@voltro/protocol 0.35.0 → 0.37.0

package/CHANGELOG.md

@@ -39,6 +39,164 @@ _Changes staged for the next release accumulate here (rolled up from
 
 ---
 
+## [0.37.0] — 2026-08-13
+
+### ⚠ BREAKING
+
+- **@voltro/protocol, @voltro/runtime, @voltro/cli** — A field a procedure's input schema does not declare now REJECTS the call. It used to be discarded and the call ran with what was left.
+
+  The measurement, from a consumer's root layout:
+
+  ```ts
+  query?.('userSettings.list', { employeeId })
+  ```
+
+  That procedure declares `userId` / `userIdIn`. Effect's default `onExcessProperty: 'ignore'` decoded the payload to `{}` — not reasoned, measured:
+
+  ```ts
+  decodeUnknownSync(Struct({ userId: optional(String) }))({ employeeId: 'e' })  // → {}
+  ```
+
+  An empty input to a LIST query is not a narrower filter, it is the ABSENCE of one. Their admin, signed in as `2d0add2c…`, was served the settings row of `4410c2f8…` — another user's language and theme in the first paint, with nothing in any log to say so.
+
+  **Why refuse rather than warn.** The decoder cannot tell a projection field from a FILTER field, and that asymmetry is the whole risk: dropping an unknown `include` costs a caller some data, dropping an unknown `tenantId` hands them somebody else's. Nothing at decode time distinguishes the two, so the safe direction is the only one available — the same fail-closed reasoning as the row filter's refusal, one layer up. A warning would have to be read by someone, in a log, after the wrong rows were already served.
+
+  The typed loader query that shipped in 0.36.0 closes the same hole for callers we compile. This closes it for the ones we do not: a plain `fetch`, a curl, a still-cached bundle after a field rename, and every untyped caller.
+
+  Three things measured rather than assumed, because none follows from the annotation's name: it propagates into NESTED structs, through every member of a UNION, and leaves a non-struct payload (`Schema.Void`, a scalar) alone.
+
+  **`Schema.Struct({})` needed a filter, and only a real process showed it.** The fixture's `notes.list` declares an empty input; `POST /rpc` with `{ employeeId }` came back `200` with a snapshot, which for twenty minutes read as the whole change having failed. An empty `TypeLiteral` has no property signatures, so Effect has no expected key set for a key to be excess OF — self-consistent, and the wrong answer here, because `input: Schema.Struct({})` is the STRONGEST declaration a procedure can make and it was the one shape that accepted everything. It gets an explicit predicate now; `Schema.Record` keeps its open key set, because there the openness is declared.
+
+  **Verified against a running `voltro serve`, not only in units.** A declared input succeeds and inserts its row; an undeclared field is refused naming the key and the accepted set. The refusal arrives on the channel a payload decode failure ALREADY used — a missing required field produces the same `Die` with a `ParseError` message — so this adds no new error shape for a client to handle, it moves one case onto the channel the sibling case was always on.
+
+  `strictInput` lives in one module and every `Rpc.make` payload in `@voltro/protocol` goes through it — query, mutation, action, stream, event, plus the workflow start on both the server lifter and the browser-loaded rpc group. `strictInput.test.ts` asserts that SET by scanning the source, not the five lifters somebody remembered: a rule applied at the sites you can list is the shape that let `bootStoreCodec` be fixed twice and break a third time.
+
+  **`voltro update` carries you across this** — codemod `0.37.0/01_procedure-input-rejects-undeclared-fields`, a written note. A transform would have to guess which declared field a stray one meant, which is the same guess that produced the defect.
+
+### Added
+
+- **@voltro/plugin-audit** — `redactInput` / `redactOutcome` gained `'shape'`, and `redactSubject` gained `'metadata-shape'`: the payload's STRUCTURE survives, no value from it.
+
+  ```json
+  { "__redacted": { "jiraToken": "string(113)", "attempts": "number" } }
+  ```
+
+  Requested by the consumer who had asked for the redaction one round earlier, and both requests were right. They spent a day on a bug their own audit trail could have ended in seconds — a value arrived as 113 characters where 44 were due, and the row that would have said so read `{"__redacted":"all"}`. `'all'` remains the default on every field; this is opt-in.
+
+  The rules, and the two that are decisions rather than details:
+
+  - A string reports its LENGTH. Never a prefix, never a hash — `enc:v1:` is a prefix and so is the first byte of a private key, so there is no prefix length that is safe for every credential format. - A number, boolean or date reports its TYPE only. A number can BE the secret. - **A key can be the value.** An object keyed by user data puts a datum where a schema name belongs, so a key is reproduced only when it looks like a declared field — a short plain identifier. The first version truncated long keys and documented the weakness instead; this module's own test caught 62 characters of a secret surviving on the first run. A leak with a footnote is still a leak. - **A string's length is a real disclosure, and a small one.** Stated in the docs rather than buried: for a fixed-format credential it carries nothing, for a human-chosen password it is a weak hint. `'all'` stays the default for anyone that matters to.
+
+  The `'shape'` outcome describes the payload it REPLACES — the value on success, the error on failure — rather than the event. Describing the event would report `{ kind, value, durationMs }` and hide the field, which is the failure the option exists to end. An error's `_tag` still survives, as it does under `'all'`.
+
+### Fixed
+
+- **@voltro/cli** — `voltro db --help` listed fifteen of eighteen subcommands. `adopt`, `scan-credentials` and `encrypt-column` shipped and never joined the hand-written string.
+
+  A consumer wrote both halves of that gap into a requirements document, as separate items, neither of them about help text:
+
+  - **`voltro db encrypt-column` "does not exist"** — filed as a feature request, quoting the fifteen names they saw as evidence. It shipped in 0.33.0, and enabling `.encrypted()` on a populated column by hand is exactly the migration they were about to write themselves. - **`scan-credentials` "no longer exists"** — filed as CLOSED, a credential scanner struck off their list as removed. It had not moved.
+
+  A quoted enumeration is read as exhaustive, and the more careful the reader the more thoroughly they act on the missing entry. Same lesson a boot refusal in `procedureAccessGate` had already taught us, in a place nobody thought of as a message.
+
+  The usage line is now GENERATED from the dispatch table's key type (`Record<DbSubcommand, Handler>` in `dbCommand.ts`, names in `subcommandNames.ts`), so a handler with no name or a name with no handler fails to compile. `voltro privacy` is keyed the same way. The prose summary beside it cannot be generated — it carries per-command annotations — so a test asserts it mentions every name, because it carried the identical three omissions and it is what `voltro --help` prints first.
+
+  `subcommandHelpParity.test.ts` also NAMES the six commands whose subcommand menus have no dispatch table behind them (`webhooks`, `evolve`, `new`, `data`, `storage`, `add`). They dispatch through a switch and are unchecked; a silently-unchecked command reads exactly like a checked one.
+- **@voltro/cli** — A 401 or 403 from the inspect surface now names `VOLTRO_INSPECT_TOKEN` and says which side is missing.
+
+  `voltro db plan --against <url>` printed `remote returned 403` and stopped. A consumer read that as a DATABASE permission problem — the natural reading of a 403 from a command whose entire subject is a database — and went looking at grants. The cause is one unset environment variable, which the command reads four lines above the message.
+
+  `voltro probe access` had half of it: it named the variable on 401 and not on 403, while classifying both as `refused`. So the two commands somebody needs during an access migration were the two that would not say what was wrong, and one of them said something misleading instead.
