload",
-		message: `the bytes for upload '${u.uploadId}' are gone. Re-upload the bundle.`
-	}));
-	let f = await oo(e.store, {
-		runId: c,
-		mode: r.mode ?? "upsert",
-		via: "api",
-		bundle: u.transport === "storage" ? String(a.bundleKey) : u.uploadId
-	});
-	return so({
-		deps: e,
-		opts: r,
-		rollback: i,
-		runId: c,
-		traced: f,
-		resolved: d === null ? u : {
-			...u,
-			source: () => eo(d)
-		}
-	}), Q.info("admin.import started", {
-		runId: c,
-		uploadId: u.uploadId,
-		transport: u.transport,
-		mode: r.mode ?? "upsert",
-		atomic: r.atomic,
-		dryRun: r.dryRun
-	}), Z(202, {
-		runId: c,
-		uploadId: u.uploadId,
-		transport: u.transport,
-		mode: r.mode ?? "upsert",
-		atomic: r.atomic,
-		...r.dryRun ? { dryRun: !0 } : {},
-		recorded: f,
-		outcome: "poll /_voltro/admin/transfers for this runId — a 202 means started, not finished"
-	});
-}, io = async (e) => {
-	let t = await da(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => null);
-	if (t == null) return null;
-	try {
-		return JSON.parse(Buffer.from(t).toString("utf8"));
-	} catch {
-		return null;
-	}
-}, ao = (e) => ({ tables: (e.tables ?? []).map((e) => ({
-	name: e.name,
-	indexes: [],
-	columns: Object.entries(e.columnTypes ?? {}).map(([e, t]) => ({
-		name: e,
-		type: t,
-		nullable: !0,
-		unique: !1,
-		hasDefault: !1
-	}))
-})) }), oo = async (e, t) => {
-	try {
-		return mr(cr), await e.insert(H, {
-			id: t.runId,
-			direction: "import",
-			startedAt: /* @__PURE__ */ new Date(),
-			finishedAt: null,
-			failure: null,
-			mode: t.mode,
-			via: t.via,
-			bundle: t.bundle,
-			sourceFingerprint: null,
-			tablesWritten: 0,
-			rowsWritten: 0,
-			staged: null
-		}), !0;
-	} catch (e) {
-		return Q.warn("admin.import: the run could not be recorded", {
-			runId: t.runId,
-			error: e?.message ?? String(e)
-		}), !1;
-	}
-}, so = async (e) => {
-	let { deps: t, opts: n, rollback: r, resolved: i, runId: a } = e, o = await import("node:os"), s = await import("node:fs/promises"), c = await import("node:path"), l = await s.mkdtemp(c.join(o.tmpdir(), "voltro-admin-import-")), u = async (n) => {
-		Q.warn("admin.import failed", {
-			runId: a,
-			transport: i.transport,
-			error: n
-		}), e.traced && await t.store.update(H, a, {
-			failure: n,
-			finishedAt: null
-		}).then(() => void 0, () => void 0);
-	};
-	try {
-		t.assetSink ? await ga(i.source(), {
-			dir: l,
-			blobs: t.assetSink
-		}) : await _a(i.source(), l);
-		let o = await J.runPromiseExit(pa({
-			store: t.store,
-			bundleDir: l,
-			...n.mode ? { mode: n.mode } : {},
-			...n.onConflict ? { onConflict: n.onConflict } : {},
-			atomic: n.atomic,
-			...r.options,
-			recordInterruption: !0,
-			via: "api",
-			...e.traced ? { traceId: a } : {},
-			...n.dryRun ? { dryRun: n.dryRun } : {},
-			...n.tables.length > 0 ? { tables: [...n.tables] } : {},
-			...t.snapshot ? { targetSnapshot: t.snapshot } : {},
-			...t.dialect ? { targetDialect: t.dialect } : {},
-			force: n.force,
-			onWarn: (e) => Q.warn("admin.import", {
-				runId: a,
-				message: e
-			}),
-			...t.assetSink ? { assetsAlreadyRestored: !0 } : {}
-		}));
-		if (o._tag === "Failure") {
-			let e = o.cause._tag === "Fail" ? o.cause.error : void 0, t = typeof e?.reason == "string" ? e.reason : void 0, n = e?.diff;
-			await u(t ?? (Array.isArray(n) ? `schema drift: ${n.join("; ")}` : void 0) ?? String(e?.message ?? e ?? "import failed"));
-			return;
-		}
-		let s = o.value;
-		Q.info(n.dryRun ? "admin.import (dry run — nothing written)" : "admin.import complete", {
-			runId: a,
-			transport: i.transport,
-			tables: s.tablesWritten,
-			rows: s.rowsWritten,
-			mode: n.mode ?? "upsert",
-			atomic: n.atomic,
-			...s.tablesSkipped > 0 ? {
-				skippedTables: s.tablesSkipped,
-				skippedRows: s.rowsSkipped
-			} : {}
-		}), n.dryRun || t.refreshSubscriptions?.(`data import: ${s.tablesWritten} table(s), mode ${n.mode ?? "upsert"}`);
-	} catch (e) {
-		await u(e?.message ?? String(e));
-	} finally {
-		await s.rm(l, {
-			recursive: !0,
-			force: !0
-		}).catch(() => void 0), await Ya(a).catch(() => void 0), await Va(i.uploadId).catch(() => void 0);
-	}
-}, co = /^[A-Za-z0-9_-]{8,64}$/, lo = (e) => co.test(e), uo = () => process.env.VOLTRO_EXPORT_ARTIFACT_DIR ?? L.join(zi.tmpdir(), "voltro-export-artifacts"), fo = (e) => L.join(uo(), e), po = (e) => L.join(fo(e), "archive.bin"), mo = async (e = Date.now()) => {
-	let t = 0;
-	try {
-		for (let n of await X.readdir(uo())) {
-			let r = await X.stat(fo(n)).catch(() => null);
-			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(fo(n), {
-				recursive: !0,
-				force: !0
-			}).catch(() => void 0), t++));
-		}
-	} catch {}
-	return t;
-}, ho = async (e, t) => {
-	if (!lo(e)) throw Error(`invalid run id: ${e}`);
-	await X.mkdir(fo(e), { recursive: !0 });
-	let { createWriteStream: n } = await import("node:fs"), r = n(po(e)), i = 0;
-	try {
-		for await (let e of t) i += e.byteLength, r.write(Buffer.from(e)) || await new Promise((e, t) => {
-			r.once("drain", e), r.once("error", t);
-		});
-	} finally {
-		await new Promise((e, t) => {
-			r.end(() => e()), r.once("error", t);
-		});
-	}
-	return i;
-}, go = async (e) => {
-	if (!lo(e)) return null;
-	let t = await X.stat(po(e)).catch(() => null);
-	return t === null ? null : t.size;
-}, _o = async (e, t, n) => {
-	let r = await go(e);
-	if (r === null) return null;
-	if (t >= r) return {
-		bytes: Buffer.alloc(0),
-		total: r
-	};
-	let i = await X.open(po(e), "r");
-	try {
-		let e = Math.max(0, Math.min(n, r - t)), a = Buffer.alloc(e);
-		return await i.read(a, 0, e, t), {
-			bytes: a,
-			total: r
-		};
-	} finally {
-		await i.close();
-	}
-}, vo = async (e) => {
-	lo(e) && await X.rm(fo(e), {
-		recursive: !0,
-		force: !0
-	}).catch(() => void 0);
-}, yo = R({ scope: "voltro:admin-export" }), bo = (e) => Array.isArray(e) ? e.filter((e) => typeof e == "string") : [], xo = (e) => {
-	if (typeof e.tenant == "string" && e.tenant) return {
-		kind: "tenant",
-		tenantId: e.tenant
-	};
-	if (Array.isArray(e.tables) && e.tables.length) return {
-		kind: "tables",
-		tables: bo(e.tables)
-	};
-	let t = bo(e.exclude);
-	return t.length > 0 ? {
-		kind: "all",
-		exclude: t
-	} : { kind: "all" };
-}, So = (e) => async (t) => {
-	let n = ka(t, e.secret);
-	if (n) return n;
-	let r;
-	try {
-		r = JSON.parse(Buffer.from(t.rawBody).toString("utf8") || "{}");
-	} catch {
-		return Z(400, { error: "body must be JSON: { profile?, tenant?, tables?, consistency?, compression?, bundleKey? }" });
-	}
-	let i = {};
-	if (typeof r.profile == "string" && r.profile) {
-		if (!e.loadProfile) return Z(501, { error: "server-side profiles not configured on this instance" });
-		try {
-			i = await e.loadProfile(r.profile);
-		} catch (e) {
-			return Z(400, {
-				error: `profile '${r.profile}' could not be loaded`,
-				message: e?.message ?? String(e)
-			});
-		}
-	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? xo(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = fr("dexp", `${Date.now()}-${Math.random()}`), d = await Co(e.store, {
-		runId: u,
-		mode: i.subset ? "subset" : s.kind,
-		bundle: c ? String(r.bundleKey) : null
-	});
-	return wo({
-		deps: e,
-		runId: u,
-		recorded: d,
-		profile: i,
-		scope: s,
-		consistency: a,
-		blobs: l,
-		...o ? { compression: o } : {},
-		...c ? { bundleKey: String(r.bundleKey) } : {}
-	}), mo(), yo.info("admin.export started", {
-		runId: u,
-		scope: s.kind,
-		storage: c
-	}), Z(202, {
-		runId: u,
-		transport: c ? "storage" : "download",
-		...c ? { bundleKey: r.bundleKey } : {},
-		recorded: d,
-		outcome: "poll /_voltro/admin/transfers for this runId; fetch the bytes from /_voltro/admin/export/download"
-	});
-}, Co = async (e, t) => {
-	try {
-		return mr(cr), await e.insert(H, {
-			id: t.runId,
-			direction: "export",
-			startedAt: /* @__PURE__ */ new Date(),
-			finishedAt: null,
-			failure: null,
-			mode: t.mode,
-			via: "api",
-			bundle: t.bundle,
-			sourceFingerprint: null,
-			tablesWritten: 0,
-			rowsWritten: 0,
-			staged: null
-		}), !0;
-	} catch (e) {
-		return yo.warn("admin.export: the run could not be recorded", {
-			runId: t.runId,
-			error: e?.message ?? String(e)
-		}), !1;
-	}
-}, wo = async (e) => {
-	let { deps: t, runId: n } = e, r = await import("node:os"), i = await import("node:fs/promises"), a = await import("node:path"), o = await i.mkdtemp(a.join(r.tmpdir(), "voltro-admin-export-")), s = async (r) => {
-		e.recorded && await t.store.update(H, n, r).then(() => void 0, () => void 0);
-	};
-	try {
