@voltro/protocol 0.86.0 → 0.87.0

package/dist/apiRoleEndpoints.js

@@ -0,0 +1,108 @@
+//#region src/apiRoleEndpoints.ts
+var e = (e, t) => {
+	if (!e || typeof e != "object" || Array.isArray(e) || ![Object.prototype, null].includes(Object.getPrototypeOf(e))) throw Error("Invalid role endpoint object");
+	let n = Object.create(null);
+	for (let r of Reflect.ownKeys(e)) {
+		let i = Object.getOwnPropertyDescriptor(e, r);
+		if (typeof r != "string" || !t.includes(r) || !i.enumerable || !("value" in i)) throw Error("Invalid role endpoint field");
+		n[r] = i.value;
+	}
+	return n;
+}, t = (e, t, n = !1) => {
+	if (!Array.isArray(e) || e.length < +!n || e.length > t || Reflect.ownKeys(e).length !== e.length + 1) throw Error("Invalid role endpoint list");
+	let r = [];
+	for (let t = 0; t < e.length; t++) {
+		let n = Object.getOwnPropertyDescriptor(e, String(t));
+		if (!n?.enumerable || !("value" in n)) throw Error("Invalid role endpoint list item");
+		r.push(n.value);
+	}
+	return r;
+}, n = /^(?:[A-Za-z][A-Za-z0-9_-]*\.)*[A-Za-z][A-Za-z0-9_-]*$/, r = /^(?:[A-Za-z_][A-Za-z0-9_-]*\.)*[A-Za-z_][A-Za-z0-9_-]*$/, i = [
+	"rpc",
+	"subscriptions",
+	"events",
+	"presence",
+	"workflows",
+	"schedules",
+	"directors",
+	"drainers",
+	"reapers",
+	"retention",
+	"rest",
+	"webhooks",
+	"inspect",
+	"cdc"
+], a = (r) => {
+	let a = e(r, [
+		"version",
+		"transport",
+		"roles"
+	]);
+	if (a.version !== 1 || a.transport !== "compose-nginx" && a.transport !== "kubernetes-nginx") throw Error("Unknown role endpoint protocol");
+	let o = /* @__PURE__ */ new Set(), s = t(a.roles, 32, !0).map((r) => {
+		let a = e(r, [
+			"role",
+			"routes",
+			"workloads",
+			"httpPath",
+			"webSocketPath"
+		]), s = a.role;
+		if (typeof s != "string" || !/^[a-z][a-z0-9-]{0,63}$/.test(s) || o.has(s)) throw Error("Invalid or duplicate endpoint role");
+		o.add(s);
+		let c = t(a.workloads, 14).map((e) => {
+			if (typeof e != "string" || !i.includes(e)) throw Error("Unknown endpoint workload");
+			return e;
+		});
+		if (new Set(c).size !== c.length) throw Error("Duplicate endpoint workload");
+		let l = a.routes === null ? null : t(a.routes, 128).map((e) => {
+			if (typeof e != "string" || e.length > 191 || !n.test(e.endsWith(".*") ? e.slice(0, -2) : e)) throw Error("Invalid endpoint tag filter");
+			return e;
+		});
+		if (l && new Set(l).size !== l.length) throw Error("Duplicate endpoint tag filter");
+		let u = "/_voltro/roles/" + s;
+		if (a.webSocketPath !== u + "/ws" || a.httpPath !== (c.includes("rpc") ? u + "/rpc" : null)) throw Error("Role endpoints must use canonical same-origin paths");
+		return Object.freeze({
+			role: s,
+			routes: l && Object.freeze(l),
+			workloads: Object.freeze(c),
+			httpPath: a.httpPath,
+			webSocketPath: a.webSocketPath
+		});
+	});
+	return Object.freeze({
+		version: 1,
+		transport: a.transport,
+		roles: Object.freeze(s)
+	});
+}, o = (e, t, n) => {
+	if (t.length > 191 || !r.test(t) || ![
+		"rpc",
+		"subscriptions",
+		"events"
+	].includes(n)) throw Error("Invalid role endpoint request");
+	let i, a = -1, o = !1;
+	for (let r of e.roles) {
+		if (!r.workloads.includes(n)) continue;
+		let e = r.routes === null ? 0 : Math.max(-1, ...r.routes.map((e) => e.endsWith(".*") ? t.startsWith(e.slice(0, -1)) ? e.length : -1 : e === t ? 1024 + e.length : -1));
+		e > a ? (i = r, a = e, o = !1) : e >= 0 && e === a && (o = !0);
+	}
+	if (!i || o) throw Error(o ? "Ambiguous role endpoint" : "No role endpoint owns this tag and workload");
+	return i;
+}, s = (e) => {
+	if (!/^[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}$/.test(e)) throw Error("Invalid role proxy API name");
+	return `/_voltro/role-api/api-${e}/ws`;
+}, c = (e, t, n) => {
+	if (!/^[a-z][a-z0-9-]{0,63}$/.test(t.role) || !["http", "websocket"].includes(n)) throw Error("Invalid role transport");
+	let r = new URL(e);
+	if (![
+		"http:",
+		"https:",
+		"ws:",
+		"wss:"
+	].includes(r.protocol) || r.username || r.password) throw Error("Invalid role endpoint origin");
+	let i = n === "http" ? t.httpPath : t.webSocketPath;
+	if (!i || i !== "/_voltro/roles/" + t.role + (n === "http" ? "/rpc" : "/ws")) throw Error("Missing or noncanonical role transport");
+	return r.protocol = n === "http" ? r.protocol === "https:" || r.protocol === "wss:" ? "https:" : "http:" : r.protocol === "https:" || r.protocol === "wss:" ? "wss:" : "ws:", r.pathname = (/^\/_voltro\/role-api\/api-[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}\/ws$/.test(r.pathname) ? r.pathname.slice(0, -3) : "") + i, r.search = "", r.hash = "", r.toString();
+};
+//#endregion
+export { c as apiRoleEndpointUrl, s as apiRoleProxyBasePath, a as captureApiRoleEndpoints, o as selectApiRoleEndpoint };