+
+  `inspectGateHint` is shared by both call sites and distinguishes the two statuses, because they call for different actions: a 401 means no credential was sent (set the variable), a 403 means the one sent was not accepted (the two values differ). Both halves of the sentence name the server AND the calling shell — naming one side produces a second failed attempt.
+- **@voltro/cli** — `VOLTRO_TEMPLATES_DIR` is authoritative when set. It used to be a HINT: if the path it named held no `apps/` (or no `baselines/`), both resolvers fell through to the sibling-checkout walk-up and quietly used a different tree — or none.
+
+  A pointer that silently isn't followed is worse than a wrong one. A CI job aimed at the wrong path scaffolded from whatever it happened to find, and a job whose checkout had failed reported an empty template catalogue with nothing connecting that emptiness to the variable it was given. `scripts/lib/docsSite.mjs` states the same rule for `VOLTRO_DOCS_DIR`, and arrived at it the same way: you said where it is; it is not there.
+
+  Behaviourally this only changes the misconfigured case — a correct `VOLTRO_TEMPLATES_DIR` resolved to the same place before and after. What changes is that a wrong one now shows up as "not found, here is the path I was told" at the first thing that reads it, instead of as a different tree three steps later.
+
+  The unbundled resolution order is otherwise untouched: sibling `voltro-templates` → `.voltro-templates` → the bundled `templates/` a published CLI ships.
+
+### Internal (no consumer-facing effect)
+
+- **@voltro/plugin-ai-flows** — Two comments in the flow engine cited task records from a plans tracker that has since been deleted. Comment-only; no behavior, no API, nothing a consumer can observe.
+
+  Worth writing down because of HOW it surfaced. The tracker was retired in the META repo, and the gate that went red was in THIS one — `check-stale-task-comments.mjs` resolves a comment's `task #NN` against `../plans`, so deleting a plan document in one repo can only be half a change, and the other half is in a repo the deleting commit never touched.
+
+  Neither comment was WRONG, which is the part that makes the rule earn its keep. The first claims `@voltro/ai` has first-class media generation — true: `generateImage`, `generateSpeech`, `generateVideo` all ship in `packages/ai/src/media.ts`. It now names those three instead of a record number, which is checkable without the deleted document. The second only quoted the retired id inside its own account of a defect (a `"not yet wired (task #35)"` message that outlived the shipped HITL park and misled an audit into filing it as unbuilt); the quote lost the number and kept the whole lesson.
+
+  The check's own failure text is the reasoning: a plan is retired for exactly two reasons — the work shipped, or it was dropped without shipping — and a comment still citing it asserts the second while usually meaning the first.
+
+---
+
+## [0.36.0] — 2026-08-13
+
+### ⚠ BREAKING
+
+- **@voltro/integration-http, @voltro/plugin-atlassian** — A 401 from an upstream now produces `code: 'unauthorized'`, not `code: 'session_expired'`. The connection vault's own failure — where we DO know the credential is unusable — becomes `code: 'credential_unusable'`.
+
+  `session_expired` asserted a cause the status cannot support. A 401 says the credential was not accepted and says nothing about why: expired, revoked, insufficient scope and MALFORMED all produce it. A consumer's plugin sent ciphertext as a bearer token (a separate defect, fixed in the same release), the upstream answered 401, this name called it an expired session, and their health check acted on the name and deleted a valid session. Login loop, with every symptom pointing at a revoked credential.
+
+  Names get acted on, which is the whole reason to split them:
+
+  - `'unauthorized'` — the upstream refused. Non-transient, so still never retried; `status` rides along so a caller that knows more about its own upstream can decide for itself. Deciding for them is what this gives up. - `'credential_unusable'` — the connection vault could not produce a credential (no grant, revoked grant, refresh failed). Here the claim is ours to make, because the failure is ours rather than the far end's.
+
+  The 401 message stopped saying "session expired" too. It now says the credential was refused and that the reason is not in the response — which is the honest sentence and the one that would have saved the day this cost.
+
+  Its test asserts the CLAIM rather than banning the word: the first version forbade `/expired/i` and went red against the corrected message, which lists expiry as one of several things a 401 can mean. That distinction is the point of the change, so the assertion had to be about `session expired` specifically.
+
+  **`voltro update` carries you across this** — codemod `0.35.1/01_unauthorized-replaces-session-expired`.
+
+### Added
+
+- **@voltro/web** — **`apiSurface: compatible` — why the three altered golden lines cannot break a caller.** `LoaderContext` and `LoaderFn` each gained a type parameter WITH a default, so an unparameterised reference still resolves. The one that needed proving is `query?`, which went from a written-out signature to `LoaderQuery<Procedures>` — and `LoaderQuery` is a conditional whose false branch is character-for-character the previous signature. `unknown` does not extend `ProcedureTypeMap`, so the defaulted instantiation takes that branch.
+
+  Proved with `tsc` rather than by reading it: a probe asserting mutual assignability between `LoaderQuery<unknown>` and the old signature compiles, and inverting the probe fails — with tsc printing the resolved type as `<T = unknown>(tag: string, input?: Record<string, unknown> | undefined) => Promise<T>`, which is the old signature verbatim.
+
+  `LoaderContext` takes the app's procedure map, so a loader's `query` infers its input and output from the descriptor instead of returning `unknown`.
+
+  ```ts
+  import type { AppProcedures } from '<your-api>/rpcGroup'
+  
+  export const loader = async ({ query }: LoaderContext<AppProcedures>) => {
+    const rows = await query?.('bookmarks.list', { limit: 100 })
+    //    ^ inferred; an unknown tag or a wrong input shape is a compile error
+  }
+  ```
+
+  `AppProcedures` is generated already and has been for a while — it was wired to `createHooks` on the CLIENT and to nothing on the server, so every loader call site spelled its own output type by hand and a typo in a tag compiled. A consumer reported it twice.
+
+  The extraction reuses `ProcedureInput` / `ProcedureOutput` from `@voltro/client` rather than re-deriving them: a second answer to "what does this tag return" drifts the first time a descriptor field is renamed, and both answers look right in isolation.
+
+  Opt-in, and non-breaking: with no map named, the signature is the previous `<T = unknown>(tag: string, …)`. The framework cannot import an app's generated file, which is the same reason `createHooks<AppProcedures>` takes it explicitly.
+
+  Covered by a `.test-d.ts`, because the failure mode is "it compiles when it should not" and no runtime assertion can observe that. Two of its cases exist because the first version was vacuous: an `interface` fixture does not satisfy the map constraint (no implicit index signature — the codegen emits an alias for exactly this reason), so the typed branch fell back silently and every `@ts-expect-error` came back unused.
+
+### Fixed
+
+- **@voltro/cli** — The store a plugin receives through `bindDataStore` now carries the storage codec, so an `.encrypted()` column read through it decrypts.
+
+  A consumer measured both stores inside one request: `ctx.store` gave a 44-character plaintext PAT, and the store their plugin's `credentialsResolver` received gave 113 characters of `enc:v1:…`. Ciphertext is a syntactically valid bearer token, so nothing threw. Jira answered 401, `@voltro/integration-http` named that `session_expired`, their PAT health check did the reasonable thing with that name and deleted the session, and the user got login → dashboard → login forever. A configuration error in the costume of an authentication refusal, where every symptom pointed at the one explanation that was wrong.
