@lostgradient/weft 0.17.0 → 0.19.0

package/README.md

@@ -1,6 +1,6 @@
 # Weft
 
-A Bun-native durable execution engine. Current release: `0.17.0`.
+A Bun-native durable execution engine. Current release: `0.19.0`.
 
 Install the library from npm as `@lostgradient/weft`:
 
@@ -378,6 +378,8 @@ import { RemoteWorker } from '@lostgradient/weft';
 
 const worker = new RemoteWorker({
   serverUrl: 'wss://weft.internal:7233',
+  deploymentName: 'orders',
+  buildId: '2026.08.19-1',
   workflows: {
     orderFulfillment: {
       name: 'orderFulfillment',

package/dist/cli/conformance.js

@@ -1,23 +1,20 @@
 import { decode } from "../core/codec.js";
 import { Engine } from "../core/engine.js";
 import { serve } from "../server/index.js";
-import { KEYS } from "../storage/interface.js";
+import { isRemoteTaskTerminalResolved, taskLedgerKey } from "../server/task-ledger.js";
 import { MemoryStorage } from "../storage/memory.js";
 import {
   REMOTE_WORKER_PROTOCOL_VERSION,
   REMOTE_WORKER_SUPPORTED_PROTOCOL_VERSIONS
 } from "../worker/protocol.js";
 const CONFORMANCE_QUEUE = "conformance", CONFORMANCE_ACTIVITIES = [
-  "weft.conformance.echo",
-  "weft.conformance.sleep",
-  "weft.conformance.cancel"
+  "conformance.echo",
+  "conformance.sleep",
+  "conformance.cancel"
 ], CONFORMANCE_HEARTBEAT_INTERVAL_MS = 25;
 function createCheck(name, ok, message) {
   return { name, ok, message };
 }
-function isRecord(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
 async function waitForCondition(predicate, timeoutMs, label) {
   const deadline = Date.now() + timeoutMs;
   let lastError;
@@ -110,17 +107,12 @@ async function waitForWorkerIdle(server, workerId, timeoutMs) {
   }
   throw Error(`Timed out after ${timeoutMs}ms waiting for worker ${workerId} to become idle`);
 }
-function isResolvedRecord(value) {
-  if (!isRecord(value))
-    return !1;
-  return typeof value.operationId === "string" && (value.status === "completed" || value.status === "failed") && typeof value.resolvedAt === "number";
-}
 async function readResolvedStatus(storage, operationId) {
-  const stored = await storage.get(KEYS.operationResolved(operationId));
+  const stored = await storage.get(taskLedgerKey(operationId));
   if (stored === null)
     return;
   const decoded = decode(stored);
-  if (!isResolvedRecord(decoded))
+  if (!isRemoteTaskTerminalResolved(decoded))
     return;
   return decoded.status;
 }
@@ -131,6 +123,7 @@ async function dispatchAndWait(server, storage, operationId, activityName, input
   if (!await server.dispatchTask({
     operationId,
     activityName,
+    workflowType: "conformance",
     input,
     queue: CONFORMANCE_QUEUE,
     visibilityTimeout: Math.max(500, timeoutMs)
@@ -151,15 +144,16 @@ async function runConformanceChecks(command, timeoutMs) {
     worker = startWorker(command, server);