-		let r = await J.runPromise(fa({
-			store: t.store,
-			snapshot: t.snapshot,
-			dialect: t.dialect,
-			outDir: o,
-			...e.profile.subset ? { subset: e.profile.subset } : {
-				scope: e.scope,
-				...t.tenantTables && t.tenantTables.length > 0 ? { tenantTables: t.tenantTables } : {}
-			},
-			consistency: e.consistency,
-			...e.compression ? { compression: e.compression } : {},
-			...e.profile.masking ? { masking: e.profile.masking } : {}
-		})), i = r.tables.reduce((e, t) => e + t.rowCount, 0), a = r.masking?.transformed.length ?? 0;
-		if (e.bundleKey !== void 0) {
-			if (!t.putArchive) throw Error("storage transport not configured on this instance");
-			await t.putArchive(e.bundleKey, () => ua({
-				dir: o,
-				...e.blobs
-			}));
-		}
-		let c = await ho(n, ua({
-			dir: o,
-			...e.blobs
-		}));
-		yo.info("admin.export complete", {
-			runId: n,
-			tables: r.tables.length,
-			rows: i,
-			masked: a,
-			bytes: c,
-			...e.bundleKey === void 0 ? {} : { bundleKey: e.bundleKey }
-		}), await s({
-			finishedAt: /* @__PURE__ */ new Date(),
-			failure: null,
-			tablesWritten: r.tables.length,
-			rowsWritten: i,
-			sourceFingerprint: r.source?.schemaFingerprint ?? null
-		});
-	} catch (e) {
-		let t = e?.message ?? String(e);
-		yo.warn("admin.export failed", {
-			runId: n,
-			error: t
-		}), await s({
-			failure: t,
-			finishedAt: null
-		}), await vo(n);
-	} finally {
-		await i.rm(o, {
-			recursive: !0,
-			force: !0
-		}).catch(() => void 0);
-	}
-}, To = (e) => async (t) => {
-	let n = ka(t, e.secret, "GET");
-	if (n) return n;
-	let r = new URLSearchParams(t.query ?? ""), i = r.get("runId") ?? "";
-	if (!lo(i)) return Z(400, { error: "download needs ?runId=<id> from the 202 the export answered with" });
-	let a = Math.max(0, Number(r.get("offset") ?? "0") || 0), o = Number(r.get("length") ?? "8388608"), s = await _o(i, a, Number.isFinite(o) && o > 0 ? Math.min(o, Do) : Eo);
-	return s === null ? Z(404, {
-		error: "no artefact",
-		message: `this instance holds no produced bundle for run '${i}'. It may have expired, or the export may still be running — poll the run first.`
-	}) : {
-		status: 200,
-		contentType: "application/octet-stream",
-		body: new Uint8Array(s.bytes),
-		headers: {
-			"x-export-total-bytes": String(s.total),
-			"x-export-offset": String(a),
-			"x-export-length": String(s.bytes.byteLength)
-		}
-	};
-}, Eo = 8388608, Do = 33554432, Oo = async (e, t) => await e.query({
-	table: H,
-	order: [{
-		column: "startedAt",
-		direction: "desc"
-	}],
-	predicate: void 0,
-	projection: void 0,
-	skip: 0,
-	take: t
-}), ko = (e) => {
-	let t = new Date(e);
-	return Number.isFinite(t.getTime()) ? t : /* @__PURE__ */ new Date(0);
-}, Ao = (e) => ({
-	...e,
-	startedAt: ko(e.startedAt),
-	finishedAt: e.finishedAt === null || e.finishedAt === void 0 ? null : ko(e.finishedAt)
-}), jo = (e) => async (t) => {
-	let n = ka(t, e.secret, "GET");
-	if (n) return n;
-	let r = Number(new URLSearchParams(t.query ?? "").get("limit") ?? "20"), i = Number.isFinite(r) ? Math.max(1, Math.min(200, Math.trunc(r))) : 20, a;
-	try {
-		a = (await Oo(e.store, i)).map(Ao);
-	} catch (e) {
-		return Z(409, {
-			error: "no import history",
-			message: `this instance has no \`${H}\` table, so no import has been recorded. Run \`voltro db apply\` against it; imports themselves are unaffected.`,
-			detail: e?.message ?? String(e)
-		});
-	}
-	return Z(200, {
-		running: a.filter((e) => e.finishedAt === null && e.failure === null).length,
-		runs: a.map((e) => ({
-			id: e.id,
-			startedAt: e.startedAt.toISOString(),
-			finishedAt: e.finishedAt === null ? null : e.finishedAt.toISOString(),
-			mode: e.mode,
-			via: e.via,
-			bundle: e.bundle,
-			sourceFingerprint: e.sourceFingerprint,
-			tablesWritten: e.tablesWritten,
-			rowsWritten: e.rowsWritten,
-			direction: e.direction,
-			failure: e.failure,
-			staged: e.staged,
-			line: pr(e)
-		}))
-	});
-}, Mo = (e, t, n = {}) => (async function* () {
-	let r = await J.runPromise(Gi(e, t).pipe(J.timeout(n.openTimeout ?? "30 seconds"))), i = await qi(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
-		o && clearTimeout(o), o = setTimeout(() => i.destroy(/* @__PURE__ */ Error(`storage read stalled for ${a}ms reading '${t}'`)), a);
-	};
-	try {
-		s();
-		for await (let e of i) s(), yield e instanceof Uint8Array ? e : new Uint8Array(e);
-	} finally {
-		o && clearTimeout(o), i.destroy();
-	}
-})(), No = {
-	get: async () => void 0,
-	set: async () => {},
-	setWithTags: async () => {},
-	remove: async () => !1,
-	has: async () => !1,
-	clear: async () => {},
-	invalidateTag: async () => 0,
-	wrap: async (e, t, n) => n()
-}, Po = async (e) => {
-	ze(e.appProcedures ?? e.discovered, {
-		defaultDeny: e.security?.defaultDeny ?? !0,
-		commandHint: "`voltro serve`"
-	}), xi({
-		dataStore: e.store,
-		schemaRegistry: e.schemaRegistry
-	});
-	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new Tr({
-		crdtColumnsOf: (t) => e.schemaRegistry.crdtColumns(t),
-		store: e.store,
-		...e.snapshotCache ? { cache: e.snapshotCache } : {},
-		...e.reactive === void 0 ? {} : { reactive: e.reactive },
-		...t ? { recordCost: (e) => n?.record(e) } : {},
-		recordDelivery: (e) => mi({
-			label: e.label,
-			kind: e.kind,
-			durationMs: e.durationMs,
-			rowCount: e.rowCount
-		})
-	}), i = e.cache ?? No, a = e.kv ?? fi, o, s = () => void 0, c, d, f, ee, te, ne, ie, h = R({ scope: "voltro:workflow" }), ae = R({ scope: "voltro:schedule" }), oe = Mt({
-		store: e.store,
-		warn: (e, t) => h.warn(e, t)
-	}), se = oe.remember, ce = oe.resolve, ue = me({
-		authority: e.authority,
-		getStore: () => e.store
-	}), _ = (e.discovered.workflows?.length ?? 0) > 0 ? ti(() => o) : void 0, pe = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ge = pe || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", ve = e.tenantIsolation === "namespace", xe = (e.log ?? R({ scope: "voltro:serve" })).child("webhooks"), Ce, we, b = e.discovered.webhooks;
-	if (b && b.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
-		e.workflowEngineLayer;
-		let t = St({
-			store: e.store,
-			schemaRegistry: e.schemaRegistry,
-			cache: i,
-			kv: a
-		}), n = b.outgoing.map((e) => e.descriptor);
-		we = na.toLayer($i(t, { events: n })), Ce = ea(t, async (e) => {
-			let t = f;
-			if (t === void 0) {
-				xe.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
-					deliveryId: e.deliveryId,
-					targetId: e.targetId
-				});
-				return;
-			}
-			t.runPromise(na.execute(e)).catch((t) => {
-				xe.error("deliverWebhook workflow crashed", {
-					deliveryId: e.deliveryId,
-					targetId: e.targetId
-				}, t);
-			});
-		}, { events: n });
-	}
-	let De = /* @__PURE__ */ new Map();
-	if (b) for (let e of b.incoming) {
-		let t = e.descriptor.path ?? ta(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = ia(e.descriptor, {
-			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => _ === void 0 ? void 0 : di(_, {
-				traceId: `incoming:${e.descriptor.id}`,
-				source: `incoming:${e.descriptor.id}`
-			}),
-			log: (e) => {
-				let t = {
-					webhookId: e.webhookId,
-					status: e.status,
-					signatureOk: String(e.signatureOk),
-					idempotency: e.idempotency,
-					durationMs: e.durationMs
-				};
-				e.status >= 500 ? xe.error("incoming delivery failed", t) : e.status >= 400 ? xe.warn("incoming delivery rejected", t) : xe.info("incoming delivery handled", t);
-			}
-		});
-		De.set(t, { handle: r });
-	}
-	Wr(), gi((t) => Gr(e.store, t.subjectId, t.resourceType, t.resourceId)) || R({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
-	let Oe = [], ke = [...e.discovered.outboxHandlers ?? [], ...Nn((b?.outgoing.length ?? 0) + (b?.incoming.length ?? 0) + (b?.providers.length ?? 0), []) ? [{
-		file: "<framework>/webhooks",
-		id: "voltro-webhook-emit",
-		definition: ra(() => Ce)
-	}] : []], Ae = ke.length > 0 ? u({
-		handlers: ke,
-		store: e.store,
-		log: (e.log ?? R({ scope: "voltro:serve" })).child("outbox"),
-		onChange: (t) => e.store.onChange((e) => t({
-			table: e.table,
-			op: e.op
-		})),
-		onShutdown: (e) => {
-			Oe.push(e);
-		}
-	}) : void 0, x = C({
-		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
-		store: e.store,
-		publicUrl: He(e.port ?? 4e3),
-		log: (e.log ?? R({ scope: "voltro:serve" })).child("connections")
-	});
-	_e({
-		events: e.discovered.events ?? [],
-		rpcTags: [
-			...e.discovered.queries.map((e) => e.descriptor.name),
-			...e.discovered.mutations.map((e) => e.descriptor.name),
-			...e.discovered.actions.map((e) => e.descriptor.name),
