@voltro/protocol 0.28.0 → 0.30.0

package/dist/index.d.ts

@@ -274,6 +274,29 @@ export declare interface AuthStrategyWithCallback extends AuthStrategy {
  */
 export declare const beginIdempotent: (store: IdempotencyStore, scope: string, key: string, ttlMs: number, now: number) => Promise<IdempotencyOutcome>;
 
+/**
+ * A cross-table business rule was violated inside a mutation's transaction; the
+ * write was rolled back.
+ *
+ * - `rule` — the declared rule name (`<table>.<name>`-ish, the author's choice).
+ * - `params` — i18n params for the violation message (the offending values).
+ * - `field` — the field path the violation pinpoints, when the rule can.
+ * - `severity` — always `'error'` on the wire (a `'warning'` rule does not
+ *   fail the mutation, so it never reaches the client as an error).
+ */
+export declare class BusinessRuleViolation extends BusinessRuleViolation_base {
+}
+
+declare const BusinessRuleViolation_base: Schema.TaggedErrorClass<BusinessRuleViolation, "BusinessRuleViolation", {
+    readonly _tag: Schema.tag<"BusinessRuleViolation">;
+} & {
+    rule: typeof Schema.String;
+    params: Schema.optional<Schema.Record$<typeof Schema.String, typeof Schema.Unknown>>;
+    field: Schema.optional<typeof Schema.String>;
+    message: Schema.optional<typeof Schema.String>;
+    severity: Schema.Literal<["error", "warning"]>;
+}>;
+
 /**
  * Validate `plugin.framework` (npm-semver range) against the running
  * voltro version. Returns either `{ ok: true }` or
@@ -3811,14 +3834,44 @@ export declare const workflowRunEventsQueryDescriptor: QueryProcedureDescriptor<
 export declare type WorkflowRunHandle = Schema.Schema.Type<typeof WorkflowRunHandleSchema>;
 
 export declare const WorkflowRunHandleSchema: Schema.Struct<{
-    /** Stable handle callers pass to `useWorkflowRun(...)`; currently the durable execution id. */
+    /** Stable handle callers pass to `useWorkflowRun(...)`. The durable execution
+     *  id for a started run; the pending-intent id for a queued one. */
     id: typeof Schema.String;
     /** Workflow tag, e.g. `notes.summarise`. */
     workflowName: typeof Schema.String;
-    /** Deterministic durable id derived from workflow name + idempotency key. */
-    executionId: typeof Schema.String;
-    /** Starting is fire-and-return; waiting is explicit through workflow run APIs. */
-    status: Schema.Literal<["running"]>;
+    /**
+     * Deterministic durable id derived from workflow name + idempotency key.
+     *
+     * NULL when flow control deferred, dropped, or skipped the start — because
+     * there is no execution yet, and there may never be one. It used to be a
+     * required string, and keeping it that way would have meant inventing a value:
+     * either an empty string or the id the run WOULD have had. Both are polls that
+     * return `status: 'unknown'` forever, which is the failure mode this whole
+     * feature set exists to remove.
+     *
+     * For a `skipped` singleton it is the INCUMBENT's execution id — a real,
+     * pollable run, which is the entire point of `mode: 'skip'`.
+     */
+    executionId: Schema.NullOr<typeof Schema.String>;
+    /**
+     * `running`  — the engine has it; starting is fire-and-return.
+     * `queued`   — flow control deferred it; see `deferral.dueAt`.
+     * `dropped`  — over a `rateLimit` cap. It will NOT run.
+     * `skipped`  — a `singleton: { mode: 'skip' }` key was held; `executionId`
+     *              names the run that holds it.
+     */
+    status: Schema.Literal<["running", "queued", "dropped", "skipped"]>;
+    deferral: Schema.optional<Schema.Struct<{
+        /** `debounce` | `batch` | `throttle` | `concurrency` | `paused` |
+         *  `rateLimit` | `singleton`. */
+        mode: typeof Schema.String;
+        /** Epoch ms this may first be admitted. Null for a drop or a skip. */
+        dueAt: Schema.NullOr<typeof Schema.Number>;
+        /** How long until the rate window reopens. Null unless dropped. */
+        retryAfterMs: Schema.NullOr<typeof Schema.Number>;
+        /** The `_voltro_workflow_pending` row holding this start. Null unless queued. */
+        intentId: Schema.NullOr<typeof Schema.String>;
+    }>>;
 }>;
 
 export declare const workflowRunQueryDescriptor: QueryProcedureDescriptor<"__voltro.workflow.run", Schema.Struct<{
@@ -3971,6 +4024,28 @@ export declare const WorkflowSignalInputSchema: Schema.Struct<{
     payload: Schema.optional<typeof Schema.Unknown>;
 }>;
 
+export declare type WorkflowStartDeferral = Schema.Schema.Type<typeof WorkflowStartDeferralSchema>;
+
+/**
+ * What flow control did to a start that did not become a run.