     const workerId = await waitForRegisteredWorker(server, timeoutMs), registered = server.registry.getWorker(workerId);
     checks.push(createCheck("register", registered?.queue === CONFORMANCE_QUEUE && CONFORMANCE_ACTIVITIES.every((activity) => registered.activities.includes(activity)), `registered worker ${workerId}`));
-    await dispatchAndWait(server, storage, "conformance-echo", "weft.conformance.echo", { ok: !0 }, "completed", timeoutMs);
+    await dispatchAndWait(server, storage, "conformance-echo", "conformance.echo", { ok: !0 }, "completed", timeoutMs);
     checks.push(createCheck("task completion", !0, "echo task resolved"));
     await waitForWorkerHeartbeat(server, workerId, timeoutMs);
-    await dispatchAndWait(server, storage, "conformance-heartbeat", "weft.conformance.sleep", { milliseconds: CONFORMANCE_HEARTBEAT_INTERVAL_MS * 3 }, "completed", timeoutMs);
+    await dispatchAndWait(server, storage, "conformance-heartbeat", "conformance.sleep", { milliseconds: CONFORMANCE_HEARTBEAT_INTERVAL_MS * 3 }, "completed", timeoutMs);
     checks.push(createCheck("heartbeat", !0, "heartbeat observed while worker was connected"));
     const cancelOperationId = "conformance-cancel";
     if (!await server.dispatchTask({
       operationId: cancelOperationId,
-      activityName: "weft.conformance.cancel",
+      activityName: "conformance.cancel",
+      workflowType: "conformance",
       input: { milliseconds: timeoutMs },
       queue: CONFORMANCE_QUEUE,
       visibilityTimeout: Math.max(500, timeoutMs)
@@ -173,7 +167,8 @@ async function runConformanceChecks(command, timeoutMs) {
     const reconnectOperationId = "conformance-reconnect", reconnectDelayMs = Math.min(1500, Math.max(250, Math.floor(timeoutMs * 0.75)));
     if (!await server.dispatchTask({
       operationId: reconnectOperationId,
-      activityName: "weft.conformance.sleep",
+      activityName: "conformance.sleep",
+      workflowType: "conformance",
       input: { milliseconds: reconnectDelayMs },
       queue: CONFORMANCE_QUEUE,
       visibilityTimeout: Math.max(500, timeoutMs)
@@ -185,6 +180,7 @@ async function runConformanceChecks(command, timeoutMs) {
     await stopWorker(worker);
     worker = replacementWorker;
     await waitForCondition(() => server.registry.getWorker(workerId) === void 0, timeoutMs, "original worker disconnect");
+    await waitForCondition(() => (server.registry.getWorker(replacementWorkerId)?.inFlight ?? 0) > 0 || server.registry.getWorker(replacementWorkerId) === void 0, timeoutMs, "reassigned reconnect task delivered to replacement worker");
     await waitForWorkerIdle(server, replacementWorkerId, timeoutMs);
     await waitForResolvedStatus(storage, reconnectOperationId, "completed", timeoutMs);
     checks.push(createCheck("reconnect", !0, "in-flight task completed after reconnect"));

