@voltro/protocol 0.86.0 → 0.88.0

package/dist/boundedRing.js

@@ -1,4 +1,4 @@
-//#region src/boundedRing.ts
+// src/boundedRing.ts
 var e = class {
 	slots = [];
 	head = 0;
@@ -23,5 +23,4 @@ var e = class {
 		for (let e = 0; e < this.size; e++) yield this.get(e);
 	}
 };
-//#endregion
 export { e as BoundedRing };

package/dist/businessRule.js

@@ -1,5 +1,5 @@
 import { Schema as e } from "effect";
-//#region src/businessRule.ts
+// src/businessRule.ts
 var t = class extends e.TaggedError()("BusinessRuleViolation", {
 	rule: e.String,
 	params: e.optional(e.Record(e.String, e.Unknown)),
@@ -7,5 +7,4 @@ var t = class extends e.TaggedError()("BusinessRuleViolation", {
 	message: e.optional(e.String),
 	severity: e.Literals(["error", "warning"])
 }) {};
-//#endregion
 export { t as BusinessRuleViolation };

package/dist/canonicalJson.js

@@ -0,0 +1,13 @@
+// src/canonicalJson.ts
+var e = (e) => {
+	let t = (e) => {
+		if (Array.isArray(e)) return e.map(t);
+		if (typeof e == "object" && e) {
+			let n = e;
+			return Object.fromEntries(Object.keys(n).sort().map((e) => [e, t(n[e])]));
+		}
+		return e;
+	};
+	return JSON.stringify(t(e) ?? null);
+};
+export { e as canonicalJson };

package/dist/connection.js

@@ -1,6 +1,6 @@
 import { defineAction as e, defineMutation as t, defineQuery as n } from "./procedure.js";
 import { Schema as r } from "effect";
-//#region src/connection.ts
+// src/connection.ts
 var i = "__voltro.connections.list", a = "__voltro.connections.start", o = "__voltro.connections.submitToken", s = "__voltro.connections.disconnect", c = r.Literals(["oauth2", "pat"]), l = r.Literals([
 	"disconnected",
 	"connected",
@@ -69,5 +69,4 @@ var i = "__voltro.connections.list", a = "__voltro.connections.start", o = "__vo
 	error: h,
 	openAccess: "self-service: deletes only the calling subject's own credential row for this connection"
 });
-//#endregion
 export { i as CONNECTIONS_LIST_TAG, s as CONNECTION_DISCONNECT_TAG, a as CONNECTION_START_TAG, o as CONNECTION_SUBMIT_TOKEN_TAG, m as ConnectionHandshakeFailed, c as ConnectionKind, p as ConnectionKindMismatch, d as ConnectionNotDeclared, u as ConnectionState, l as ConnectionStatus, f as ConnectionSubjectRequired, y as connectionDisconnectDescriptor, _ as connectionStartDescriptor, v as connectionSubmitTokenDescriptor, g as connectionsListQueryDescriptor };

package/dist/devActivity.js

@@ -1,4 +1,3 @@
-//#region src/devActivity.ts
+// src/devActivity.ts
 var e = "voltro:dev-activity";
-//#endregion
 export { e as DEV_ACTIVITY_EVENT };

package/dist/errorSchema.js

@@ -0,0 +1,23 @@
+import { Schema as e } from "effect";
+import * as t from "effect/SchemaAST";
+// src/errorSchema.ts
+var n = (e) => {
+	let n = /* @__PURE__ */ new Set();
+	if (e === void 0) return n;
+	let r = (e) => {
+		if (t.isUnion(e)) for (let t of e.types) r(t);
+		else if (e.encoding !== void 0 && r(t.toEncoded(e)), t.isObjects(e)) {
+			let r = e.propertySignatures.find((e) => e.name === "_tag");
+			r !== void 0 && t.isLiteral(r.type) && typeof r.type.literal == "string" && n.add(r.type.literal);
+		}
+	};
+	return r(e.ast), n;
+}, r = (r, i) => {
+	if (r === void 0) return;
+	let a = t.isUnion(r.ast) ? r.ast.types : [r.ast];
+	for (let t of a) {
+		let r = e.make(t);
+		if (n(r).has(i)) return r;
+	}
+};
+export { n as declaredErrorTags, r as errorMemberSchema };

