@voltro/testing 0.69.1 → 0.71.0

package/dist/index.js

@@ -1,47 +1,47 @@
 import { AUTO_FILLED_COLUMNS as e, allRegisteredTables as t, changeDelete as n, changeInsert as r, changeSoftDelete as i, changeUpdate as a, clearRelationsRegistry as o, missingRequiredColumns as s, registerRelations as c } from "@voltro/database";
 import { Cause as l, Effect as u, Exit as d, Layer as f, Schema as p } from "effect";
 import { SubjectService as m, anonymousSubject as h, checkGuardsEffect as g, composeAuthStrategies as _, composeRpcInterceptors as v, eventRoute as y, systemSubject as b, tenantScopedSubject as ee } from "@voltro/protocol";
-import { EventBus as x, InMemoryDataStore as te, NO_ROW_FILTER as S, appValidation as ne, applyRowFilterToDescriptor as re, clearSystemStoreHandle as ie, getRowFilter as C, getSystemStoreHandle as ae, makeAppAccess as oe, makeConnectionState as se, makeDataLoader as ce, makeEffectStoreLayer as le, makeEventPublisher as ue, makeOutboxFacade as de, makeSchemaRegistry as fe, publishEvent as pe, resolveRowFilterScopeFor as me, runProvidedEffect as w, runWithDeadlockRetry as he, setSystemStoreHandle as T, wrapStoreWithMixinBehaviour as E } from "@voltro/runtime";
-import { installEnvSnapshot as ge } from "@voltro/env";
-import _e from "node:net";
-import { describe as ve } from "vitest";
-import { collectPublicApiRoutes as ye, dispatchSharedPath as be, restRoutesToHttpRoutes as xe } from "@voltro/protocol/rest";
-import { createLogger as Se } from "@voltro/logger";
-import { CurrentWorkflowRunId as Ce, inMemoryWorkflowEngineLayer as we, makeInMemoryRecorder as Te } from "@voltro/workflow";
+import { EventBus as x, InMemoryDataStore as S, NO_ROW_FILTER as C, appValidation as te, applyRowFilterToDescriptor as ne, clearSystemStoreHandle as re, getRowFilter as w, getSystemStoreHandle as ie, makeAppAccess as ae, makeConnectionState as oe, makeDataLoader as se, makeEffectStoreLayer as ce, makeEventPublisher as le, makeFieldCipher as ue, makeOutboxFacade as de, makeSchemaRegistry as fe, publishEvent as pe, resolveRowFilterScopeFor as me, resolveTransactionSubject as he, runProvidedEffect as T, runWithDeadlockRetry as ge, setFieldCipher as _e, setSystemStoreHandle as E, wrapStoreWithMixinBehaviour as D } from "@voltro/runtime";
+import { installEnvSnapshot as ve } from "@voltro/env";
+import ye from "node:net";
+import { describe as be } from "vitest";
+import { collectPublicApiRoutes as xe, dispatchSharedPath as Se, restRoutesToHttpRoutes as Ce } from "@voltro/protocol/rest";
+import { createLogger as we } from "@voltro/logger";
+import { CurrentWorkflowRunId as Te, inMemoryWorkflowEngineLayer as Ee, makeInMemoryRecorder as De } from "@voltro/workflow";
 //#region src/fixtureRow.ts
-var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
+var Oe = new Set(e), O = 0, k = () => ++O, ke = (e, t) => {
 	if (t.oneOf && t.oneOf.length > 0) return t.oneOf[0];
 	if (t.enumValues && t.enumValues.length > 0) return t.enumValues[0];
 	let n = t.unique === !0;
 	switch (t.type) {
 		case "text":
 		case "id":
-		case "enum": return n ? `${e}-${++D}` : e;
-		case "reference": return t.referenceStorage === "numeric" ? n ? ++D : 0 : n ? `${e}-${++D}` : e;
+		case "enum": return n ? `${e}-${++O}` : e;
+		case "reference": return t.referenceStorage === "numeric" ? n ? ++O : 0 : n ? `${e}-${++O}` : e;
 		case "integer":
-		case "real": return n ? ++D : 0;
+		case "real": return n ? ++O : 0;
 		case "decimal":
-		case "bigint": return n ? String(++D) : "0";
+		case "bigint": return n ? String(++O) : "0";
 		case "boolean": return !1;
 		case "timestamp":
 		case "date": return /* @__PURE__ */ new Date(0);