package/dist/apiRoleObservation.js

@@ -0,0 +1,68 @@
+import { API_WORKLOADS as e } from "./plugin.js";
+import { Schema as t } from "effect";
+//#region src/apiRoleObservation.ts
+var n = t.Literals(e), r = t.Number.pipe(t.check(t.isFinite()), t.check(t.isGreaterThanOrEqualTo(0))), i = r.pipe(t.check(t.isInt())), a = i.pipe(t.check(t.isLessThanOrEqualTo(864e13))), o = t.Struct({
+	workload: n,
+	seconds: r
+}), s = t.Struct({
+	replicaId: t.NonEmptyString,
+	startedAt: a,
+	role: t.NonEmptyString,
+	workloads: t.Array(n),
+	capturedAt: a,
+	publisher: t.Struct({
+		ready: t.Boolean,
+		stopped: t.Boolean,
+		pendingBuckets: i,
+		droppedBuckets: i,
+		rejectedSegments: i,
+		writeFailures: i,
+		observationErrors: i
+	}),
+	currentMeasuredSeconds: t.Array(t.Struct({
+		role: t.NonEmptyString,
+		workload: n,
+		seconds: r
+	})),
+	history: t.Struct({
+		state: t.Literals([
+			"pending",
+			"available",
+			"unavailable"
+		]),
+		measuredSeconds: t.Array(o),
+		assessment: t.NullOr(t.Struct({
+			from: a,
+			until: a,
+			complete: t.Boolean,
+			missingBuckets: i.pipe(t.check(t.isLessThanOrEqualTo(288))),
+			incompleteWorkloads: t.Array(n),
+			reason: t.Literals([
+				"invalid-observation",
+				"incomplete",
+				"idle",
+				"observed"
+			]),
+			totals: t.Array(t.Struct({
+				workload: n,
+				seconds: r,
+				share: r.pipe(t.check(t.isLessThanOrEqualTo(1)))
+			})),
+			splitCandidates: t.Array(n)
+		}))
+	})
+}).pipe(t.check(t.makeFilter((e) => {
+	let t = (e) => new Set(e).size === e.length, n = (n) => t(n) && n.every((t) => e.workloads.some((e) => e === t));
+	if (!e.workloads.length || !t(e.workloads) || e.startedAt > e.capturedAt || !n(e.currentMeasuredSeconds.map((e) => e.workload)) || e.currentMeasuredSeconds.some((t) => t.role !== e.role) || !n(e.history.measuredSeconds.map((e) => e.workload))) return !1;
+	let r = e.history.assessment;
+	if (e.history.state !== "available") return r === null && e.history.measuredSeconds.length === 0;
+	if (!r || r.until - r.from !== 864e5 || r.until % 3e5 != 0 || r.until > e.capturedAt || !n(r.incompleteWorkloads) || !n(r.splitCandidates) || !n(r.totals.map((e) => e.workload))) return !1;
+	if (!r.complete) return r.totals.length === 0 && r.splitCandidates.length === 0 && ["incomplete", "invalid-observation"].includes(r.reason);
+	if (r.from < e.startedAt || r.missingBuckets !== 0 || r.incompleteWorkloads.length !== 0 || r.totals.length !== e.workloads.length) return !1;
+	let i = r.totals.reduce((e, t) => e + t.seconds, 0);
+	if (i > 86400 || r.reason !== (i === 0 ? "idle" : "observed") || r.totals.some((e) => Math.abs(e.share - (i === 0 ? 0 : e.seconds / i)) > 1e-9)) return !1;
+	let a = r.totals.filter((e) => e.share > .3).map((e) => e.workload), o = a.length >= 2 ? a : [];
+	return o.length === r.splitCandidates.length && o.every((e) => r.splitCandidates.includes(e));
+}, { message: "Inconsistent API role observation" })));
+//#endregion
+export { s as ApiRoleObservationSchema };

package/dist/apikey.d.ts

@@ -129,6 +129,13 @@ declare interface AuthStrategy {
 declare interface AuthStrategyInput {
     readonly headers: Readonly<Record<string, string | undefined>>;
     readonly clientId: number;
+    /** HTTP request target, supplied by REST transports. Request selectors may
+     * read an explicit tenant hint here; it is never authentication or authority.
+     * Absent for connection transports and non-HTTP callers. */
+    readonly http?: {
+        readonly path: string;
+        readonly query: string;
+    };
     /**
      * The app's DataStore, for a strategy that must READ to identify the caller.
      *
@@ -196,6 +203,9 @@ declare type StrategyResolution = {
 
 declare const Subject: Schema.Union<readonly [Schema.Struct<{
     readonly type: Schema.Literal<"user">;
+    /** A guest has a stable identity but has not linked a registered account.
+     * This identity mark survives session signing; it never grants authority. */
+    readonly kind: Schema.optional<Schema.Literal<"guest">>;
     readonly id: Schema.String;
     readonly tenantId: Schema.String;
     readonly scopes: Schema.optional<Schema.$Array<Schema.String>>;