+
+  The part worth recording is that `bootStoreCodec.ts` was written for exactly this, after it happened at two other seams, and its header predicts this consumer's symptom verbatim: "a route reading an `.encrypted()` column got the literal string `enc:v1:…` back … the failure reads as 'wrong credential'". The fix was applied per-seam. `bindDataStore` was not one of the seams anybody listed, so it happened a third time — and a per-seam test stayed green throughout, because it covered the two seams somebody remembered.
+
+  `bootStoreHandouts.test.ts` asserts the rule instead: no boot path hands a plugin the raw driver, on either boot path, with the wrapper applied before the handout. The codec needs no Subject — it is how a column is spelled on disk versus in JS — so there was never anything a boot-level store could not carry.
+
+  Also relevant to anyone who followed the 0.28.0 codemod: that codemod told apps to stop carrying a credential on the Subject and look it up in the resolver instead. Doing exactly that is what put an app on this seam, so the instruction and `.encrypted()` were not simultaneously satisfiable through it.
+- **@voltro/runtime, @voltro/cli** — The rpc/WebSocket query and stream arms now resolve row visibility before the executor sees a context. Fixes a 0.35.0 regression that made every read throw for an app with a registered row filter, and the older leak underneath it.
+
+  0.35.0 shipped two things for the row filter: the registration moved to `globalThis` (so a duplicate `@voltro/runtime` instance cannot hide it), and a scoped store built without a resolved scope started throwing instead of silently serving unfiltered rows. The first was a real fix for a real hazard. The second was correct in principle and immediately fatal in practice, because the framework itself had a path that did exactly what it now refuses.
+
+  The consumer who reported the original leak ran the two-line check we asked for and `getRowFilter()` was visible from their request path — so the instance split was NOT their cause, and our hypothesis was wrong. Their measurement is what found the real one: the refusal fired, meaning the registration was FOUND and `ctx.rowFilter` was still undefined at the store. Nothing was missing; a step was.
+
+  Four arms reach a request context. `makeOneShotQueryRunner` (REST) and `makeQuerySubscriber` (SSE) both `await withRowFilter(...)` and say so in a comment. The rpc query handler and the stream handler — each hand-copied into both boot paths — handed the raw request straight through. So a user's executor received a context whose `ctx.store` applied no row filter, on the two arms that carry the most traffic. It survived because subscriptions are refiltered per DELIVERY, which made a descriptor-returning query look correct end to end while the executor's own reads were not.
+
+  `withScopedRequest` is the seam that fixes it once: a request that already carries a scope passes through untouched (resolving twice would run the app's `load` twice per request), an app with NO filter stays fully synchronous, and an app with one gets an Effect — which every one of these call sites already accepts. A boot-path parity test pins both stream arms and the shared producer.
+
+  The refusal also stopped firing for a SYSTEM subject. That is not a softening: `resolveRowFilterScopeFor` returns `NO_ROW_FILTER` for a system subject, so the only correct value was already determined, and several legitimate paths (schedules, resumed workflows, the webhook trigger context) build a context directly with no scope. Demanding a decision there is what took the api down.
+
+---
+
 ## [0.35.0] — 2026-08-13
 
 ### ⚠ BREAKING

package/dist/index.d.ts

@@ -4055,6 +4055,21 @@ export declare interface StreamProcedureDescriptor<Name extends string, Input ex
 
 export declare const streamToRpc: <Name extends string, Input extends Schema.Schema.Any, Element extends Schema.Schema.Any, Err extends Schema.Schema.All>(descriptor: StreamProcedureDescriptor<Name, Input, Element, Err>, extraErrors?: ExtraErrors) => Rpc.Rpc<Name, Input extends Schema.Struct.Fields ? Schema.Struct<Input> : Input, Stream<Element, Schema.Schema.All>, typeof Schema.Never, never>;
 
+/**
+ * Annotate a procedure's input schema so an undeclared field fails the decode
+ * instead of vanishing from it.
+ *
+ * Applies to the schema handed to `Rpc.make` — the PAYLOAD only. Not the
+ * success schema, and not `descriptor.input`, which the client still reads
+ * unannotated for schema-driven UI (`normalizeDescriptor`).
+ *
+ * Measured, because none of it follows from the annotation's name: it
+ * propagates into NESTED structs and through a UNION's members, and a
+ * non-struct payload (`Schema.Void`, a scalar) is unaffected — there is no
+ * excess property for it to have.
+ */
+export declare const strictInput: <S extends Schema.Schema.Any>(input: S) => S;
+
 export declare const Subject: Schema.Union<[Schema.Struct<{
     type: Schema.Literal<["user"]>;
     id: typeof Schema.String;

package/dist/index.js

@@ -76,7 +76,13 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	_tag: l.Literal("error"),
 	error: l.Unknown,
 	revision: l.optional(l.Number)
-})), _ = class extends l.TaggedError()("BusinessRuleViolation", {
+})), Xe = (e) => {
+	let t = e.ast;
+	return t._tag === "TypeLiteral" && (t.propertySignatures?.length ?? 0) === 0 && (t.indexSignatures?.length ?? 0) === 0;
+}, _ = (e) => {
+	let t = e.annotations({ parseOptions: { onExcessProperty: "error" } });
+	return Xe(e) ? l.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(t) : t;
+}, v = class extends l.TaggedError()("BusinessRuleViolation", {
 	rule: l.String,
 	params: l.optional(l.Record({
 		key: l.String,
@@ -85,34 +91,34 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	field: l.optional(l.String),
 	message: l.optional(l.String),
 	severity: l.Literal("error", "warning")
-}) {}, v = class extends l.TaggedError()("ApprovalRequired", {
+}) {}, y = class extends l.TaggedError()("ApprovalRequired", {
 	approvalId: l.String,
 	procedure: l.String,
 	expiresAt: l.String,
 	requiredScopes: l.Array(l.String),
 	reason: l.NullOr(l.String),
 	created: l.Boolean
-}) {}, y = class extends l.TaggedError()("ApprovalNotFound", { approvalId: l.String }) {}, b = class extends l.TaggedError()("ApprovalSelfApproval", {
+}) {}, b = class extends l.TaggedError()("ApprovalNotFound", { approvalId: l.String }) {}, x = class extends l.TaggedError()("ApprovalSelfApproval", {