package/dist/cli/generated/operation-catalog.snapshot.json

@@ -1403,6 +1403,79 @@
       },
       "outputSchema": {}
     },
+    {
+      "name": "weft.system.principal",
+      "kind": "unary",
+      "summary": "Report the caller's resolved principal and granted scopes",
+      "description": "Report the caller's own resolved principal: the authentication method ('jwt', 'api-key', 'mtls', 'stdio-local', or 'unauthenticated'), the normalized subject when one exists, and the granted authorization scopes, sorted. Public access: an unauthenticated caller receives method 'unauthenticated' with an empty scope list rather than an error, so clients can distinguish \"no credential\" from \"credential with few scopes\" without probing other operations. Reflects only the request credential — never server auth configuration.",
+      "tags": ["System"],
+      "destructive": false,
+      "access": {
+        "kind": "public"
+      },
+      "transports": {
+        "http": true,
+        "jsonRpcHttp": true,
+        "jsonRpcWebSocket": true,
+        "jsonRpcStdio": true
+      },
+      "producibleFaults": [],
+      "inputSchema": {
+        "additionalProperties": false,
+        "properties": {},
+        "type": "object"
+      },
+      "outputSchema": {
+        "additionalProperties": false,
+        "properties": {
+          "method": {
+            "enum": ["jwt", "api-key", "mtls", "stdio-local", "unauthenticated"],
+            "type": "string"
+          },
+          "scopes": {
+            "items": {
+              "enum": [
+                "workflows:read",
+                "workflows:write",
+                "workflows:admin",
+                "schedules:read",
+                "schedules:write",
+                "signals:write",
+                "updates:write",
+                "queries:read",
+                "reviews:read",
+                "reviews:write",
+                "attributes:read",
+                "attributes:write",
+                "tags:write",
+                "streams:read",
+                "events:read",
+                "storage:read",
+                "storage:write",
+                "storage:admin",
+                "workers:write",
+                "system:read",
+                "system:admin"
+              ],
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "subject": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": ["method", "subject", "scopes"],
+        "type": "object"
+      }
+    },
     {
       "name": "weft.system.registry",
       "kind": "unary",
@@ -1635,7 +1708,6 @@
                   "type": "string"
                 },
                 "lastRequeueReason": {
-                  "enum": ["visibility-timeout", "worker-disconnect"],
                   "type": "string"
                 },
                 "operationId": {
@@ -1749,7 +1821,7 @@
         "jsonRpcWebSocket": false,
         "jsonRpcStdio": false
       },
-      "producibleFaults": [],
+      "producibleFaults": ["NotFound"],
       "inputSchema": {
         "additionalProperties": false,
         "properties": {
@@ -1983,6 +2055,185 @@
         ]
       }
     },
+    {
+      "name": "weft.workers.diagnostics",
+      "kind": "unary",
+      "summary": "Get bounded instance and deployment-version diagnostics for one connected worker",
+      "description": "Report one connected worker's identity split into two parts: `instance` (this live connection — queue, health, connection timestamps) and `deploymentVersion` (the artifact it loaded — SDK/runtime identity, manifest digest, and every advertised workflow's version, revision, and contract hash). Returns `worker: null` when the workerId is not currently connected. Excludes capabilities and raw payload schemas.",
+      "tags": ["Observability"],
+      "destructive": false,
+      "access": {
+        "kind": "scoped",
+        "scopes": ["system:read"]
+      },
+      "transports": {
+        "http": true,
+        "jsonRpcHttp": true,
+        "jsonRpcWebSocket": true,
+        "jsonRpcStdio": true
+      },
+      "producibleFaults": [],
+      "inputSchema": {
+        "additionalProperties": false,
+        "properties": {
+          "workerId": {
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": ["workerId"],
+        "type": "object"
+      },
+      "outputSchema": {
+        "additionalProperties": false,
+        "properties": {
+          "worker": {
+            "anyOf": [
+              {
+                "additionalProperties": false,
+                "properties": {
+                  "deploymentVersion": {
+                    "additionalProperties": false,
+                    "properties": {
+                      "artifactDigest": {
+                        "type": "string"
+                      },
+                      "buildId": {
+                        "type": "string"
+                      },
+                      "deploymentName": {
+                        "type": "string"
+                      },
+                      "manifestDigest": {
+                        "type": "string"
+                      },
+                      "manifestVersion": {
+                        "type": "number"
+                      },
+                      "protocolVersion": {
+                        "type": "number"
+                      },
+                      "runtimeName": {
+                        "type": "string"
+                      },
+                      "runtimeVersion": {
+                        "type": "string"
+                      },
+                      "sdkVersion": {
+                        "type": "string"
+                      },
+                      "workflows": {
+                        "additionalProperties": {
+                          "additionalProperties": false,
+                          "properties": {
+                            "activities": {
+                              "additionalProperties": {
+                                "additionalProperties": false,
+                                "properties": {
+                                  "contractHash": {
+                                    "type": "string"
+                                  },
+                                  "implementationRevision": {
+                                    "type": "string"
+                                  }
+                                },
+                                "required": ["contractHash", "implementationRevision"],
+                                "type": "object"
+                              },
+                              "propertyNames": {