-			...(e.discovered.streams ?? []).map((e) => e.descriptor.name)
-		]
-	});
-	let je = (e.log ?? R({ scope: "voltro:serve" })).child("events"), Me = e.broadcastNamespace ?? Ge(e.plugins, void 0), Pe = Vt(e.plugins, Me, je), Fe = e.membership?.instanceId ?? vr(), Ie = _r(), Re = e.membership ?? Yt(e.plugins, {
-		instanceId: Fe,
-		namespace: Me,
-		meta: { mode: "serve" },
-		logger: je
-	}), S = be({
-		events: e.discovered.events ?? [],
-		origin: Ie,
-		...Pe.publishRemote === void 0 ? {} : { publishRemote: Pe.publishRemote }
-	}), Ue = (e.discovered.events ?? []).length > 0 ? await Pe.attach(S.bus) : null, We = kt({
-		store: e.store,
-		schemaRegistry: e.schemaRegistry,
-		cache: i,
-		kv: a,
-		...Ce === void 0 ? {} : { webhooksService: Ce },
-		..._ === void 0 ? {} : { workflowsProxy: _ },
-		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: ve,
-		...e.ensureTenantProvisioned === void 0 ? {} : { ensureTenantProvisioned: e.ensureTenantProvisioned },
-		...e.resolveResidentStore === void 0 ? {} : { resolveResidentStore: e.resolveResidentStore },
-		...Ae === void 0 ? {} : { outbox: { nudge: Ae.nudge } },
-		...x.active ? { connections: { registry: x.registry } } : {},
-		eventBus: S.bus
-	}), Ke = Y.succeed(Sr, Te), qe = Y.succeed(Er, Ne), Je = Y.succeed(Cr, Jt), Ye = Y.succeed(Dr, p), Xe = (t, n) => {
-		let r = t.pipe(J.provide(ei(n)));
-		return (e.baseLayer ? r.pipe(J.provide(e.baseLayer)) : r).pipe(J.provide(Ke)).pipe(J.provide(qe)).pipe(J.provide(Je)).pipe(J.provide(Ye));
-	}, Ze = (e, t) => {
-		let n = Xe(e, t);
-		return yi(n);
-	}, Qe = An(), $e = Ve(e.plugins ?? [], Qe), et = g({
-		plugins: e.plugins ?? [],
-		metrics: Qe,
-		log: e.log ?? R({ scope: "voltro:serve" })
-	}), tt = jt(e.plugins ?? [], Qe), nt = e.security?.defaultDeny ?? !0, ct = ri({
-		store: e.store,
-		defaultDeny: nt,
-		recordMetric: (e) => {
-			Qe.record(e);
-		},
-		...$e.mutation === void 0 ? {} : { interceptor: $e.mutation },
-		buildContext: (e, t, n) => We(e, t, n),
-		runEffect: Ze,
-		undoCapture: Rt((t) => e.schemaRegistry.crdtColumns(t))
-	}), lt = at();
-	{
-		let t = Tt();
-		t !== void 0 && (e.log ?? R({ scope: "voltro:serve" })).info(t);
-	}
-	let ut = l({
-		store: e.store,
-		...e.approvals === void 0 ? {} : { defaultExpiryMs: e.approvals.defaultExpiryMs }
-	}), dt = Kr({
-		defaultDeny: nt,
-		buildContext: (e) => We(e),
-		runEffect: Ze,
-		recordMetric: (e) => {
-			Qe.record(e);
-		},
-		...$e.action === void 0 ? {} : { interceptor: $e.action }
-	}), ft = oi({
-		tenantScopedTables: e.tenantScopedTables,
-		softDeleteScopedTables: e.softDeleteScopedTables
-	}), pt = {
-		defaultDeny: nt,
-		buildContext: (e) => We(e),
-		finalize: (e, t) => ft(e, t.subject),
-		provideEffect: Xe,
-		...$e.query === void 0 ? {} : { interceptor: $e.query }
-	}, T = ai(pt), mt = ii({
-		...pt,
-		queryRows: (t, n) => e.store.query(t).then((e) => Ti(t.table, e, n.subject))
-	}), ht = ci({
-		...pt,
-		subscribeDescriptor: (e, t, n, i, a) => r.subscribe(e, t, n, void 0, void 0, void 0, i, a),
-		subscribeComputed: (e, t, n) => r.subscribeComputed(e, t, n)
-	}), E = (e) => e.filter((e) => Yn(e.descriptor)), D = {};
-	for (let t of [
-		...E(e.discovered.queries),
-		...lt.queries,
-		...ut.queries,
-		...x.queries
-	]) D[t.descriptor.name] = (e) => Fr(T(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, si(t, e));
-	for (let t of [
-		...E(e.discovered.mutations),
-		...lt.mutations,
-		...ut.mutations,
-		...x.mutations
-	]) {
-		let n = ni(t.descriptor.output);
-		D[t.descriptor.name] = (r) => G(async (e, n) => ct(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, Qn(t.descriptor, "mutation"));
-	}
-	for (let t of [...E(e.discovered.actions), ...x.actions]) {
-		let n = ni(t.descriptor.output);
-		D[t.descriptor.name] = (r) => G(async (e, n) => dt(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, Qn(t.descriptor, "action"));
-	}
-	let gt = () => `public-${Math.random().toString(36).slice(2, 10)}`, _t = [
-		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => mt(e, t, {
-				subject: n.subject,
-				traceId: gt()
-			}),
-			subscribe: (t, n, r) => ht(e, t, {
-				subject: n.subject,
-				traceId: gt()
-			}, r)
-		})),
-		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => ct(e, t, {
-				subject: n.subject,
-				traceId: gt()
-			})
-		})),
-		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-			descriptor: e.descriptor,
-			invoke: (t, n) => dt(e, t, {
-				subject: n.subject,
-				traceId: gt()
-			})
-		}))
-	], vt = {
-		candidates: y({
-			queries: e.discovered.queries,
-			mutations: e.discovered.mutations,
-			actions: e.discovered.actions,
-			descriptorOf: (e) => e.descriptor,
-			runQuery: (e, t, n) => Promise.resolve(mt(e, t, n)),
-			runMutation: (e, t, n) => Promise.resolve(ct(e, t, n)),
-			runAction: (e, t, n) => Promise.resolve(dt(e, t, n))
-		}),
-		policy: e.agents?.tools ?? {},
-		mcpEnabled: e.agents?.mcp === !0,
-		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject)
-	};
-	if (e.grpc !== void 0) {
-		let t = () => `grpc-${Math.random().toString(36).slice(2, 10)}`, n = [
-			...e.discovered.queries.map((e) => ({
-				tag: e.descriptor.name,
-				kind: "query",
-				input: e.descriptor.input,
-				output: e.descriptor.output,
-				invoke: (n, r, i) => mt(e, n, {
-					subject: r.subject,
-					traceId: t(),
-					signal: i
-				}),
-				subscribe: (n, r, i) => ht(e, n, {
-					subject: r.subject,
-					traceId: t()
-				}, i)
-			})),
-			...e.discovered.mutations.map((e) => ({
-				tag: e.descriptor.name,
-				kind: "mutation",
-				input: e.descriptor.input,
-				output: e.descriptor.output,
-				invoke: (n, r, i) => ct(e, n, {
-					subject: r.subject,
-					traceId: t(),
-					signal: i
-				})
-			})),
-			...e.discovered.actions.map((e) => ({
-				tag: e.descriptor.name,
-				kind: "action",
-				input: e.descriptor.input,
-				output: e.descriptor.output,
-				invoke: async (n, r, i) => dt(e, n, {
-					subject: r.subject,
-					traceId: t(),
-					signal: i
-				})
-			}))
-		];
-		await Gt({
-			config: e.grpc.config,
-			candidates: n,
-			resolveSubject: async (t) => {
-				let { subject: n } = await e.resolveSubject(t, -1), r = n;
-				return r.type === "anonymous" && r.credentialRejected !== void 0 ? null : {
-					subject: n,
-					anonymous: r.type === "anonymous"
-				};
-			},
-			store: e.store,
-			root: e.grpc.root,
-			log: e.log ?? R({ scope: "voltro:serve" }),
-			onShutdown: (e) => pi(e)
-		});
-	}
-	let yt = It({
-		...e.restRoutes === void 0 ? {} : { restRoutes: e.restRoutes },
-		publicApiEntries: _t,
-		store: e.store,
-		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject),
-		...e.idempotency === void 0 ? {} : { idempotency: e.idempotency },
-		log: e.log ?? R({ scope: "voltro:serve" })
-	}), O = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, xt = async (e, t) => {
-		let { Readable: n } = await import("node:stream"), r = Hi(), i = Wi("storage", () => n.from(t()));
-		await J.runPromise(Ki(r, e, i, { contentType: "application/octet-stream" }));
-	}, Ct = O && O.length >= 16 ? [
-		{
-			method: "POST",
-			path: Sa,
-			handle: to({
-				secret: O,
-				store: e.store,
-				...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {},
-				assetSink: ma(Hi()),
-				openArchive: (e) => Mo(Hi(), e),
-				refreshSubscriptions: (e) => {
-					r.refreshAll(e);
-				},
-				putArchive: xt,
-				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {}
-			})
-		},
-		{
-			method: "POST",
-			path: Ca,
-			handle: ro({
-				secret: O,
-				store: e.store,
-				...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {},
-				assetSink: ma(Hi()),
-				openArchive: (e) => Mo(Hi(), e),
-				refreshSubscriptions: (e) => {
-					r.refreshAll(e);
-				},
-				putArchive: xt
-			})
-		},
-		{
-			method: "GET",
-			path: Ea,
-			handle: jo({
-				secret: O,
-				store: e.store
-			})
-		},
-		{
-			method: "GET",
-			path: Ta,
-			handle: To({ secret: O })
-		},
-		{
-			method: "POST",
-			path: wa,
-			handle: So({
-				secret: O,
-				store: e.store,
-				snapshot: e.dataTransferSnapshot ?? { tables: [] },
-				dialect: e.dataTransferDialect ?? "memory",
-				tenantTables: [...e.tenantScopedTables],
-				loadProfile: zn,
-				assetSource: ha(Hi(), e.store),
-				putArchive: xt
-			})
-		}
-	] : [], k = [
-		...e.httpRoutes ?? [],
-		...yt.httpRoutes,
-		...Ct,
-		...x.httpRoutes
-	];
-	Object.assign(D, S.handlers);
-	for (let t of E(e.discovered.streams ?? [])) D[t.descriptor.name] = (n) => Pr((r) => Oi(r, (r) => {
-		let i = We(r), a = t.executor(n, i);