 		default: throw Error(`fixtureRow: column '${e}' is a required '${t.type}' with no default, and fixtureRow can't synthesize a safe placeholder for that type. Pass it explicitly: fixtureRow(table, { ${e}: … }).`);
 	}
-}, k = (e, t = {}) => {
+}, A = (e, t = {}) => {
 	let n = {};
-	for (let r of s(e, t)) Ee.has(r) || (n[r] = De(r, e.fields[r]));
+	for (let r of s(e, t)) Oe.has(r) || (n[r] = ke(r, e.fields[r]));
 	return {
 		...n,
 		...t
 	};
-}, Oe = (e) => {
+}, Ae = (e) => {
 	let t = {};
-	for (let [n, r] of Object.entries(e)) t[n] = typeof r == "function" ? r(O()) : r;
+	for (let [n, r] of Object.entries(e)) t[n] = typeof r == "function" ? r(k()) : r;
 	return t;
-}, ke = (e) => {
+}, je = (e) => {
 	for (let [t, n] of Object.entries(e.fields)) if (n.type === "id") return t;
 	return "id";
-}, Ae = async (e, t, n, r, i) => {
+}, Me = async (e, t, n, r, i) => {
 	let a = {};
 	for (let o of s(t, n)) {
 		let n = t.fields[o];
@@ -49,29 +49,29 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 		let s = n.references();
 		if (i.includes(s.tableName)) throw Error(`defineFactory: creating '${t.tableName}' requires '${s.tableName}' via '${o}', and that reference is cyclic (${[...i, s.tableName].join(" → ")}). Insert one side first and pass the id: create(store, { ${o}: existing.id }).`);
 		let c = r[o];
-		a[o] = (c === void 0 ? await A(e, s, {}, {}, [...i, s.tableName]) : await c.create(e, {}))[n.referenceColumn ?? ke(s)];
+		a[o] = (c === void 0 ? await j(e, s, {}, {}, [...i, s.tableName]) : await c.create(e, {}))[n.referenceColumn ?? je(s)];
 	}
 	return a;
-}, A = async (e, t, n, r, i) => {
+}, j = async (e, t, n, r, i) => {
 	let a = {
-		...await Ae(e, t, n, r, i),
+		...await Me(e, t, n, r, i),
 		...n
 	};
-	return e.insert(t.tableName, k(t, a));
-}, j = (e, t) => typeof e == "function" ? e(t) : e ?? {}, je = (e, t = {}) => {
+	return e.insert(t.tableName, A(t, a));
+}, M = (e, t) => typeof e == "function" ? e(t) : e ?? {}, Ne = (e, t = {}) => {
 	let n = t.traits ?? {}, r = t.associations ?? {}, i = (t) => {
 		let a = (e = {}) => ({
-			...Oe(t),
+			...Ae(t),
 			...e
-		}), o = (t = {}) => k(e, a(t));
+		}), o = (t = {}) => A(e, a(t));
 		return {
 			table: e,
 			build: o,
-			buildList: (e, t) => Array.from({ length: e }, (e, n) => o(j(t, n))),
-			create: (t, n = {}) => A(t, e, a(n), r, [e.tableName]),
+			buildList: (e, t) => Array.from({ length: e }, (e, n) => o(M(t, n))),
+			create: (t, n = {}) => j(t, e, a(n), r, [e.tableName]),
 			createList: async (t, n, i) => {
 				let o = [];
-				for (let s = 0; s < n; s++) o.push(await A(t, e, a(j(i, s)), r, [e.tableName]));
+				for (let s = 0; s < n; s++) o.push(await j(t, e, a(M(i, s)), r, [e.tableName]));
 				return o;
 			},
 			with: (...r) => {
@@ -93,19 +93,19 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 		};
 	};
 	return i(t.defaults ?? {});
-}, M = Symbol.for("voltro/testing/mockClock.installed"), N = () => globalThis, Me = (e, t) => new Proxy(e, {
+}, N = Symbol.for("voltro/testing/mockClock.installed"), P = () => globalThis, Pe = (e, t) => new Proxy(e, {
 	construct: (e, n, r) => Reflect.construct(e, n.length === 0 ? [t()] : n, r),
 	apply: () => new e(t()).toString(),
 	get: (e, n, r) => n === "now" ? () => t() : Reflect.get(e, n, r)
-}), P = (e) => {
+}), F = (e) => {
 	if (typeof e == "number") return e;
 	let t = e instanceof Date ? e.getTime() : Date.parse(e);
 	if (Number.isNaN(t)) throw Error(`mockClock: cannot read an instant from '${String(e)}'`);
 	return t;
-}, F = class {
+}, I = class {
 	currentMs;
 	constructor(e = "2026-01-01T00:00:00Z") {
-		this.currentMs = P(e);
+		this.currentMs = F(e);
 	}
 	now() {
 		return this.currentMs;
@@ -114,47 +114,47 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 		return new Date(this.currentMs);
 	}
 	advance(e) {
