@electric-ax/agents-server 0.4.15 → 0.4.16

package/dist/index.d.cts

@@ -187,6 +187,56 @@ import * as drizzle_orm_pg_core238 from "drizzle-orm/pg-core";
 import * as drizzle_orm_pg_core239 from "drizzle-orm/pg-core";
 import * as drizzle_orm_pg_core240 from "drizzle-orm/pg-core";
 import * as drizzle_orm_pg_core241 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core242 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core243 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core244 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core245 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core246 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core247 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core248 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core249 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core250 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core251 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core252 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core253 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core254 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core255 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core256 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core257 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core258 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core259 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core260 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core261 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core262 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core263 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core264 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core265 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core266 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core267 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core268 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core269 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core270 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core271 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core272 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core273 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core274 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core275 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core276 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core277 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core278 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core279 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core280 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core281 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core282 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core283 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core284 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core285 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core286 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core287 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core288 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core289 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core290 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core291 from "drizzle-orm/pg-core";
 import * as drizzle_orm73 from "drizzle-orm";
 import * as drizzle_orm74 from "drizzle-orm";
 import { EntityTags, EventPointer, EventSourceBucket, EventSourceContract, EventSourceContract as EventSourceContract$1, EventSourceFilter, EventSourceSubscription, EventSourceSubscription as EventSourceSubscription$1, EventSourceSubscriptionInput, SubscriptionLifetime, WebhookNotification, WebhookSignatureVerifierConfig } from "@electric-ax/agents-runtime";
@@ -198,7 +248,7 @@ import { JsonWebKey, KeyObject } from "node:crypto";
 
 //#region rolldown:runtime
 declare namespace schema_d_exports {
-  export { consumerCallbacks, consumerClaims, entities, entityBridges, entityDispatchState, entityManifestSources, entityTypes, runnerRuntimeDiagnostics, runners, scheduledTasks, subscriptionWebhooks, tagStreamOutbox, users, wakeNotifications, wakeRegistrations };
+  export { consumerCallbacks, consumerClaims, entities, entityBridges, entityDispatchState, entityEffectivePermissions, entityLineage, entityManifestSources, entityPermissionGrants, entityTypePermissionGrants, entityTypes, runnerRuntimeDiagnostics, runners, scheduledTasks, sharedStateLinks, subscriptionWebhooks, tagStreamOutbox, users, wakeNotifications, wakeRegistrations };
 }
 declare const entityTypes: drizzle_orm_pg_core64.PgTableWithColumns<{
   name: "entity_types";
@@ -733,11 +783,777 @@ declare const entities: drizzle_orm_pg_core86.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