-		if (J.isEffect(a)) {
-			let t = a.pipe(J.provide(ei(i.store)));
-			return (e.baseLayer ? t.pipe(J.provide(e.baseLayer)) : t).pipe(J.provide(Ke)).pipe(J.provide(qe)).pipe(J.provide(Je)).pipe(J.provide(Ye));
-		}
-		return typeof a == "object" && a && typeof a.then == "function" ? J.promise(() => a) : a;
-	}), `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) D[t.definition.name] = (e) => G(async (e, n) => {
-		let r = n;
-		return di(_, {
-			subject: r.subject,
-			traceId: r.traceId,
-			source: "workflow-rpc"
-		}).start(t.definition.name, e);
-	}, e, `workflow.${t.definition.name}`);
-	pe && (D[ir.name] = (e) => Fr(T({
-		descriptor: ir,
-		executor: (e) => {
-			let t = e.id;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: W(U("id", t), U("executionId", t)),
-				take: 1,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), r, `subscription.${ir.name}`), D[ar.name] = (e) => Fr(T({
-		descriptor: ar,
-		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [U("tag", t.tag)], ...t.status === void 0 ? [] : [U("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
-			return {
-				table: "_voltro_workflow_runs",
-				order: [{
-					column: "startedAt",
-					direction: "desc"
-				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : ur(...n),
-				take: r,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), r, `subscription.${ar.name}`), D[V.name] = (e) => Fr(T({
-		descriptor: V,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_steps",
-				order: [{
-					column: "startedAt",
-					direction: "asc"
-				}],
-				predicate: U("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), r, `subscription.${V.name}`), D[rr.name] = (e) => Fr(T({
-		descriptor: rr,
-		executor: (e) => {
-			let t = e.runId;
-			return {
-				table: "_voltro_workflow_run_events",
-				order: [{
-					column: "occurredAt",
-					direction: "asc"
-				}],
-				predicate: U("runId", t),
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), r, `subscription.${rr.name}`), D[er.name] = (e) => Fr(T({
-		descriptor: er,
-		executor: (e) => {
-			let t = e;
-			return {
-				table: "_voltro_workflow_events",
-				order: [{
-					column: "occurredAt",
-					direction: "desc"
-				}],
-				predicate: t.name === void 0 ? void 0 : U("name", t.name),
-				take: Math.max(1, Math.min(500, t.limit ?? 100)),
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), r, `subscription.${er.name}`), D[tr.name] = (e) => Fr(T({
-		descriptor: tr,
-		executor: (e) => {
-			let t = e.eventId;
-			return {
-				table: "_voltro_workflow_event_deliveries",
-				order: [{
-					column: "createdAt",
-					direction: "asc"
-				}],
-				predicate: U("eventId", t),
-				take: 500,
-				skip: void 0,
-				projection: void 0
-			};
-		}
-	}, e), r, `subscription.${tr.name}`), D[$n.name] = (t) => G(async (t, n) => {
-		let r = t;
-		return await ot(e.store, n.subject, { executionId: r.executionId }), await _.cancel(r.workflowName, r.executionId), await zt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${$n.name}`), D[nr.name] = (t) => G(async (t, n) => {
-		let r = t;
-		return await ot(e.store, n.subject, { executionId: r.executionId }), await _.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${nr.name}`), D[or.name] = (t) => G(async (t, n) => {
-		let r = t;
-		return await ot(e.store, n.subject, { id: r.id }), _.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${or.name}`), D[sr.name] = (t) => G(async (t, n) => {
-		let r = t;
-		return await ot(e.store, n.subject, { id: r.id }), _.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${sr.name}`));
-	let Et = [
-		...E(e.discovered.queries).map((e) => B(e.descriptor)),
-		...E(e.discovered.mutations).map((e) => Xn(e.descriptor)),
-		...E(e.discovered.actions).map((e) => z(e.descriptor)),
-		...lt.queries.map((e) => B(e.descriptor)),
-		...lt.mutations.map((e) => Xn(e.descriptor)),
-		...ut.queries.map((e) => B(e.descriptor)),
-		...ut.mutations.map((e) => Xn(e.descriptor)),
-		...x.queries.map((e) => B(e.descriptor)),
-		...x.mutations.map((e) => Xn(e.descriptor)),
-		...x.actions.map((e) => z(e.descriptor)),
-		...E(e.discovered.streams ?? []).map((e) => Zn(e.descriptor)),
-		...S.rpcs,
-		...(e.discovered.workflows ?? []).map((e) => ki(e.definition)),
-		...pe ? [
-			B(ir),
-			B(ar),
-			B(V),
-			B(rr),
-			B(er),
-			B(tr),
-			z($n),
-			z(nr),
-			z(or),
-			z(sr)
-		] : []
-	], Dt = Vi.make(...Et).middleware(Kn).middleware(qn), Ot = Qr({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), Nt = e.dormancyTenantId ?? wr, Ft = e.dormancy === "sleep" ? {
-		register: (t, n, r) => _i(e.store, {
-			tenantId: r ?? Nt,
-			kind: "workflow",
-			refId: t,
-			wakeAt: n
-		}),
-		cancel: (t, n) => Lr(e.store, {
-			tenantId: n ?? Nt,
-			kind: "workflow",
-			refId: t
-		}).then(() => {})
-	} : void 0, A = ge ? await import("@voltro/workflow") : void 0, j = A?.makeWorkflowRunRecorder({
-		store: e.store,
-		...e.workflowRecording === void 0 ? {} : { recording: e.workflowRecording },
-		...Ft === void 0 ? {} : { wakeups: Ft }
-	}), Lt = async (t, n) => {
-		await A.closeWorkflowChildrenForParent({
-			store: e.store,
-			parentExecutionId: t,
-			parentStatus: n,
-			recorder: j,
-			log: { warn: (e, t) => h.warn(e, t ?? {}) },
-			interruptChild: async (t, n) => {
-				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
-				if (!r) throw Error(`Unknown child workflow: ${t}`);
-				if (!f) throw Error("Workflow runtime is not ready");
-				await f.runPromise(r.definition.interrupt(n));
-			}
-		});
-	}, zt = async (t, n, r) => {
-		let i = (await e.store.query({
-			table: "_voltro_workflow_runs",
-			order: [],
-			predicate: U("executionId", n),
-			projection: void 0,
-			skip: void 0,
-			take: 1
-		}))[0];
-		if (i === void 0) return;
-		let a = await e.store.update("_voltro_workflow_runs", i.id, {
-			status: "cancelled",
-			cancelled: !0,
-			completedAt: /* @__PURE__ */ new Date()
-		}), o = i.subject?.tenantId ?? void 0;
-		a && await j.recordEvent({
-			runId: i.id,
-			eventType: "run-cancelled",
-			payload: {
-				reason: r,
-				workflowName: t,
-				executionId: n,
-				...o == null ? {} : { tenantId: o }
-			}
-		}), a && await Lt(n, "cancelled");
-	}, Bt = [
-		...K(e.discovered.workflows ?? [], {
-			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? We({
-				subject: t.subject,
-				traceId: t.traceId
-			}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-			resolveStartContext: ce,
-			...ue === void 0 ? {} : { resolveAuthority: ue }
-		}, (t, n, r) => {
-			let i = A.getWorkflowVersionMetadata(t.definition);
-			return A.wrapWorkflowExecuteWithRunRecording({
-				name: t.definition.name,
-				store: e.store,
-				subject: r.subject,
-				source: r.source ?? null,
-				traceId: r.traceId,
-				workflowVersion: i.version,
-				workflowCompatibleVersions: i.compatibleWith,
-				workflowPatches: i.patches,
-				parentExecutionId: r?.parentExecutionId ?? null,
-				parentClosePolicy: r?.parentClosePolicy ?? null,
-				onParentClose: ({ executionId: e, status: t }) => Lt(e, t),
-				...rt(t.definition),
-				onTerminal: async ({ executionId: e }) => {
-					await d?.gate.release(e);
-				},
-				recorder: j,
-				pluginWorkflowStepLayer: tt,
-				recordRun: hi
-			}, n);
-		}),
-		...e.discovered.workflowWorkers ?? [],
-		...we === void 0 ? [] : [we]
-	], Ht = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...we === void 0 ? [] : ["voltro.deliverWebhook"]], Ut = Bt.length > 0 ? Y.mergeAll(...Bt) : Y.empty;
-	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || we !== void 0) && e.workflowEngineLayer !== void 0) {
-		let t = Ut.pipe(Y.provideMerge(e.workflowEngineLayer));
-		f = Ni.make((e.baseLayer === void 0 ? t : t.pipe(Y.provideMerge(e.baseLayer))).pipe(Y.provideMerge(Gn({})))), await f.runPromise(J.void), (e.log ?? R({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Ht.length} entity type(s) registered`, { entities: Ht });
-		let n = await import("@voltro/workflow/cluster"), r = (e) => f.runPromise(n.redriveFailedRun(e)), i = (e) => f.runPromise(n.resumeRunFromStep(e));
-		ne = await m({
-			provider: Qi(e.plugins ?? [])?.broadcast?.provider,
-			crossReplica: Qi(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
-			namespace: Me,
-			replicaId: crypto.randomUUID(),
-			pollStorage: () => f.runPromise(n.pollWorkflowStorage),
-			onChange: (t) => e.store.onChange((e) => t({
-				table: e.table,
-				op: e.op,
-				...e.origin === void 0 ? {} : { origin: e.origin }
-			})),
-			log: (e.log ?? R({ scope: "voltro:serve" })).child("workflow")