+                                "type": "string"
+                              },
+                              "type": "object"
+                            },
+                            "contractHash": {
+                              "type": "string"
+                            },
+                            "workflowRevision": {
+                              "type": "string"
+                            },
+                            "workflowVersion": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "workflowVersion",
+                            "workflowRevision",
+                            "contractHash",
+                            "activities"
+                          ],
+                          "type": "object"
+                        },
+                        "propertyNames": {
+                          "type": "string"
+                        },
+                        "type": "object"
+                      }
+                    },
+                    "required": [
+                      "deploymentName",
+                      "buildId",
+                      "artifactDigest",
+                      "runtimeName",
+                      "runtimeVersion",
+                      "sdkVersion",
+                      "manifestVersion",
+                      "protocolVersion",
+                      "manifestDigest",
+                      "workflows"
+                    ],
+                    "type": "object"
+                  },
+                  "instance": {
+                    "additionalProperties": false,
+                    "properties": {
+                      "connectedAt": {
+                        "type": "number"
+                      },
+                      "health": {
+                        "enum": ["active", "draining", "drained"],
+                        "type": "string"
+                      },
+                      "heartbeatAgeMs": {
+                        "type": "number"
+                      },
+                      "lastHeartbeatAt": {
+                        "type": "number"
+                      },
+                      "queue": {
+                        "type": "string"
+                      },
+                      "startedAt": {
+                        "type": "number"
+                      },
+                      "workerId": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "workerId",
+                      "queue",
+                      "health",
+                      "connectedAt",
+                      "startedAt",
+                      "lastHeartbeatAt",
+                      "heartbeatAgeMs"
+                    ],
+                    "type": "object"
+                  }
+                },
+                "required": ["instance", "deploymentVersion"],
+                "type": "object"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": ["worker"],
+        "type": "object"
+      }
+    },
     {
       "name": "weft.workers.drain",
       "kind": "unary",
@@ -2162,16 +2413,6 @@
                 "drainingWorkers": {
                   "type": "number"
                 },
-                "gitSha": {
-                  "anyOf": [
-                    {
-                      "type": "string"
-                    },
-                    {
-                      "type": "null"
-                    }
-                  ]
-                },
                 "health": {
                   "enum": ["active", "draining", "drained"],
                   "type": "string"
@@ -2207,7 +2448,6 @@
                 "deploymentName",
                 "buildId",
                 "runtimeVersion",
-                "gitSha",
                 "health",
                 "workers",
                 "activeWorkers",
@@ -2254,9 +2494,6 @@
                 "deploymentName": {
                   "type": "string"
                 },
-                "gitSha": {
-                  "type": "string"
-                },
                 "health": {
                   "enum": ["active", "draining", "drained"],
                   "type": "string"
@@ -2310,6 +2547,84 @@
         "type": "object"
       }
     },
+    {
+      "name": "weft.workers.rejections",
+      "kind": "unary",
+      "summary": "List recently declined worker registration attempts",
+      "description": "Bounded, most-recent-first log of declined `register` attempts: rejection code, attempted workerId when known, and whatever deployment/queue identity had already been parsed by the time the rejecting gate ran. No free-text message and no manifest content.",
+      "tags": ["Observability"],
+      "destructive": false,
+      "access": {
+        "kind": "scoped",
+        "scopes": ["system:read"]
+      },
+      "transports": {
+        "http": true,
+        "jsonRpcHttp": true,
+        "jsonRpcWebSocket": true,
+        "jsonRpcStdio": true
+      },
+      "producibleFaults": [],
+      "inputSchema": {
+        "additionalProperties": false,
+        "properties": {
+          "limit": {
+            "default": 20,
+            "maximum": 100,
+            "minimum": 1,
+            "type": "integer"
+          }
+        },
+        "required": ["limit"],
+        "type": "object"
+      },
+      "outputSchema": {
+        "additionalProperties": false,
+        "properties": {
+          "items": {
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "buildId": {
+                  "type": "string"
+                },
+                "code": {
+                  "enum": [
+                    "invalid_registration",
+                    "unsupported_protocol_version",
+                    "deployment_conflict",
+                    "registration_rejected"
+                  ],
+                  "type": "string"
+                },
+                "deploymentName": {
+                  "type": "string"
+                },
+                "queue": {
+                  "type": "string"
+                },
+                "rejectedAt": {
+                  "type": "number"
+                },
+                "workerId": {
+                  "type": "string"
+                }
+              },
+              "required": ["code", "rejectedAt"],
+              "type": "object"
+            },
+            "type": "array"
+          },
+          "limit": {
+            "maximum": 100,
+            "minimum": 1,
+            "type": "integer"
+          }
+        },
+        "required": ["items", "limit"],
+        "type": "object"
+      }
+    },
     {
       "name": "weft.workers.resume",
       "kind": "unary",