 	approvalId: l.String,
 	subjectId: l.NullOr(l.String)
-}) {}, x = class extends l.TaggedError()("ApprovalRejected", {
+}) {}, S = class extends l.TaggedError()("ApprovalRejected", {
 	approvalId: l.String,
 	decidedBy: l.NullOr(l.String),
 	note: l.NullOr(l.String)
-}) {}, S = class extends l.TaggedError()("ApprovalExpired", {
+}) {}, C = class extends l.TaggedError()("ApprovalExpired", {
 	approvalId: l.String,
 	expiredAt: l.String
-}) {}, C = class extends l.TaggedError()("ApprovalNotPending", {
+}) {}, w = class extends l.TaggedError()("ApprovalNotPending", {
 	approvalId: l.String,
 	status: l.String
-}) {}, w = class extends l.TaggedError()("ApprovalForbidden", {
+}) {}, T = class extends l.TaggedError()("ApprovalForbidden", {
 	approvalId: l.String,
 	required: l.NullOr(l.String),
 	message: l.String
-}) {}, T = class extends l.TaggedError()("ApprovalUnavailable", {
+}) {}, E = class extends l.TaggedError()("ApprovalUnavailable", {
 	procedure: l.String,
 	message: l.String
-}) {}, E = l.Union(v, x, S, T), D = l.Union(y, b, S, C, w, T), O = l.Struct({
+}) {}, D = l.Union(y, S, C, E), O = l.Union(b, x, C, w, T, E), k = l.Struct({
 	id: l.String,
 	procedure: l.String,
 	kind: l.Literal("mutation", "action"),
@@ -126,28 +132,28 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	decidedAt: l.NullOr(l.String),
 	note: l.NullOr(l.String),
 	relation: l.Literal("to-decide", "requested")
-}), k = "channel:", A = Symbol.for("@voltro/protocol/reactivityChannels"), j = globalThis, M = j[A] ?? (j[A] = /* @__PURE__ */ new Map()), Xe = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, Ze = (e) => {
-	if (!Xe.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
+}), A = "channel:", j = Symbol.for("@voltro/protocol/reactivityChannels"), M = globalThis, N = M[j] ?? (M[j] = /* @__PURE__ */ new Map()), Ze = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, Qe = (e) => {
+	if (!Ze.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
   \`billing.usage\`. A \`:\` is refused because it is the namespace separator in
-  the routing key (\`${k}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
+  the routing key (\`${A}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
   routes as two.`);
-	let t = M.get(e);
+	let t = N.get(e);
 	if (t !== void 0) return t;
-	let n = `${k}${e}`, r = Object.freeze({
+	let n = `${A}${e}`, r = Object.freeze({
 		kind: "reactivity-channel",
 		name: e,
 		key: n,
 		toString: () => n
 	});
-	return M.set(e, r), r;
-}, N = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", P = (e) => e.startsWith(k), F = () => new Set([...M.values()].map((e) => e.key)), I = (e) => N(e) ? e.key : e, L = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(I) : [I(e)], Qe = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(I) : I(e), $e = (e) => {
-	let t = F(), n = [];
-	for (let r of e) for (let e of L(r.source)) !P(e) || t.has(e) || n.push({
+	return N.set(e, r), r;
+}, P = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", F = (e) => e.startsWith(A), I = () => new Set([...N.values()].map((e) => e.key)), L = (e) => P(e) ? e.key : e, $e = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(L) : [L(e)], et = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(L) : L(e), tt = (e) => {
+	let t = I(), n = [];
+	for (let r of e) for (let e of $e(r.source)) !F(e) || t.has(e) || n.push({
 		procedure: r.name,
 		key: e
 	});
 	return n;
-}, et = (e, t) => {
+}, nt = (e, t) => {
 	let n = e?.injectExternalChange;
 	return n === void 0 ? !1 : (n.call(e, {
 		table: t.key,
@@ -156,8 +162,8 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 		old: {},
 		origin: "inline"
 	}), !0);
-}, tt = (e) => e.internal !== !0, R = (e) => {
-	if (nt(e), Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
+}, rt = (e) => e.internal !== !0, R = (e) => {
+	if (it(e), Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
   unguarded procedure, or list the scopes required to call it.`);
 	let t = typeof e.source == "string" ? [e.source] : Array.isArray(e.source) ? e.source : void 0;
 	if (t !== void 0 && (t.length === 0 || t.some((e) => String(e).trim() === ""))) throw Error(`${e.name}: \`source\` is empty, so this query declares reactivity and\n  subscribes to nothing — it serves one snapshot and never updates again,
@@ -174,7 +180,7 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	let n = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
 	if (n.length === 0) return e;
 	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${n.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${n.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${n.join(" / ")} annotation if it is not.`);
-}, nt = (e) => {
+}, it = (e) => {
 	let t = e.requiresApproval;
 	if (t !== void 0) {
 		if (!Array.isArray(t.approvers) || t.approvers.length === 0) throw Error(`${e.name}: \`requiresApproval.approvers\` is empty, so NOBODY can approve this\n  procedure and every call would park forever. Name the scope(s) an approver must hold
@@ -184,7 +190,7 @@ var We = l.Union(l.String, l.Number), d = l.Record({
   human from every other, and the second-pair-of-eyes control would enforce nothing.
   Give the procedure a \`guards:\` decision, or drop \`requiresApproval\`.`);
 	}
-}, rt = (e) => e.action !== void 0 && e.resourceType !== void 0, it = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, z = (e, t, n) => {
+}, at = (e) => e.action !== void 0 && e.resourceType !== void 0, ot = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, z = (e, t, n) => {
 	if (n === void 0) return t;
 	if (n.trim() === "") throw Error(`${e}: \`openAccess\` needs a REASON, not an empty string. It is the sentence a\n  reviewer reads to decide whether this procedure should really be callable
   without an authorization check — e.g. \`openAccess: 'public pricing, no caller data'\`.`);
@@ -197,7 +203,7 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	input: e.input,
 	output: e.output,
 	error: e.error ?? l.Never,
-	source: Qe(e.source),
+	source: et(e.source),
 	cache: e.cache,
 	guards: z(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
@@ -234,7 +240,7 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), at = (e) => R({
+}), st = (e) => R({
 	kind: "stream",
 	name: e.name,
 	input: e.input,
@@ -244,36 +250,36 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	overridesPlugin: e.overridesPlugin,
 	guards: z(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess
-}), U = (e, t) => t && t.length > 0 ? l.Union(e, ...t) : e, W = (e, t) => t && t.some((e) => !a(e)) ? l.Union(e, c) : e, ot = (e) => l.Union(e, _), st = (e, t) => t === void 0 ? e : l.Union(e, E), ct = (e, t) => u.make(e.name, {
-	payload: e.input,
+}), U = (e, t) => t && t.length > 0 ? l.Union(e, ...t) : e, W = (e, t) => t && t.some((e) => !a(e)) ? l.Union(e, c) : e, ct = (e) => l.Union(e, v), lt = (e, t) => t === void 0 ? e : l.Union(e, D), ut = (e, t) => u.make(e.name, {
+	payload: _(e.input),
 	success: g(e.output),
 	error: U(W(e.error, e.guards), t),
 	stream: !0
-}), lt = (e, t) => u.make(e.name, {
-	payload: e.input,
+}), dt = (e, t) => u.make(e.name, {
+	payload: _(e.input),
 	success: e.output,
-	error: U(st(ot(W(e.error, e.guards)), e.requiresApproval), t)
-}), ut = (e, t) => u.make(e.name, {
-	payload: e.input,
+	error: U(lt(ct(W(e.error, e.guards)), e.requiresApproval), t)
+}), ft = (e, t) => u.make(e.name, {
+	payload: _(e.input),
 	success: e.output,
-	error: U(st(W(e.error, e.guards), e.requiresApproval), t)
-}), dt = (e, t) => u.make(e.name, {
-	payload: e.input,
+	error: U(lt(W(e.error, e.guards), e.requiresApproval), t)
+}), pt = (e, t) => u.make(e.name, {
+	payload: _(e.input),
 	success: e.element,
 	error: U(e.error, t),
 	stream: !0
-}), ft = (e) => {
+}), mt = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
 	return typeof t == "string" ? t : void 0;
-}, pt = (e) => {
+}, ht = (e) => {
 	switch (e.kind) {
-		case "query": return ct(e);
-		case "mutation": return lt(e);
-		case "action": return ut(e);
-		case "stream": return dt(e);
+		case "query": return ut(e);
+		case "mutation": return dt(e);
+		case "action": return ft(e);
+		case "stream": return pt(e);
 	}
-}, mt = (e) => {
+}, gt = (e) => {
 	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
 	if (e.kind === "query") return {
 		kind: "query",
@@ -314,7 +320,7 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 			..."shapeItem" in e && e.shapeItem !== void 0 ? { shapeItem: e.shapeItem } : {}
 		}))
 	};
-}, ht = 7500, gt = (e) => typeof e == "object" && !!e && e.kind === "event", _t = (e) => {
+}, _t = 7500, vt = (e) => typeof e == "object" && !!e && e.kind === "event", yt = (e) => {
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -349,67 +355,67 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 		webhook: e.webhook,
 		delivery: e.delivery
 	};
-}, vt = (e) => l.Struct({
+}, bt = (e) => l.Struct({
 	_tag: l.Literal("event"),
 	origin: l.String,
 	n: l.Number,
 	emittedAt: l.Number,
 	payload: e
-}), yt = l.Struct({
+}), xt = l.Struct({
 	_tag: l.Literal("gap"),
 	missed: l.Number,
 	reason: l.Literal("buffer", "resume")
-}), bt = l.Struct({ _tag: l.Literal("attached") }), xt = (e) => l.Union(bt, vt(e), yt), G = l.Struct({
+}), G = l.Struct({ _tag: l.Literal("attached") }), St = (e) => l.Union(G, bt(e), xt), Ct = l.Struct({
 	origin: l.String,
 	n: l.Number
-}), St = (e) => l.Struct({
+}), wt = (e) => l.Struct({
 	key: e,
-	resume: l.optional(l.Array(G))
-}), Ct = (e, t) => {
+	resume: l.optional(l.Array(Ct))
+}), Tt = (e, t) => {
 	let n = e.guards !== void 0 && e.guards.some((e) => !a(e)) ? c : l.Never, r = t && t.length > 0 ? l.Union(n, ...t) : n;
 	return u.make(e.name, {
-		payload: St(e.key),
-		success: xt(e.payload),
+		payload: _(wt(e.key)),
+		success: St(e.payload),
 		error: r,
 		stream: !0
 	});
-}, wt = class extends l.TaggedError()("EventPayloadInvalid", {
+}, Et = class extends l.TaggedError()("EventPayloadInvalid", {
 	event: l.String,
 	message: l.String
-}) {}, Tt = class extends l.TaggedError()("EventKeyInvalid", {
+}) {}, Dt = class extends l.TaggedError()("EventKeyInvalid", {
 	event: l.String,
 	message: l.String
-}) {}, Et = class extends l.TaggedError()("EventPayloadTooLarge", {
+}) {}, Ot = class extends l.TaggedError()("EventPayloadTooLarge", {
 	event: l.String,
 	bytes: l.Number,
 	limit: l.Number
-}) {}, Dt = (e) => {
+}) {}, kt = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t));
 	return JSON.stringify(t);
-}, Ot = "\0", kt = (e, t, n) => [
+}, At = "\0", jt = (e, t, n) => [
 	e ?? "~",
 	t,
-	Dt(n)
-].join("\0"), At = (e) => {
+	kt(n)
+].join("\0"), Mt = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, jt = (e) => e.split("\0").join(" · "), Mt = (e) => e, Nt = (e) => e, Pt = (e) => {
+}, Nt = (e) => e.split("\0").join(" · "), Pt = (e) => e, Ft = (e) => e, It = (e) => {
 	let t = e.alias?.trim(), n = e.instance?.trim(), r = t !== void 0 && t !== "" ? t : e.base;
 	return n !== void 0 && n !== "" ? `${r}#${n}` : r;
-}, Ft = (e) => {
+}, Lt = (e) => {
 	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
-}, It = (e, t) => {
+}, Rt = (e, t) => {
 	let n = He.GenericTag(e);
 	return {
 		Tag: n,
 		Live: Ue.succeed(n, t)
 	};
-}, Lt = (e, t, n) => {
+}, zt = (e, t, n) => {
 	if (!t) return { ok: !0 };
 	let r = K(n);
 	if (!r) return {
@@ -419,7 +425,7 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	let i = t.trim();
 	if (i === "*" || i === "") return { ok: !0 };
 	let a = i.split(/\s+/).filter((e) => e.length > 0);
-	for (let i of a) if (!Rt(i, r)) return {
+	for (let i of a) if (!Bt(i, r)) return {
 		ok: !1,
 		reason: `plugin "${e}" requires framework ${t}, running ${n}`
 	};
@@ -432,7 +438,7 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 		patch: Number(t[3]),
 		pre: t[4] ?? ""
 	} : null;
-}, q = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, Rt = (e, t) => {
+}, q = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, Bt = (e, t) => {
 	if (e === "*") return !0;
 	if (e.startsWith("^")) {
 		let n = K(e.slice(1));
@@ -454,17 +460,17 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	}
 	let r = K(e);
 	return r ? q(t, r) === 0 : !1;
-}, J = l.Literal("running", "succeeded", "failed", "cancelled", "suspended"), zt = l.Literal("cancel", "terminate", "abandon"), Bt = l.Struct({
+}, J = l.Literal("running", "succeeded", "failed", "cancelled", "suspended"), Vt = l.Literal("cancel", "terminate", "abandon"), Ht = l.Struct({
 	mode: l.String,
 	dueAt: l.NullOr(l.Number),
 	retryAfterMs: l.NullOr(l.Number),
 	intentId: l.NullOr(l.String)
-}), Vt = l.Struct({
+}), Ut = l.Struct({
 	id: l.String,
 	workflowName: l.String,
 	executionId: l.NullOr(l.String),
 	status: l.Literal("running", "queued", "dropped", "skipped"),
-	deferral: l.optional(Bt)
+	deferral: l.optional(Ht)
 }), Y = l.Struct({
 	id: l.String,
 	tag: l.String,
@@ -484,12 +490,12 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	durationMs: l.NullOr(l.Number),
