@lostgradient/weft 0.16.0 → 0.18.0

package/dist/server/operations/cancel-schedule.js

@@ -1,6 +1,5 @@
 import { z } from "zod";
 import { defineOperation } from "../operation-registry.js";
-import { shapeRestFault } from "./operation-helpers.js";
 import { mapScheduleErrorToFault } from "./schedule-faults.js";
 const cancelScheduleInput = z.object({
   scheduleId: z.string().min(1)
@@ -38,6 +37,5 @@ export const cancelScheduleOperation = defineOperation({
   extractInput: async (_request, pathParams) => ({
     scheduleId: pathParams.id ?? ""
   }),
-  success: { kind: "empty", status: 204 },
-  shapeFault: shapeRestFault
+  success: { kind: "empty", status: 204 }
 };

package/dist/server/operations/cancel-workflow.js

@@ -1,5 +1,4 @@
 import { z } from "zod";
-import { shapeRestFault } from "./operation-helpers.js";
 import {
   createSingleWorkflowControlOperation,
   extractWorkflowIdFromPath
@@ -29,6 +28,5 @@ export const cancelWorkflowOperation = createSingleWorkflowControlOperation({
     workflowId: { kind: "path", pathParam: "id" }
   },
   extractInput: async (_request, pathParams) => extractWorkflowIdFromPath(pathParams),
-  success: { kind: "empty", status: 204 },
-  shapeFault: shapeRestFault
+  success: { kind: "empty", status: 204 }
 };

package/dist/server/operations/create-schedule.js

@@ -1,6 +1,6 @@
 import { z } from "zod";
 import { defineOperation } from "../operation-registry.js";
-import { invalidParamsFault, shapeRestFault } from "./operation-helpers.js";
+import { invalidParamsFault } from "./operation-helpers.js";
 import {
   mapScheduleErrorToFault,
   validateScheduleInputCadence,
@@ -101,6 +101,5 @@ export const createScheduleOperation = defineOperation({
       ...extractSharedScheduleRestFields(record)
     };
   },
-  success: { kind: "json", status: 201 },
-  shapeFault: shapeRestFault
+  success: { kind: "json", status: 201 }
 };

package/dist/server/operations/fork-workflow.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { defineOperation } from "../operation-registry.js";
 import { readRestTextBody } from "../rest-body.js";
-import { invalidParamsFault, shapeRestFault } from "./operation-helpers.js";
+import { invalidParamsFault } from "./operation-helpers.js";
 const forkWorkflowInput = z.object({
   workflowId: z.string().min(1),
   fromStep: z.unknown().optional()
@@ -84,6 +84,5 @@ export const forkWorkflowOperation = defineOperation({
       fromStep: record.fromStep
     };
   },
-  success: { kind: "json", status: 201 },
-  shapeFault: shapeRestFault
+  success: { kind: "json", status: 201 }
 };

package/dist/server/operations/get-checkpoint-at.js

@@ -1,7 +1,6 @@
 import { z } from "zod";
 import { negotiatedResponse } from "../handler/response-helpers.js";
 import { defineOperation } from "../operation-registry.js";
-import { shapeRestFault } from "./operation-helpers.js";
 const getCheckpointAtInput = z.object({
   workflowId: z.string().min(1),
   step: z.number().int().nonnegative()
@@ -32,9 +31,6 @@ export const getCheckpointAtOperation = defineOperation({
 function shapeGetCheckpointAtSuccess(result, request) {
   return negotiatedResponse(request, result, 200);
 }
-function shapeGetCheckpointAtFault(fault) {
-  return shapeRestFault(fault);
-}
 export const getCheckpointAtRestBinding = {
   method: "GET",
   path: "/v1/workflows/:id/checkpoints/:step",
@@ -69,6 +65,5 @@ export const getCheckpointAtRestBinding = {
     };
   },
   success: { kind: "json", status: 200 },
-  shapeSuccess: (output, request) => shapeGetCheckpointAtSuccess(output, request),
-  shapeFault: shapeGetCheckpointAtFault
+  shapeSuccess: (output, request) => shapeGetCheckpointAtSuccess(output, request)
 };