+ *
+ * Present only when `status !== 'running'`. Every field is a fact the caller
+ * would otherwise have to guess at: a drop with no `retryAfterMs` is
+ * indistinguishable from a failure, and a queued start with no `dueAt` is
+ * indistinguishable from one that was lost.
+ */
+export declare const WorkflowStartDeferralSchema: Schema.Struct<{
+    /** `debounce` | `batch` | `throttle` | `concurrency` | `paused` |
+     *  `rateLimit` | `singleton`. */
+    mode: typeof Schema.String;
+    /** Epoch ms this may first be admitted. Null for a drop or a skip. */
+    dueAt: Schema.NullOr<typeof Schema.Number>;
+    /** How long until the rate window reopens. Null unless dropped. */
+    retryAfterMs: Schema.NullOr<typeof Schema.Number>;
+    /** The `_voltro_workflow_pending` row holding this start. Null unless queued. */
+    intentId: Schema.NullOr<typeof Schema.String>;
+}>;
+
 /**
  * Per-step plugin interceptor. Wraps every `step()` (==
  * `Activity.make`) invocation inside a workflow body. Composed

package/dist/index.js

@@ -62,7 +62,7 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 		t !== void 0 && r.push(t);
 	}
 	return r;
-}, h = (e) => c.Union(c.Struct({
+}, Ve = (e) => c.Union(c.Struct({
 	_tag: c.Literal("snapshot"),
 	revision: c.Number,
 	data: e,
@@ -76,7 +76,16 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 	_tag: c.Literal("error"),
 	error: c.Unknown,
 	revision: c.optional(c.Number)
-})), Ve = (e) => e.internal !== !0, g = (e) => {
+})), h = class extends c.TaggedError()("BusinessRuleViolation", {
+	rule: c.String,
+	params: c.optional(c.Record({
+		key: c.String,
+		value: c.Unknown
+	})),
+	field: c.optional(c.String),
+	message: c.optional(c.String),
+	severity: c.Literal("error", "warning")
+}) {}, He = (e) => e.internal !== !0, g = (e) => {
 	if (Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
   unguarded procedure, or list the scopes required to call it.`);
 	let t = typeof e.source == "string" ? [e.source] : Array.isArray(e.source) ? e.source : void 0;
@@ -90,7 +99,7 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 	let n = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
 	if (n.length === 0) return e;
 	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${n.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${n.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${n.join(" / ")} annotation if it is not.`);
-}, He = (e) => e.action !== void 0 && e.resourceType !== void 0, _ = (e) => g({
+}, Ue = (e) => e.action !== void 0 && e.resourceType !== void 0, _ = (e) => g({
 	kind: "query",
 	name: e.name,
 	input: e.input,
@@ -128,7 +137,7 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 	exposeAsTool: e.exposeAsTool,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), Ue = (e) => g({
+}), We = (e) => g({
 	kind: "stream",
 	name: e.name,
 	input: e.input,
@@ -137,36 +146,36 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin,
 	guards: e.guards
-}), b = (e, t) => t && t.length > 0 ? c.Union(e, ...t) : e, x = (e, t) => t && t.length > 0 ? c.Union(e, s) : e, S = (e, t) => l.make(e.name, {
+}), b = (e, t) => t && t.length > 0 ? c.Union(e, ...t) : e, x = (e, t) => t && t.length > 0 ? c.Union(e, s) : e, Ge = (e) => c.Union(e, h), Ke = (e, t) => l.make(e.name, {
 	payload: e.input,
-	success: h(e.output),
+	success: Ve(e.output),
 	error: b(x(e.error, e.guards), t),
 	stream: !0