package/dist/auth.js

@@ -4,6 +4,7 @@ import { RpcMiddleware as s } from "effect/rpc";
 //#region src/auth.ts
 var c = a.Record(a.String, a.Unknown), l = a.optional(a.Array(a.String)), u = a.Struct({
 	type: a.Literal("user"),
+	kind: a.optional(a.Literal("guest")),
 	id: a.String,
 	tenantId: a.String,
 	scopes: l,
@@ -103,7 +104,7 @@ var c = a.Record(a.String, a.Unknown), l = a.optional(a.Array(a.String)), u = a.
 	let n = F.get(e);
 	if (n === void 0) return await t?.(e), e;
 	let r = await n.resolve();
-	if (r.type !== e.type || r.id !== e.id || r.tenantId !== e.tenantId || e.type === "service" && (r.type !== "service" || r.service !== e.service)) throw new M({ reason: "subscription identity or tenant changed; subscribe again" });
+	if (r.type !== e.type || r.id !== e.id || r.tenantId !== e.tenantId || e.type === "service" && (r.type !== "service" || r.service !== e.service) || e.type === "user" && (r.type !== "user" || r.kind !== e.kind) || e.type === "serviceAccount" && (r.type !== "serviceAccount" || r.auditActorId !== e.auditActorId)) throw new M({ reason: "request identity or tenant changed; authenticate again" });
 	return F.set(r, {
 		current: r,
 		resolve: n.resolve
@@ -140,14 +141,33 @@ var c = a.Record(a.String, a.Unknown), l = a.optional(a.Array(a.String)), u = a.
 		},
 		removed: i
 	};
-}, H = 3e4, U = 1e4, W = (e) => `${e.type}\u0000${e.tenantId ?? ""}\u0000${e.id ?? ""}`, G = () => {
+}, H = async (e, t, n) => {
+	let r = n?.resolveScopes, i = B(r === void 0 ? [] : await r(e, t));
+	if (i.kind === "unavailable") return {
+		kind: "unavailable",
+		reason: i.reason
+	};
+	let a = V(e, i).subject;
+	if (a.type !== "anonymous") for (let e of n?.subjectGuards ?? []) {
+		let n = await e(a, t);
+		if (!n.ok) return {
+			kind: "vetoed",
+			code: n.code,
+			message: n.message
+		};
+	}
+	return {
+		kind: "resolved",
+		subject: a
+	};
+}, U = 3e4, W = 1e4, G = (e) => `${e.type}\u0000${e.tenantId ?? ""}\u0000${e.id ?? ""}`, K = () => {
 	if (typeof process > "u") return;
 	let e = process.env.VOLTRO_AUTH_SCOPE_CACHE_TTL_MS;
 	if (e === void 0 || e === "") return;
 	let t = Number(e);
 	return Number.isFinite(t) && t >= 0 ? t : void 0;
-}, K = (e = {}) => {
-	let t = e.ttlMs ?? G() ?? 3e4, n = e.maxEntries ?? 1e4, r = e.now ?? Date.now, i = /* @__PURE__ */ new Map(), a = () => {
+}, q = (e = {}) => {
+	let t = e.ttlMs ?? K() ?? 3e4, n = e.maxEntries ?? 1e4, r = e.now ?? Date.now, i = /* @__PURE__ */ new Map(), a = () => {
 		if (i.size <= n) return;
 		let e = r();
 		for (let [t, n] of i) n.freshUntil <= e && i.delete(t);
@@ -183,10 +203,10 @@ var c = a.Record(a.String, a.Unknown), l = a.optional(a.Array(a.String)), u = a.
 			};
 		}
 	};
-}, q = (e) => typeof e.resolve == "function", J = (e) => {
+}, J = (e) => typeof e.resolve == "function", Y = (e) => {
 	let t = e.authorization ?? e.Authorization;
 	if (t !== void 0) return /^Bearer\s+(.+)$/i.exec(t.trim())?.[1]?.trim();