-		this.currentMs += typeof e == "number" ? e : Ie(e);
+		this.currentMs += typeof e == "number" ? e : Re(e);
 	}
 	set(e) {
-		this.currentMs = P(e);
+		this.currentMs = F(e);
 	}
 	get installed() {
-		return N()[M]?.clock === this;
+		return P()[N]?.clock === this;
 	}
 	install() {
-		let e = N(), t = e[M];
+		let e = P(), t = e[N];
 		if (t !== void 0) throw Error("mockClock: global time is already faked" + (t.clock === this ? " by this same clock" : " by another MockClock") + ". Uninstall it before installing again — a nested install restores the outer fake on the way out, which leaves the realm frozen with nothing pointing at why. `withFrozenTime` always restores, including on a throw.");
 		let n = globalThis.Date;
-		return e[M] = {
+		return e[N] = {
 			realDate: n,
 			clock: this
-		}, globalThis.Date = Me(n, () => this.currentMs), () => {
+		}, globalThis.Date = Pe(n, () => this.currentMs), () => {
 			this.uninstall();
 		};
 	}
 	uninstall() {
-		let e = N(), t = e[M];
-		t !== void 0 && t.clock === this && (globalThis.Date = t.realDate, delete e[M]);
+		let e = P(), t = e[N];
+		t !== void 0 && t.clock === this && (globalThis.Date = t.realDate, delete e[N]);
 	}
-}, Ne = (e) => typeof e == "object" && !!e && typeof e.then == "function", Pe = (e, t) => {
-	let n = e instanceof F ? e : new F(e);
+}, Fe = (e) => typeof e == "object" && !!e && typeof e.then == "function", Ie = (e, t) => {
+	let n = e instanceof I ? e : new I(e);
 	n.install();
 	let r = !1;
 	try {
 		let e = t(n);
-		return Ne(e) ? (r = !0, e.then((e) => (n.uninstall(), e), (e) => {
+		return Fe(e) ? (r = !0, e.then((e) => (n.uninstall(), e), (e) => {
 			throw n.uninstall(), e;
 		})) : e;
 	} finally {
 		r || n.uninstall();
 	}
-}, Fe = (e) => u.acquireRelease(u.sync(() => {
-	let t = e instanceof F ? e : new F(e);
+}, Le = (e) => u.acquireRelease(u.sync(() => {
+	let t = e instanceof I ? e : new I(e);
 	return t.install(), t;
 }), (e) => u.sync(() => {
 	e.uninstall();
-})), Ie = (e) => {
+})), Re = (e) => {
 	let t = /^\s*(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)\s*$/.exec(e);
 	if (!t) throw Error(`mockClock: cannot parse duration '${e}'`);
 	let n = Number(t[1]), r = t[2];
@@ -166,7 +166,7 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 		case "d": return n * 864e5;
 		default: throw Error(`mockClock: unknown unit '${r}'`);
 	}
-}, I = class {
+}, L = class {
 	emitted = [];
 	async emit(e, t) {
 		let n = typeof e == "string" ? e : e.id ?? e.event ?? "(unnamed event)";
@@ -185,7 +185,7 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 	clear() {
 		this.emitted.length = 0;
 	}
-}, L = (e = {}) => {
+}, R = (e = {}) => {
 	let t = e.tenantId ?? null, n = new x({
 		origin: e.origin ?? "test",
 		...e.ringSize === void 0 ? {} : { ringSize: e.ringSize }
@@ -255,7 +255,7 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 			n.clear();
 		}
 	};
-}, R = class {
+}, z = class {
 	queue;
 	calls = [];
 	constructor(e) {
@@ -270,36 +270,38 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 	remaining() {
 		return this.queue.length;
 	}
-}, Le = (e) => e, z = "00000000000000000000000000000000", B = /* @__PURE__ */ new WeakMap(), V = /* @__PURE__ */ new WeakMap(), Re = (e, t) => {
-	let n = V.get(e);
+}, ze = (e) => e, B = "00000000000000000000000000000000", V = /* @__PURE__ */ new WeakMap(), H = /* @__PURE__ */ new WeakMap(), Be = (e, t) => {
+	let n = H.get(e);
 	if (n === void 0) throw Error("withRpcConnection requires a context created by makeTestContext");
 	return n(t);
-}, H = /* @__PURE__ */ new WeakMap(), U = /* @__PURE__ */ new WeakMap(), W = /* @__PURE__ */ new WeakMap(), G = /* @__PURE__ */ new WeakMap(), K = (e, t) => {