+declare const entityTypePermissionGrants: drizzle_orm_pg_core97.PgTableWithColumns<{
+  name: "entity_type_permission_grants";
+  schema: undefined;
+  columns: {
+    id: drizzle_orm_pg_core87.PgColumn<{
+      name: "id";
+      tableName: "entity_type_permission_grants";
+      dataType: "number";
+      columnType: "PgBigSerial53";
+      data: number;
+      driverParam: number;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: true;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    tenantId: drizzle_orm_pg_core88.PgColumn<{
+      name: "tenant_id";
+      tableName: "entity_type_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    entityType: drizzle_orm_pg_core89.PgColumn<{
+      name: "entity_type";
+      tableName: "entity_type_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    permission: drizzle_orm_pg_core90.PgColumn<{
+      name: "permission";
+      tableName: "entity_type_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    subjectKind: drizzle_orm_pg_core91.PgColumn<{
+      name: "subject_kind";
+      tableName: "entity_type_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    subjectValue: drizzle_orm_pg_core92.PgColumn<{
+      name: "subject_value";
+      tableName: "entity_type_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdBy: drizzle_orm_pg_core93.PgColumn<{
+      name: "created_by";
+      tableName: "entity_type_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    expiresAt: drizzle_orm_pg_core94.PgColumn<{
+      name: "expires_at";
+      tableName: "entity_type_permission_grants";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdAt: drizzle_orm_pg_core95.PgColumn<{
+      name: "created_at";
+      tableName: "entity_type_permission_grants";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    updatedAt: drizzle_orm_pg_core96.PgColumn<{
+      name: "updated_at";
+      tableName: "entity_type_permission_grants";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+  };
+  dialect: "pg";
+}>;
+declare const entityLineage: drizzle_orm_pg_core103.PgTableWithColumns<{
+  name: "entity_lineage";
+  schema: undefined;
+  columns: {
+    tenantId: drizzle_orm_pg_core98.PgColumn<{
+      name: "tenant_id";
+      tableName: "entity_lineage";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    ancestorUrl: drizzle_orm_pg_core99.PgColumn<{
+      name: "ancestor_url";
+      tableName: "entity_lineage";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    descendantUrl: drizzle_orm_pg_core100.PgColumn<{
+      name: "descendant_url";
+      tableName: "entity_lineage";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    depth: drizzle_orm_pg_core101.PgColumn<{
+      name: "depth";
+      tableName: "entity_lineage";
+      dataType: "number";
+      columnType: "PgInteger";
+      data: number;
+      driverParam: string | number;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdAt: drizzle_orm_pg_core102.PgColumn<{
+      name: "created_at";
+      tableName: "entity_lineage";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+  };
+  dialect: "pg";
+}>;
+declare const entityPermissionGrants: drizzle_orm_pg_core116.PgTableWithColumns<{
+  name: "entity_permission_grants";
+  schema: undefined;
+  columns: {
+    id: drizzle_orm_pg_core104.PgColumn<{
+      name: "id";
+      tableName: "entity_permission_grants";
+      dataType: "number";
+      columnType: "PgBigSerial53";
+      data: number;
+      driverParam: number;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: true;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    tenantId: drizzle_orm_pg_core105.PgColumn<{
+      name: "tenant_id";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    entityUrl: drizzle_orm_pg_core106.PgColumn<{
+      name: "entity_url";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    permission: drizzle_orm_pg_core107.PgColumn<{
+      name: "permission";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    subjectKind: drizzle_orm_pg_core108.PgColumn<{
+      name: "subject_kind";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    subjectValue: drizzle_orm_pg_core109.PgColumn<{
+      name: "subject_value";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    propagation: drizzle_orm_pg_core110.PgColumn<{
+      name: "propagation";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    copyToChildren: drizzle_orm_pg_core111.PgColumn<{
+      name: "copy_to_children";
+      tableName: "entity_permission_grants";
+      dataType: "boolean";
+      columnType: "PgBoolean";
+      data: boolean;
+      driverParam: boolean;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdBy: drizzle_orm_pg_core112.PgColumn<{
+      name: "created_by";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    expiresAt: drizzle_orm_pg_core113.PgColumn<{
+      name: "expires_at";