-}, Y = async (e, i, a, o) => {
+}, X = async (e, i, a, o) => {
 	let s;
 	try {
 		s = await a.source(e, i);
@@ -207,7 +227,7 @@ var c = a.Record(a.String, a.Unknown), l = a.optional(a.Array(a.String)), u = a.
 	} catch (e) {
 		throw e instanceof t ? o(e.reason) : e;
 	}
-}, X = async (e, i, a, o) => {
+}, Z = async (e, i, a, o) => {
 	if (!n(e)) return e;
 	let s = {
 		type: e.type,
@@ -236,14 +256,14 @@ var c = a.Record(a.String, a.Unknown), l = a.optional(a.Array(a.String)), u = a.
 		}
 		return e;
 	}
-}, Z = (e, t) => {
-	let n = J(t);
+}, Q = (e, t) => {
+	let n = Y(t);
 	if (n === void 0) return e;
 	let r = e.filter((e) => e.claimsBearerPrefix !== void 0 && e.claimsBearerPrefix !== "" && n.startsWith(e.claimsBearerPrefix));
 	if (r.length === 0) return e;
 	let i = new Set(r);
 	return [...r, ...e.filter((e) => !i.has(e))];
-}, Q = (e, t) => {
+}, $ = (e, t) => {
 	if (e === "refuse") throw new M({ reason: "anonymous callers are refused" });
 	if (e === "no-tenant") return "";
 	if (e === "header") {
@@ -251,24 +271,24 @@ var c = a.Record(a.String, a.Unknown), l = a.optional(a.Array(a.String)), u = a.
 		return t;
 	}
 	return "tenantId" in e ? e.tenantId : t !== void 0 && t !== "" ? t : e.headerOrTenant;
-}, $ = (t, n) => {
+}, ee = (t, n) => {
 	let r = n?.resolveScopes, i = n?.subjectGuards ?? [], a = n?.tenantSelection !== void 0 || n?.requestedTenant !== void 0;
 	if (n?.memberships !== void 0 !== a) throw Error("composeAuthStrategies: memberships and tenant selection come together; `memberships` requires `tenantSelection` or `requestedTenant`; each tenant selector requires `memberships` to authorize its target.");
 	let o = n?.memberships !== void 0 && n.tenantSelection !== void 0 ? {
 		memberships: n.memberships,
 		store: n.tenantSelection
-	} : void 0, s = r !== void 0 || i.length > 0, c = !s || n?.scopeCache === !1 ? null : n?.scopeCache !== void 0 && q(n.scopeCache) ? n.scopeCache : K(n?.scopeCache ?? {}), l = async (a) => {
+	} : void 0, s = r !== void 0 || i.length > 0, c = !s || n?.scopeCache === !1 ? null : n?.scopeCache !== void 0 && J(n.scopeCache) ? n.scopeCache : q(n?.scopeCache ?? {}), l = async (a) => {
 		let l = n?.getStore?.(), u = l === void 0 ? a : {
 			...a,
 			store: l
 		}, d;
-		for (let a of Z(t, u.headers)) {
+		for (let a of Q(t, u.headers)) {
 			let t = await a.resolve(u);
 			if (t.kind === "matched") {
 				let l = (e) => (n?.onStrategyFailed?.({
 					strategyId: a.id,
 					reason: e
-				}), new M({ reason: e })), d = n?.requestedTenant === void 0 || n.memberships === void 0 ? void 0 : await Y(t.subject, u, {
+				}), new M({ reason: e })), d = n?.requestedTenant === void 0 || n.memberships === void 0 ? void 0 : await X(t.subject, u, {
 					source: n.requestedTenant,
 					memberships: n.memberships
 				}, (t) => (n?.onStrategyFailed?.({
@@ -279,7 +299,7 @@ var c = a.Record(a.String, a.Unknown), l = a.optional(a.Array(a.String)), u = a.