package/dist/cli/generated/operation-client.generated.d.ts

@@ -1,7 +1,7 @@
 import { type CatalogWeftClient, type WeftClientConnection } from '../operation-client-runtime.ts';
-export declare const CATALOG_OPERATION_NAMES: readonly ["weft.activities.complete", "weft.activities.fail", "weft.alerts.list", "weft.recover.all", "weft.retention.get", "weft.reviews.decision.submit", "weft.reviews.get", "weft.reviews.list", "weft.schedules.cancel", "weft.schedules.create", "weft.schedules.get", "weft.schedules.list", "weft.schedules.pause", "weft.schedules.resume", "weft.schedules.update", "weft.storage.capabilities", "weft.system.lease", "weft.system.metrics", "weft.system.registry", "weft.task.queues.list", "weft.tasks.diagnostics", "weft.updates.result.get", "weft.worker.deployments.drain", "weft.worker.deployments.resume", "weft.workers.drain", "weft.workers.list", "weft.workers.resume", "weft.workflows.activities.pending.list", "weft.workflows.aggregate", "weft.workflows.attributes.get", "weft.workflows.attributes.set", "weft.workflows.bulk.cancel", "weft.workflows.bulk.delete", "weft.workflows.bulk.retryfailed", "weft.workflows.bulk.signal", "weft.workflows.bulk.tags", "weft.workflows.cancel", "weft.workflows.checkpoints.get", "weft.workflows.checkpoints.list", "weft.workflows.events.list", "weft.workflows.finalizer.get", "weft.workflows.fork", "weft.workflows.get", "weft.workflows.list", "weft.workflows.purge", "weft.workflows.query", "weft.workflows.replay", "weft.workflows.result.get", "weft.workflows.resume", "weft.workflows.scheduleprovenance.get", "weft.workflows.signal", "weft.workflows.start", "weft.workflows.startorsignal", "weft.workflows.streams.chunks", "weft.workflows.suspend", "weft.workflows.tags.add", "weft.workflows.tags.remove", "weft.workflows.timeline.get", "weft.workflows.timeout", "weft.workflows.update"];
+export declare const CATALOG_OPERATION_NAMES: readonly ["weft.activities.complete", "weft.activities.fail", "weft.alerts.list", "weft.recover.all", "weft.retention.get", "weft.reviews.decision.submit", "weft.reviews.get", "weft.reviews.list", "weft.schedules.cancel", "weft.schedules.create", "weft.schedules.get", "weft.schedules.list", "weft.schedules.pause", "weft.schedules.resume", "weft.schedules.update", "weft.storage.capabilities", "weft.system.lease", "weft.system.metrics", "weft.system.principal", "weft.system.registry", "weft.task.queues.list", "weft.tasks.diagnostics", "weft.updates.result.get", "weft.worker.deployments.drain", "weft.worker.deployments.resume", "weft.workers.diagnostics", "weft.workers.drain", "weft.workers.list", "weft.workers.rejections", "weft.workers.resume", "weft.workflows.activities.pending.list", "weft.workflows.aggregate", "weft.workflows.attributes.get", "weft.workflows.attributes.set", "weft.workflows.bulk.cancel", "weft.workflows.bulk.delete", "weft.workflows.bulk.retryfailed", "weft.workflows.bulk.signal", "weft.workflows.bulk.tags", "weft.workflows.cancel", "weft.workflows.checkpoints.get", "weft.workflows.checkpoints.list", "weft.workflows.events.list", "weft.workflows.finalizer.get", "weft.workflows.fork", "weft.workflows.get", "weft.workflows.list", "weft.workflows.purge", "weft.workflows.query", "weft.workflows.replay", "weft.workflows.result.get", "weft.workflows.resume", "weft.workflows.scheduleprovenance.get", "weft.workflows.signal", "weft.workflows.start", "weft.workflows.startorsignal", "weft.workflows.streams.chunks", "weft.workflows.suspend", "weft.workflows.tags.add", "weft.workflows.tags.remove", "weft.workflows.timeline.get", "weft.workflows.timeout", "weft.workflows.update"];
 export type CatalogOperationName = (typeof CATALOG_OPERATION_NAMES)[number];