+      tableName: "entity_permission_grants";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdAt: drizzle_orm_pg_core114.PgColumn<{
+      name: "created_at";
+      tableName: "entity_permission_grants";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    updatedAt: drizzle_orm_pg_core115.PgColumn<{
+      name: "updated_at";
+      tableName: "entity_permission_grants";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+  };
+  dialect: "pg";
+}>;
+declare const entityEffectivePermissions: drizzle_orm_pg_core127.PgTableWithColumns<{
+  name: "entity_effective_permissions";
+  schema: undefined;
+  columns: {
+    id: drizzle_orm_pg_core117.PgColumn<{
+      name: "id";
+      tableName: "entity_effective_permissions";
+      dataType: "number";
+      columnType: "PgBigSerial53";
+      data: number;
+      driverParam: number;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: true;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    tenantId: drizzle_orm_pg_core118.PgColumn<{
+      name: "tenant_id";
+      tableName: "entity_effective_permissions";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    entityUrl: drizzle_orm_pg_core119.PgColumn<{
+      name: "entity_url";
+      tableName: "entity_effective_permissions";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    sourceEntityUrl: drizzle_orm_pg_core120.PgColumn<{
+      name: "source_entity_url";
+      tableName: "entity_effective_permissions";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    sourceGrantId: drizzle_orm_pg_core121.PgColumn<{
+      name: "source_grant_id";
+      tableName: "entity_effective_permissions";
+      dataType: "number";
+      columnType: "PgBigInt53";
+      data: number;
+      driverParam: string | number;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    permission: drizzle_orm_pg_core122.PgColumn<{
+      name: "permission";
+      tableName: "entity_effective_permissions";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    subjectKind: drizzle_orm_pg_core123.PgColumn<{
+      name: "subject_kind";
+      tableName: "entity_effective_permissions";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    subjectValue: drizzle_orm_pg_core124.PgColumn<{
+      name: "subject_value";
+      tableName: "entity_effective_permissions";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    expiresAt: drizzle_orm_pg_core125.PgColumn<{
+      name: "expires_at";
+      tableName: "entity_effective_permissions";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdAt: drizzle_orm_pg_core126.PgColumn<{
+      name: "created_at";
+      tableName: "entity_effective_permissions";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+  };
+  dialect: "pg";
+}>;
+declare const sharedStateLinks: drizzle_orm_pg_core134.PgTableWithColumns<{
+  name: "shared_state_links";
+  schema: undefined;
+  columns: {
+    tenantId: drizzle_orm_pg_core128.PgColumn<{
+      name: "tenant_id";
+      tableName: "shared_state_links";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    sharedStateId: drizzle_orm_pg_core129.PgColumn<{
+      name: "shared_state_id";
+      tableName: "shared_state_links";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    ownerEntityUrl: drizzle_orm_pg_core130.PgColumn<{
+      name: "owner_entity_url";
+      tableName: "shared_state_links";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    manifestKey: drizzle_orm_pg_core131.PgColumn<{
+      name: "manifest_key";
+      tableName: "shared_state_links";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdAt: drizzle_orm_pg_core132.PgColumn<{
+      name: "created_at";
+      tableName: "shared_state_links";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    updatedAt: drizzle_orm_pg_core133.PgColumn<{
+      name: "updated_at";
+      tableName: "shared_state_links";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+  };
+  dialect: "pg";
+}>;
+declare const users: drizzle_orm_pg_core146.PgTableWithColumns<{
   name: "users";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core87.PgColumn<{
+    tenantId: drizzle_orm_pg_core135.PgColumn<{
       name: "tenant_id";
       tableName: "users";
       dataType: "string";
@@ -754,7 +1570,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    id: drizzle_orm_pg_core88.PgColumn<{
+    id: drizzle_orm_pg_core136.PgColumn<{
       name: "id";
       tableName: "users";
       dataType: "string";
@@ -771,7 +1587,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    displayName: drizzle_orm_pg_core89.PgColumn<{
+    displayName: drizzle_orm_pg_core137.PgColumn<{
       name: "display_name";
       tableName: "users";
       dataType: "string";
@@ -788,7 +1604,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    email: drizzle_orm_pg_core90.PgColumn<{
+    email: drizzle_orm_pg_core138.PgColumn<{
       name: "email";
       tableName: "users";