package/dist/server/operations/get-principal.d.ts

@@ -0,0 +1,75 @@
+/**
+ * `weft.system.principal` operation + REST binding.
+ *
+ * Reports the caller's own resolved principal: the authentication method,
+ * the normalized subject, and the granted scope set. Public access by
+ * design — introspection has to work for every credential state to be
+ * useful (a dashboard probes its principal before it knows anything), and
+ * an unauthenticated caller learns only what it already knows: that it is
+ * anonymous with no scopes. The response is strictly principal-shaped —
+ * nothing about the server's auth configuration (key inventory,
+ * `unauthenticatedAccess` posture, JWT issuers) is exposed.
+ */
+import { z } from 'zod';
+import type { UnknownRestBinding } from '../rest-bindings.ts';
+declare const getPrincipalInput: z.ZodObject<{}, z.core.$strip>;
+declare const getPrincipalOutput: z.ZodObject<{
+    method: z.ZodEnum<{
+        jwt: "jwt";
+        "api-key": "api-key";
+        mtls: "mtls";
+        "stdio-local": "stdio-local";
+        unauthenticated: "unauthenticated";
+    }>;
+    subject: z.ZodNullable<z.ZodString>;
+    scopes: z.ZodArray<z.ZodEnum<{
+        "workflows:read": "workflows:read";
+        "workflows:write": "workflows:write";
+        "workflows:admin": "workflows:admin";
+        "schedules:read": "schedules:read";
+        "schedules:write": "schedules:write";
+        "signals:write": "signals:write";
+        "updates:write": "updates:write";
+        "queries:read": "queries:read";
+        "reviews:read": "reviews:read";
+        "reviews:write": "reviews:write";
+        "attributes:read": "attributes:read";
+        "attributes:write": "attributes:write";
+        "tags:write": "tags:write";
+        "streams:read": "streams:read";
+        "events:read": "events:read";
+        "storage:read": "storage:read";
+        "storage:write": "storage:write";
+        "storage:admin": "storage:admin";
+        "workers:write": "workers:write";
+        "system:read": "system:read";
+        "system:admin": "system:admin";
+    }>>;
+}, z.core.$strip>;
+export type GetPrincipalInput = z.infer<typeof getPrincipalInput>;
+/**
+ * Output of `weft.system.principal`: the caller's authentication method,
+ * normalized subject (`null` when the credential carries none), and granted
+ * scopes, sorted. Anonymous callers receive `method: 'unauthenticated'`
+ * with an empty scope list.
+ *
+ * @example
+ * ```ts
+ * import { type GetPrincipalOutput } from '@lostgradient/weft/server';
+ *
+ * const anonymous: GetPrincipalOutput = {
+ *   method: 'unauthenticated',
+ *   subject: null,
+ *   scopes: [],
+ * };
+ * console.log(anonymous.method);
+ * ```
+ */
+export type GetPrincipalOutput = z.infer<typeof getPrincipalOutput>;
+export declare const getPrincipalOperation: import("../operation-catalog.ts").OperationDefinition<Record<string, never>, {
+    method: "jwt" | "api-key" | "mtls" | "stdio-local" | "unauthenticated";
+    subject: string | null;
+    scopes: ("workflows:read" | "workflows:write" | "workflows:admin" | "schedules:read" | "schedules:write" | "signals:write" | "updates:write" | "queries:read" | "reviews:read" | "reviews:write" | "attributes:read" | "attributes:write" | "tags:write" | "streams:read" | "events:read" | "storage:read" | "storage:write" | "storage:admin" | "workers:write" | "system:read" | "system:admin")[];
+}, unknown>;
+export declare const getPrincipalRestBinding: UnknownRestBinding;
+export {};