-}), We = (e, t) => l.make(e.name, {
+}), qe = (e, t) => l.make(e.name, {
 	payload: e.input,
 	success: e.output,
-	error: b(x(e.error, e.guards), t)
-}), Ge = (e, t) => l.make(e.name, {
+	error: b(Ge(x(e.error, e.guards)), t)
+}), Je = (e, t) => l.make(e.name, {
 	payload: e.input,
 	success: e.output,
 	error: b(x(e.error, e.guards), t)
-}), Ke = (e, t) => l.make(e.name, {
+}), S = (e, t) => l.make(e.name, {
 	payload: e.input,
 	success: e.element,
 	error: b(e.error, t),
 	stream: !0
-}), qe = (e) => {
+}), Ye = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
 	return typeof t == "string" ? t : void 0;
-}, Je = (e) => {
+}, Xe = (e) => {
 	switch (e.kind) {
-		case "query": return S(e);
-		case "mutation": return We(e);
-		case "action": return Ge(e);
-		case "stream": return Ke(e);
+		case "query": return Ke(e);
+		case "mutation": return qe(e);
+		case "action": return Je(e);
+		case "stream": return S(e);
 	}
-}, Ye = (e) => {
+}, Ze = (e) => {
 	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
 	if (e.kind === "query") return {
 		kind: "query",
@@ -207,7 +216,7 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 			..."shapeItem" in e && e.shapeItem !== void 0 ? { shapeItem: e.shapeItem } : {}
 		}))
 	};
-}, Xe = 7500, Ze = (e) => typeof e == "object" && !!e && e.kind === "event", Qe = (e) => {
+}, Qe = 7500, $e = (e) => typeof e == "object" && !!e && e.kind === "event", et = (e) => {
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -250,7 +259,7 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 }), O = (e) => c.Struct({
 	key: e,
 	resume: c.optional(c.Array(D))
-}), $e = (e, t) => {
+}), tt = (e, t) => {
 	let n = e.guards && e.guards.length > 0 ? s : c.Never, r = t && t.length > 0 ? c.Union(n, ...t) : n;
 	return l.make(e.name, {
 		payload: O(e.key),
@@ -258,13 +267,13 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 		error: r,
 		stream: !0
 	});
-}, et = class extends c.TaggedError()("EventPayloadInvalid", {
+}, nt = class extends c.TaggedError()("EventPayloadInvalid", {
 	event: c.String,
 	message: c.String
-}) {}, tt = class extends c.TaggedError()("EventKeyInvalid", {
+}) {}, rt = class extends c.TaggedError()("EventKeyInvalid", {
 	event: c.String,
 	message: c.String
-}) {}, nt = class extends c.TaggedError()("EventPayloadTooLarge", {
+}) {}, it = class extends c.TaggedError()("EventPayloadTooLarge", {
 	event: c.String,
 	bytes: c.Number,
 	limit: c.Number
@@ -272,26 +281,26 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t));
 	return JSON.stringify(t);
-}, rt = "\0", it = (e, t, n) => [
+}, at = "\0", ot = (e, t, n) => [
 	e ?? "~",
 	t,
 	k(n)
-].join("\0"), at = (e) => {
+].join("\0"), st = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, ot = (e) => e.split("\0").join(" · "), st = (e) => e, ct = (e) => e, lt = (e) => {
+}, ct = (e) => e.split("\0").join(" · "), lt = (e) => e, ut = (e) => e, dt = (e) => {
 	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
-}, ut = (e, t) => {
+}, ft = (e, t) => {
 	let n = Ne.GenericTag(e);
 	return {
 		Tag: n,
 		Live: Pe.succeed(n, t)
 	};
-}, dt = (e, t, n) => {
+}, pt = (e, t, n) => {
 	if (!t) return { ok: !0 };
 	let r = A(n);
 	if (!r) return {
@@ -301,7 +310,7 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 	let i = t.trim();
 	if (i === "*" || i === "") return { ok: !0 };
 	let a = i.split(/\s+/).filter((e) => e.length > 0);