-		}), ee = async (t) => {
-			let n = await Be({
-				store: e.store,
-				workflows: e.discovered.workflows ?? [],
-				runRedrive: r
-			}, t.runId);
-			return n.statusReset && await j.recordEvent({
-				runId: t.runId,
-				eventType: "run-redriven",
-				payload: {
-					reason: "inspect.redrive",
-					activitiesReset: n.outcome.activitiesReset
-				}
-			}), {
-				redriven: n.outcome.redriven,
-				activitiesReset: n.outcome.activitiesReset,
-				reason: n.outcome.reason
-			};
-		}, te = async (t) => {
-			let n = await le({
-				store: e.store,
-				workflows: e.discovered.workflows ?? [],
-				runResume: i
-			}, t.runId, t.step);
-			return n.statusReset && await j.recordEvent({
-				runId: t.runId,
-				eventType: "run-redriven",
-				payload: {
-					reason: "inspect.resume-from-step",
-					step: n.stepName,
-					activitiesReset: n.outcome.activitiesReset
-				}
-			}), {
-				redriven: n.outcome.redriven,
-				stepName: n.stepName,
-				activitiesReset: n.outcome.activitiesReset,
-				reason: n.outcome.reason
-			};
-		};
-		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? qr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Si, l = $r({
-			coordinator: a,
-			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`
-		}), u = R({ scope: "voltro:flow-control" }), p = {
-			info: (e, t) => {
-				u.info(e, t);
-			},
-			warn: (e, t) => {
-				u.warn(e, t);
-			},
-			error: (e, t) => {
-				u.error(e, t ?? {});
-			}
-		}, re, ie = () => {
-			if (re !== void 0) return re;
-			if (o !== void 0 && j !== void 0) return re = de({
-				store: e.store,
-				log: P,
-				workflows: e.discovered.workflows ?? [],
-				workflowsProxy: o,
-				workflowRuntime: f,
-				workflowRunRecorder: j,
-				closeChildrenForParent: Lt
-			}), re;
-		};
-		s = ie, d = w({
-			store: e.store,
-			onChange: (t) => e.store.onChange((e) => t({
-				table: e.table,
-				op: e.op
-			})),
-			...e.scheduling === void 0 ? {} : {
-				disarmWhenIdle: e.scheduling.disarmWhenIdle,
-				drainIntervalMs: e.scheduling.admissionDrainMs,
-				cancelSweepIntervalMs: e.scheduling.cancelSweepMs,
-				stalenessSweepIntervalMs: e.scheduling.stalenessSweepMs
-			},
-			workflows: e.discovered.workflows ?? [],
-			facade: () => o,
-			cancelRunWithReason: ie,
-			recordRunEvent: () => j?.recordEvent,
-			...e.workflowStaleness === void 0 ? {} : { staleness: e.workflowStaleness },
-			...e.workflowSuspendSignalHintMs === void 0 ? {} : { suspendSignalHintMs: e.workflowSuspendSignalHintMs },
-			scheduleCoordinated: l,
-			onAbandoned: async (t) => {
-				await M({
-					workflows: e.discovered.workflows ?? [],
-					facade: () => o,
-					log: p,
-					...t
-				});
-			},
-			log: p
-		});
-		let h = d;
-		h !== void 0 && pi(() => h.stop()), c = At({
-			store: e.store,
-			onChange: (t) => e.store.onChange((e) => t({
-				table: e.table,
-				op: e.op
-			})),
-			...e.scheduling === void 0 ? {} : {
-				disarmWhenIdle: e.scheduling.disarmWhenIdle,
-				tickIntervalMs: e.scheduling.inferenceTickMs
-			},
-			enabled: (e.discovered.workflows?.length ?? 0) > 0,
-			resumeSignal: () => f === void 0 || A === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
-				await f.runPromise(A.completeSuspendingSignal({
-					store: e.store,
-					target: st(t, n),
-					signalName: r,
-					payload: i
-				}));
-			},
-			runEffect: (e) => f.runPromise(e),
-			scheduleCoordinated: l,
-			log: p
-		});
-		let ae = c;
-		ae !== void 0 && pi(() => ae.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? ui({
-			workflows: e.discovered.workflows ?? [],
-			runEffect: (e) => f.runPromise(e),
-			onEnqueue: () => ne?.publishWake(),
-			...h === void 0 ? {} : {
-				admitStart: h.gate.admitStart,
-				startPayloadSchema: h.gate.startPayloadSchema,
-				parkDelayedStart: h.gate.parkDelayed
-			},
-			rememberStartContext: se,
-			signal: async (t, n, r) => {
-				let i = await A.sendWorkflowSignal({
-					store: e.store,
-					recorder: j,
-					target: t,
-					signalName: n,
-					payload: r
-				});
-				return await f.runPromise(A.completeSuspendingSignal({
-					store: e.store,
-					target: t,
-					signalName: n,
-					payload: r
-				})).catch(() => {}), i;
-			},
-			update: (t, n, r, i) => A.sendWorkflowUpdate({
-				store: e.store,
-				recorder: j,
-				target: t,
-				updateName: n,
-				payload: r,
-				...i === void 0 ? {} : { options: i }
-			}),
-			listRuns: (t) => Le(e.store, t),
-			retry: (t, n) => he({
-				store: e.store,
-				workflows: e.discovered.workflows ?? [],
-				runPromise: (e) => f.runPromise(e)
-			}, t, n),
-			redrive: (t) => Be({
-				store: e.store,
-				workflows: e.discovered.workflows ?? [],
-				runRedrive: r
-			}, t).then((e) => e.outcome)
-		}) : void 0;
-	}
-	let Wt = Y.mergeAll(Dt.toLayer(D), Ot), Kt = bt(D, e.discovered.queries.map((e) => e.descriptor.name), pe), qt = Y.mergeAll(Dt.toLayer(Kt), Ot), N = e.observability, Xt = await Ir({
-		...e.appName === void 0 ? {} : { serviceName: e.appName },
-		...N && N.spanProcessors.length > 0 ? { extraSpanProcessors: N.spanProcessors } : {},
-		...N && N.metricReaders.length > 0 ? { extraMetricReaders: N.metricReaders } : {},
-		...N && Object.keys(N.resourceAttributes).length > 0 ? { resourceAttributes: N.resourceAttributes } : {},
-		...N && N.sampler !== void 0 ? { sampler: N.sampler } : {}
-	}), Zt = !1, Qt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: $t, shutdown: en } = Ci({
-		group: Dt,
-		handlersLayer: Wt,
-		httpHandlersLayer: qt,
-		port: e.port ?? 4e3,
-		...e.host === void 0 ? {} : { host: e.host },
-		path: e.path ?? "/ws",
-		tracerLayer: Xt.layer,
-		security: fe(e),
-		...kn(e),
-		...e.discovered.wsGateways !== void 0 && e.discovered.wsGateways.length > 0 ? { webSocketGateways: e.discovered.wsGateways } : {},
-		resolveGatewaySubject: async (t) => {
-			let n = await e.resolveSubject(t, -1);
-			return n.subject.type === "anonymous" ? null : {
-				subject: n.subject,
-				...n.credentialExpiresAt === void 0 ? {} : { credentialExpiresAt: n.credentialExpiresAt * 1e3 }
-			};
-		},
-		...et,
-		healthCheck: {
-			isReady: () => Zt,
-			...Qt ? { ping: Qt } : {}
-		},
-		...k.length > 0 ? { httpRoutes: k } : {},
-		...e.getStore === void 0 ? {} : { getStore: e.getStore },
-		...De.size > 0 ? { webhookRoutes: De } : {},
-		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute },
-		...e.inspectStream === void 0 ? {} : { inspectStream: e.inspectStream }
-	}), tn = xa($t);
-	if (await Nr($t), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? qr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Si;
-		ie = await wi(e.discovered.schedules ?? [], {
-			store: e.store,
-			coordinator: t,
-			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
-			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`,
-			armSelf: e.scheduleArmSelf ?? !0,
-			dormancy: e.dormancy ?? "always-on",
-			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
-			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => We({
-				subject: r,
-				traceId: t
-			}, e.store, void 0, `schedule:${n}`),
-			log: {
-				info: (e, t) => {
-					ae.info(e, t);
-				},
-				warn: (e, t) => {
-					ae.warn(e, t);
-				},
-				error: (e, t) => {
-					ae.error(e, t ?? {});
-				},
-				debug: () => {}
-			},
-			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
-			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
-		}), e.onSchedulerReady?.(ie);
-	}
-	let P = e.log ?? R({ scope: "voltro:serve" }), nn, rn, F = e.claimChange;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (nn = it(e.discovered.subscribers ?? [], e.store, P.child("subscribe"), e.schemaRegistry, {
-		eventBus: S.bus,
-		...F === void 0 ? {} : { claimOnce: F }
-	})), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = P.child("reaction");
-		rn = ye(e.discovered.reactions ?? [], e.store, {
-			runAct: async (n, r) => {
-				if (n.kind === "workflow") {
-					if (_ === void 0) {
-						t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
-						return;
-					}
-					let e = n.payload === void 0 ? r.new ?? r.old ?? {} : n.payload(r);
-					await di(_, {
-						traceId: `reaction:${n.workflow}`,
-						source: `reaction:${n.workflow}`
-					}).start(n.workflow, e);
-					return;
-				}
-				await Se(n.agent, r, {
-					findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-					runAction: (e, t, n) => Promise.resolve(dt(e, t, n)),
-					makeSubject: (e) => Jn(e),
-					now: () => Date.now(),
-					log: t
-				});
-			},
-			checkBudget: async (n, r) => {
-				try {