-	let n = W.get(e) ?? [], r = t === "mutation" ? "interceptMutation" : t === "query" ? "interceptQuery" : "interceptAction", i = [];
+}, U = /* @__PURE__ */ new WeakMap(), W = /* @__PURE__ */ new WeakMap(), G = /* @__PURE__ */ new WeakMap(), K = (e) => G.get(e) ?? [], q = /* @__PURE__ */ new WeakMap(), J = (e, t) => {
+	q.set(e, { publicApi: t });
+}, Y = (e) => q.get(e), X = /* @__PURE__ */ new WeakMap(), Ve = (e, t) => {
+	let n = G.get(e) ?? [], r = t === "mutation" ? "interceptMutation" : t === "query" ? "interceptQuery" : "interceptAction", i = [];
 	for (let e of n) {
 		let t = e[r];
 		typeof t == "function" && i.push(t);
 	}
 	return v(i);
-}, q = (e) => {
-	let t = (W.get(e) ?? []).map((e) => e.services).filter((e) => e !== void 0), n = G.get(e) ?? [], r = [...t, ...n];
+}, He = (e) => {
+	let t = (G.get(e) ?? []).map((e) => e.services).filter((e) => e !== void 0), n = X.get(e) ?? [], r = [...t, ...n];
 	if (r.length !== 0) return f.mergeAll(...r);
-}, J = (e) => {
-	let t = H.get(e);
+}, Ue = (e) => {
+	let t = U.get(e);
 	t !== void 0 && (t.length = 0);
-}, Y = async (e) => {
-	let t = H.get(e);
+}, Z = async (e) => {
+	let t = U.get(e);
 	if (t === void 0 || t.length === 0) return;
 	let n = [...t];
 	t.length = 0;
 	for (let e of n) await e();
-}, ze = (e) => U.get(e) ?? [], X = async (e, t) => {
-	let n = B.get(e);
+}, We = (e) => W.get(e) ?? [], Ge = async (e, t) => {
+	let n = V.get(e);
 	return n === void 0 ? e.store.transactional(async (n) => t({
 		...e,
 		store: n
 	})) : n(t);
-}, Be = (e) => {
+}, Ke = (e) => {
 	let t = /* @__PURE__ */ new Map(), n = /* @__PURE__ */ new Map(), r = (n) => {
 		let r = t.get(n);
 		return r === void 0 ? !1 : r.expiresAt !== null && r.expiresAt <= e() ? (t.delete(n), !1) : !0;
@@ -338,7 +340,7 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 			return i(e, o, n.ttlMs, n.tags), o;
 		}
 	};
-}, Ve = (e) => {
+}, qe = (e) => {
 	let t = /* @__PURE__ */ new Map(), n = (n) => {
 		let r = t.get(n);
 		return r === void 0 ? !1 : r.expiresAt !== null && r.expiresAt <= e() ? (t.delete(n), !1) : !0;
@@ -366,131 +368,144 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 			t.clear();
 		}
 	};
-}, He = async (e, t) => {
-	let n = ae();
-	T(e);
+}, Je = async (e, t) => {
+	let n = ie();
+	E(e);
 	try {
 		return await t();
 	} finally {
-		n === void 0 ? ie() : T(n);
+		n === void 0 ? re() : E(n);
 	}
-}, Z = /* @__PURE__ */ new Set(), Ue = (e) => {
-	Z.has(e) || (Z.add(e), console.warn(e));
-}, We = (e, t, n) => {
-	let r = Ge, i;
+}, Ye = /* @__PURE__ */ new Set(), Xe = (e) => {
+	Ye.has(e) || (Ye.add(e), console.warn(e));
+}, Ze = (e, t, n) => {
+	let r = Qe, i;
 	return () => {
-		let a = t ?? C();
-		return t !== void 0 && C() !== void 0 && t !== C() && Ue("[voltro:testing] this test passes `rowFilter:` while a DIFFERENT filter is registered via `setRowFilter`. The option wins, so this test does not exercise your app's registration. Drop `rowFilter:` to run the real process-global one."), (i === void 0 || a !== r) && (r = a, i = He(n, () => w(me(a, e, (e) => {
+		let a = t ?? w();
+		return t !== void 0 && w() !== void 0 && t !== w() && Xe("[voltro:testing] this test passes `rowFilter:` while a DIFFERENT filter is registered via `setRowFilter`. The option wins, so this test does not exercise your app's registration. Drop `rowFilter:` to run the real process-global one."), (i === void 0 || a !== r) && (r = a, i = Je(n, () => T(me(a, e, (e) => {
 			console.error("[voltro:testing] row filter failed to load — reads refused for this subject", e);
 		})))), i;
 	};
-}, Ge = Symbol("unresolved"), Ke = (e, t) => new Proxy(e, { get: (e, n) => {
-	if (n === "query") return async (n) => e.query(re(await t(), n));
+}, Qe = Symbol("unresolved"), $e = (e, t) => new Proxy(e, { get: (e, n) => {