package/dist/errorValue.js

@@ -1,4 +1,4 @@
-//#region src/errorValue.ts
+// src/errorValue.ts
 var e = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
@@ -17,5 +17,4 @@ var e = (e) => {
 	let r = Error(t(n), { cause: n });
 	return r.name = e(n) ?? "NonErrorThrown", r;
 };
-//#endregion
 export { t as errorMessage, e as errorTag, n as reportableError };

package/dist/event.js

@@ -3,10 +3,15 @@ import { Unauthenticated as t } from "./auth.js";
 import { NoSuchResource as n, ScopeError as r, declaresResourceGuard as i, isOpenAccess as a, openAccessSpec as o } from "./scopes.js";
 import { strictInput as s } from "./strictInput.js";
 import { hasEnforcedGuard as c } from "./procedure.js";
-import { Schema as l } from "effect";
-import { Rpc as u } from "effect/rpc";
-//#region src/event.ts
-var d = 7500, f = (e) => typeof e == "object" && !!e && e.kind === "event", p = (e) => {
+import { Context as l, Schema as u } from "effect";
+import { Rpc as d } from "effect/rpc";
+// src/event.ts
+var f = 7500, p = (e) => typeof e == "object" && !!e && e.kind === "event", m = (e) => {
+	if (e.clientPolicy !== void 0) {
+		if (!/^[A-Za-z][A-Za-z0-9_.:-]{0,255}$/.test(e.clientPolicy)) throw Error("defineEvent: invalid client policy ID");
+		if (e.openAccess !== void 0 || !c(e.guards)) throw Error("defineEvent: a client policy requires explicit enforced guards");
+		if (e.webhook !== void 0) throw Error("defineEvent: private client policies do not authorize webhook recipients");
+	}
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -39,66 +44,66 @@ var d = 7500, f = (e) => typeof e == "object" && !!e && e.kind === "event", p =
 		openAccess: e.openAccess,
 		rewind: e.rewind,
 		webhook: e.webhook,
-		delivery: e.delivery
+		delivery: e.delivery,
+		...e.clientPolicy === void 0 ? {} : { clientPolicy: e.clientPolicy }
 	};
-}, m = (e) => l.Struct({
-	_tag: l.Literal("event"),
-	origin: l.String,
-	n: l.Number,
-	emittedAt: l.Number,
+}, h = (e) => u.Struct({
+	_tag: u.Literal("event"),
+	origin: u.String,
+	n: u.Number,
+	emittedAt: u.Number,
 	payload: e
-}), h = l.Struct({
-	_tag: l.Literal("gap"),
-	missed: l.Number,
-	reason: l.Literals(["buffer", "resume"])
-}), g = l.Struct({ _tag: l.Literal("attached") }), _ = (e) => l.Union([
-	g,
-	m(e),
-	h
-]), v = l.Struct({
-	origin: l.String,
-	n: l.Number
-}), y = (e) => l.Struct({
+}), g = u.Struct({
+	_tag: u.Literal("gap"),
+	missed: u.Number,
+	reason: u.Literals(["buffer", "resume"])
+}), _ = u.Struct({ _tag: u.Literal("attached") }), v = (e) => u.Union([
+	_,
+	h(e),
+	g
+]), y = u.Struct({
+	origin: u.String,
+	n: u.Number
+}), b = (e) => u.Struct({
 	key: e,
-	resume: l.optional(l.Array(v))
-}), b = (o, d) => {
-	let f = o.guards !== void 0 && o.guards.some((e) => !a(e)) ? l.Union([
+	resume: u.optional(u.Array(y))
+}), x = l.Service("@voltro/protocol/EventRpcWorkload"), S = (o, l) => {
+	let f = o.guards !== void 0 && o.guards.some((e) => !a(e)) ? u.Union([
 		r,
 		t,
 		e
-	]) : l.Union([t, e]), p = i(o.guards) ? l.Union([f, n]) : f, m = d && d.length > 0 ? l.Union([p, ...d]) : p;
-	return u.make(o.name, {
-		payload: s(y(o.key), o.name, c(o.guards)),
-		success: _(o.payload),
+	]) : u.Union([t, e]), p = i(o.guards) ? u.Union([f, n]) : f, m = l && l.length > 0 ? u.Union([p, ...l]) : p;
+	return d.make(o.name, {
+		payload: s(b(o.key), o.name, c(o.guards)),
+		success: v(o.payload),
 		error: m,
 		stream: !0
-	});
-}, x = class extends l.TaggedError()("EventPayloadInvalid", {
-	event: l.String,
-	message: l.String
-}) {}, S = class extends l.TaggedError()("EventKeyInvalid", {
-	event: l.String,
-	message: l.String
-}) {}, C = class extends l.TaggedError()("EventPayloadTooLarge", {
-	event: l.String,
-	bytes: l.Number,
-	limit: l.Number
-}) {}, w = (e) => {
+	}).annotate(x, !0);
+}, C = class extends u.TaggedError()("EventPayloadInvalid", {
+	event: u.String,
+	message: u.String
+}) {}, w = class extends u.TaggedError()("EventKeyInvalid", {
+	event: u.String,
+	message: u.String
+}) {}, T = class extends u.TaggedError()("EventPayloadTooLarge", {
+	event: u.String,
+	bytes: u.Number,
+	limit: u.Number
+}) {}, E = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e), n = 0;
 	for (let e of t) e[1] !== void 0 && (t[n++] = e);
 	return t.length = n, t.sort(([e], [t]) => e < t ? -1 : +(e > t)), JSON.stringify(t);
-}, T = "\0", E = (e, t, n) => [
+}, D = "\0", O = (e, t, n) => [
 	e ?? "~",
 	t,
-	w(n)
-].join("\0"), D = (e) => {
+	E(n)
+].join("\0"), k = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, O = (e) => e.split("\0").join(" · ");
-//#endregion
-export { T as EVENT_ROUTE_SEP, S as EventKeyInvalid, x as EventPayloadInvalid, C as EventPayloadTooLarge, d as MAX_EVENT_ENVELOPE_BYTES, p as defineEvent, w as encodeEventKey, g as eventAttached, m as eventEnvelope, h as eventGap, v as eventResumePoint, E as eventRoute, _ as eventStreamEvent, y as eventSubscribeInput, b as eventToRpc, O as formatEventRoute, f as isEventDescriptor, D as parseEventRoute };
+}, A = (e) => e.split("\0").join(" · ");
+export { D as EVENT_ROUTE_SEP, w as EventKeyInvalid, C as EventPayloadInvalid, T as EventPayloadTooLarge, x as EventRpcWorkload, f as MAX_EVENT_ENVELOPE_BYTES, m as defineEvent, E as encodeEventKey, _ as eventAttached, h as eventEnvelope, g as eventGap, y as eventResumePoint, O as eventRoute, v as eventStreamEvent, b as eventSubscribeInput, S as eventToRpc, A as formatEventRoute, p as isEventDescriptor, k as parseEventRoute };