       dataType: "string";
@@ -805,7 +1621,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    avatarUrl: drizzle_orm_pg_core91.PgColumn<{
+    avatarUrl: drizzle_orm_pg_core139.PgColumn<{
       name: "avatar_url";
       tableName: "users";
       dataType: "string";
@@ -822,7 +1638,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    authProvider: drizzle_orm_pg_core92.PgColumn<{
+    authProvider: drizzle_orm_pg_core140.PgColumn<{
       name: "auth_provider";
       tableName: "users";
       dataType: "string";
@@ -839,7 +1655,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    authSubject: drizzle_orm_pg_core93.PgColumn<{
+    authSubject: drizzle_orm_pg_core141.PgColumn<{
       name: "auth_subject";
       tableName: "users";
       dataType: "string";
@@ -856,7 +1672,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    profile: drizzle_orm_pg_core94.PgColumn<{
+    profile: drizzle_orm_pg_core142.PgColumn<{
       name: "profile";
       tableName: "users";
       dataType: "json";
@@ -873,7 +1689,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    metadata: drizzle_orm_pg_core95.PgColumn<{
+    metadata: drizzle_orm_pg_core143.PgColumn<{
       name: "metadata";
       tableName: "users";
       dataType: "json";
@@ -890,7 +1706,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core96.PgColumn<{
+    createdAt: drizzle_orm_pg_core144.PgColumn<{
       name: "created_at";
       tableName: "users";
       dataType: "date";
@@ -907,7 +1723,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core97.PgColumn<{
+    updatedAt: drizzle_orm_pg_core145.PgColumn<{
       name: "updated_at";
       tableName: "users";
       dataType: "date";
@@ -927,11 +1743,11 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
+declare const runners: drizzle_orm_pg_core157.PgTableWithColumns<{
   name: "runners";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core99.PgColumn<{
+    tenantId: drizzle_orm_pg_core147.PgColumn<{
       name: "tenant_id";
       tableName: "runners";
       dataType: "string";
@@ -948,7 +1764,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    id: drizzle_orm_pg_core100.PgColumn<{
+    id: drizzle_orm_pg_core148.PgColumn<{
       name: "id";
       tableName: "runners";
       dataType: "string";
@@ -965,7 +1781,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    ownerPrincipal: drizzle_orm_pg_core101.PgColumn<{
+    ownerPrincipal: drizzle_orm_pg_core149.PgColumn<{
       name: "owner_principal";
       tableName: "runners";
       dataType: "string";
@@ -982,7 +1798,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    label: drizzle_orm_pg_core102.PgColumn<{
+    label: drizzle_orm_pg_core150.PgColumn<{
       name: "label";
       tableName: "runners";
       dataType: "string";
@@ -999,7 +1815,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    kind: drizzle_orm_pg_core103.PgColumn<{
+    kind: drizzle_orm_pg_core151.PgColumn<{
       name: "kind";
       tableName: "runners";
       dataType: "string";
@@ -1016,7 +1832,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    adminStatus: drizzle_orm_pg_core104.PgColumn<{
+    adminStatus: drizzle_orm_pg_core152.PgColumn<{
       name: "admin_status";
       tableName: "runners";
       dataType: "string";
@@ -1033,7 +1849,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    wakeStream: drizzle_orm_pg_core105.PgColumn<{
+    wakeStream: drizzle_orm_pg_core153.PgColumn<{
       name: "wake_stream";
       tableName: "runners";
       dataType: "string";
@@ -1050,7 +1866,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    sandboxProfiles: drizzle_orm_pg_core106.PgColumn<{
+    sandboxProfiles: drizzle_orm_pg_core154.PgColumn<{
       name: "sandbox_profiles";
       tableName: "runners";
       dataType: "json";
@@ -1067,7 +1883,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core107.PgColumn<{
+    createdAt: drizzle_orm_pg_core155.PgColumn<{
       name: "created_at";
       tableName: "runners";
       dataType: "date";
@@ -1084,7 +1900,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core108.PgColumn<{
+    updatedAt: drizzle_orm_pg_core156.PgColumn<{
       name: "updated_at";
       tableName: "runners";
       dataType: "date";
@@ -1104,11 +1920,11 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumns<{
+declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core166.PgTableWithColumns<{
   name: "runner_runtime_diagnostics";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core110.PgColumn<{
+    tenantId: drizzle_orm_pg_core158.PgColumn<{
       name: "tenant_id";
       tableName: "runner_runtime_diagnostics";
       dataType: "string";
@@ -1125,7 +1941,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    runnerId: drizzle_orm_pg_core111.PgColumn<{
+    runnerId: drizzle_orm_pg_core159.PgColumn<{