+	if (n === "query") return async (n) => e.query(ne(await t(), n));
 	let r = Reflect.get(e, n, e);
 	return typeof r == "function" ? r.bind(e) : r;
-} }), qe = (e = {}) => {
-	if (ge({
+} }), et = (e = {}) => {
+	if (ve({
 		...process.env,
 		...e.env ?? {}
-	}), e.relations !== void 0) {
+	}), e.fieldEncryptionKey !== void 0 && _e(ue(e.fieldEncryptionKey)), e.relations !== void 0) {
 		o();
 		for (let t of e.relations) c(t);
 	}
-	let n = e.tables ?? t(), r = fe(n), i = new te(e.store ?? {}), a = {
+	let n = e.tables ?? t(), r = fe(n), i = new S(e.store ?? {}), a = {
 		dataStore: i,
 		schemaRegistry: r
 	};
-	T(a);
-	let s = new F(e.clockStart), l = new I(), u = L(), d = new R(e.llmResponses ?? []), f = Be(() => s.now()), p = Ve(() => s.now()), m = (t, n, o = i, c) => {
-		let h = {
+	E(a);
+	let s = new I(e.clockStart), l = new L(), u = R(), d = new z(e.llmResponses ?? []), f = Ke(() => s.now()), p = qe(() => s.now()), m = (t, n, o = i, c, h = !1) => {
+		let g = {
 			subject: t,
-			traceId: z,
+			traceId: B,
 			...n === void 0 ? {} : { connection: n }
-		}, g = c?.queued ?? [], _ = c?.nudges ?? [], v = ue({
+		}, _ = c?.queued ?? [], v = c?.nudges ?? [], y = le({
 			bus: u.bus,
 			tenantId: t.tenantId ?? null,
 			...o === i ? {} : { deferToCommit: (e) => {
-				g.push(async () => {
+				_.push(async () => {
 					e();
 				});
 			} }
-		}), y = ce({ store: o }), b = We(t, e.rowFilter, a), x = {
+		}), b = se({ store: o }), x = h ? async () => C : Ze(t, e.rowFilter, a), S = {
+			transaction: async (e, r) => {
+				let a = he(t, r?.tenantId, o !== i);
+				if (a !== t) return m(a, n, i, void 0, !0).transaction(e);
+				if (o !== i) return e(S);
+				let s, c = await o.transactional(async (r) => {
+					let i = m(t, n, r, {
+						queued: [],
+						nudges: []
+					}, h), a = await e(i);
+					return s = i, a;
+				});
+				return s !== void 0 && (await Z(s), v.push(...We(s))), c;
+			},
 			clock: s,
 			webhooks: l,
-			events: v,
+			events: y,
 			eventBus: u,
 			llm: d,
 			...e.ai === void 0 ? {} : { ai: e.ai },
-			request: h,
-			...n === void 0 ? {} : { connectionState: se(n, o === i ? void 0 : (e) => {
-				g.push(e);
+			request: g,
+			...n === void 0 ? {} : { connectionState: oe(n, o === i ? void 0 : (e) => {
+				_.push(e);
 			}) },
-			validation: ne,
-			access: oe(t),
+			validation: te,
+			access: ae(t),
 			cache: f,
 			kv: p,
-			store: E(Ke(o, b), {
+			store: D($e(o, x), {
 				subject: t,
 				schemaRegistry: r,
-				rowFilter: S
+				rowFilter: C
 			}),
-			storeForTenant: (e) => E(Ke(o, b), {
+			storeForTenant: (e) => D($e(o, x), {
 				subject: ee(t, e),
 				schemaRegistry: r,
-				rowFilter: S
+				rowFilter: C
 			}),
 			outbox: de({
 				store: o,
 				subject: t,
-				traceId: z,
+				traceId: B,
 				nudge: () => {
-					_.push(z);
+					v.push(B);
 				},
 				afterCommit: (e) => {
-					g.push(e);
+					_.push(e);
 				}
 			}),
-			load: y.load,
-			loadMany: y.loadMany,
+			load: b.load,
+			loadMany: b.loadMany,
 			withSubject: (e, t) => Promise.resolve(t(m(e, n, o, {
-				queued: g,
-				nudges: _
+				queued: _,
+				nudges: v
 			}))),
 			withTenant: (e, r) => Promise.resolve(r(m({
 				...t,
 				tenantId: e
 			}, n, o, {
-				queued: g,
-				nudges: _
+				queued: _,
+				nudges: v
 			}))),
 			asSubject: (e) => m(e, n, o, {
-				queued: g,
-				nudges: _
+				queued: _,
+				nudges: v
 			}),
 			asTenant: (e) => m({
 				...t,
 				tenantId: e
 			}, n, o, {
-				queued: g,
-				nudges: _
+				queued: _,
+				nudges: v
 			})
 		};
-		return H.set(x, g), V.set(x, (e) => m(t, e, o, {
-			queued: g,
-			nudges: _
-		})), U.set(x, _), W.set(x, e.plugins ?? []), G.set(x, e.layers ?? []), B.set(x, (e) => o.transactional((r) => e(m(t, n, r, {