package/dist/formCapture.js

@@ -0,0 +1,11 @@
+// src/formCapture.ts
+var e = "__voltro_capture", t = "voltro:form-source", n = (e) => typeof e == "string" && e.length === 261 && /^1(?:\.[a-f0-9]{64}){4}$/.test(e) ? e : void 0, r = (e, t) => {
+	let r = n(e + "." + t);
+	if (r === void 0) throw Error("Native form source unavailable");
+	return r;
+}, i = (e = globalThis.document) => {
+	if (e === void 0) return;
+	let r = e.querySelectorAll(`meta[name="${t}"]`);
+	return r.length === 1 ? n(r[0].getAttribute("content")) : void 0;
+};
+export { e as FORM_CAPTURE_FIELD, t as FORM_CAPTURE_META_NAME, r as encodeNativeFormCapture, n as formCaptureSource, i as readFormCaptureSource };

package/dist/httpStreamMaxDuration.js

@@ -0,0 +1,8 @@
+// src/httpStreamMaxDuration.ts
+var e = (e) => {
+	if (e !== void 0) {
+		if (typeof e != "number" || !Number.isSafeInteger(e) || e < 1 || e > 2147483647) throw RangeError("SSE maxDurationMs must be an integer between 1 and 2147483647.");
+		return e;
+	}
+};
+export { e as validateHttpStreamMaxDuration };