-					let { requireAiBudget: t } = await import("@voltro/ai");
-					return (await J.runPromise(J.either(t(e.store, {
-						tenantId: n,
-						limitUsd: r
-					}))))._tag === "Right";
-				} catch (e) {
-					return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
-				}
-			},
-			...F === void 0 ? {} : { claimRateSlot: (e) => F(Pt, e) },
-			...F === void 0 ? {} : { claimDedupe: (e) => F(wt, e) }
-		}, t);
-	}
-	let an;
-	(e.discovered.aggregates?.length ?? 0) > 0 && (an = await re({
-		discovered: e.discovered.aggregates ?? [],
-		store: e.store,
-		log: P.child("aggregate"),
-		...e.analytics === void 0 ? {} : { analytics: e.analytics },
-		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
-		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), Ke = Y.succeed(Sr, an.registry));
-	let on;
-	(e.discovered.expectations?.length ?? 0) > 0 && (on = Ar({
-		discovered: e.discovered.expectations ?? [],
-		store: e.store,
-		log: P.child("expectation")
-	}), qe = Y.succeed(Er, on.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = Mr({
-		discovered: e.discovered.budgets ?? [],
-		log: P.child("finops")
-	}), Je = Y.succeed(Cr, n.registry));
-	let sn;
-	return (e.discovered.experiments?.length ?? 0) > 0 && (sn = jr({
-		discovered: e.discovered.experiments ?? [],
-		store: e.store,
-		log: P.child("experiment")
-	}), Ye = Y.succeed(Dr, sn.registry)), Zt = !0, e.bootTiming?.mark("ready"), {
-		dispatcher: r,
-		server: $t,
-		scheduler: ie,
-		eventsSnapshot: Ee(S.bus, S.declared),
-		membersSnapshot: () => ({
-			members: Re.membership.list(),
-			capturedAt: Date.now()
-		}),
-		agentTools: () => vt,
-		rpcMetrics: () => Qe,
-		webhooksService: () => Ce,
-		runCanceller: () => s(),
-		flowControlHealth: () => d?.cancelHealth(),
-		inferenceHealth: () => c?.health(),
-		workflowWriteActions: () => _ === void 0 || j === void 0 ? void 0 : v({
-			store: e.store,
-			log: P,
-			workflows: e.discovered.workflows ?? [],
-			workflowsProxy: o,
-			workflowRuntime: f,
-			workflowRunRecorder: j,
-			closeChildrenForParent: Lt
-		}),
-		redriveWorkflowRun: (e) => ee ? ee(e) : Promise.reject(/* @__PURE__ */ Error("redrive: this app registers no workflows")),
-		resumeWorkflowRunFromStep: (e) => te ? te(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
-		close: async () => {
-			Zt = !1, await tn.drainRequests();
-			for (let e of Oe) try {
-				await e();
-			} catch (e) {
-				P.warn("serve: teardown step failed", {}, e);
-			}
-			await Ue?.detach(), await Re.detach(), an?.detach(), on?.detach(), n?.detach(), sn?.detach(), rn?.(), nn?.(), await ie?.shutdown(), r.close(), await ne?.detach(), await f?.dispose(), await en(), await tn.finish();
-		}
-	};
-}, $ = R({ scope: "voltro:serve" }), Fo = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Io = F, Lo = async (e) => {
-	let t = sn(process.cwd());
-	if (Un(t)) {
-		let n;
-		try {
-			let e = await import(Wn(t).href);
-			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
-		} catch (e) {
-			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
-		}
-		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
-	}
-	return Ro(e);
-}, Ro = async (l) => {
-	xr("serve");
-	let u = In();
-	e("serve");
-	try {
-		ji();
-	} catch (e) {
-		throw i(e instanceof Error ? e.message : String(e));
-	}
-	let p = process.cwd(), m = await Qe(p), re = an({
-		kind: "api",
-		configPort: m?.port,
-		env: process.env,
-		flagPort: Io(l, "--port")
-	});
-	for (let e of re.warnings) $.warn(e);
-	let le = re.port;
-	bi(vi(m?.secrets)), await tn({
-		rawEnv: m?.env,
-		appType: "api",
-		root: p,
-		log: $,
-		generateTypes: !1
-	}), u.mark("config");
-	let g = (process.env.DB_DIALECT ?? m?.store ?? "memory").toLowerCase(), de = (g === "mariadb" || g === "postgres" || g === "mssql") && (process.env.CDC ?? "1") !== "0", me = g === "mariadb" ? "mariadb" : g === "mssql" ? "mssql" : void 0, he = on(p);
-	if (!r() && Un(he)) try {
-		let e = await import(Wn(he).href);
-		if (e.modules) {
-			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Vn(p, n)] = r;
-			n(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
-		}
-	} catch (e) {
-		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
-	}
-	let v = await Ot(p), y = await zt(v, { cdc: de && me !== void 0 }), _e = ee(y);
-	{
-		tt({
-			plugins: m?.plugins ?? [],
-			queries: y.queries,
-			mutations: y.mutations,
-			actions: y.actions,
-			streams: y.streams,
-			log: $
-		});
-		let e = ge(y.serverOnlyLeaks, ue(process.env, "strict"), Br, "`voltro serve`");
-		if (e.action === "fail") throw i(e.message ?? "");
-		e.action === "warn" && $.warn(e.message ?? "");
-	}
-	let ye = v.filter((e) => Fn.test(e)), be = ye.length > 0 ? await Pn(ye, $.child("webhooks")) : {
-		outgoing: [],
-		incoming: [],
-		providers: []
-	}, Se = Mn(y.events), Te = be.outgoing.length + be.incoming.length + be.providers.length + Se.length === 0 ? void 0 : {
-		...be,
-		outgoing: [...be.outgoing, ...Se]
-	}, Ee = vn({
-		nodeEnv: process.env.NODE_ENV,
-		cdcDialect: me,
-		declared: m?.schema
-	}), Ne = yn({
-		gates: Ee,
-		runtime: {
-			traces: oe(),
-			undo: Ei()
-		}
-	});
-	if (Ne !== void 0) throw i(`serve: ${Ne}`);
-	let Le = _n({
-		mix: y.featureMix,
-		plugins: m?.plugins ?? [],
-		gates: Ee,
-		...me ? { cdcDialect: me } : {}
-	}), ze = m?.analytics !== void 0 && m.analytics.kind !== "noop" && g !== "memory" ? (await I(g)).makeSqlLayer(k()) : void 0, Be = await qe({
-		spec: m?.analytics,
-		sqlLayer: ze,
-		log: $
-	}), C = (() => {
-		let e = new Set(y.tables.map((e) => e.tableName)), t = [...y.tables];
-		for (let n of [...Le, ...Be.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
-		return t;
-	})();
-	for (let e of C) mr(e);
-	{
-		let e = Vr(Di(we(y), vt(C)));
-		e !== void 0 && $.warn(e);
-	}
-	let Ve = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (Fo(Ve, g, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await I(g)).makeSqlLayer(k()), t = await J.runPromise(Pi.SqlClient.pipe(J.flatMap((e) => Li(e, p)), J.provide(e), J.catchAll(() => J.succeed([]))));
-		t.length > 0 && ($.error(`serve: refusing to boot — ${t.length} pending file-based migration(s) have never run against this database. They perform the changes a schema diff cannot infer (data moves, backfills, table splits), so the declarative fingerprint check below cannot see them and would have let this process serve un-migrated data.`, { pending: t }), $.error("Run them from your pre-deploy job — `voltro db migrate .` (schema + files) or `voltro db files .` (files alone) — or set VOLTRO_AUTO_MIGRATE=0 to bypass every boot schema check. `voltro serve` never applies them itself: a rolling deploy would start N replicas and each would try."), process.exit(1));
-		let n = await J.runPromise(Pi.SqlClient.pipe(J.flatMap((e) => Ri(e, C, {
-			appliedBy: `serve:${Ve}`,
-			environment: "prod",
-			dialectId: g
-		})), J.provide(e)));
-		n.kind === "prod-mismatch" && ($.error(Ii(n, g)), $.error(bn({
-			gates: Ee,
-			nodeEnv: process.env.NODE_ENV,
-			cdcDialect: me,
-			declared: m?.schema
-		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Ii(n, g));
-	}
-	await fn({
-		dialectId: g,
-		tables: C,
-		mode: un(m?.reactiveTriggers),
-		lockSchema: k().schema,
-		makeLayer: async () => (await I(g)).makeSqlLayer(k()),
-		log: {
-			info: (e, t) => $.info(e, t ?? {}),
-			warn: (e, t) => $.warn(e, t ?? {})
-		}
-	});
-	let He = li(C);
-	u.mark("discover");
-	let w = await T(m, void 0);
-	{
-		let e = await c(w);
-		if (e !== void 0) throw i(`serve: ${e}`);
-		let t = await s(w, g, m);
-		t !== void 0 && $.warn(t);
-	}
-	let rt = Ai(w, g);
-	for (let e of Me({
-		dialect: String(m?.store ?? process.env.DB_DIALECT ?? "postgres"),
-		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
-		dbUrl: process.env.DB_URL,
-		crossReplicaBus: Qi(m?.plugins ?? [])?.broadcast.crossReplica === !0,
-		tables: y.tables.map((e) => ({
-			tableName: e.tableName,
-			isReactive: e.isReactive === !0
-		})),
-		querySources: y.queries.flatMap((e) => {
-			let t = e.descriptor.source;
-			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
-		})
-	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
-	{
-		let e = Xe({
-			tables: lr().map((e) => ({ tableName: e.tableName })),
-			queries: y.queries.map((e) => ({
-				name: e.descriptor.name,
-				source: e.descriptor.source
-			}))
-		}), t = N(e);
-		t !== void 0 && $.warn(t);
-	}
-	m?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = m.cache), m?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = m.cacheRedisUrl), m?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = m.cacheRedisDriver), m?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = m.cacheKeyPrefix);