       name: "runner_id";
       tableName: "runner_runtime_diagnostics";
       dataType: "string";
@@ -1142,7 +1958,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    ownerPrincipal: drizzle_orm_pg_core112.PgColumn<{
+    ownerPrincipal: drizzle_orm_pg_core160.PgColumn<{
       name: "owner_principal";
       tableName: "runner_runtime_diagnostics";
       dataType: "string";
@@ -1159,7 +1975,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    wakeStreamOffset: drizzle_orm_pg_core113.PgColumn<{
+    wakeStreamOffset: drizzle_orm_pg_core161.PgColumn<{
       name: "wake_stream_offset";
       tableName: "runner_runtime_diagnostics";
       dataType: "string";
@@ -1176,7 +1992,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastSeenAt: drizzle_orm_pg_core114.PgColumn<{
+    lastSeenAt: drizzle_orm_pg_core162.PgColumn<{
       name: "last_seen_at";
       tableName: "runner_runtime_diagnostics";
       dataType: "date";
@@ -1193,7 +2009,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    livenessLeaseExpiresAt: drizzle_orm_pg_core115.PgColumn<{
+    livenessLeaseExpiresAt: drizzle_orm_pg_core163.PgColumn<{
       name: "liveness_lease_expires_at";
       tableName: "runner_runtime_diagnostics";
       dataType: "date";
@@ -1210,7 +2026,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    diagnostics: drizzle_orm_pg_core116.PgColumn<{
+    diagnostics: drizzle_orm_pg_core164.PgColumn<{
       name: "diagnostics";
       tableName: "runner_runtime_diagnostics";
       dataType: "json";
@@ -1227,7 +2043,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core117.PgColumn<{
+    updatedAt: drizzle_orm_pg_core165.PgColumn<{
       name: "updated_at";
       tableName: "runner_runtime_diagnostics";
       dataType: "date";
@@ -1247,11 +2063,11 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
   };
   dialect: "pg";
 }>;
-declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
+declare const entityDispatchState: drizzle_orm_pg_core186.PgTableWithColumns<{
   name: "entity_dispatch_state";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core119.PgColumn<{
+    tenantId: drizzle_orm_pg_core167.PgColumn<{
       name: "tenant_id";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1268,7 +2084,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    entityUrl: drizzle_orm_pg_core120.PgColumn<{
+    entityUrl: drizzle_orm_pg_core168.PgColumn<{
       name: "entity_url";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1285,7 +2101,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    pendingSourceStreams: drizzle_orm_pg_core121.PgColumn<{
+    pendingSourceStreams: drizzle_orm_pg_core169.PgColumn<{
       name: "pending_source_streams";
       tableName: "entity_dispatch_state";
       dataType: "json";
@@ -1302,7 +2118,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    pendingReason: drizzle_orm_pg_core122.PgColumn<{
+    pendingReason: drizzle_orm_pg_core170.PgColumn<{
       name: "pending_reason";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1319,7 +2135,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    pendingSince: drizzle_orm_pg_core123.PgColumn<{
+    pendingSince: drizzle_orm_pg_core171.PgColumn<{
       name: "pending_since";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1336,7 +2152,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    outstandingWakeId: drizzle_orm_pg_core124.PgColumn<{
+    outstandingWakeId: drizzle_orm_pg_core172.PgColumn<{
       name: "outstanding_wake_id";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1353,7 +2169,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    outstandingWakeTarget: drizzle_orm_pg_core125.PgColumn<{
+    outstandingWakeTarget: drizzle_orm_pg_core173.PgColumn<{
       name: "outstanding_wake_target";
       tableName: "entity_dispatch_state";
       dataType: "json";
@@ -1370,7 +2186,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    outstandingWakeCreatedAt: drizzle_orm_pg_core126.PgColumn<{
+    outstandingWakeCreatedAt: drizzle_orm_pg_core174.PgColumn<{
       name: "outstanding_wake_created_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1387,7 +2203,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    activeConsumerId: drizzle_orm_pg_core127.PgColumn<{
+    activeConsumerId: drizzle_orm_pg_core175.PgColumn<{
       name: "active_consumer_id";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1404,7 +2220,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    activeRunnerId: drizzle_orm_pg_core128.PgColumn<{
+    activeRunnerId: drizzle_orm_pg_core176.PgColumn<{
       name: "active_runner_id";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1421,7 +2237,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    activeEpoch: drizzle_orm_pg_core129.PgColumn<{
+    activeEpoch: drizzle_orm_pg_core177.PgColumn<{
       name: "active_epoch";