-	for (let i of a) if (!ft(i, r)) return {
+	for (let i of a) if (!mt(i, r)) return {
 		ok: !1,
 		reason: `plugin "${e}" requires framework ${t}, running ${n}`
 	};
@@ -314,7 +323,7 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 		patch: Number(t[3]),
 		pre: t[4] ?? ""
 	} : null;
-}, j = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, ft = (e, t) => {
+}, j = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, mt = (e, t) => {
 	if (e === "*") return !0;
 	if (e.startsWith("^")) {
 		let n = A(e.slice(1));
@@ -336,12 +345,18 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 	}
 	let r = A(e);
 	return r ? j(t, r) === 0 : !1;
-}, M = c.Literal("running", "succeeded", "failed", "cancelled", "suspended"), N = c.Literal("cancel", "terminate", "abandon"), pt = c.Struct({
+}, M = c.Literal("running", "succeeded", "failed", "cancelled", "suspended"), N = c.Literal("cancel", "terminate", "abandon"), P = c.Struct({
+	mode: c.String,
+	dueAt: c.NullOr(c.Number),
+	retryAfterMs: c.NullOr(c.Number),
+	intentId: c.NullOr(c.String)
+}), ht = c.Struct({
 	id: c.String,
 	workflowName: c.String,
-	executionId: c.String,
-	status: c.Literal("running")
-}), P = c.Struct({
+	executionId: c.NullOr(c.String),
+	status: c.Literal("running", "queued", "dropped", "skipped"),
+	deferral: c.optional(P)
+}), F = c.Struct({
 	id: c.String,
 	tag: c.String,
 	executionId: c.String,
@@ -361,11 +376,11 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 	traceId: c.NullOr(c.String),
 	parentExecutionId: c.NullOr(c.String),
 	parentClosePolicy: c.NullOr(N)
-}), F = c.Struct({
+}), I = c.Struct({
 	tag: c.optional(c.String),
 	status: c.optional(M),
 	limit: c.optional(c.Number)
-}), I = c.Struct({
+}), L = c.Struct({
 	id: c.String,
 	runId: c.String,
 	stepName: c.String,
@@ -380,7 +395,7 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 	startedAt: c.Date,
 	completedAt: c.NullOr(c.Date),
 	durationMs: c.NullOr(c.Number)
-}), L = c.Struct({
+}), R = c.Struct({
 	id: c.String,
 	runId: c.String,
 	eventType: c.String,
@@ -388,7 +403,7 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 	occurredAt: c.Date,
 	stepName: c.NullOr(c.String),
 	attempt: c.NullOr(c.Number)
-}), R = c.Struct({
+}), z = c.Struct({
 	id: c.String,
 	name: c.String,
 	payload: c.Unknown,
@@ -396,7 +411,7 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 	subject: c.NullOr(c.Unknown),
 	traceId: c.NullOr(c.String),
 	occurredAt: c.Date
-}), z = c.Struct({
+}), B = c.Struct({
 	id: c.String,
 	eventId: c.String,
 	eventName: c.String,
@@ -409,123 +424,123 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 	errorMessage: c.NullOr(c.String),
 	createdAt: c.Date,
 	completedAt: c.NullOr(c.Date)
-}), B = c.Struct({ id: c.String }), V = c.Struct({ runId: c.String }), mt = c.Struct({
+}), V = c.Struct({ id: c.String }), H = c.Struct({ runId: c.String }), U = c.Struct({
 	name: c.optional(c.String),
 	limit: c.optional(c.Number)
-}), H = c.Struct({ eventId: c.String }), U = c.Struct({
+}), W = c.Struct({ eventId: c.String }), G = c.Struct({
 	workflowName: c.String,
 	executionId: c.String
-}), W = c.Struct({
+}), K = c.Struct({
 	id: c.String,
 	signalName: c.String,
 	payload: c.optional(c.Unknown)
-}), G = c.Struct({
+}), q = c.Struct({
 	id: c.String,
 	updateName: c.String,
 	payload: c.optional(c.Unknown),
 	timeoutMs: c.optional(c.Number)
-}), K = c.Struct({