-export declare const CLIENT_OPERATION_NAMES: readonly ["weft.activities.complete", "weft.activities.fail", "weft.alerts.list", "weft.recover.all", "weft.retention.get", "weft.reviews.decision.submit", "weft.reviews.get", "weft.reviews.list", "weft.schedules.cancel", "weft.schedules.create", "weft.schedules.get", "weft.schedules.list", "weft.schedules.pause", "weft.schedules.resume", "weft.schedules.update", "weft.storage.capabilities", "weft.system.lease", "weft.system.metrics", "weft.system.registry", "weft.task.queues.list", "weft.tasks.diagnostics", "weft.tasks.diagnostics.deadletters.clear", "weft.updates.result.get", "weft.worker.deployments.drain", "weft.worker.deployments.resume", "weft.workers.drain", "weft.workers.list", "weft.workers.resume", "weft.workflows.activities.pending.list", "weft.workflows.aggregate", "weft.workflows.attributes.get", "weft.workflows.attributes.set", "weft.workflows.bulk.cancel", "weft.workflows.bulk.delete", "weft.workflows.bulk.retryfailed", "weft.workflows.bulk.signal", "weft.workflows.bulk.tags", "weft.workflows.cancel", "weft.workflows.checkpoints.get", "weft.workflows.checkpoints.list", "weft.workflows.events.list", "weft.workflows.finalizer.get", "weft.workflows.fork", "weft.workflows.get", "weft.workflows.list", "weft.workflows.purge", "weft.workflows.query", "weft.workflows.replay", "weft.workflows.result.get", "weft.workflows.resume", "weft.workflows.scheduleprovenance.get", "weft.workflows.signal", "weft.workflows.start", "weft.workflows.startorsignal", "weft.workflows.streams.chunks", "weft.workflows.suspend", "weft.workflows.tags.add", "weft.workflows.tags.remove", "weft.workflows.timeline.get", "weft.workflows.timeout", "weft.workflows.update"];
+export declare const CLIENT_OPERATION_NAMES: readonly ["weft.activities.complete", "weft.activities.fail", "weft.alerts.list", "weft.recover.all", "weft.retention.get", "weft.reviews.decision.submit", "weft.reviews.get", "weft.reviews.list", "weft.schedules.cancel", "weft.schedules.create", "weft.schedules.get", "weft.schedules.list", "weft.schedules.pause", "weft.schedules.resume", "weft.schedules.update", "weft.storage.capabilities", "weft.system.lease", "weft.system.metrics", "weft.system.principal", "weft.system.registry", "weft.task.queues.list", "weft.tasks.diagnostics", "weft.tasks.diagnostics.deadletters.clear", "weft.updates.result.get", "weft.worker.deployments.drain", "weft.worker.deployments.resume", "weft.workers.diagnostics", "weft.workers.drain", "weft.workers.list", "weft.workers.rejections", "weft.workers.resume", "weft.workflows.activities.pending.list", "weft.workflows.aggregate", "weft.workflows.attributes.get", "weft.workflows.attributes.set", "weft.workflows.bulk.cancel", "weft.workflows.bulk.delete", "weft.workflows.bulk.retryfailed", "weft.workflows.bulk.signal", "weft.workflows.bulk.tags", "weft.workflows.cancel", "weft.workflows.checkpoints.get", "weft.workflows.checkpoints.list", "weft.workflows.events.list", "weft.workflows.finalizer.get", "weft.workflows.fork", "weft.workflows.get", "weft.workflows.list", "weft.workflows.purge", "weft.workflows.query", "weft.workflows.replay", "weft.workflows.result.get", "weft.workflows.resume", "weft.workflows.scheduleprovenance.get", "weft.workflows.signal", "weft.workflows.start", "weft.workflows.startorsignal", "weft.workflows.streams.chunks", "weft.workflows.suspend", "weft.workflows.tags.add", "weft.workflows.tags.remove", "weft.workflows.timeline.get", "weft.workflows.timeout", "weft.workflows.update"];
 export type ClientOperationName = (typeof CLIENT_OPERATION_NAMES)[number];
 export declare const CLIENT_REST_OPERATION_BINDINGS: {
     readonly 'weft.tasks.diagnostics.deadletters.clear': {
@@ -251,6 +251,15 @@ export type ClientOperationTypes = {
         readonly output: unknown;
         readonly faults: never;
     };