-	let { service: it, invalidationBus: at, snapshotCache: ot, cache: st, semantic: bt, evictSource: St, backend: wt, stats: Tt, dispose: kt } = await Xt({
-		env: process.env,
-		semantic: m?.cacheSemantic ?? !1
-	});
-	bt !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${wt}` + (wt === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance"));
-	let At = (e) => {
-		J.runFork(at.publish(e));
-	};
-	w.onChange((e) => {
-		if (J.runFork(at.publish(e.table)), St !== void 0) {
-			let t = (e.new ?? e.old)?.id;
-			St({
-				table: e.table,
-				op: e.op,
-				...t === void 0 ? {} : { id: t }
-			});
-		}
-	}), m?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = m.kv), m?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = m.kvRedisUrl), m?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = m.kvKeyPrefix);
-	let { kv: jt, service: Mt } = await Zr({ store: w });
-	ve({
-		log: $,
-		max: ln(),
-		outOfPool: D(g, (process.env.CDC ?? "1") !== "0"),
-		readPools: t.replicationSnapshot()?.replicaCount ?? 0,
-		always: !0
-	}), u.mark("store");
-	let Pt = kr({
-		store: w,
-		sink: Be.sink,
-		log: $
-	}), It = $e(m?.idempotency, w), Rt = Ht({
-		store: w,
-		dialect: g,
-		log: { info: (e) => $.info(e) },
-		...It === void 0 ? {} : { idempotencyTtlMs: It.ttlMs }
-	}), M = m?.plugins ?? [], Vt = vr(), Gt, Jt;
-	g !== "memory" && (Gt = Ni.make((await I(g)).makeSqlLayer(k()).pipe(Y.provideMerge(Gn({})))), Jt = await Gt.runPromise(Pi.SqlClient));
-	let F = [
-		"postgres",
-		"mariadb",
-		"mysql",
-		"mssql"
-	].includes(g) ? qr(w, Vt, $) : Si, sn = Zt(m?.scheduling), kn = $r({
-		maxIdleIntervalMs: sn.pollCeilingMs,
-		coordinator: F,
-		replicaId: Vt,
-		log: $
-	}), Nn = [], Ln = vr(), Rn = Qi(m?.plugins ?? [])?.broadcast?.provider, zn = Ge(m?.plugins, m?.name ?? Bn(p));
-	{
-		let e = ct(m?.plugins, m?.name ?? Bn(p));
-		e !== void 0 && $.warn(e);
-	}
-	let L = Yt(m?.plugins, {
-		instanceId: Ln,
-		namespace: zn,
-		meta: { mode: "serve" },
-		logger: $
-	}), Hn = yr();
-	br(`${Hn.host}:${le}`, Hn.declared);
-	let Kn = en(), qn = _({
-		store: w,
-		members: () => L.membership?.list() ?? []
-	}), z = () => {
-		let e = L.membership?.list().length;
-		return typeof e == "number" && e > 0 ? { fleetSize: e } : {};
-	}, Jn = On({
-		mode: "serve",
-		dialect: g,
-		...Rn === void 0 ? {} : { provider: Rn },
-		logger: $
-	});
-	pi(async () => {
-		await Jn.stop();
-	}), Ke(m?.reactive), lt(m);
-	let Yn = mt(w, {
-		claimedBy: _r(),
-		onError: (e) => $.warn("change claim failed — the claimed effect is being SKIPPED, not duplicated", { cause: String(e) })
-	}), Xn = {
-		...Jt ? { sql: Jt } : {},
-		instanceId: Ln,
-		membership: L.membership,
-		...Rn === void 0 ? {} : { broadcast: Rn },
-		broadcastChannels: { presence: Zi(zn, "presence") },
-		scheduleCoordinated: (e, t, n) => {
-			let r = kn(e, t, n);
-			return Nn.push(r), r;
-		},
-		claimChange: Yn.claim
-	};
-	for (let e of M) e.bindDataStore?.(rt, Xn);
-	E({
-		store: w,
-		...d(),
-		log: $
-	});
-	let B = M.filter((e) => typeof e.onChangeEvent == "function");
-	if (B.length > 0) {
-		let e = w.changeScope ?? "local";
-		w.onChange((t) => {
-			let n = ce(t, e);
-			for (let e of B) J.runFork(e.onChangeEvent(n).pipe(J.catchAllCause((t) => J.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Mi.pretty(t) })))));
-		});
-	}
-	let Zn = v.filter((e) => Sn.test(e));
-	Zn.length > 0 && (await We(Zn, $), $.info(`queue: ${Zn.length} consumer file(s) loaded`));
-	let Qn = S({
-		plugins: M,
-		appName: m?.name ?? "voltro-api",
-		appType: "api",
-		voltroVersion: gr() ?? "unknown",
-		log: $
-	});
-	M.length && await Qn.activate(), u.mark("plugins");
-	let $n = await Qn.gatherObservability(), er = R({ scope: "voltro:broadcast" }), tr = {
-		info: (e, t) => {
-			er.info(e, t);
-		},
-		warn: (e, t) => {
-			er.warn(e, t);
-		},
-		debug: () => {}
-	}, nr, rr = Ue({
-		store: w,
-		dispatcher: () => nr,
-		invalidateTable: () => At,
-		log: tr
-	}), ir = await xt(w, m, g, zn, tr, rr.onBroadcastGap), V = m?.apiKeys, ar = (typeof V == "object" ? V.prefix : void 0) ?? "voltro_", or = V ? zr(w) : void 0, sr = or ? Yr({ flush: Xr(or) }) : void 0;
-	sr && pi(() => sr.shutdown());
-	let H = or ? Jr(or, {
-		prefix: ar,
-		...sr ? { usage: sr } : {}
-	}) : void 0, cr = H ? [Hr(H, { prefix: ar })] : [], ur = Nt([...m?.auth?.strategies ?? [], ...cr], aa(m?.plugins ?? []), m?.auth?.anonymousTenantRequired ?? !1, m?.auth, () => rt), fr = [...m?.restRoutes ?? [], ...H ? Or(H, (typeof V == "object" ? V.managementPath : void 0) ?? "/v1/api-keys") : []], pr = M.map((e) => e.services).filter((e) => e !== void 0), U = Y.mergeAll(nt({
-		analyticsLayer: Be.layer,
-		cacheService: it,
-		kvService: Mt,
-		...bt === void 0 ? {} : { semanticCache: bt },
-		pluginServices: pr,
-		userLayers: m?.layers ?? []
-	}), Bt(m?.http ?? {})), W = await A({
-		files: v,
-		store: w,
-		log: $,
-		seedPolicy: "report",
-		seedPattern: xn,
-		loadSeedFiles: dn,
-		startupPattern: Dn,
-		loadStartupFiles: a,
-		runStartups: o,
-		emailPattern: et,
-		loadEmailFiles: O,
-		registerEmailTemplates: oa
-	});
-	(W.startupCount > 0 || W.emailCount > 0) && $.info("boot lifecycle", {
-		startups: W.startupCount,
-		emailTemplates: W.emailCount
-	}), W.startups !== void 0 && pi(async () => {
-		await W.startups.stop();
-	}), x({
-		demands: $t(_e),
-		isRegistered: (e) => Ur(e) !== void 0
-	});
-	let Sr = Je({
-		schedules: Dt({
-			schedules: y.schedules,
-			seeds: W.seeds,
-			store: w,
-			log: $.child("seeds")
-		}),
-		workflows: y.workflows ?? [],
-		log: $.child("workflow-schedules")
-	}), Cr = m?.scheduling ?? {}, wr = Cr.trigger ?? "self", Tr = /* @__PURE__ */ new Set([
-		"postgres",
-		"mysql",
-		"mariadb",
-		"mssql"
-	]), Er = Cr.coordination ?? (Tr.has(g) ? "advisoryLock" : "single"), Dr = Er === "cluster" && Tr.has(g), Ar = Dr ? "cluster" : Er === "advisoryLock" && Tr.has(g) ? "advisoryLock" : "single";
-	Er === "cluster" && !Dr && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), Er === "advisoryLock" && !Tr.has(g) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let jr, Mr = y.workflows.length > 0 || y.workflowWorkers.length > 0 || y.eventTriggers.length > 0 || (Te?.outgoing.length ?? 0) > 0 || Dr, Nr;
-	if (Mr) {
-		if (g === "mssql") {
-			let e = await jn(process.cwd());
-			e && $.warn(e);
-		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = Dr ? Sr.filter((e) => (e.trigger ?? wr) === "self").map((e) => t({
-			name: e.name,
-			cron: Rr(e),
-			execute: async () => {
-				await jr?.fireFromCluster(e.name);
-			}
-		})) : [];
-		Nr = g === "memory" ? e.layerMemory : await (async () => {
-			let e = await I(g), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
-			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
-				sqlClientLayer: e.makeSqlLayer(k()),
-				runnerStorage: t,
-				dialectId: e.id,
-				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
-				...i(),
-				...a.length > 0 ? { extraShardingLayers: a } : {}
-			});
-		})();
-	}
-	let G = pe(M, An()), Pr = v.filter((e) => /\.subscribe\.tsx?$/.test(e)), Fr = Pr.length > 0 ? await Lt(Pr, $) : [], Ir = v.filter((e) => /\.reaction\.tsx?$/.test(e)), Lr = Ir.length > 0 ? await De(Ir, $) : [], Wr = v.filter((e) => Cn.test(e)), Gr = Wr.length > 0 ? await ke(Wr, $) : [], Kr = v.filter((e) => /\.aggregate\.tsx?$/.test(e)), Qr = Kr.length > 0 ? await yt(Kr, $) : [];
-	{
-		let e = Vr(Di(we({ aggregates: Qr.map((e) => e.definition) }), vt(C)));
-		e !== void 0 && $.warn(e);
-	}
-	let ei = f();
-	if (Qr.length > 0 && g !== "memory") try {
-		let e = (await I(g)).makeSqlLayer(k());
-		ei = gt(e);
-	} catch (e) {
-		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
-	}
-	let ti = g === "memory" ? Si : qr(w, `aggregate@${process.pid}`, $), ni = v.filter((e) => wn.test(e)), ri = ni.length > 0 ? await Ie(ni, $) : [], ii = v.filter((e) => Tn.test(e)), ai = ii.length > 0 ? await Kt(ii, $) : [], oi = v.filter((e) => En.test(e)), si = oi.length > 0 ? await ae(oi, $) : [], ci = [], ui = [], di = v.filter((e) => pn.test(e));
-	if (di.length > 0) {
-		let e = $.child("agent"), t = v.filter((e) => gn.test(e));
-		t.length > 0 && await mn(t, e);
-		let n = await hn(di, e);
-		for (let e of n.agents) for (let t of Ft(e)) (t.kind === "action" ? ci : ui).push({
-			file: t.file,
-			descriptor: t.descriptor,
-			executor: t.executor
-		});
-		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