+}), J = c.Struct({
 	eventId: c.String,
 	updateId: c.String,
 	completedEventId: c.String,
 	result: c.Unknown
-}), ht = _({
+}), gt = _({
 	name: "__voltro.workflow.run",
 	source: "_voltro_workflow_runs",
-	input: B,
-	output: c.Array(P)
-}), gt = _({
+	input: V,
+	output: c.Array(F)
+}), _t = _({
 	name: "__voltro.workflow.runs",
 	source: "_voltro_workflow_runs",
-	input: F,
-	output: c.Array(P)
-}), _t = _({
+	input: I,
+	output: c.Array(F)
+}), vt = _({
 	name: "__voltro.workflow.run.steps",
 	source: "_voltro_workflow_run_steps",
-	input: V,
-	output: c.Array(I)
-}), vt = _({
-	name: "__voltro.workflow.run.events",
-	source: "_voltro_workflow_run_events",
-	input: V,
+	input: H,
 	output: c.Array(L)
 }), yt = _({
-	name: "__voltro.workflow.domainEvents",
-	source: "_voltro_workflow_events",
-	input: mt,
+	name: "__voltro.workflow.run.events",
+	source: "_voltro_workflow_run_events",
+	input: H,
 	output: c.Array(R)
 }), bt = _({
+	name: "__voltro.workflow.domainEvents",
+	source: "_voltro_workflow_events",
+	input: U,
+	output: c.Array(z)
+}), xt = _({
 	name: "__voltro.workflow.event.deliveries",
 	source: "_voltro_workflow_event_deliveries",
-	input: H,
-	output: c.Array(z)
-}), xt = y({
+	input: W,
+	output: c.Array(B)
+}), St = y({
 	name: "__voltro.workflow.cancel",
-	input: U,
+	input: G,
 	output: c.Struct({ ok: c.Boolean })
-}), St = y({
+}), Ct = y({
 	name: "__voltro.workflow.resume",
-	input: U,
+	input: G,
 	output: c.Struct({ ok: c.Boolean })
-}), Ct = y({
+}), wt = y({
 	name: "__voltro.workflow.signal",
-	input: W,
+	input: K,
 	output: c.Struct({ eventId: c.String })
-}), wt = y({
+}), Tt = y({
 	name: "__voltro.workflow.update",
-	input: G,
-	output: K
-}), q = "__voltro.undo.log", J = "__voltro.undo.apply", Y = "__voltro.undo.redo", X = c.Struct({
+	input: q,
+	output: J
+}), Y = "__voltro.undo.log", X = "__voltro.undo.apply", Et = "__voltro.undo.redo", Dt = c.Struct({
 	id: c.String,
 	tag: c.String,
 	label: c.NullOr(c.String),
 	undone: c.Boolean,
 	crossesAction: c.Boolean,
 	createdAt: c.String
-}), Tt = class extends c.TaggedError()("UndoNotFound", { invocationId: c.String }) {}, Et = class extends c.TaggedError()("UndoForbidden", { invocationId: c.String }) {}, Dt = class extends c.TaggedError()("UndoConflict", {
+}), Ot = class extends c.TaggedError()("UndoNotFound", { invocationId: c.String }) {}, kt = class extends c.TaggedError()("UndoForbidden", { invocationId: c.String }) {}, At = class extends c.TaggedError()("UndoConflict", {
 	invocationId: c.String,
 	reason: c.Literal("conflict", "action")
-}) {}, Ot = c.Union(Tt, Et, Dt), kt = _({
-	name: q,
+}) {}, jt = c.Union(Ot, kt, At), Mt = _({
+	name: Y,
 	source: "_voltro_undo_log",
 	input: c.Struct({ limit: c.optional(c.Number) }),
-	output: c.Array(X)
-}), At = v({
-	name: J,
+	output: c.Array(Dt)
+}), Nt = v({
+	name: X,
 	input: c.Struct({ invocationId: c.String }),
 	output: c.Struct({ ok: c.Boolean }),
-	error: Ot
-}), jt = v({
-	name: Y,
+	error: jt
+}), Pt = v({
+	name: Et,
 	input: c.Struct({ invocationId: c.String }),
 	output: c.Struct({ ok: c.Boolean }),
-	error: Ot
-}), Mt = "__voltro.connections.list", Z = "__voltro.connections.start", Nt = "__voltro.connections.submitToken", Pt = "__voltro.connections.disconnect", Q = c.Literal("oauth2", "pat"), Ft = c.Literal("disconnected", "connected", "expired", "revoked", "error"), It = c.Struct({