       tableName: "entity_dispatch_state";
       dataType: "number";
@@ -1438,7 +2254,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    activeClaimedAt: drizzle_orm_pg_core130.PgColumn<{
+    activeClaimedAt: drizzle_orm_pg_core178.PgColumn<{
       name: "active_claimed_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1455,7 +2271,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    activeLeaseExpiresAt: drizzle_orm_pg_core131.PgColumn<{
+    activeLeaseExpiresAt: drizzle_orm_pg_core179.PgColumn<{
       name: "active_lease_expires_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1472,7 +2288,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastWakeId: drizzle_orm_pg_core132.PgColumn<{
+    lastWakeId: drizzle_orm_pg_core180.PgColumn<{
       name: "last_wake_id";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1489,7 +2305,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastClaimedAt: drizzle_orm_pg_core133.PgColumn<{
+    lastClaimedAt: drizzle_orm_pg_core181.PgColumn<{
       name: "last_claimed_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1506,7 +2322,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastReleasedAt: drizzle_orm_pg_core134.PgColumn<{
+    lastReleasedAt: drizzle_orm_pg_core182.PgColumn<{
       name: "last_released_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1523,7 +2339,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastCompletedAt: drizzle_orm_pg_core135.PgColumn<{
+    lastCompletedAt: drizzle_orm_pg_core183.PgColumn<{
       name: "last_completed_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1540,7 +2356,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastError: drizzle_orm_pg_core136.PgColumn<{
+    lastError: drizzle_orm_pg_core184.PgColumn<{
       name: "last_error";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1557,7 +2373,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core137.PgColumn<{
+    updatedAt: drizzle_orm_pg_core185.PgColumn<{
       name: "updated_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1577,11 +2393,11 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
+declare const wakeNotifications: drizzle_orm_pg_core203.PgTableWithColumns<{
   name: "wake_notifications";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core139.PgColumn<{
+    tenantId: drizzle_orm_pg_core187.PgColumn<{
       name: "tenant_id";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1598,7 +2414,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    wakeId: drizzle_orm_pg_core140.PgColumn<{
+    wakeId: drizzle_orm_pg_core188.PgColumn<{
       name: "wake_id";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1615,7 +2431,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    entityUrl: drizzle_orm_pg_core141.PgColumn<{
+    entityUrl: drizzle_orm_pg_core189.PgColumn<{
       name: "entity_url";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1632,7 +2448,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    targetType: drizzle_orm_pg_core142.PgColumn<{
+    targetType: drizzle_orm_pg_core190.PgColumn<{
       name: "target_type";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1649,7 +2465,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    targetRunnerId: drizzle_orm_pg_core143.PgColumn<{
+    targetRunnerId: drizzle_orm_pg_core191.PgColumn<{
       name: "target_runner_id";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1666,7 +2482,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    targetWebhookUrl: drizzle_orm_pg_core144.PgColumn<{
+    targetWebhookUrl: drizzle_orm_pg_core192.PgColumn<{
       name: "target_webhook_url";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1683,7 +2499,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    targetWorkerPoolId: drizzle_orm_pg_core145.PgColumn<{
+    targetWorkerPoolId: drizzle_orm_pg_core193.PgColumn<{
       name: "target_worker_pool_id";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1700,7 +2516,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    runnerWakeStream: drizzle_orm_pg_core146.PgColumn<{
+    runnerWakeStream: drizzle_orm_pg_core194.PgColumn<{
       name: "runner_wake_stream";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1717,7 +2533,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    runnerWakeStreamOffset: drizzle_orm_pg_core147.PgColumn<{
+    runnerWakeStreamOffset: drizzle_orm_pg_core195.PgColumn<{
       name: "runner_wake_stream_offset";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1734,7 +2550,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    notificationPublic: drizzle_orm_pg_core148.PgColumn<{
+    notificationPublic: drizzle_orm_pg_core196.PgColumn<{
       name: "notification_public";
       tableName: "wake_notifications";
       dataType: "json";
@@ -1751,7 +2567,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    deliveryStatus: drizzle_orm_pg_core149.PgColumn<{