package/dist/server/operations/get-principal.js

@@ -0,0 +1,41 @@
+import { z } from "zod";
+import { AUTHORIZATION_SCOPES } from "../authorization-scope.js";
+import { shapeOperationFaultAsJson } from "../operation-fault.js";
+import { defineOperation } from "../operation-registry.js";
+const principalMethodSchema = z.enum(["jwt", "api-key", "mtls", "stdio-local", "unauthenticated"]), getPrincipalInput = z.object({}), getPrincipalOutput = z.object({
+  method: principalMethodSchema,
+  subject: z.string().nullable(),
+  scopes: z.array(z.enum(AUTHORIZATION_SCOPES))
+});
+export const getPrincipalOperation = defineOperation({
+  name: "weft.system.principal",
+  mcpExposable: !1,
+  summary: "Report the caller's resolved principal and granted scopes",
+  description: `Report the caller's own resolved principal: the authentication method ('jwt', 'api-key', 'mtls', 'stdio-local', or 'unauthenticated'), the normalized subject when one exists, and the granted authorization scopes, sorted. Public access: an unauthenticated caller receives method 'unauthenticated' with an empty scope list rather than an error, so clients can distinguish "no credential" from "credential with few scopes" without probing ` + "other operations. Reflects only the request credential \u2014 never server auth configuration.",
+  destructive: !1,
+  tags: ["System"],
+  inputSchema: getPrincipalInput,
+  outputSchema: getPrincipalOutput,
+  access: { kind: "public" },
+  discoverable: !0,
+  transports: { http: !0, jsonRpcHttp: !0, jsonRpcWebSocket: !0, jsonRpcStdio: !0 },
+  unknownKeyPolicy: { http: "strip", jsonRpc: "reject" },
+  invoke: async ({ principal }) => {
+    if (principal.method === "unauthenticated")
+      return { method: "unauthenticated", subject: null, scopes: [] };
+    return {
+      method: principal.method,
+      subject: principal.subject ?? null,
+      scopes: [...principal.scopes].toSorted()
+    };
+  }
+}), getPrincipalRestBinding = {
+  method: "GET",
+  path: "/v1/principal",
+  pathParamNames: [],
+  operationName: "weft.system.principal",
+  inputSources: {},
+  extractInput: async () => ({}),
+  success: { kind: "json", status: 200 },
+  shapeFault: shapeOperationFaultAsJson
+};

package/dist/server/operations/get-registry.js

@@ -4,7 +4,6 @@ import {
   RegistrySchemaConversionError
 } from "../../core/registry-snapshot.js";
 import { defineOperation } from "../operation-registry.js";
-import { shapeRestFault } from "./operation-helpers.js";
 const getRegistryInput = z.object({}), objectValue = z.unknown().refine((value) => typeof value === "object" && value !== null && !Array.isArray(value), {
   message: "expected an object"
 }), getRegistryOutput = z.object({
@@ -47,10 +46,5 @@ export const getRegistryOperation = defineOperation({
   operationName: "weft.system.registry",
   inputSources: {},
   extractInput: async () => ({}),
-  success: { kind: "json", status: 200 },
-  shapeSuccess: (output) => new Response(JSON.stringify(output), {
-    status: 200,
-    headers: { "Content-Type": "application/json" }
-  }),
-  shapeFault: shapeRestFault
+  success: { kind: "json", status: 200 }
 };

package/dist/server/operations/get-retention-overview.js

@@ -1,6 +1,5 @@
 import { z } from "zod";
 import { defineOperation } from "../operation-registry.js";
-import { shapeRestFault } from "./operation-helpers.js";
 const getRetentionOverviewInput = z.object({}), getRetentionOverviewOutput = z.unknown();
 export const getRetentionOverviewOperation = defineOperation({
   name: "weft.retention.get",
@@ -16,24 +15,12 @@ export const getRetentionOverviewOperation = defineOperation({
   invoke: async ({ engine }) => {
     return engine.getRetentionOverview();
   }
-});
-function shapeGetRetentionOverviewSuccess(result) {
-  return new Response(JSON.stringify(result), {
-    status: 200,
-    headers: { "Content-Type": "application/json" }
-  });
-}
-function shapeGetRetentionOverviewFault(fault) {
-  return shapeRestFault(fault);
-}
-export const getRetentionOverviewRestBinding = {
+}), getRetentionOverviewRestBinding = {
   method: "GET",
   path: "/v1/retention",
   pathParamNames: [],
   operationName: "weft.retention.get",
   inputSources: {},
   extractInput: async () => ({}),
-  success: { kind: "json", status: 200 },
-  shapeSuccess: (output) => shapeGetRetentionOverviewSuccess(output),
-  shapeFault: shapeGetRetentionOverviewFault
+  success: { kind: "json", status: 200 }
 };