 					...t.subject,
 					scopes: []
 				} };
-				let f = d ?? (o === void 0 ? t.subject : await X(t.subject, u, o, l)), p = f;
+				let f = d ?? (o === void 0 ? t.subject : await Z(t.subject, u, o, l)), p = f;
 				if (s) {
 					let e = async () => {
 						let e = r === void 0 ? {
@@ -305,7 +325,7 @@ var c = a.Record(a.String, a.Unknown), l = a.optional(a.Array(a.String)), u = a.
 					}, { decision: t, fresh: o } = c === null ? {
 						decision: await e(),
 						fresh: !0
-					} : await c.resolve(W(f), e);
+					} : await c.resolve(G(f), e);
 					if (t.kind === "vetoed") {
 						let e = `${t.code}: ${t.message}`;
 						throw n?.onStrategyFailed?.({
@@ -350,7 +370,7 @@ var c = a.Record(a.String, a.Unknown), l = a.optional(a.Array(a.String)), u = a.
 			} : e };
 		}
 		if (d !== void 0) throw new M({ reason: `credential rejected: ${d}` });
-		return { subject: b(Q(n?.anonymous ?? "no-tenant", u.headers["x-tenant"])) };
+		return { subject: b($(n?.anonymous ?? "no-tenant", u.headers["x-tenant"])) };
 	};
 	return async (e) => {
 		let t = {
@@ -362,8 +382,8 @@ var c = a.Record(a.String, a.Unknown), l = a.optional(a.Array(a.String)), u = a.
 			subject: r
 		};
 	};
-}, ee = (e, t) => {
+}, te = (e, t) => {
 	if (e.type === "anonymous") throw new M(t === void 0 ? {} : { reason: t });
 };
 //#endregion
-export { N as AuthMiddleware, j as ConnectionInfo, P as ConnectionInfoMiddleware, U as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, H as DEFAULT_SCOPE_CACHE_TTL_MS, O as IMPERSONATION_METADATA_KEY, g as Subject, _ as SubjectIdentity, A as SubjectService, M as Unauthenticated, b as anonymousSubject, V as applyScopeDecision, ee as assertAuthenticated, I as bindSubjectAuthority, $ as composeAuthStrategies, L as currentSubjectAuthority, z as hasCallbackRoutes, w as isMachineSubject, C as isServiceSubject, D as isSystemSubject, K as makeScopeCache, Z as orderByBearerPrefix, k as rawImpersonationMark, R as reauthorizeSubject, W as scopeCacheKey, S as serviceSubject, T as subjectAuditActorId, v as subjectIdentity, x as systemSubject, E as tenantScopedSubject };
+export { N as AuthMiddleware, j as ConnectionInfo, P as ConnectionInfoMiddleware, W as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, U as DEFAULT_SCOPE_CACHE_TTL_MS, O as IMPERSONATION_METADATA_KEY, g as Subject, _ as SubjectIdentity, A as SubjectService, M as Unauthenticated, b as anonymousSubject, V as applyScopeDecision, te as assertAuthenticated, I as bindSubjectAuthority, ee as composeAuthStrategies, L as currentSubjectAuthority, z as hasCallbackRoutes, w as isMachineSubject, C as isServiceSubject, D as isSystemSubject, q as makeScopeCache, Q as orderByBearerPrefix, k as rawImpersonationMark, R as reauthorizeSubject, H as resolveIdentityAuthority, G as scopeCacheKey, S as serviceSubject, T as subjectAuditActorId, v as subjectIdentity, x as systemSubject, E as tenantScopedSubject };