+    'weft.system.principal': {
+        readonly input: {};
+        readonly output: {
+            readonly method: 'jwt' | 'api-key' | 'mtls' | 'stdio-local' | 'unauthenticated';
+            readonly scopes: ReadonlyArray<'workflows:read' | 'workflows:write' | 'workflows:admin' | 'schedules:read' | 'schedules:write' | 'signals:write' | 'updates:write' | 'queries:read' | 'reviews:read' | 'reviews:write' | 'attributes:read' | 'attributes:write' | 'tags:write' | 'streams:read' | 'events:read' | 'storage:read' | 'storage:write' | 'storage:admin' | 'workers:write' | 'system:read' | 'system:admin'>;
+            readonly subject: unknown;
+        };
+        readonly faults: never;
+    };
     'weft.system.registry': {
         readonly input: {};
         readonly output: {
@@ -295,7 +304,7 @@ export type ClientOperationTypes = {
                 readonly executionLatencyMs?: number;
                 readonly heartbeatAgeMs?: number;
                 readonly kind: 'stuck-queued' | 'stale-inflight' | 'retry-storm' | 'all-workers-at-capacity' | 'dead-lettered';
-                readonly lastRequeueReason?: 'visibility-timeout' | 'worker-disconnect';
+                readonly lastRequeueReason?: string;
                 readonly operationId?: string;
                 readonly queue?: string;
                 readonly queueLatencyMs?: number;
@@ -326,7 +335,7 @@ export type ClientOperationTypes = {
         readonly output: {
             readonly ok: boolean;
         };
-        readonly faults: never;
+        readonly faults: 'NotFound';
     };
     'weft.updates.result.get': {
         readonly input: {
@@ -350,6 +359,15 @@ export type ClientOperationTypes = {
         readonly output: unknown;
         readonly faults: never;
     };
+    'weft.workers.diagnostics': {
+        readonly input: {
+            readonly workerId: string;
+        };
+        readonly output: {
+            readonly worker: unknown;
+        };
+        readonly faults: never;
+    };
     'weft.workers.drain': {
         readonly input: {
             readonly reason?: string;
@@ -367,7 +385,6 @@ export type ClientOperationTypes = {
                 readonly deploymentName: unknown;
                 readonly drainedWorkers: number;
                 readonly drainingWorkers: number;
-                readonly gitSha: unknown;
                 readonly health: 'active' | 'draining' | 'drained';
                 readonly inFlight: number;
                 readonly oldestStartedAt: unknown;
@@ -382,7 +399,6 @@ export type ClientOperationTypes = {
                 readonly concurrency: number;
                 readonly connectedAt: number;
                 readonly deploymentName?: string;
-                readonly gitSha?: string;
                 readonly health: 'active' | 'draining' | 'drained';
                 readonly heartbeatAgeMs: number;
                 readonly id: string;
@@ -396,6 +412,23 @@ export type ClientOperationTypes = {
         };
         readonly faults: never;
     };
+    'weft.workers.rejections': {
+        readonly input: {
+            readonly limit: number;
+        };
+        readonly output: {
+            readonly items: ReadonlyArray<{
+                readonly buildId?: string;
+                readonly code: 'invalid_registration' | 'unsupported_protocol_version' | 'deployment_conflict' | 'registration_rejected';
+                readonly deploymentName?: string;
+                readonly queue?: string;
+                readonly rejectedAt: number;
+                readonly workerId?: string;
+            }>;
+            readonly limit: number;
+        };
+        readonly faults: never;
+    };
     'weft.workers.resume': {
         readonly input: {
             readonly workerId: string;