package/dist/idempotency.js

@@ -1,5 +1,5 @@
 import { Schema as e } from "effect";
-//#region src/idempotency.ts
+// src/idempotency.ts
 var t = (e, t, n) => `${e ?? "(global)"}|${t.toUpperCase()}|${n}`, n = (e, t, n, r) => r === void 0 ? `${e ?? "(global)"}|${t ?? "(anon)"}|WS|${n}` : `WS-connection:${JSON.stringify([
 	e ?? null,
 	t ?? null,
@@ -9,58 +9,112 @@ var t = (e, t, n) => `${e ?? "(global)"}|${t.toUpperCase()}|${n}`, n = (e, t, n,
 	get message() {
 		return "this mutation requires a live native WebSocket connection";
 	}
-}, i = async (e, t, n, r, i, o = a) => {
-	let s = await e.claim(t, n, i, r, o);
-	return s === "claimed" ? { kind: "fresh" } : s.status === "completed" && s.response ? {
-		kind: "replay",
-		response: s.response
-	} : { kind: "conflict" };
-}, a = 3e4, o = (e, t, n, r = a, i = Date.now) => {
-	let o = setInterval(() => {
-		e.renew(t, n, i()).catch(() => {});
-	}, Math.max(1, Math.floor(r / 3)));
-	return o.unref?.(), () => clearInterval(o);
-}, s = (e, t, n, r, i) => e.complete(t, n, r, i), c = (e, t, n) => e.release(t, n), l = () => {
-	let e = /* @__PURE__ */ new Map(), t = (e, t) => `${e}\u0000${t}`;
+}, i = async (e, t, n, r, i, o, s = a) => {
+	if (!/^[0-9a-f]{64}$/.test(r)) throw Error("Invalid idempotency input fingerprint");
+	let c = await e.claim(t, n, r, o, i, s);
+	if (c.kind === "claimed") {
+		let e = c.claim;
+		if (typeof e.id != "string" || e.id.length === 0 || e.scope !== t || e.key !== n || e.inputHash !== r) throw Error("Idempotency store returned an invalid claim identity");
+		return {
+			kind: "fresh",
+			claim: Object.freeze({
+				scope: t,
+				key: n,
+				id: e.id,
+				inputHash: r
+			})
+		};
+	}
+	if (c.kind === "existing") {
+		if (c.record.scope !== t || c.record.key !== n) throw Error("Idempotency store returned an invalid receipt identity");
+		return typeof c.record.inputHash == "string" ? c.record.inputHash === r ? c.record.status === "completed" && c.record.response ? {
+			kind: "replay",
+			response: c.record.response
+		} : { kind: "conflict" } : { kind: "input-conflict" } : { kind: "input-unbound" };
+	}
+	if (c.kind === "conflict") return { kind: "conflict" };
+	throw Error("Idempotency store returned an invalid acquisition result");
+}, a = 3e4, o = (e, t, n = a, r = Date.now) => {
+	let i = Object.freeze({
+		scope: t.scope,
+		key: t.key,
+		id: t.id,
+		inputHash: t.inputHash
+	}), o = !1, s = setInterval(() => {
+		o || (o = !0, e.renew(i, r()).then((e) => {
+			e || clearInterval(s);
+		}, () => {}).finally(() => {
+			o = !1;
+		}));
+	}, Math.max(1, Math.floor(n / 3)));
+	return s.unref?.(), () => clearInterval(s);
+}, s = (e, t, n, r) => e.complete(t, n, r), c = (e, t) => e.release(t), l = 0n, u = () => {
+	let e = /* @__PURE__ */ new Map(), t = (e, t) => JSON.stringify([e, t]), n = (n) => {
+		let r = e.get(t(n.scope, n.key));
+		return r?.status === "in_flight" && r.id === n.id && r.inputHash === n.inputHash ? r : void 0;
+	};
 	return {
 		get: async (n, r) => e.get(t(n, r)) ?? null,
-		claim: async (n, r, i, a, o) => {