+	error: jt
+}), Ft = "__voltro.connections.list", It = "__voltro.connections.start", Lt = "__voltro.connections.submitToken", Rt = "__voltro.connections.disconnect", Z = c.Literal("oauth2", "pat"), zt = c.Literal("disconnected", "connected", "expired", "revoked", "error"), Q = c.Struct({
 	connectionId: c.String,
-	kind: Q,
+	kind: Z,
 	label: c.String,
-	status: Ft,
+	status: zt,
 	accountId: c.NullOr(c.String),
 	accountLabel: c.NullOr(c.String),
 	scopes: c.Array(c.String),
 	expiresAt: c.NullOr(c.String),
 	lastError: c.NullOr(c.String),
 	connectedAt: c.NullOr(c.String)
-}), Lt = class extends c.TaggedError()("ConnectionNotDeclared", { connectionId: c.String }) {}, Rt = class extends c.TaggedError()("ConnectionSubjectRequired", { connectionId: c.String }) {}, zt = class extends c.TaggedError()("ConnectionKindMismatch", {
+}), Bt = class extends c.TaggedError()("ConnectionNotDeclared", { connectionId: c.String }) {}, Vt = class extends c.TaggedError()("ConnectionSubjectRequired", { connectionId: c.String }) {}, Ht = class extends c.TaggedError()("ConnectionKindMismatch", {
 	connectionId: c.String,
-	expected: Q,
-	actual: Q
-}) {}, Bt = class extends c.TaggedError()("ConnectionHandshakeFailed", {
+	expected: Z,
+	actual: Z
+}) {}, Ut = class extends c.TaggedError()("ConnectionHandshakeFailed", {
 	connectionId: c.String,
 	reason: c.String,
 	transient: c.Boolean
-}) {}, $ = c.Union(Lt, Rt, zt, Bt), Vt = _({
-	name: Mt,
+}) {}, $ = c.Union(Bt, Vt, Ht, Ut), Wt = _({
+	name: Ft,
 	source: "_voltro_connections",
 	input: c.Struct({}),
-	output: c.Array(It)
-}), Ht = y({
-	name: Z,
+	output: c.Array(Q)
+}), Gt = y({
+	name: It,
 	input: c.Struct({
 		connectionId: c.String,
 		redirectTo: c.optional(c.String)
@@ -535,22 +550,22 @@ var Fe = c.Union(c.String, c.Number), u = c.Record({
 		state: c.String
 	}),
 	error: $
-}), Ut = v({
-	name: Nt,
+}), Kt = v({
+	name: Lt,
 	input: c.Struct({
 		connectionId: c.String,
 		token: c.String
 	}),
 	output: c.Struct({ ok: c.Boolean }),
 	error: $
-}), Wt = v({
-	name: Pt,
+}), qt = v({
+	name: Rt,
 	input: c.Struct({ connectionId: c.String }),
 	output: c.Struct({ ok: c.Boolean }),
 	error: $
-}), Gt = (e) => {
+}), Jt = (e) => {
 	let t = e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : 0;
 	return Number.isNaN(t) ? 0 : t;
-}, Kt = 1;
+}, Yt = 1;
 //#endregion
-export { ce as ADMIN_SCOPE, he as APIKEY_ISSUE_ORG_SCOPE, re as APIKEY_ISSUE_OTHER_SCOPE, ie as APIKEY_ISSUE_SELF_SCOPE, je as AuthMiddleware, Mt as CONNECTIONS_LIST_TAG, Pt as CONNECTION_DISCONNECT_TAG, Z as CONNECTION_START_TAG, Nt as CONNECTION_SUBMIT_TOKEN_TAG, Bt as ConnectionHandshakeFailed, Ee as ConnectionInfo, ke as ConnectionInfoMiddleware, Q as ConnectionKind, zt as ConnectionKindMismatch, Lt as ConnectionNotDeclared, It as ConnectionState, Ft as ConnectionStatus, Rt as ConnectionSubjectRequired, rt as EVENT_ROUTE_SEP, tt as EventKeyInvalid, et as EventPayloadInvalid, nt as EventPayloadTooLarge, Xe as MAX_EVENT_ENVELOPE_BYTES, Kt as PROTOCOL_VERSION, s as ScopeError, we as Subject, be as SubjectService, J as UNDO_APPLY_TAG, q as UNDO_LOG_TAG, Y as UNDO_REDO_TAG, De as Unauthenticated, Dt as UndoConflict, Et as UndoForbidden, X as UndoLogEntry, Tt as UndoNotFound, U as WorkflowControlInputSchema, R as WorkflowDomainEventRowSchema, mt as WorkflowDomainEventsInputSchema, H as WorkflowEventDeliveriesInputSchema, z as