package/dist/cli/generated/operation-client.generated.js

@@ -21,14 +21,17 @@ export const CATALOG_OPERATION_NAMES = [
   "weft.storage.capabilities",
   "weft.system.lease",
   "weft.system.metrics",
+  "weft.system.principal",
   "weft.system.registry",
   "weft.task.queues.list",
   "weft.tasks.diagnostics",
   "weft.updates.result.get",
   "weft.worker.deployments.drain",
   "weft.worker.deployments.resume",
+  "weft.workers.diagnostics",
   "weft.workers.drain",
   "weft.workers.list",
+  "weft.workers.rejections",
   "weft.workers.resume",
   "weft.workflows.activities.pending.list",
   "weft.workflows.aggregate",
@@ -82,6 +85,7 @@ export const CATALOG_OPERATION_NAMES = [
   "weft.storage.capabilities",
   "weft.system.lease",
   "weft.system.metrics",
+  "weft.system.principal",
   "weft.system.registry",
   "weft.task.queues.list",
   "weft.tasks.diagnostics",
@@ -89,8 +93,10 @@ export const CATALOG_OPERATION_NAMES = [
   "weft.updates.result.get",
   "weft.worker.deployments.drain",
   "weft.worker.deployments.resume",
+  "weft.workers.diagnostics",
   "weft.workers.drain",
   "weft.workers.list",
+  "weft.workers.rejections",
   "weft.workers.resume",
   "weft.workflows.activities.pending.list",
   "weft.workflows.aggregate",

package/dist/core/context/child-workflow-pipe.d.ts

@@ -9,7 +9,7 @@ export declare function normalizePipeStage(internals: ContextInternals, stage: W
 export declare function resolveChildWorkflowTarget<TInput = unknown, TOutput = unknown>(internals: ContextInternals, target: ChildWorkflowTarget<TInput, TOutput>): string;
 export declare function resolveMapConcurrency(totalItems: number, requestedConcurrency: number | undefined): number;
 export declare function createCompositionToken(internals: ContextInternals, kind: 'map' | 'pipe' | 'reduce'): string;
-export declare function createCompositionChildWorkflowOptions(internals: ContextInternals, token: string, index: number, options?: AwaitChildWorkflowOptions | undefined): AwaitChildWorkflowOptions;
+export declare function createCompositionChildWorkflowOptions(internals: ContextInternals, token: string, index: number, options?: AwaitChildWorkflowOptions): AwaitChildWorkflowOptions;
 export declare function createReduceChildWorkflowOptions(internals: ContextInternals, token: string, index: number, options: WorkflowReduceOptions | undefined): AwaitChildWorkflowOptions;
 export declare function primeParallelOperations(operations: Generator<ContextOperationRequest, unknown, unknown>[]): ContextOperationRequest[];
 export declare function startChild<TResult = unknown>(context: Context, internals: ContextInternals, workflowType: string, input: unknown, options?: ChildWorkflowOptions): Generator<ContextOperationRequest, TResult | ChildWorkflowHandle<TResult>, unknown>;