-			let s = e.get(t(n, r));
-			return s && i - s.createdAt < u(s.status, a, o) ? s : (e.set(t(n, r), {
+		claim: async (n, r, i, a, o, s) => {
+			let c = e.get(t(n, r));
+			if (c && c.inputHash !== i || c && a - c.createdAt < d(c.status, o, s)) return {
+				kind: "existing",
+				record: c
+			};
+			let u = `memory:${(++l).toString(36)}`;
+			return e.set(t(n, r), {
+				id: u,
 				scope: n,
 				key: r,
+				inputHash: i,
 				status: "in_flight",
 				response: null,
-				createdAt: i
-			}), "claimed");
+				createdAt: a
+			}), {
+				kind: "claimed",
+				claim: Object.freeze({
+					id: u,
+					scope: n,
+					key: r,
+					inputHash: i
+				})
+			};
 		},
-		complete: async (n, r, i, a) => {
-			e.set(t(n, r), {
-				scope: n,
-				key: r,
+		complete: async (r, i, a) => {
+			let o = n(r);
+			return o ? (e.set(t(r.scope, r.key), {
+				...o,
 				status: "completed",
 				response: i,
 				createdAt: a
-			});
-		},
-		release: async (n, r) => {
-			e.delete(t(n, r));
+			}), !0) : !1;
 		},
-		renew: async (n, r, i) => {
-			let a = e.get(t(n, r));
-			a?.status === "in_flight" && e.set(t(n, r), {
+		release: async (r) => n(r) ? e.delete(t(r.scope, r.key)) : !1,
+		renew: async (r, i) => {
+			let a = n(r);
+			return a ? (e.set(t(r.scope, r.key), {
 				...a,
 				createdAt: i
-			});
+			}), !0) : !1;
 		}
 	};
-}, u = (e, t, n) => e === "completed" ? t : Math.min(t, n), d = class extends e.TaggedError()("MutationInFlight", {
+}, d = (e, t, n) => e === "completed" ? t : Math.min(t, n), f = class extends e.TaggedError()("MutationInFlight", {
 	traceId: e.String,
 	retryAfterMs: e.Number
 }) {
 	get message() {
 		return `a request with this idempotency key is still in flight — replay the same key after ${this.retryAfterMs}ms`;
 	}
-}, f = 1e3;
-//#endregion
-export { a as DEFAULT_IN_FLIGHT_LEASE_MS, f as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, r as MutationConnectionRequired, d as MutationInFlight, i as beginIdempotent, c as failIdempotent, s as finishIdempotent, u as freshFor, o as holdIdempotentClaim, t as idempotencyScope, l as memoryIdempotencyStore, n as wsMutationIdempotencyScope };
+}, p = 1e3, m = class extends e.TaggedError()("MutationIdempotencyRefused", {
+	traceId: e.String,
+	reason: e.Literals([
+		"input-conflict",
+		"input-unbound",
+		"input-unavailable"
+	])
+}) {
+	get message() {
+		return this.reason === "input-unavailable" ? "This request input could not be captured safely. This attempt was stopped before execution." : "This request cannot be safely matched to the original operation. Check its current state before starting another action.";
+	}
+};
+export { a as DEFAULT_IN_FLIGHT_LEASE_MS, p as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, r as MutationConnectionRequired, m as MutationIdempotencyRefused, f as MutationInFlight, i as beginIdempotent, c as failIdempotent, s as finishIdempotent, d as freshFor, o as holdIdempotentClaim, t as idempotencyScope, u as memoryIdempotencyStore, n as wsMutationIdempotencyScope };