package/dist/canonicalJson.js

@@ -0,0 +1,14 @@
+//#region src/canonicalJson.ts
+var e = (e) => {
+	let t = (e) => {
+		if (Array.isArray(e)) return e.map(t);
+		if (typeof e == "object" && e) {
+			let n = e;
+			return Object.fromEntries(Object.keys(n).sort().map((e) => [e, t(n[e])]));
+		}
+		return e;
+	};
+	return JSON.stringify(t(e) ?? null);
+};
+//#endregion
+export { e as canonicalJson };

package/dist/errorSchema.js

@@ -0,0 +1,24 @@
+import { Schema as e } from "effect";
+import * as t from "effect/SchemaAST";
+//#region src/errorSchema.ts
+var n = (e) => {
+	let n = /* @__PURE__ */ new Set();
+	if (e === void 0) return n;
+	let r = (e) => {
+		if (t.isUnion(e)) for (let t of e.types) r(t);
+		else if (e.encoding !== void 0 && r(t.toEncoded(e)), t.isObjects(e)) {
+			let r = e.propertySignatures.find((e) => e.name === "_tag");
+			r !== void 0 && t.isLiteral(r.type) && typeof r.type.literal == "string" && n.add(r.type.literal);
+		}
+	};
+	return r(e.ast), n;
+}, r = (r, i) => {
+	if (r === void 0) return;
+	let a = t.isUnion(r.ast) ? r.ast.types : [r.ast];
+	for (let t of a) {
+		let r = e.make(t);
+		if (n(r).has(i)) return r;
+	}
+};
+//#endregion
+export { n as declaredErrorTags, r as errorMemberSchema };