package/dist/server/operations/get-review.js

@@ -1,6 +1,5 @@
 import { z } from "zod";
 import { defineOperation } from "../operation-registry.js";
-import { shapeRestFault } from "./operation-helpers.js";
 const getReviewInput = z.object({
   workflowId: z.string().min(1),
   reviewId: z.string().min(1)
@@ -28,17 +27,7 @@ export const getReviewOperation = defineOperation({
       };
     return review;
   }
-});
-function shapeGetReviewSuccess(result) {
-  return new Response(JSON.stringify(result), {
-    status: 200,
-    headers: { "Content-Type": "application/json" }
-  });
-}
-function shapeGetReviewFault(fault) {
-  return shapeRestFault(fault);
-}
-export const getReviewRestBinding = {
+}), getReviewRestBinding = {
   method: "GET",
   path: "/v1/workflows/:id/review/:reviewId",
   pathParamNames: ["id", "reviewId"],
@@ -51,7 +40,5 @@ export const getReviewRestBinding = {
     workflowId: pathParams.id ?? "",
     reviewId: pathParams.reviewId ?? ""
   }),
-  success: { kind: "json", status: 200 },
-  shapeSuccess: (output) => shapeGetReviewSuccess(output),
-  shapeFault: shapeGetReviewFault
+  success: { kind: "json", status: 200 }
 };

package/dist/server/operations/get-schedule.js

@@ -1,6 +1,5 @@
 import { z } from "zod";
 import { defineOperation } from "../operation-registry.js";
-import { shapeRestFault } from "./operation-helpers.js";
 const getScheduleInput = z.object({
   scheduleId: z.string().min(1)
 }), getScheduleOutput = z.unknown();
@@ -28,11 +27,7 @@ export const getScheduleOperation = defineOperation({
       };
     return schedule;
   }
-});
-function shapeGetScheduleFault(fault) {
-  return shapeRestFault(fault);
-}
-export const getScheduleRestBinding = {
+}), getScheduleRestBinding = {
   method: "GET",
   path: "/v1/schedules/:id",
   pathParamNames: ["id"],
@@ -43,6 +38,5 @@ export const getScheduleRestBinding = {
   extractInput: async (_request, pathParams) => ({
     scheduleId: pathParams.id ?? ""
   }),
-  success: { kind: "json", status: 200 },
-  shapeFault: shapeGetScheduleFault
+  success: { kind: "json", status: 200 }
 };

package/dist/server/operations/get-stream-chunks.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { defineOperation } from "../operation-registry.js";
 import { parseOptionalSequenceCursor } from "../sequence-cursor.js";
-import { invalidParamsFault, shapeRestFault } from "./operation-helpers.js";
+import { invalidParamsFault } from "./operation-helpers.js";
 import { createStoredChunkSSEStream, SSE_RESPONSE_HEADERS } from "./sse-stream.js";
 const getStreamChunksInput = z.object({
   workflowId: z.string().min(1),
@@ -31,9 +31,6 @@ export const getStreamChunksOperation = defineOperation({
     return { chunks: after !== void 0 ? await e.getStreamChunks(input.workflowId, input.key, { after }) : await e.getStreamChunks(input.workflowId, input.key) };
   }
 });
-function shapeGetStreamChunksFault(fault) {
-  return shapeRestFault(fault);
-}
 function shapeGetStreamChunksSuccess(output, request) {
   if ((request.headers.get("Accept") ?? "").includes("text/event-stream"))
     return new Response(createStoredChunkSSEStream(output.chunks, (chunk) => JSON.stringify({ sequence: chunk.sequence, value: chunk.value })), { status: 200, headers: SSE_RESPONSE_HEADERS });
@@ -61,6 +58,5 @@ export const getStreamChunksRestBinding = {
     };
   },
   success: { kind: "streaming", mediaType: "text/event-stream" },
-  shapeSuccess: shapeGetStreamChunksSuccess,
-  shapeFault: shapeGetStreamChunksFault
+  shapeSuccess: shapeGetStreamChunksSuccess
 };

package/dist/server/operations/get-system-lease.js

@@ -1,6 +1,5 @@
 import { z } from "zod";
 import { defineOperation } from "../operation-registry.js";
-import { shapeRestFault } from "./operation-helpers.js";
 const getSystemLeaseInput = z.object({}), getSystemLeaseOutput = z.object({
   mode: z.enum(["none", "lease"]),
   status: z.enum(["disabled", "healthy", "no-lease", "contested"]),
@@ -39,10 +38,5 @@ export const getSystemLeaseOperation = defineOperation({
   operationName: "weft.system.lease",
   inputSources: {},
   extractInput: async () => ({}),
-  success: { kind: "json", status: 200 },
-  shapeSuccess: (output) => new Response(JSON.stringify(output), {
-    status: 200,
-    headers: { "Content-Type": "application/json" }
-  }),
-  shapeFault: shapeRestFault
+  success: { kind: "json", status: 200 }
 };