-			queued: g,
-			nudges: _
-		})))), x;
+		return U.set(S, _), H.set(S, (e) => m(t, e, o, {
+			queued: _,
+			nudges: v
+		})), W.set(S, v), G.set(S, e.plugins ?? []), X.set(S, e.layers ?? []), V.set(S, (e) => o.transactional((r) => e(m(t, n, r, {
+			queued: _,
+			nudges: v
+		})))), S;
 	};
 	return m(e.subject ?? h(null), e.connection);
-}, Je = (e, t) => {
-	let n = q(t);
-	return (n === void 0 ? e : u.provide(e, n)).pipe(u.provide(le(t.store)), u.provideService(m, t.request.subject));
-}, Ye = async (e, t, n, r) => {
+}, tt = (e, t) => {
+	let n = He(t);
+	return (n === void 0 ? e : u.provide(e, n)).pipe(u.provide(ce(t.store)), u.provideService(m, t.request.subject));
+}, nt = async (e, t, n, r) => {
 	let i = e.input, a = await p.decodeUnknownPromise(i)(n), o = e.kind, s = async (e) => {
 		let n = t(a, e);
-		return u.isEffect(n) ? w(Je(n, e)) : n;
+		return u.isEffect(n) ? T(tt(n, e)) : n;
 	}, c = async () => {
 		let t = e.guards;
 		if (t !== void 0 && t.length > 0) {
@@ -498,29 +513,33 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 			if (e !== null) throw e;
 		}
 		if (o !== "mutation") return s(r);
-		let n = await he(async () => X(r, async (e) => (J(r), s(e))), { delay: () => Promise.resolve() });
-		return await Y(r), n;
-	}, f = o === "mutation" || o === "query" || o === "action" ? o : void 0, m = f === void 0 ? void 0 : K(r, f);
+		let n = await ge(async () => Ge(r, async (e) => (Ue(r), s(e))), { delay: () => Promise.resolve() });
+		return await Z(r), n;
+	}, f = o === "mutation" || o === "query" || o === "action" ? o : void 0, m = f === void 0 ? void 0 : Ve(r, f);
 	if (m === void 0 || f === void 0) return await c();
-	let h = m(u.tryPromise({
+	let h = u.tryPromise({
 		try: () => c(),
 		catch: (e) => e
-	}), {
+	}), _ = Y(r), v = m(h, {
 		tag: e.name ?? "",
 		kind: f,
 		input: a,
 		subject: r.request.subject,
 		traceId: r.request.traceId,
-		...r.request.spanId === void 0 ? {} : { spanId: r.request.spanId }
-	}), _ = await u.runPromiseExit(h);
-	if (d.isSuccess(_)) return _.value;
-	throw l.squash(_.cause);
-}, Xe = (e) => new Promise((t) => {
-	let n = new _e.Socket(), r = (e) => {
+		...r.request.spanId === void 0 ? {} : { spanId: r.request.spanId },
+		..._ === void 0 ? {} : {
+			surface: "rest",
+			publicApi: _.publicApi
+		}
+	}), y = await u.runPromiseExit(v);
+	if (d.isSuccess(y)) return y.value;
+	throw l.squash(y.cause);
+}, rt = (e) => new Promise((t) => {
+	let n = new ye.Socket(), r = (e) => {
 		clearTimeout(i), n.destroy(), t(e);
 	}, i = setTimeout(() => r(!1), e.timeoutMs ?? 750);
 	n.once("connect", () => r(!0)), n.once("error", () => r(!1)), n.connect(e.port, e.host);
-}), Ze = async (e, t, n, r) => {
+}), it = async (e, t, n, r) => {
 	if (typeof t != "string" || typeof n != "function" || typeof r != "function") throw TypeError(`describeIfAvailable('${e}', ...): expected (label, dependency, probe, suite) — got dependency: ${typeof t}, probe: ${typeof n}, suite: ${typeof r}. Three arguments means the suite body is being used as the probe: it would run at file scope, unconditionally, and the skip would silently do nothing.`);
 	let i = !1;
 	try {
@@ -528,21 +547,21 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 	} catch {
 		i = !1;
 	}
-	ve.skipIf(!i)(i ? e : `${e} [SKIPPED: needs ${t}]`, r);
-}, Qe = async (e, t, n) => {
-	await Ze(e, `${t.name} at ${t.host}:${t.port}`, () => Xe(t), n);
-}, $e = async (e, t) => {
+	be.skipIf(!i)(i ? e : `${e} [SKIPPED: needs ${t}]`, r);
+}, at = async (e, t, n) => {
+	await it(e, `${t.name} at ${t.host}:${t.port}`, () => rt(t), n);
+}, ot = async (e, t) => {
 	try {
 		let n = await t();
 		n !== void 0 && n !== "" && console.log(`[engine] ${e}: ${n}`);
 	} catch {}