package/dist/event.js

@@ -3,10 +3,15 @@ import { Unauthenticated as t } from "./auth.js";
 import { NoSuchResource as n, ScopeError as r, declaresResourceGuard as i, isOpenAccess as a, openAccessSpec as o } from "./scopes.js";
 import { strictInput as s } from "./strictInput.js";
 import { hasEnforcedGuard as c } from "./procedure.js";
-import { Schema as l } from "effect";
-import { Rpc as u } from "effect/rpc";
+import { Context as l, Schema as u } from "effect";
+import { Rpc as d } from "effect/rpc";
 //#region src/event.ts
-var d = 7500, f = (e) => typeof e == "object" && !!e && e.kind === "event", p = (e) => {
+var f = 7500, p = (e) => typeof e == "object" && !!e && e.kind === "event", m = (e) => {
+	if (e.clientPolicy !== void 0) {
+		if (!/^[A-Za-z][A-Za-z0-9_.:-]{0,255}$/.test(e.clientPolicy)) throw Error("defineEvent: invalid client policy ID");
+		if (e.openAccess !== void 0 || !c(e.guards)) throw Error("defineEvent: a client policy requires explicit enforced guards");
+		if (e.webhook !== void 0) throw Error("defineEvent: private client policies do not authorize webhook recipients");
+	}
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -39,66 +44,67 @@ var d = 7500, f = (e) => typeof e == "object" && !!e && e.kind === "event", p =
 		openAccess: e.openAccess,
 		rewind: e.rewind,
 		webhook: e.webhook,
-		delivery: e.delivery
+		delivery: e.delivery,
+		...e.clientPolicy === void 0 ? {} : { clientPolicy: e.clientPolicy }
 	};
-}, m = (e) => l.Struct({
-	_tag: l.Literal("event"),
-	origin: l.String,
-	n: l.Number,
-	emittedAt: l.Number,
+}, h = (e) => u.Struct({
+	_tag: u.Literal("event"),
+	origin: u.String,
+	n: u.Number,
+	emittedAt: u.Number,
 	payload: e
-}), h = l.Struct({
-	_tag: l.Literal("gap"),
-	missed: l.Number,
-	reason: l.Literals(["buffer", "resume"])
-}), g = l.Struct({ _tag: l.Literal("attached") }), _ = (e) => l.Union([
-	g,
-	m(e),
-	h
-]), v = l.Struct({
-	origin: l.String,
-	n: l.Number
-}), y = (e) => l.Struct({
+}), g = u.Struct({
+	_tag: u.Literal("gap"),
+	missed: u.Number,
+	reason: u.Literals(["buffer", "resume"])
+}), _ = u.Struct({ _tag: u.Literal("attached") }), v = (e) => u.Union([
+	_,
+	h(e),
+	g
+]), y = u.Struct({
+	origin: u.String,
+	n: u.Number
+}), b = (e) => u.Struct({
 	key: e,
-	resume: l.optional(l.Array(v))
-}), b = (o, d) => {
-	let f = o.guards !== void 0 && o.guards.some((e) => !a(e)) ? l.Union([
+	resume: u.optional(u.Array(y))
+}), x = l.Service("@voltro/protocol/EventRpcWorkload"), S = (o, l) => {
+	let f = o.guards !== void 0 && o.guards.some((e) => !a(e)) ? u.Union([
 		r,
 		t,
 		e
-	]) : l.Union([t, e]), p = i(o.guards) ? l.Union([f, n]) : f, m = d && d.length > 0 ? l.Union([p, ...d]) : p;
-	return u.make(o.name, {
-		payload: s(y(o.key), o.name, c(o.guards)),
-		success: _(o.payload),
+	]) : u.Union([t, e]), p = i(o.guards) ? u.Union([f, n]) : f, m = l && l.length > 0 ? u.Union([p, ...l]) : p;
+	return d.make(o.name, {
+		payload: s(b(o.key), o.name, c(o.guards)),
+		success: v(o.payload),
 		error: m,
 		stream: !0
-	});
-}, x = class extends l.TaggedError()("EventPayloadInvalid", {
-	event: l.String,
-	message: l.String
-}) {}, S = class extends l.TaggedError()("EventKeyInvalid", {
-	event: l.String,
-	message: l.String
-}) {}, C = class extends l.TaggedError()("EventPayloadTooLarge", {
-	event: l.String,
-	bytes: l.Number,
-	limit: l.Number
-}) {}, w = (e) => {
+	}).annotate(x, !0);
+}, C = class extends u.TaggedError()("EventPayloadInvalid", {
+	event: u.String,
+	message: u.String
+}) {}, w = class extends u.TaggedError()("EventKeyInvalid", {
+	event: u.String,
+	message: u.String
+}) {}, T = class extends u.TaggedError()("EventPayloadTooLarge", {
+	event: u.String,
+	bytes: u.Number,
+	limit: u.Number
+}) {}, E = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e), n = 0;
 	for (let e of t) e[1] !== void 0 && (t[n++] = e);
 	return t.length = n, t.sort(([e], [t]) => e < t ? -1 : +(e > t)), JSON.stringify(t);
-}, T = "\0", E = (e, t, n) => [
+}, D = "\0", O = (e, t, n) => [
 	e ?? "~",
 	t,
-	w(n)
-].join("\0"), D = (e) => {
+	E(n)
+].join("\0"), k = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, O = (e) => e.split("\0").join(" · ");
+}, A = (e) => e.split("\0").join(" · ");
 //#endregion
-export { T as EVENT_ROUTE_SEP, S as EventKeyInvalid, x as EventPayloadInvalid, C as EventPayloadTooLarge, d as MAX_EVENT_ENVELOPE_BYTES, p as defineEvent, w as encodeEventKey, g as eventAttached, m as eventEnvelope, h as eventGap, v as eventResumePoint, E as eventRoute, _ as eventStreamEvent, y as eventSubscribeInput, b as eventToRpc, O as formatEventRoute, f as isEventDescriptor, D as parseEventRoute };
+export { D as EVENT_ROUTE_SEP, w as EventKeyInvalid, C as EventPayloadInvalid, T as EventPayloadTooLarge, x as EventRpcWorkload, f as MAX_EVENT_ENVELOPE_BYTES, m as defineEvent, E as encodeEventKey, _ as eventAttached, h as eventEnvelope, g as eventGap, y as eventResumePoint, O as eventRoute, v as eventStreamEvent, b as eventSubscribeInput, S as eventToRpc, A as formatEventRoute, p as isEventDescriptor, k as parseEventRoute };