+    deliveryStatus: drizzle_orm_pg_core197.PgColumn<{
       name: "delivery_status";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1768,7 +2584,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimStatus: drizzle_orm_pg_core150.PgColumn<{
+    claimStatus: drizzle_orm_pg_core198.PgColumn<{
       name: "claim_status";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1785,7 +2601,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core151.PgColumn<{
+    createdAt: drizzle_orm_pg_core199.PgColumn<{
       name: "created_at";
       tableName: "wake_notifications";
       dataType: "date";
@@ -1802,7 +2618,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    deliveredAt: drizzle_orm_pg_core152.PgColumn<{
+    deliveredAt: drizzle_orm_pg_core200.PgColumn<{
       name: "delivered_at";
       tableName: "wake_notifications";
       dataType: "date";
@@ -1819,7 +2635,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimedAt: drizzle_orm_pg_core153.PgColumn<{
+    claimedAt: drizzle_orm_pg_core201.PgColumn<{
       name: "claimed_at";
       tableName: "wake_notifications";
       dataType: "date";
@@ -1836,7 +2652,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    resolvedAt: drizzle_orm_pg_core154.PgColumn<{
+    resolvedAt: drizzle_orm_pg_core202.PgColumn<{
       name: "resolved_at";
       tableName: "wake_notifications";
       dataType: "date";
@@ -1856,11 +2672,11 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
+declare const consumerClaims: drizzle_orm_pg_core218.PgTableWithColumns<{
   name: "consumer_claims";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core156.PgColumn<{
+    tenantId: drizzle_orm_pg_core204.PgColumn<{
       name: "tenant_id";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1877,7 +2693,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    consumerId: drizzle_orm_pg_core157.PgColumn<{
+    consumerId: drizzle_orm_pg_core205.PgColumn<{
       name: "consumer_id";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1894,7 +2710,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    epoch: drizzle_orm_pg_core158.PgColumn<{
+    epoch: drizzle_orm_pg_core206.PgColumn<{
       name: "epoch";
       tableName: "consumer_claims";
       dataType: "number";
@@ -1911,7 +2727,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    wakeId: drizzle_orm_pg_core159.PgColumn<{
+    wakeId: drizzle_orm_pg_core207.PgColumn<{
       name: "wake_id";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1928,7 +2744,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    entityUrl: drizzle_orm_pg_core160.PgColumn<{
+    entityUrl: drizzle_orm_pg_core208.PgColumn<{
       name: "entity_url";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1945,7 +2761,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    streamPath: drizzle_orm_pg_core161.PgColumn<{
+    streamPath: drizzle_orm_pg_core209.PgColumn<{
       name: "stream_path";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1962,7 +2778,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    runnerId: drizzle_orm_pg_core162.PgColumn<{
+    runnerId: drizzle_orm_pg_core210.PgColumn<{
       name: "runner_id";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1979,7 +2795,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    status: drizzle_orm_pg_core163.PgColumn<{
+    status: drizzle_orm_pg_core211.PgColumn<{
       name: "status";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1996,7 +2812,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimedAt: drizzle_orm_pg_core164.PgColumn<{
+    claimedAt: drizzle_orm_pg_core212.PgColumn<{
       name: "claimed_at";
       tableName: "consumer_claims";
       dataType: "date";
@@ -2013,7 +2829,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastHeartbeatAt: drizzle_orm_pg_core165.PgColumn<{
+    lastHeartbeatAt: drizzle_orm_pg_core213.PgColumn<{
       name: "last_heartbeat_at";
       tableName: "consumer_claims";
       dataType: "date";
@@ -2030,7 +2846,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    leaseExpiresAt: drizzle_orm_pg_core166.PgColumn<{
+    leaseExpiresAt: drizzle_orm_pg_core214.PgColumn<{
       name: "lease_expires_at";
       tableName: "consumer_claims";
       dataType: "date";
@@ -2047,7 +2863,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    releasedAt: drizzle_orm_pg_core167.PgColumn<{
+    releasedAt: drizzle_orm_pg_core215.PgColumn<{
       name: "released_at";
       tableName: "consumer_claims";
       dataType: "date";
@@ -2064,7 +2880,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    ackedStreams: drizzle_orm_pg_core168.PgColumn<{
+    ackedStreams: drizzle_orm_pg_core216.PgColumn<{
       name: "acked_streams";
       tableName: "consumer_claims";
       dataType: "json";