WorkflowEventDeliveryRowSchema, N as WorkflowParentClosePolicySchema, L as WorkflowRunEventRowSchema, pt as WorkflowRunHandleSchema, B as WorkflowRunRefSchema, P as WorkflowRunRowSchema, M as WorkflowRunStatusSchema, I as WorkflowRunStepRowSchema, V as WorkflowRunTableRefSchema, F as WorkflowRunsInputSchema, W as WorkflowSignalInputSchema, G as WorkflowUpdateInputSchema, K as WorkflowUpdateResultSchema, Ge as actionToRpc, le as advisoryResourceGuardWarning, Ae as anonymousSubject, Be as applyRowPatch, xe as assertAuthenticated, fe as beginIdempotent, dt as checkFrameworkCompat, oe as checkGuards, ae as checkGuardsEffect, Te as composeAuthStrategies, lt as composeRpcInterceptors, Wt as connectionDisconnectDescriptor, Ht as connectionStartDescriptor, Ut as connectionSubmitTokenDescriptor, Vt as connectionsListQueryDescriptor, y as defineAction, Qe as defineEvent, v as defineMutation, st as definePlugin, ct as definePluginRoute, ut as definePluginService, _ as defineQuery, Ue as defineStream, Re as diffRows, o as effectiveScopes, k as encodeEventKey, qe as errorTag, T as eventAttached, C as eventEnvelope, w as eventGap, D as eventResumePoint, it as eventRoute, E as eventStreamEvent, O as eventSubscribeInput, $e as eventToRpc, se as failIdempotent, ge as findAdvisoryResourceGuards, ee as finishIdempotent, ot as formatEventRoute, ye as getPolicyGuardResolver, te as getResourceScopeResolver, Me as hasCallbackRoutes, ve as hasEffectiveScope, i as hasScope, p as idToPath, de as idempotencyScope, Ze as isEventDescriptor, ze as isIdKeyed, e as isPolicyCheck, He as isPolicyGuard, Se as isSystemSubject, Ve as isWireReachable, pe as memoryIdempotencyStore, We as mutationToRpc, Ye as normalizeDescriptor, at as parseEventRoute, Ie as pathToId, me as publishServerError, S as queryToRpc, _e as requireScope, d as rowPatchOpSchema, f as rowPatchSchema, a as setEffectiveScopes, n as setPolicyGuardResolver, t as setResourceScopeResolver, Ke as streamToRpc, r as subjectScopes, ue as subscribeServerErrors, h as subscriptionEvent, Ce as systemSubject, Oe as tenantScopedSubject, Je as toRpc, Gt as tsMs, At as undoApplyDescriptor, kt as undoLogQueryDescriptor, jt as undoRedoDescriptor, xt as workflowCancelDescriptor, yt as workflowDomainEventsQueryDescriptor, bt as workflowEventDeliveriesQueryDescriptor, St as workflowResumeDescriptor, vt as workflowRunEventsQueryDescriptor, ht as workflowRunQueryDescriptor, _t as workflowRunStepsQueryDescriptor, gt as workflowRunsQueryDescriptor, Ct as workflowSignalDescriptor, wt as workflowUpdateDescriptor, ne as wsMutationIdempotencyScope };
+export { ce as ADMIN_SCOPE, he as APIKEY_ISSUE_ORG_SCOPE, re as APIKEY_ISSUE_OTHER_SCOPE, ie as APIKEY_ISSUE_SELF_SCOPE, je as AuthMiddleware, h as BusinessRuleViolation, Ft as CONNECTIONS_LIST_TAG, Rt as CONNECTION_DISCONNECT_TAG, It as CONNECTION_START_TAG, Lt as CONNECTION_SUBMIT_TOKEN_TAG, Ut as ConnectionHandshakeFailed, Ee as ConnectionInfo, ke as ConnectionInfoMiddleware, Z as ConnectionKind, Ht as ConnectionKindMismatch, Bt as ConnectionNotDeclared, Q as ConnectionState, zt as ConnectionStatus, Vt as ConnectionSubjectRequired, at as EVENT_ROUTE_SEP, rt as EventKeyInvalid, nt as EventPayloadInvalid, it as EventPayloadTooLarge, Qe as MAX_EVENT_ENVELOPE_BYTES, Yt as PROTOCOL_VERSION, s as ScopeError, we as Subject, be as SubjectService, X as UNDO_APPLY_TAG, Y as UNDO_LOG_TAG, Et as