 	traceId: l.NullOr(l.String),
 	parentExecutionId: l.NullOr(l.String),
-	parentClosePolicy: l.NullOr(zt)
-}), Ht = l.Struct({
+	parentClosePolicy: l.NullOr(Vt)
+}), Wt = l.Struct({
 	tag: l.optional(l.String),
 	status: l.optional(J),
 	limit: l.optional(l.Number)
-}), Ut = l.Struct({
+}), Gt = l.Struct({
 	id: l.String,
 	runId: l.String,
 	stepName: l.String,
@@ -504,7 +510,7 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	startedAt: l.Date,
 	completedAt: l.NullOr(l.Date),
 	durationMs: l.NullOr(l.Number)
-}), Wt = l.Struct({
+}), Kt = l.Struct({
 	id: l.String,
 	runId: l.String,
 	eventType: l.String,
@@ -512,7 +518,7 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	occurredAt: l.Date,
 	stepName: l.NullOr(l.String),
 	attempt: l.NullOr(l.Number)
-}), Gt = l.Struct({
+}), qt = l.Struct({
 	id: l.String,
 	name: l.String,
 	payload: l.Unknown,
@@ -520,7 +526,7 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	subject: l.NullOr(l.Unknown),
 	traceId: l.NullOr(l.String),
 	occurredAt: l.Date
-}), Kt = l.Struct({
+}), Jt = l.Struct({
 	id: l.String,
 	eventId: l.String,
 	eventName: l.String,
@@ -533,108 +539,108 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	errorMessage: l.NullOr(l.String),
 	createdAt: l.Date,
 	completedAt: l.NullOr(l.Date)
-}), qt = l.Struct({ id: l.String }), X = l.Struct({ runId: l.String }), Jt = l.Struct({
+}), Yt = l.Struct({ id: l.String }), X = l.Struct({ runId: l.String }), Xt = l.Struct({
 	name: l.optional(l.String),
 	limit: l.optional(l.Number)
-}), Yt = l.Struct({ eventId: l.String }), Z = l.Struct({
+}), Zt = l.Struct({ eventId: l.String }), Z = l.Struct({
 	workflowName: l.String,
 	executionId: l.String
-}), Xt = l.Struct({
+}), Qt = l.Struct({
 	id: l.String,
 	signalName: l.String,
 	payload: l.optional(l.Unknown)
-}), Zt = l.Struct({
+}), $t = l.Struct({
 	id: l.String,
 	updateName: l.String,
 	payload: l.optional(l.Unknown),
 	timeoutMs: l.optional(l.Number)
-}), Qt = l.Struct({
+}), en = l.Struct({
 	eventId: l.String,
 	updateId: l.String,
 	completedEventId: l.String,
 	result: l.Unknown
-}), $t = B({
+}), tn = B({
 	name: "__voltro.workflow.run",
 	source: "_voltro_workflow_runs",
-	input: qt,
+	input: Yt,
 	output: l.Array(Y)
-}), en = B({
+}), nn = B({
 	name: "__voltro.workflow.runs",
 	source: "_voltro_workflow_runs",
-	input: Ht,
+	input: Wt,
 	output: l.Array(Y)
-}), tn = B({
+}), rn = B({
 	name: "__voltro.workflow.run.steps",
 	source: "_voltro_workflow_run_steps",
 	input: X,
-	output: l.Array(Ut)
-}), nn = B({
+	output: l.Array(Gt)
+}), an = B({
 	name: "__voltro.workflow.run.events",
 	source: "_voltro_workflow_run_events",
 	input: X,
-	output: l.Array(Wt)
-}), rn = B({
+	output: l.Array(Kt)
+}), on = B({
 	name: "__voltro.workflow.domainEvents",
 	source: "_voltro_workflow_events",
-	input: Jt,
-	output: l.Array(Gt)
-}), an = B({
+	input: Xt,
+	output: l.Array(qt)
+}), sn = B({
 	name: "__voltro.workflow.event.deliveries",
 	source: "_voltro_workflow_event_deliveries",
-	input: Yt,
-	output: l.Array(Kt)
-}), on = H({
+	input: Zt,
+	output: l.Array(Jt)
+}), cn = H({
 	name: "__voltro.workflow.cancel",
 	input: Z,
 	output: l.Struct({ ok: l.Boolean })
-}), sn = H({
+}), ln = H({
 	name: "__voltro.workflow.resume",
 	input: Z,
 	output: l.Struct({ ok: l.Boolean })
-}), cn = H({
+}), un = H({
 	name: "__voltro.workflow.signal",
-	input: Xt,
+	input: Qt,
 	output: l.Struct({ eventId: l.String })
-}), ln = H({
+}), dn = H({
 	name: "__voltro.workflow.update",
-	input: Zt,
-	output: Qt
-}), un = "__voltro.undo.log", dn = "__voltro.undo.apply", fn = "__voltro.undo.redo", pn = l.Struct({
+	input: $t,
+	output: en
+}), fn = "__voltro.undo.log", pn = "__voltro.undo.apply", mn = "__voltro.undo.redo", hn = l.Struct({
 	id: l.String,
 	tag: l.String,
 	label: l.NullOr(l.String),
 	undone: l.Boolean,
 	crossesAction: l.Boolean,
 	createdAt: l.String
-}), mn = class extends l.TaggedError()("UndoNotFound", { invocationId: l.String }) {}, hn = class extends l.TaggedError()("UndoForbidden", { invocationId: l.String }) {}, gn = class extends l.TaggedError()("UndoConflict", {
+}), gn = class extends l.TaggedError()("UndoNotFound", { invocationId: l.String }) {}, _n = class extends l.TaggedError()("UndoForbidden", { invocationId: l.String }) {}, vn = class extends l.TaggedError()("UndoConflict", {
 	invocationId: l.String,
 	reason: l.Literal("conflict", "action")
-}) {}, _n = l.Union(mn, hn, gn), vn = B({
-	name: un,
+}) {}, yn = l.Union(gn, _n, vn), bn = B({
+	name: fn,
 	source: "_voltro_undo_log",
 	input: l.Struct({ limit: l.optional(l.Number) }),
-	output: l.Array(pn),
+	output: l.Array(hn),
 	openAccess: "subject-scoped by construction: lists only the calling subject's own undoable actions"
-}), yn = V({
-	name: dn,
+}), xn = V({
+	name: pn,
 	input: l.Struct({ invocationId: l.String }),
 	output: l.Struct({ ok: l.Boolean }),
-	error: _n,
+	error: yn,
 	openAccess: "subject-scoped by construction: undo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), bn = V({
-	name: fn,
+}), Sn = V({
+	name: mn,
 	input: l.Struct({ invocationId: l.String }),
 	output: l.Struct({ ok: l.Boolean }),
-	error: _n,
+	error: yn,
 	openAccess: "subject-scoped by construction: redo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), xn = "__voltro.approvals.pending", Sn = "__voltro.approvals.decide", Cn = B({
-	name: xn,
+}), Cn = "__voltro.approvals.pending", wn = "__voltro.approvals.decide", Tn = B({
+	name: Cn,
 	source: "_voltro_approvals",
 	input: l.Struct({ limit: l.optional(l.Number) }),
-	output: l.Array(O),
+	output: l.Array(k),
 	openAccess: "the answer is scoped to the caller — a row appears only if they requested it or hold its recorded approver scopes, so an anonymous caller sees nothing"
-}), wn = V({
-	name: Sn,
+}), En = V({
+	name: wn,
 	input: l.Struct({
 		approvalId: l.String,
 		decision: l.Literal("approve", "reject"),
@@ -644,35 +650,35 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 		approvalId: l.String,
 		status: l.Literal("approved", "rejected")
 	}),
-	error: D,
+	error: O,
 	openAccess: "the approver authority is the PENDING ROW's own recorded scopes (plus an unconditional self-approval refusal), checked in-handler — a descriptor-level scope would have to be the union of every approval-requiring procedure in the app"
-}), Tn = "__voltro.connections.list", En = "__voltro.connections.start", Dn = "__voltro.connections.submitToken", On = "__voltro.connections.disconnect", Q = l.Literal("oauth2", "pat"), kn = l.Literal("disconnected", "connected", "expired", "revoked", "error"), An = l.Struct({