-}, et = "test-tenant", Q = (e, t, n) => ({
+}, st = "test-tenant", Q = (e, t, n) => ({
 	type: e,
 	id: t,
 	tenantId: n.tenantId ?? "test-tenant",
 	scopes: n.scopes ?? [],
 	...n.metadata === void 0 ? {} : { metadata: n.metadata }
-}), tt = (e, t = {}) => Q("user", e, t), nt = (e, t = {}) => Q("apiKey", e, t), rt = (e, t = {}) => Q("serviceAccount", e, t), it = (e = null) => h(e), at = (e = "job:test", t) => t === void 0 ? b(e) : b(e, t), ot = (e) => {
+}), ct = (e, t = {}) => Q("user", e, t), lt = (e, t = {}) => Q("apiKey", e, t), ut = (e, t = {}) => Q("serviceAccount", e, t), dt = (e = null) => h(e), ft = (e = "job:test", t) => t === void 0 ? b(e) : b(e, t), pt = (e) => {
 	let t = e.indexOf("?");
 	return t === -1 ? {
 		path: e,
@@ -551,18 +570,21 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 		path: e.slice(0, t),
 		query: e.slice(t + 1)
 	};
-}, st = (e, t) => {
+}, mt = (e, t) => {
 	let n = e.split("/").filter((e) => e.length > 0), r = t.split("/").filter((e) => e.length > 0);
 	return n.length === r.length && n.every((e, t) => e.startsWith(":") || e === r[t]);
 }, $ = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n.toLowerCase()] = r;
 	return t;
-}, ct = (e) => e === void 0 ? /* @__PURE__ */ new Uint8Array() : new TextEncoder().encode(JSON.stringify(e)), lt = (e) => e === void 0 ? "" : typeof e == "string" ? e : new TextDecoder().decode(e), ut = (e) => {
-	let { ctx: t } = e, n = ye((e.publicApi ?? []).map((e) => ({
+}, ht = (e) => e === void 0 ? /* @__PURE__ */ new Uint8Array() : new TextEncoder().encode(JSON.stringify(e)), gt = (e) => e === void 0 ? "" : typeof e == "string" ? e : new TextDecoder().decode(e), _t = (e) => {
+	let { ctx: t } = e, n = xe((e.publicApi ?? []).map((e) => ({
 		descriptor: e.descriptor,
-		invoke: (n, r) => t.withSubject(r.subject, (t) => Ye(e.descriptor, e.handler, n, t))
-	}))), r = [...e.restRoutes ?? [], ...n], i = _(e.strategies ?? [], {
+		invoke: (n, r) => t.withSubject(r.subject, (t) => (e.descriptor.publicApi !== void 0 && J(t, e.descriptor.publicApi), nt(e.descriptor, e.handler, n, t)))
+	})), {
+		pluginErrors: K(t).flatMap((e) => e.errorSchemas ?? []),
+		...e.publicApiProfile === void 0 ? {} : { profile: e.publicApiProfile }
+	}), r = [...e.restRoutes ?? [], ...n], i = _(e.strategies ?? [], {
 		...e.anonymousTenantRequired === void 0 ? {} : { anonymousTenantRequired: e.anonymousTenantRequired },
 		getStore: () => t.store
 	}), a = (n, o) => {
@@ -574,11 +596,11 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 				clientId: -1
 			})).subject : () => n,
 			...e.idempotency === void 0 ? {} : { idempotency: e.idempotency }
-		}, c = xe(r, s).map((e, t) => ({
+		}, c = Ce(r, s).map((e, t) => ({
 			pattern: r[t].path,
 			route: e
 		})), l = async (e, n, i = {}) => {
-			let { path: a, query: s } = ot(n), l = c.filter((e) => st(e.pattern, a)).map((e) => e.route);
+			let { path: a, query: s } = pt(n), l = c.filter((e) => mt(e.pattern, a)).map((e) => e.route);
 			if (l.length === 0) return {
 				status: 404,
 				headers: {},
@@ -597,12 +619,12 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 					...$(o),
 					...$(i.headers ?? {})
 				},
-				rawBody: ct(i.body),
+				rawBody: ht(i.body),
 				store: t.store
-			}, d = await be(l, u), f = {};
+			}, d = await Se(l, u), f = {};
 			for (let [e, t] of Object.entries(d.headers ?? {})) f[e.toLowerCase()] = t;
 			d.contentType !== void 0 && (f["content-type"] = d.contentType);
-			let p = lt(d.body), m = (d.contentType ?? "").includes("json");
+			let p = gt(d.body), m = (d.contentType ?? "").includes("json");
 			return {
 				status: d.status,
 				headers: f,
@@ -636,17 +658,17 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 		};
 	};
 	return a(void 0, {});