package/dist/server/operations/get-system-metrics.js

@@ -34,10 +34,6 @@ export function createGetSystemMetricsRestBinding() {
     inputSources: {},
     extractInput: async () => ({}),
     success: { kind: "json", status: 200 },
-    shapeSuccess: (output) => new Response(JSON.stringify(output), {
-      status: 200,
-      headers: { "Content-Type": "application/json" }
-    }),
     shapeFault: shapeOperationFaultAsJson
   };
 }

package/dist/server/operations/get-task-diagnostics.js

@@ -12,7 +12,6 @@ import {
   isQueuedRecord,
   isResolvedRecord
 } from "../task-state.js";
-import { shapeRestFault } from "./operation-helpers.js";
 const DEFAULT_STALE_QUEUED_AFTER_MS = 60000, DEFAULT_STALE_HEARTBEAT_AFTER_MS = 60000, DEFAULT_RETRY_STORM_MINIMUM_ATTEMPTS = 3, DEFAULT_LIMIT = 50, MAX_LIMIT = 200, RESOLVED_HISTORY_SCAN_LIMIT = 1000, taskDiagnosticKindSchema = z.enum([
   "stuck-queued",
   "stale-inflight",
@@ -408,12 +407,7 @@ export const getTaskDiagnosticsRestBinding = {
       limit: parseOptionalNumber(url.searchParams.get("limit"))
     };
   },
-  success: { kind: "json", status: 200 },
-  shapeSuccess: (output) => new Response(JSON.stringify(output), {
-    status: 200,
-    headers: { "Content-Type": "application/json" }
-  }),
-  shapeFault: shapeRestFault
+  success: { kind: "json", status: 200 }
 }, clearTaskDeadLetterRestBinding = {
   method: "DELETE",
   path: "/v1/tasks/diagnostics/dead-letter/:operationId",
@@ -425,10 +419,5 @@ export const getTaskDiagnosticsRestBinding = {
   extractInput: async (_request, pathParams) => ({
     operationId: pathParams.operationId ?? ""
   }),
-  success: { kind: "json", status: 200 },
-  shapeSuccess: (output) => new Response(JSON.stringify(output), {
-    status: 200,
-    headers: { "Content-Type": "application/json" }
-  }),
-  shapeFault: shapeRestFault
+  success: { kind: "json", status: 200 }
 };

package/dist/server/operations/get-update-result.js

@@ -1,6 +1,5 @@
 import { z } from "zod";
 import { defineOperation } from "../operation-registry.js";
-import { shapeRestFault } from "./operation-helpers.js";
 const getUpdateResultInput = z.object({
   updateId: z.string().min(1)
 }), getUpdateResultOutput = z.unknown();
@@ -37,9 +36,6 @@ function shapeGetUpdateResultSuccess(result) {
     headers: { "Content-Type": "application/json" }
   });
 }
-function shapeGetUpdateResultFault(fault) {
-  return shapeRestFault(fault);
-}
 export const getUpdateResultRestBinding = {
   method: "GET",
   path: "/v1/updates/:updateId",
@@ -50,6 +46,5 @@ export const getUpdateResultRestBinding = {
   },
   extractInput: async (_request, pathParams) => ({ updateId: pathParams.updateId ?? "" }),
   success: { kind: "json", status: 200 },
-  shapeSuccess: (output) => shapeGetUpdateResultSuccess(output),
-  shapeFault: shapeGetUpdateResultFault
+  shapeSuccess: (output) => shapeGetUpdateResultSuccess(output)
 };