+}), Dn = "__voltro.connections.list", On = "__voltro.connections.start", kn = "__voltro.connections.submitToken", An = "__voltro.connections.disconnect", Q = l.Literal("oauth2", "pat"), jn = l.Literal("disconnected", "connected", "expired", "revoked", "error"), Mn = l.Struct({
 	connectionId: l.String,
 	kind: Q,
 	label: l.String,
-	status: kn,
+	status: jn,
 	accountId: l.NullOr(l.String),
 	accountLabel: l.NullOr(l.String),
 	scopes: l.Array(l.String),
 	expiresAt: l.NullOr(l.String),
 	lastError: l.NullOr(l.String),
 	connectedAt: l.NullOr(l.String)
-}), jn = class extends l.TaggedError()("ConnectionNotDeclared", { connectionId: l.String }) {}, Mn = class extends l.TaggedError()("ConnectionSubjectRequired", { connectionId: l.String }) {}, Nn = class extends l.TaggedError()("ConnectionKindMismatch", {
+}), Nn = class extends l.TaggedError()("ConnectionNotDeclared", { connectionId: l.String }) {}, Pn = class extends l.TaggedError()("ConnectionSubjectRequired", { connectionId: l.String }) {}, Fn = class extends l.TaggedError()("ConnectionKindMismatch", {
 	connectionId: l.String,
 	expected: Q,
 	actual: Q
-}) {}, Pn = class extends l.TaggedError()("ConnectionHandshakeFailed", {
+}) {}, In = class extends l.TaggedError()("ConnectionHandshakeFailed", {
 	connectionId: l.String,
 	reason: l.String,
 	transient: l.Boolean
-}) {}, $ = l.Union(jn, Mn, Nn, Pn), Fn = B({
-	name: Tn,
+}) {}, $ = l.Union(Nn, Pn, Fn, In), Ln = B({
+	name: Dn,
 	source: "_voltro_connections",
 	input: l.Struct({}),
-	output: l.Array(An),
+	output: l.Array(Mn),
 	openAccess: "self-scoped read: projects the declared connections for the calling subject only (its own connect/disconnect state)"
-}), In = H({
-	name: En,
+}), Rn = H({
+	name: On,
 	input: l.Struct({
 		connectionId: l.String,
 		redirectTo: l.optional(l.String)
@@ -683,8 +689,8 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	}),
 	error: $,
 	openAccess: "self-service: begins an oauth handshake that stores a credential for the calling subject only; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Ln = V({
-	name: Dn,
+}), zn = V({
+	name: kn,
 	input: l.Struct({
 		connectionId: l.String,
 		token: l.String
@@ -692,15 +698,15 @@ var We = l.Union(l.String, l.Number), d = l.Record({
 	output: l.Struct({ ok: l.Boolean }),
 	error: $,
 	openAccess: "self-service: stores a pasted token as the calling subject's own credential; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Rn = V({
-	name: On,
+}), Bn = V({
+	name: An,
 	input: l.Struct({ connectionId: l.String }),
 	output: l.Struct({ ok: l.Boolean }),
 	error: $,
 	openAccess: "self-service: deletes only the calling subject's own credential row for this connection"
-}), zn = (e) => {
+}), Vn = (e) => {
 	let t = e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : 0;
 	return Number.isNaN(t) ? 0 : t;
-}, Bn = 1;
+}, Hn = 1;
 //#endregion
-export { je as ADMIN_SCOPE, oe as APIKEY_ISSUE_ORG_SCOPE, n as APIKEY_ISSUE_OTHER_SCOPE, Ae as APIKEY_ISSUE_SELF_SCOPE, Sn as APPROVALS_DECIDE_TAG, xn as APPROVALS_PENDING_TAG, D as ApprovalDecisionErrors, E as ApprovalErrors, S as ApprovalExpired, w as ApprovalForbidden, y as ApprovalNotFound, C as ApprovalNotPending, x as ApprovalRejected, v as ApprovalRequired, b as ApprovalSelfApproval, T as ApprovalUnavailable, De as AuthMiddleware, _ as BusinessRuleViolation, Tn as CONNECTIONS_LIST_TAG, On as CONNECTION_DISCONNECT_TAG, En as CONNECTION_START_TAG, Dn as CONNECTION_SUBMIT_TOKEN_TAG, Pn as ConnectionHandshakeFailed, Se as ConnectionInfo, Te as ConnectionInfoMiddleware, Q as ConnectionKind, Nn as ConnectionKindMismatch, jn as ConnectionNotDeclared, An as ConnectionState, kn as ConnectionStatus, Mn as ConnectionSubjectRequired, _e as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ue as DEFAULT_SCOPE_CACHE_TTL_MS, Ot as EVENT_ROUTE_SEP, Tt as EventKeyInvalid, wt as EventPayloadInvalid, Et as EventPayloadTooLarge, ht as MAX_EVENT_ENVELOPE_BYTES, Bn as PROTOCOL_VERSION, O as PendingApproval, k as REACTIVITY_CHANNEL_PREFIX, c as ScopeError, Ce as Subject, Ee as SubjectIdentity, fe as SubjectService, dn as UNDO_APPLY_TAG, un as UNDO_LOG_TAG, fn as UNDO_REDO_TAG, be as Unauthenticated, gn as UndoConflict, hn as UndoForbidden, pn as UndoLogEntry, mn as UndoNotFound, Z as WorkflowControlInputSchema, Gt as WorkflowDomainEventRowSchema, Jt as WorkflowDomainEventsInputSchema, Yt as WorkflowEventDeliveriesInputSchema, Kt as WorkflowEventDeliveryRowSchema, zt as WorkflowParentClosePolicySchema, Wt as WorkflowRunEventRowSchema, Vt as WorkflowRunHandleSchema, qt as WorkflowRunRefSchema, Y as WorkflowRunRowSchema, J as WorkflowRunStatusSchema, Ut as WorkflowRunStepRowSchema, X as WorkflowRunTableRefSchema, Ht as WorkflowRunsInputSchema, Xt as WorkflowSignalInputSchema, Bt as WorkflowStartDeferralSchema, Zt as WorkflowUpdateInputSchema, Qt as WorkflowUpdateResultSchema, ut as actionToRpc, i as advisoryResourceGuardWarning, Oe as anonymousSubject, Ye as applyRowPatch, pe as applyScopeDecision, wn as approvalsDecideDescriptor, Cn as approvalsPendingQueryDescriptor, me as assertAuthenticated, ze as beginIdempotent, Lt as checkFrameworkCompat, r as checkGuards, ie as checkGuardsEffect, we as composeAuthStrategies, Ft as composeRpcInterceptors, Rn as connectionDisconnectDescriptor, In as connectionStartDescriptor, Ln as connectionSubmitTokenDescriptor, Fn as connectionsListQueryDescriptor, F as declaredReactivityChannelKeys, H as defineAction, _t as defineEvent, V as defineMutation, Mt as definePlugin, Nt as definePluginRoute, It as definePluginService, B as defineQuery, at as defineStream, qe as diffRows, ye as effectiveScopes, Dt as encodeEventKey, ft as errorTag, bt as eventAttached, vt as eventEnvelope, yt as eventGap, G as eventResumePoint, kt as eventRoute, xt as eventStreamEvent, St as eventSubscribeInput, Ct as eventToRpc, Ie as failIdempotent, e as findAdvisoryResourceGuards, Pe as finishIdempotent, jt as formatEventRoute, ve as getPolicyGuardResolver, ne as getResourceScopeResolver, it as hasAccessDecision, xe as hasCallbackRoutes, re as hasEffectiveScope, ae as hasScope, m as idToPath, Re as idempotencyScope, gt as isEventDescriptor, Je as isIdKeyed, a as isOpenAccess, ee as isPolicyCheck, rt as isPolicyGuard, N as isReactivityChannel, P as isReactivityChannelKey, ge as isSystemSubject, tt as isWireReachable, he