package/dist/idempotencyInput.js

@@ -0,0 +1,122 @@
+import { canonicalJson as e } from "./canonicalJson.js";
+import { Schema as t } from "effect";
+// src/idempotencyInput.ts
+var n = (t) => {
+	let n = /* @__PURE__ */ new WeakMap(), r = 0, i = (e, t = () => !1) => {
+		if (Object.getOwnPropertySymbols(e).length) throw Error("Unsupported wire fields");
+		return Object.getOwnPropertyNames(e).sort().filter((e) => !t(e)).map((t) => {
+			let n = Object.getOwnPropertyDescriptor(e, t);
+			if (!("value" in n)) throw Error("Unsupported wire accessor");
+			return [t, o(n.value)];
+		});
+	}, a = (e, t = 0, n = e.byteLength) => {
+		let r = "";
+		for (let i of new Uint8Array(e, t, n)) r += i.toString(16).padStart(2, "0");
+		return r;
+	}, o = (e) => {
+		if (e === null) return ["null"];
+		if (e === void 0) return ["undefined"];
+		if (typeof e == "string" || typeof e == "boolean") return [typeof e, e];
+		if (typeof e == "number") return ["number", Object.is(e, -0) ? "-0" : String(e)];
+		if (typeof e == "bigint") return ["bigint", String(e)];
+		if (typeof e != "object") throw Error("Unsupported wire value");
+		let t = n.get(e);
+		if (t !== void 0) return ["reference", t];
+		let s = r++;
+		if (n.set(e, s), Array.isArray(e)) {
+			if (Object.getPrototypeOf(e) !== Array.prototype) throw Error("Unsupported wire array prototype");
+			return [
+				"array",
+				s,
+				e.length,
+				i(e, (e) => e === "length")
+			];
+		}
+		if (Object.getPrototypeOf(e) === Date.prototype) return [
+			"date",
+			s,
+			String(Date.prototype.getTime.call(e)),
+			i(e)
+		];
+		if (Object.getPrototypeOf(e) === Map.prototype) return [
+			"map",
+			s,
+			Array.from(Map.prototype.entries.call(e), ([e, t]) => [o(e), o(t)]),
+			i(e)
+		];
+		if (Object.getPrototypeOf(e) === Set.prototype) return [
+			"set",
+			s,
+			Array.from(Set.prototype.values.call(e), o),
+			i(e)
+		];
+		if (Object.getPrototypeOf(e) === ArrayBuffer.prototype) return [
+			"buffer",
+			s,
+			a(e),
+			i(e)
+		];
+		if (ArrayBuffer.isView(e)) {
+			if (!(e.buffer instanceof ArrayBuffer)) throw Error("Shared wire memory is not a snapshot");
+			let t = Object.getOwnPropertyDescriptor(Object.getPrototypeOf(e), "constructor")?.value;
+			if (typeof t != "function" || ![
+				"DataView",
+				"Int8Array",
+				"Uint8Array",
+				"Uint8ClampedArray",
+				"Int16Array",
+				"Uint16Array",
+				"Int32Array",
+				"Uint32Array",
+				"Float16Array",
+				"Float32Array",
+				"Float64Array",
+				"BigInt64Array",
+				"BigUint64Array"
+			].includes(t.name) || globalThis[t.name] !== t) throw Error("Unsupported wire view prototype");
+			return [
+				"view",
+				s,
+				t.name,
+				o(e.buffer),
+				e.byteOffset,
+				e.byteLength,
+				i(e, (t) => !(e instanceof DataView) && /^(0|[1-9]\d*)$/.test(t))
+			];
+		}
+		let c = Object.getPrototypeOf(e);
+		if (c !== null && c !== Object.prototype) throw Error("Unsupported wire object");
+		return [
+			"object",
+			s,
+			i(e)
+		];
+	};
+	return e(o(t));
+}, r = async (r, i, a, o = void 0) => {
+	try {
+		let s = t.encodeUnknownSync(r), c = t.decodeUnknownSync(r), l = s(i), u = n(l), d = c(structuredClone(l));
+		if (n(s(d)) !== u) throw Error("Input does not round trip");
+		let f = e({
+			protocol: "voltro-idempotency-input-v1",
+			principal: {
+				type: a.type,
+				id: a.id,
+				tenantId: a.tenantId,
+				kind: a.type === "user" ? a.kind ?? null : null,
+				service: a.type === "service" ? a.service : null,
+				auditActor: a.type === "serviceAccount" ? a.auditActorId === void 0 ? ["implicit"] : ["explicit", a.auditActorId] : null
+			},
+			wire: u,
+			transport: n(o)
+		}), p = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(f)), m = "";
+		for (let e of new Uint8Array(p)) m += e.toString(16).padStart(2, "0");
+		return Object.freeze({
+			input: d,
+			fingerprint: m
+		});
+	} catch {
+		throw Error("Mutation input cannot be captured for idempotent execution");
+	}
+};
+export { r as prepareIdempotentInput };

package/dist/identity.js

@@ -2,7 +2,7 @@ import { createLogger as e } from "@voltro/logger";
 import { readFileSync as t } from "node:fs";
 import { dirname as n, join as r } from "node:path";
 import { fileURLToPath as i } from "node:url";
-//#region src/processIdentity.ts
+// src/processIdentity.ts
 var a = e({ scope: "voltro:identity" }), o = Symbol.for("@voltro/runtime/processIdentity"), s = globalThis, c = () => Math.random().toString(36).slice(2, 8), l = s[o] ?? (s[o] = {
 	bootPath: "cli",
 	startedAt: Date.now(),
@@ -98,5 +98,4 @@ var a = e({ scope: "voltro:identity" }), o = Symbol.for("@voltro/runtime/process
 	let e = y().bootPath;
 	return e === "dev" || e === "serve" || e === "start" ? e : "cli";
 };
-//#endregion
 export { T as appMode, w as frameworkVersion, x as instanceId, y as processIdentity, S as replicaEvidence, b as replicaId, C as resetProcessIdentityForTest, v as resolveAdvertisedHost, g as setProcessAdvertisedAddress, h as setProcessAppVersion, m as setProcessBootPath };