-}, dt = (e = {}) => {
+}, vt = (e = {}) => {
 	let t = e.id ?? "test", n = e.store ?? new Proxy({}, { get: (e, t) => {
 		throw Error(`makeSubscribeContext: this subscriber reached ctx.store.${String(t)} and the test passed no store. Pass \`{ store: makeTestContext().store }\` so the subscriber and the code under test share one — an empty stand-in would let a read of the wrong table pass.`);
 	} });
 	return {
 		id: t,
-		log: e.log ?? Se({ scope: `subscribe:${t}` }),
+		log: e.log ?? we({ scope: `subscribe:${t}` }),
 		store: n,
 		...e.publish === void 0 ? {} : { publish: e.publish }
 	};
-}, ft = (e) => {
+}, yt = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = t.get(n.stepName);
@@ -672,13 +694,13 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 		});
 	}
 	return n.sort((e, t) => e._startedAt - t._startedAt), n.map(({ _startedAt: e, ...t }) => t);
-}, pt = (e) => {
+}, bt = (e) => {
 	let t = e.workflows ?? [], n = /* @__PURE__ */ new Map(), r = 0;
 	return {
 		start: async (i, a) => {
 			let o = t.find((e) => e.workflow.name === i);
 			if (o === void 0) throw Error(`makeWorkflowRunner: no workflow named '${i}' — pass it in makeWorkflowRunner({ ctx, workflows: [{ workflow, execute }] }).`);
-			let s = `wfrun_test_${++r}`, c = Te(), l = o.workflow.toLayer(o.execute).pipe(f.provideMerge(we)), d = /* @__PURE__ */ new Date(), p = o.workflow.execute(a).pipe(u.locally(Ce, s), u.provide(c.layer), u.provide(l), u.either), m = await u.runPromise(p), h = ft(c.readSteps()), g = /* @__PURE__ */ new Date(), _;
+			let s = `wfrun_test_${++r}`, c = De(), l = o.workflow.toLayer(o.execute).pipe(f.provideMerge(Ee)), d = /* @__PURE__ */ new Date(), p = o.workflow.execute(a).pipe(u.locally(Te, s), u.provide(c.layer), u.provide(l), u.either), m = await u.runPromise(p), h = yt(c.readSteps()), g = /* @__PURE__ */ new Date(), _;
 			if (m._tag === "Right") _ = {
 				status: "succeeded",
 				output: m.right,
@@ -718,6 +740,6 @@ var Ee = new Set(e), D = 0, O = () => ++D, De = (e, t) => {
 		},
 		inspect: async (e) => n.get(e) ?? null
 	};
-}, mt = 1;
+}, xt = 1;
 //#endregion
-export { F as MockClock, R as MockLLM, I as MockWebhooks, mt as TESTING_PRESET_VERSION, et as TEST_TENANT_ID, it as anonymous, nt as apiKey, n as changeDelete, r as changeInsert, i as changeSoftDelete, a as changeUpdate, je as defineFactory, Ze as describeIfAvailable, Qe as describeIfReachable, k as fixtureRow, Fe as frozenTime, Ye as invoke, Xe as isTcpReachable, dt as makeSubscribeContext, ut as makeTestApp, qe as makeTestContext, pt as makeWorkflowRunner, Le as mockStore, O as nextSequence, ze as outboxNudgesOf, $e as reportEngineVersion, J as resetAfterCommit, K as rpcInterceptorFor, Y as runAfterCommit, X as runInStoreTransaction, rt as serviceAccount, q as serviceLayerFor, at as system, L as testEventBus, tt as user, Pe as withFrozenTime, Re as withRpcConnection };
+export { I as MockClock, z as MockLLM, L as MockWebhooks, xt as TESTING_PRESET_VERSION, st as TEST_TENANT_ID, dt as anonymous, lt as apiKey, n as changeDelete, r as changeInsert, i as changeSoftDelete, a as changeUpdate, Ne as defineFactory, it as describeIfAvailable, at as describeIfReachable, A as fixtureRow, Le as frozenTime, nt as invoke, rt as isTcpReachable, vt as makeSubscribeContext, _t as makeTestApp, et as makeTestContext, bt as makeWorkflowRunner, J as markRestInvocation, ze as mockStore, k as nextSequence, We as outboxNudgesOf, K as pluginsOf, ot as reportEngineVersion, Ue as resetAfterCommit, Y as restInvocationOf, Ve as rpcInterceptorFor, Z as runAfterCommit, Ge as runInStoreTransaction, ut as serviceAccount, He as serviceLayerFor, ft as system, R as testEventBus, ct as user, Ie as withFrozenTime, Be as withRpcConnection };