package/dist/formCapture.js

@@ -0,0 +1,12 @@
+//#region src/formCapture.ts
+var e = "__voltro_capture", t = "voltro:form-source", n = (e) => typeof e == "string" && e.length === 261 && /^1(?:\.[a-f0-9]{64}){4}$/.test(e) ? e : void 0, r = (e, t) => {
+	let r = n(e + "." + t);
+	if (r === void 0) throw Error("Native form source unavailable");
+	return r;
+}, i = (e = globalThis.document) => {
+	if (e === void 0) return;
+	let r = e.querySelectorAll(`meta[name="${t}"]`);
+	return r.length === 1 ? n(r[0].getAttribute("content")) : void 0;
+};
+//#endregion
+export { e as FORM_CAPTURE_FIELD, t as FORM_CAPTURE_META_NAME, r as encodeNativeFormCapture, n as formCaptureSource, i as readFormCaptureSource };

package/dist/httpStreamMaxDuration.js

@@ -0,0 +1,9 @@
+//#region src/httpStreamMaxDuration.ts
+var e = (e) => {
+	if (e !== void 0) {
+		if (typeof e != "number" || !Number.isSafeInteger(e) || e < 1 || e > 2147483647) throw RangeError("SSE maxDurationMs must be an integer between 1 and 2147483647.");
+		return e;
+	}
+};
+//#endregion
+export { e as validateHttpStreamMaxDuration };