-	}
-	u.mark("workflow");
-	let K = () => {
-		let e = q.workflowWriteActions();
-		if (e === void 0) throw Error("workflow actions: this app registers no workflows");
-		return e;
-	}, fi = dr({
-		dialect: g,
-		...k()
-	}), mi = g === "memory" ? void 0 : (await I(g)).makeSqlLayer(k()), hi = async () => ht({
-		sqlLayer: mi,
-		declared: C,
-		log: $
-	}), gi = {
-		kind: "api",
-		meta: {
-			name: m?.name ?? "voltro-api",
-			voltroVersion: j,
-			port: le,
-			mode: hr(),
-			store: g,
-			cdc: de ? "on" : "off",
-			...fi === void 0 ? {} : { databaseId: fi }
-		},
-		rpc: Fe(y, p),
-		workflows: h(y, p),
-		migrations: hi,
-		events: () => q.eventsSnapshot(),
-		agentTools: () => q.agentTools(),
-		invariantChecks: () => ({
-			mode: "serve",
-			accessGate: _e,
-			config: m,
-			serverOnlyLeaks: y.serverOnlyLeaks,
-			migrations: hi
-		}),
-		members: () => q.membersSnapshot(),
-		inspectFireSchedule: async ({ name: e, trigger: t }) => {
-			if (!jr) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
-			return { runId: await jr.fireNow(e, t) ?? null };
-		},
-		inspectBackfillSchedule: ne({
-			getHandle: () => jr,
-			getSchedules: () => Sr
-		}),
-		...Te === void 0 ? {} : { webhooks: () => _t({
-			store: w,
-			discoveredWebhooks: Te
-		}) },
-		plugins: () => ({
-			plugins: Qn.snapshot(),
-			capturedAt: Date.now()
-		}),
-		env: () => P(m?.name ?? Bn(p), {
-			...m?.env !== void 0 && Ji(m.env) ? { contract: m.env } : {},
-			plugins: m?.plugins ?? []
-		}),
-		dataCache: () => qt({
-			stats: Tt,
-			backendKind: wt
-		}),
-		subscriptions: () => je(() => nr),
-		fleetObservations: (e) => qn.fleet(e),
-		peerAddress: (e) => qn.addressOf(e),
-		inspectTables: () => Ae(C),
-		inspectRows: Qt({
-			store: w,
-			tables: C,
-			mask: !0
-		}),
-		metrics: (e) => q.rpcMetrics().snapshot(e),
-		cluster: () => Ye({
-			store: w,
-			dialect: g,
-			useClusterCron: Dr,
-			scheduleCoordChoice: Er
-		}),
-		inspectSchedules: () => ie({
-			schedules: Sr,
-			defaultTrigger: wr,
-			coordination: Ar
-		}),
-		inspectScheduleRuns: (e) => Pe(w, e),
-		...Wt(w, {
-			controls: ut(y.workflows ?? []),
-			active: (y.workflows?.length ?? 0) > 0,
-			cancellation: () => q.flowControlHealth()
-		}),
-		webhookActions: te(() => q.webhooksService()),
-		inspectStartWorkflow: (e) => K().inspectStartWorkflow(e),
-		inspectCancelWorkflowRun: (e) => K().inspectCancelWorkflowRun(e),
-		inspectSuspendWorkflowRun: (e) => K().inspectSuspendWorkflowRun(e),
-		inspectResumeWorkflowRun: (e) => K().inspectResumeWorkflowRun(e),
-		inspectDiscardWorkflowRun: (e) => K().inspectDiscardWorkflowRun(e),
-		inspectRetryWorkflowRun: (e) => K().inspectRetryWorkflowRun(e),
-		inspectSignalWorkflowRun: (e) => K().inspectSignalWorkflowRun(e),
-		inspectUpdateWorkflowRun: (e) => K().inspectUpdateWorkflowRun(e),
-		inspectInferences: (e) => Ct({
-			store: w,
-			active: (y.workflows?.length ?? 0) > 0,
-			dispatcher: () => q.inferenceHealth()
-		}, e.limit === void 0 ? {} : { limit: e.limit }),
-		...pt({
-			store: w,
-			cancelRun: async (e) => await q.runCanceller()?.(e) ?? !1,
-			retryRun: async (e) => K().inspectRetryWorkflowRun({ runId: e }),
-			redriveRun: async (e) => q.redriveWorkflowRun({ runId: e }),
-			log: $
-		}),
-		inspectRedriveWorkflowRun: (e) => q.redriveWorkflowRun(e),
-		inspectResumeWorkflowRunFromStep: (e) => q.resumeWorkflowRunFromStep(e)
-	}, _i = (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace", yi = _i && g !== "memory" ? await (async () => {
-		let e = await I(g);
-		return ft({
-			tables: C,
-			sqlLayer: e.makeSqlLayer(k()),
-			dialect: g,
-			options: { retryFilter: e.retryFilter },
-			log: {
-				info: (e, t) => $.info(e, t),
-				error: (e, t, n) => $.error(e, t ?? {}, n)
-			}
-		});
-	})() : void 0, xi = await dt({
-		input: m?.tenancy?.residency,
-		namespaceIsolationOn: _i,
-		makeStoreForUrl: (e, t) => T(m, void 0, cn(k(), t)),
-		log: {
-			info: (e, t) => $.info(e, t),
-			warn: (e, t) => $.warn(e, t)
-		}
-	});
-	xi !== void 0 && pi(async () => {
-		await xi.close();
-	});
-	let q = await Po({
-		bootTiming: u,
-		claimChange: Yn.claim,
-		broadcastNamespace: zn,
-		scheduling: (() => {
-			let e = sn;
-			return {
-				admissionDrainMs: e.admissionDrainMs,
-				inferenceTickMs: e.inferenceTickMs,
-				cancelSweepMs: e.cancelSweepMs,
-				stalenessSweepMs: e.stalenessSweepMs,
-				disarmWhenIdle: Ut({
-					changeScope: w.changeScope,
-					broadcastAttached: ir !== void 0
-				})
-			};
-		})(),
-		...m?.workflows?.staleness === void 0 ? {} : { workflowStaleness: m.workflows.staleness },
-		...m?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: m.workflows.suspendSignalHintMs },
-		workflowRecording: Ze(m?.workflows?.recording),
-		membership: {
-			...L,
-			instanceId: Ln
-		},
-		security: {
-			defaultDeny: Re(m),
-			...fe(m)
-		},
-		approvals: { defaultExpiryMs: Oe(m) },
-		...m?.plugins === void 0 ? {} : { plugins: m.plugins },
-		...It ? { idempotency: It } : {},
-		restRoutes: fr,
-		...m?.grpc === void 0 ? {} : { grpc: {
-			config: m.grpc,
-			root: p
-		} },
-		appProcedures: _e,
-		discovered: {
-			wsGateways: y.wsGateways,
-			queries: [...y.queries, ...ui],
-			mutations: y.mutations,
-			actions: [...y.actions, ...ci],
-			streams: y.streams,
-			events: y.events,
-			workflows: y.workflows,
-			workflowWorkers: y.workflowWorkers,
-			eventTriggers: y.eventTriggers,
-			schedules: Sr,
-			subscribers: Fr,
-			outboxHandlers: Gr,
-			connections: y.connections,
-			reactions: Lr,
-			aggregates: Qr,
-			expectations: ri,
-			budgets: ai,
-			experiments: si,
-			...Te === void 0 ? {} : { webhooks: Te }
-		},
-		log: $,
-		analytics: Be.sink,
-		aggregateStorage: ei,
-		aggregateCoordinator: ti,
-		store: w,
-		kv: jt,
-		cache: st,
-		snapshotCache: ot,
-		...m?.reactive === void 0 ? {} : { reactive: m.reactive },
-		schemaRegistry: He,
-		tenantScopedTables: y.tenantScopedTables,
-		softDeleteScopedTables: y.softDeleteScopedTables,
-		dataTransferSnapshot: Fi(C, g),
-		dataTransferDialect: g,
-		...yi === void 0 ? {} : { ensureTenantProvisioned: yi.ensure },
-		...xi === void 0 ? {} : { resolveResidentStore: xi.resolveStore },
-		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => ur({
-			headers: e,
-			clientId: t
-		}),
-		...m?.auth === void 0 ? {} : { authority: m.auth },
-		...m?.agents === void 0 ? {} : { agents: m.agents },
-		httpRoutes: M.flatMap((e) => e.httpRoutes ?? []),
-		getStore: () => rt,
-		...U ? { baseLayer: U } : {},
-		...Nr === void 0 ? {} : { workflowEngineLayer: Nr },
-		scheduleDefaultTrigger: wr,
-		scheduleCoordination: Ar,
-		scheduleArmSelf: !Dr,
-		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : m?.dormancy ?? "always-on",
-		scheduleReplicaId: vr(),
-		...G === void 0 ? {} : { scheduleFireInterceptor: G },
-		onSchedulerReady: (e) => {
-			jr = e;
-		},
-		inspectStream: se(Kn),
-		inspectRoute: { handle: async (e, t, n, r) => await Ce(e, gi, t, {
-			method: n,
-			...r === void 0 ? {} : { body: r },
-			...z()
-		}) || ((n === "GET" ? await rn(e, gi, t, {
-			method: n,
-			...z()
-		}) : null) ?? nn(e, gi, t, {
-			method: n,
-			...r === void 0 ? {} : { body: r },
-			...z()
-		}) ?? {
-			status: 404,
-			contentType: "application/json",
-			body: JSON.stringify({ error: "not an inspect route" })
-		}) },
-		...m?.name === void 0 ? {} : { appName: m.name },
-		observability: $n,
-		port: le,
-		...m?.transport?.wsPath ? { path: m.transport.wsPath } : {},
-		...m?.http === void 0 ? {} : { http: m.http }
-	});
-	nr = q.dispatcher;
-	let Ci = () => {
-		Kn.emit("subscriptions", je(() => nr));
-	}, wi = q.dispatcher.onSubscriptionsChange(Ci);
-	return Ci(), b(xe([
-		y.queries,
-		y.mutations,
-		y.actions,
-		y.streams
-	]), (e) => {
-		$.warn(e);
-	}), $.info(`API listening on :${le}`, {
-		dialect: g,
-		queries: y.queries.length,
-		mutations: y.mutations.length,
-		actions: y.actions.length,
-		streams: y.streams.length,
-		workflows: y.workflows.length,
-		workflowWorkers: y.workflowWorkers.length,
-		schedules: Sr.length,
-		scheduleCoordination: Ar
-	}), u.finish($), pi(async () => {
-		for (let e of Nn) e.stop();
-		Rt.stop(), wi(), qn.stop();
-		try {
-			await q.close(), kt(), Gt?.dispose(), await Qn.deactivate(), await ir?.close(), await Et({
-				mirror: Pt,
-				log: $
-			}), await Be.dispose(), await w.close?.();
-		} catch (e) {
-			console.error("serve: shutdown step failed, exiting anyway:", e);
-		}
-	}), await new Promise(() => {}), 0;
-};
-//#endregion
-export { Lo as n, Fo as r, Ro as t };