package/dist/server/operations/get-workflow-attributes.js

@@ -1,6 +1,5 @@
 import { z } from "zod";
 import { defineOperation } from "../operation-registry.js";
-import { shapeRestFault } from "./operation-helpers.js";
 const getWorkflowAttributesInput = z.object({
   workflowId: z.string().min(1)
 }), getWorkflowAttributesOutput = z.unknown();
@@ -26,17 +25,7 @@ export const getWorkflowAttributesOperation = defineOperation({
       };
     return attributes;
   }
-});
-function shapeGetWorkflowAttributesSuccess(result) {
-  return new Response(JSON.stringify(result), {
-    status: 200,
-    headers: { "Content-Type": "application/json" }
-  });
-}
-function shapeGetWorkflowAttributesFault(fault) {
-  return shapeRestFault(fault);
-}
-export const getWorkflowAttributesRestBinding = {
+}), getWorkflowAttributesRestBinding = {
   method: "GET",
   path: "/v1/workflows/:id/attributes",
   pathParamNames: ["id"],
@@ -45,7 +34,5 @@ export const getWorkflowAttributesRestBinding = {
     workflowId: { kind: "path", pathParam: "id" }
   },
   extractInput: async (_request, pathParams) => ({ workflowId: pathParams.id ?? "" }),
-  success: { kind: "json", status: 200 },
-  shapeSuccess: (output) => shapeGetWorkflowAttributesSuccess(output),
-  shapeFault: shapeGetWorkflowAttributesFault
+  success: { kind: "json", status: 200 }
 };

package/dist/server/operations/get-workflow-events.js

@@ -1,6 +1,5 @@
 import { z } from "zod";
 import { defineOperation } from "../operation-registry.js";
-import { shapeRestFault } from "./operation-helpers.js";
 const getWorkflowEventsInput = z.object({
   workflowId: z.string().min(1)
 }), getWorkflowEventsOutput = z.unknown();
@@ -26,17 +25,7 @@ export const getWorkflowEventsOperation = defineOperation({
       };
     return { events: await e.getEvents(input.workflowId) };
   }
-});
-function shapeGetWorkflowEventsSuccess(result) {
-  return new Response(JSON.stringify(result), {
-    status: 200,
-    headers: { "Content-Type": "application/json" }
-  });
-}
-function shapeGetWorkflowEventsFault(fault) {
-  return shapeRestFault(fault);
-}
-export const getWorkflowEventsRestBinding = {
+}), getWorkflowEventsRestBinding = {
   method: "GET",
   path: "/v1/workflows/:id/events",
   pathParamNames: ["id"],
@@ -45,7 +34,5 @@ export const getWorkflowEventsRestBinding = {
     workflowId: { kind: "path", pathParam: "id" }
   },
   extractInput: async (_request, pathParams) => ({ workflowId: pathParams.id ?? "" }),
-  success: { kind: "json", status: 200 },
-  shapeSuccess: (output) => shapeGetWorkflowEventsSuccess(output),
-  shapeFault: shapeGetWorkflowEventsFault
+  success: { kind: "json", status: 200 }
 };

package/dist/server/operations/get-workflow-observability.js

@@ -1,6 +1,5 @@
 import { z } from "zod";
 import { defineOperation } from "../operation-registry.js";
-import { shapeRestFault } from "./operation-helpers.js";
 const workflowObservabilityInput = z.object({
   workflowId: z.string().min(1)
 }), scheduleProvenanceOutput = z.object({
@@ -60,8 +59,7 @@ export const getWorkflowScheduleProvenanceOperation = defineOperation({
   operationName: "weft.workflows.scheduleprovenance.get",
   inputSources: { workflowId: { kind: "path", pathParam: "id" } },
   extractInput: async (_request, pathParams) => ({ workflowId: pathParams.id ?? "" }),
-  success: { kind: "json", status: 200 },
-  shapeFault: shapeRestFault
+  success: { kind: "json", status: 200 }
 }, getWorkflowFinalizerRestBinding = {
   method: "GET",
   path: "/v1/workflows/:id/finalizer",
@@ -69,8 +67,7 @@ export const getWorkflowScheduleProvenanceOperation = defineOperation({
   operationName: "weft.workflows.finalizer.get",
   inputSources: { workflowId: { kind: "path", pathParam: "id" } },
   extractInput: async (_request, pathParams) => ({ workflowId: pathParams.id ?? "" }),
-  success: { kind: "json", status: 200 },
-  shapeFault: shapeRestFault
+  success: { kind: "json", status: 200 }
 }, workflowObservabilityRestBindings = [
   getWorkflowScheduleProvenanceRestBinding,
   getWorkflowFinalizerRestBinding

package/dist/server/operations/get-workflow-result.js

@@ -67,12 +67,6 @@ export const getWorkflowResultOperation = defineOperation({
     }
   }
 });
-function shapeGetWorkflowResultSuccess(result) {
-  return new Response(JSON.stringify(result), {
-    status: 200,
-    headers: { "Content-Type": "application/json" }
-  });
-}
 function shapeGetWorkflowResultFault(fault) {
   if (fault.code === "Timeout")
     return shapeRestFault(fault, { message: "Timeout waiting for workflow result", status: 408 });
@@ -88,6 +82,5 @@ export const getWorkflowResultRestBinding = {
   },
   extractInput: async (_request, pathParams) => ({ workflowId: pathParams.id ?? "" }),
   success: { kind: "json", status: 200 },
-  shapeSuccess: (output) => shapeGetWorkflowResultSuccess(output),
   shapeFault: shapeGetWorkflowResultFault
 };