as makeScopeCache, Be as memoryIdempotencyStore, te as missingAccessDecision, lt as mutationToRpc, mt as normalizeDescriptor, Qe as normalizeSource, s as openAccessSpec, At as parseEventRoute, Ge as pathToId, Pt as pluginInstanceName, et as publishReactivity, Ve as publishServerError, ct as queryToRpc, Ze as reactivityChannel, Ne as requireScope, f as rowPatchOpSchema, p as rowPatchSchema, le as scopeCacheKey, t as setEffectiveScopes, ce as setPolicyGuardResolver, o as setResourceScopeResolver, L as sourceKeys, dt as streamToRpc, ke as subjectIdentity, se as subjectScopes, Le as subscribeServerErrors, g as subscriptionEvent, Me as systemSubject, de as tenantScopedSubject, pt as toRpc, zn as tsMs, $e as undeclaredChannelKeys, yn as undoApplyDescriptor, vn as undoLogQueryDescriptor, bn as undoRedoDescriptor, on as workflowCancelDescriptor, rn as workflowDomainEventsQueryDescriptor, an as workflowEventDeliveriesQueryDescriptor, sn as workflowResumeDescriptor, nn as workflowRunEventsQueryDescriptor, $t as workflowRunQueryDescriptor, tn as workflowRunStepsQueryDescriptor, en as workflowRunsQueryDescriptor, cn as workflowSignalDescriptor, ln as workflowUpdateDescriptor, Fe as wsMutationIdempotencyScope };
+export { je as ADMIN_SCOPE, oe as APIKEY_ISSUE_ORG_SCOPE, n as APIKEY_ISSUE_OTHER_SCOPE, Ae as APIKEY_ISSUE_SELF_SCOPE, wn as APPROVALS_DECIDE_TAG, Cn as APPROVALS_PENDING_TAG, O as ApprovalDecisionErrors, D as ApprovalErrors, C as ApprovalExpired, T as ApprovalForbidden, b as ApprovalNotFound, w as ApprovalNotPending, S as ApprovalRejected, y as ApprovalRequired, x as ApprovalSelfApproval, E as ApprovalUnavailable, De as AuthMiddleware, v as BusinessRuleViolation, Dn as CONNECTIONS_LIST_TAG, An as CONNECTION_DISCONNECT_TAG, On as CONNECTION_START_TAG, kn as CONNECTION_SUBMIT_TOKEN_TAG, In as ConnectionHandshakeFailed, Se as ConnectionInfo, Te as ConnectionInfoMiddleware, Q as ConnectionKind, Fn as ConnectionKindMismatch, Nn as ConnectionNotDeclared, Mn as ConnectionState, jn as ConnectionStatus, Pn as ConnectionSubjectRequired, _e as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ue as DEFAULT_SCOPE_CACHE_TTL_MS, At as EVENT_ROUTE_SEP, Dt as EventKeyInvalid, Et as EventPayloadInvalid, Ot as EventPayloadTooLarge, _t as MAX_EVENT_ENVELOPE_BYTES, Hn as PROTOCOL_VERSION, k as PendingApproval, A as REACTIVITY_CHANNEL_PREFIX, c as ScopeError, Ce as Subject, Ee as SubjectIdentity, fe as SubjectService, pn as UNDO_APPLY_TAG, fn as UNDO_LOG_TAG, mn as UNDO_REDO_TAG, be as Unauthenticated, vn as UndoConflict, _n as UndoForbidden, hn as UndoLogEntry, gn as UndoNotFound, Z as WorkflowControlInputSchema, qt as WorkflowDomainEventRowSchema, Xt as WorkflowDomainEventsInputSchema, Zt as WorkflowEventDeliveriesInputSchema, Jt as WorkflowEventDeliveryRowSchema, Vt as WorkflowParentClosePolicySchema, Kt as WorkflowRunEventRowSchema, Ut as WorkflowRunHandleSchema, Yt as WorkflowRunRefSchema, Y as WorkflowRunRowSchema, J as WorkflowRunStatusSchema, Gt as WorkflowRunStepRowSchema, X as WorkflowRunTableRefSchema, Wt as WorkflowRunsInputSchema, Qt as WorkflowSignalInputSchema, Ht as WorkflowStartDeferralSchema, $t as WorkflowUpdateInputSchema, en as WorkflowUpdateResultSchema, ft as actionToRpc, i as advisoryResourceGuardWarning, Oe as anonymousSubject, Ye as applyRowPatch, pe as applyScopeDecision, En as approvalsDecideDescriptor, Tn as approvalsPendingQueryDescriptor, me as assertAuthenticated, ze as beginIdempotent, zt as checkFrameworkCompat, r as checkGuards, ie as checkGuardsEffect, we as composeAuthStrategies, Lt as composeRpcInterceptors, Bn as connectionDisconnectDescriptor, Rn as connectionStartDescriptor, zn as connectionSubmitTokenDescriptor, Ln as connectionsListQueryDescriptor, I as declaredReactivityChannelKeys, H as defineAction, yt as defineEvent, V as defineMutation, Pt as definePlugin, Ft as definePluginRoute, Rt as definePluginService, B as defineQuery, st as defineStream, qe as diffRows, ye as effectiveScopes, kt as encodeEventKey, mt as errorTag, G as eventAttached, bt as eventEnvelope, xt as eventGap, Ct as eventResumePoint, jt as eventRoute, St as eventStreamEvent, wt as eventSubscribeInput, Tt as eventToRpc, Ie as failIdempotent, e as findAdvisoryResourceGuards, Pe as finishIdempotent, Nt as formatEventRoute, ve as getPolicyGuardResolver, ne as getResourceScopeResolver, ot as hasAccessDecision, xe as hasCallbackRoutes, re as hasEffectiveScope, ae as hasScope, m as idToPath, Re as idempotencyScope, vt as isEventDescriptor, Je as isIdKeyed, a as isOpenAccess, ee as isPolicyCheck, at as isPolicyGuard, P as isReactivityChannel, F as isReactivityChannelKey, ge as isSystemSubject, rt as isWireReachable, he as makeScopeCache, Be as memoryIdempotencyStore, te as missingAccessDecision, dt as mutationToRpc, gt as normalizeDescriptor, et as normalizeSource, s as openAccessSpec, Mt as parseEventRoute, Ge as pathToId, It as pluginInstanceName, nt as publishReactivity, Ve as publishServerError, ut as queryToRpc, Qe as reactivityChannel, Ne as requireScope, f as rowPatchOpSchema, p as rowPatchSchema, le as scopeCacheKey, t as setEffectiveScopes, ce as setPolicyGuardResolver, o as setResourceScopeResolver, $e as sourceKeys, pt as streamToRpc, _ as strictInput, ke as subjectIdentity, se as subjectScopes, Le as subscribeServerErrors, g as subscriptionEvent, Me as systemSubject, de as tenantScopedSubject, ht as toRpc, Vn as tsMs, tt as undeclaredChannelKeys, xn as undoApplyDescriptor, bn as undoLogQueryDescriptor, Sn as undoRedoDescriptor, cn as workflowCancelDescriptor, on as workflowDomainEventsQueryDescriptor, sn as workflowEventDeliveriesQueryDescriptor, ln as workflowResumeDescriptor, an as workflowRunEventsQueryDescriptor, tn as workflowRunQueryDescriptor, rn as workflowRunStepsQueryDescriptor, nn as workflowRunsQueryDescriptor, un as workflowSignalDescriptor, dn as workflowUpdateDescriptor, Fe as wsMutationIdempotencyScope };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/protocol",
-  "version": "0.35.0",
+  "version": "0.37.0",
   "description": "The Voltro wire + plugin contract — defineQuery/Mutation/Action/Stream, definePlugin, sessions / JWT / API-keys, and the RPC protocol.",
   "keywords": [
     "voltro",
@@ -54,8 +54,8 @@
   },
   "dependencies": {
     "@effect/sql": "^0.52.0",
-    "@voltro/database": "0.35.0",
-    "@voltro/logger": "0.35.0",
+    "@voltro/database": "0.37.0",
+    "@voltro/logger": "0.37.0",
     "jose": "^6.2.4"
   },
   "peerDependencies": {