UNDO_REDO_TAG, De as Unauthenticated, At as UndoConflict, kt as UndoForbidden, Dt as UndoLogEntry, Ot as UndoNotFound, G as WorkflowControlInputSchema, z as WorkflowDomainEventRowSchema, U as WorkflowDomainEventsInputSchema, W as WorkflowEventDeliveriesInputSchema, B as WorkflowEventDeliveryRowSchema, N as WorkflowParentClosePolicySchema, R as WorkflowRunEventRowSchema, ht as WorkflowRunHandleSchema, V as WorkflowRunRefSchema, F as WorkflowRunRowSchema, M as WorkflowRunStatusSchema, L as WorkflowRunStepRowSchema, H as WorkflowRunTableRefSchema, I as WorkflowRunsInputSchema, K as WorkflowSignalInputSchema, P as WorkflowStartDeferralSchema, q as WorkflowUpdateInputSchema, J as WorkflowUpdateResultSchema, Je as actionToRpc, le as advisoryResourceGuardWarning, Ae as anonymousSubject, Be as applyRowPatch, xe as assertAuthenticated, fe as beginIdempotent, pt as checkFrameworkCompat, oe as checkGuards, ae as checkGuardsEffect, Te as composeAuthStrategies, dt as composeRpcInterceptors, qt as connectionDisconnectDescriptor, Gt as connectionStartDescriptor, Kt as connectionSubmitTokenDescriptor, Wt as connectionsListQueryDescriptor, y as defineAction, et as defineEvent, v as defineMutation, lt as definePlugin, ut as definePluginRoute, ft as definePluginService, _ as defineQuery, We as defineStream, Re as diffRows, o as effectiveScopes, k as encodeEventKey, Ye as errorTag, T as eventAttached, C as eventEnvelope, w as eventGap, D as eventResumePoint, ot as eventRoute, E as eventStreamEvent, O as eventSubscribeInput, tt as eventToRpc, se as failIdempotent, ge as findAdvisoryResourceGuards, ee as finishIdempotent, ct as formatEventRoute, ye as getPolicyGuardResolver, te as getResourceScopeResolver, Me as hasCallbackRoutes, ve as hasEffectiveScope, i as hasScope, p as idToPath, de as idempotencyScope, $e as isEventDescriptor, ze as isIdKeyed, e as isPolicyCheck, Ue as isPolicyGuard, Se as isSystemSubject, He as isWireReachable, pe as memoryIdempotencyStore, qe as mutationToRpc, Ze as normalizeDescriptor, st as parseEventRoute, Ie as pathToId, me as publishServerError, Ke as queryToRpc, _e as requireScope, d as rowPatchOpSchema, f as rowPatchSchema, a as setEffectiveScopes, n as setPolicyGuardResolver, t as setResourceScopeResolver, S as streamToRpc, r as subjectScopes, ue as subscribeServerErrors, Ve as subscriptionEvent, Ce as systemSubject, Oe as tenantScopedSubject, Xe as toRpc, Jt as tsMs, Nt as undoApplyDescriptor, Mt as undoLogQueryDescriptor, Pt as undoRedoDescriptor, St as workflowCancelDescriptor, bt as workflowDomainEventsQueryDescriptor, xt as workflowEventDeliveriesQueryDescriptor, Ct as workflowResumeDescriptor, yt as workflowRunEventsQueryDescriptor, gt as workflowRunQueryDescriptor, vt as workflowRunStepsQueryDescriptor, _t as workflowRunsQueryDescriptor, wt as workflowSignalDescriptor, Tt as workflowUpdateDescriptor, ne as wsMutationIdempotencyScope };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/protocol",
-  "version": "0.28.0",
+  "version": "0.30.0",
   "description": "The Voltro wire + plugin contract — defineQuery/Mutation/Action/Stream, definePlugin, sessions / JWT / API-keys, and the RPC protocol.",
   "keywords": [
     "voltro",
@@ -53,7 +53,7 @@
   },
   "dependencies": {
     "@effect/sql": "^0.52.0",
-    "@voltro/database": "0.28.0",
+    "@voltro/database": "0.30.0",
     "jose": "^6.2.4"
   },
   "peerDependencies": {