package/dist/server/operations/get-workflow-timeline.js

@@ -1,7 +1,6 @@
 import { z } from "zod";
 import { negotiatedResponse } from "../handler/response-helpers.js";
 import { defineOperation } from "../operation-registry.js";
-import { shapeRestFault } from "./operation-helpers.js";
 const getWorkflowTimelineInput = z.object({
   workflowId: z.string().min(1)
 }), getWorkflowTimelineOutput = z.unknown();
@@ -31,9 +30,6 @@ export const getWorkflowTimelineOperation = defineOperation({
 function shapeGetWorkflowTimelineSuccess(result, request) {
   return negotiatedResponse(request, result, 200);
 }
-function shapeGetWorkflowTimelineFault(fault) {
-  return shapeRestFault(fault);
-}
 export const getWorkflowTimelineRestBinding = {
   method: "GET",
   path: "/v1/workflows/:id/timeline",
@@ -46,6 +42,5 @@ export const getWorkflowTimelineRestBinding = {
     workflowId: pathParams.id ?? ""
   }),
   success: { kind: "json", status: 200 },
-  shapeSuccess: (output, request) => shapeGetWorkflowTimelineSuccess(output, request),
-  shapeFault: shapeGetWorkflowTimelineFault
+  shapeSuccess: (output, request) => shapeGetWorkflowTimelineSuccess(output, request)
 };

package/dist/server/operations/get-workflow.d.ts

@@ -3,8 +3,7 @@
  *
  * Returns a workflow's state by id. REST response shape preserves the
  * historical format: 200 with the serialized `WorkflowState`, or a 4xx/5xx
- * with the string `error` plus audited structured `data`, as emitted by
- * `shapeFault` below.
+ * with the string `error` plus audited structured `data`.
  *
  * @module server/operations/get-workflow
  */
@@ -27,10 +26,8 @@ export declare const getWorkflowOperation: import("../operation-catalog.ts").Ope
  * Typed as `UnknownRestBinding` at the module boundary so the router's
  * heterogeneous `ReadonlyArray<UnknownRestBinding>` storage doesn't
  * run into `exactOptionalPropertyTypes` contravariance on
- * `shapeSuccess`. The concrete `GetWorkflowOutput` typing remains at
- * the `shapeGetWorkflowSuccess` function signature above — that's
- * where real type checking matters (did the output come out wrong?).
- * The router itself only sees a shape-uniform `RestBinding<any, any>`.
+ * the binding shape. The router itself only sees a shape-uniform
+ * `RestBinding<any, any>`.
  */
 export declare const getWorkflowRestBinding: UnknownRestBinding;
 export {};

package/dist/server/operations/get-workflow.js

@@ -1,6 +1,5 @@
 import { z } from "zod";
 import { defineOperation } from "../operation-registry.js";
-import { shapeRestFault } from "./operation-helpers.js";
 const getWorkflowInput = z.object({
   workflowId: z.string().min(1)
 }), getWorkflowOutput = z.unknown();
@@ -27,14 +26,7 @@ export const getWorkflowOperation = defineOperation({
       };
     return state;
   }
-});
-function shapeGetWorkflowSuccess(state) {
-  return new Response(JSON.stringify(state), {
-    status: 200,
-    headers: { "Content-Type": "application/json" }
-  });
-}
-export const getWorkflowRestBinding = {
+}), getWorkflowRestBinding = {
   method: "GET",
   path: "/v1/workflows/:id",
   pathParamNames: ["id"],
@@ -43,7 +35,5 @@ export const getWorkflowRestBinding = {
     workflowId: { kind: "path", pathParam: "id" }
   },
   extractInput: async (_request, pathParams) => ({ workflowId: pathParams.id ?? "" }),
-  success: { kind: "json", status: 200 },
-  shapeSuccess: (output) => shapeGetWorkflowSuccess(output),
-  shapeFault: shapeRestFault
+  success: { kind: "json", status: 200 }
 };