@@ -2081,7 +2897,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core169.PgColumn<{
+    updatedAt: drizzle_orm_pg_core217.PgColumn<{
       name: "updated_at";
       tableName: "consumer_claims";
       dataType: "date";
@@ -2101,11 +2917,11 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
+declare const wakeRegistrations: drizzle_orm_pg_core231.PgTableWithColumns<{
   name: "wake_registrations";
   schema: undefined;
   columns: {
-    id: drizzle_orm_pg_core171.PgColumn<{
+    id: drizzle_orm_pg_core219.PgColumn<{
       name: "id";
       tableName: "wake_registrations";
       dataType: "number";
@@ -2122,7 +2938,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    tenantId: drizzle_orm_pg_core172.PgColumn<{
+    tenantId: drizzle_orm_pg_core220.PgColumn<{
       name: "tenant_id";
       tableName: "wake_registrations";
       dataType: "string";
@@ -2139,7 +2955,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    subscriberUrl: drizzle_orm_pg_core173.PgColumn<{
+    subscriberUrl: drizzle_orm_pg_core221.PgColumn<{
       name: "subscriber_url";
       tableName: "wake_registrations";
       dataType: "string";
@@ -2156,7 +2972,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    sourceUrl: drizzle_orm_pg_core174.PgColumn<{
+    sourceUrl: drizzle_orm_pg_core222.PgColumn<{
       name: "source_url";
       tableName: "wake_registrations";
       dataType: "string";
@@ -2173,7 +2989,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    condition: drizzle_orm_pg_core175.PgColumn<{
+    condition: drizzle_orm_pg_core223.PgColumn<{
       name: "condition";
       tableName: "wake_registrations";
       dataType: "json";
@@ -2190,7 +3006,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    debounceMs: drizzle_orm_pg_core176.PgColumn<{
+    debounceMs: drizzle_orm_pg_core224.PgColumn<{
       name: "debounce_ms";
       tableName: "wake_registrations";
       dataType: "number";
@@ -2207,7 +3023,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    timeoutMs: drizzle_orm_pg_core177.PgColumn<{
+    timeoutMs: drizzle_orm_pg_core225.PgColumn<{
       name: "timeout_ms";
       tableName: "wake_registrations";
       dataType: "number";
@@ -2224,7 +3040,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    oneShot: drizzle_orm_pg_core178.PgColumn<{
+    oneShot: drizzle_orm_pg_core226.PgColumn<{
       name: "one_shot";
       tableName: "wake_registrations";
       dataType: "boolean";
@@ -2241,7 +3057,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    timeoutConsumed: drizzle_orm_pg_core179.PgColumn<{
+    timeoutConsumed: drizzle_orm_pg_core227.PgColumn<{
       name: "timeout_consumed";
       tableName: "wake_registrations";
       dataType: "boolean";
@@ -2258,7 +3074,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    includeResponse: drizzle_orm_pg_core180.PgColumn<{
+    includeResponse: drizzle_orm_pg_core228.PgColumn<{
       name: "include_response";
       tableName: "wake_registrations";
       dataType: "boolean";
@@ -2275,7 +3091,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    manifestKey: drizzle_orm_pg_core181.PgColumn<{
+    manifestKey: drizzle_orm_pg_core229.PgColumn<{
       name: "manifest_key";
       tableName: "wake_registrations";
       dataType: "string";
@@ -2292,7 +3108,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core182.PgColumn<{
+    createdAt: drizzle_orm_pg_core230.PgColumn<{
       name: "created_at";
       tableName: "wake_registrations";
       dataType: "date";
@@ -2312,11 +3128,11 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const subscriptionWebhooks: drizzle_orm_pg_core188.PgTableWithColumns<{
+declare const subscriptionWebhooks: drizzle_orm_pg_core236.PgTableWithColumns<{
   name: "subscription_webhooks";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core184.PgColumn<{
+    tenantId: drizzle_orm_pg_core232.PgColumn<{
       name: "tenant_id";
       tableName: "subscription_webhooks";
       dataType: "string";
@@ -2333,7 +3149,7 @@ declare const subscriptionWebhooks: drizzle_orm_pg_core188.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    subscriptionId: drizzle_orm_pg_core185.PgColumn<{
+    subscriptionId: drizzle_orm_pg_core233.PgColumn<{
       name: "subscription_id";
       tableName: "subscription_webhooks";
       dataType: "string";
@@ -2350,7 +3166,7 @@ declare const subscriptionWebhooks: drizzle_orm_pg_core188.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    webhookUrl: drizzle_orm_pg_core186.PgColumn<{
+    webhookUrl: drizzle_orm_pg_core234.PgColumn<{
       name: "webhook_url";
       tableName: "subscription_webhooks";
       dataType: "string";
@@ -2367,7 +3183,7 @@ declare const subscriptionWebhooks: drizzle_orm_pg_core188.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core187.PgColumn<{
+    createdAt: drizzle_orm_pg_core235.PgColumn<{
       name: "created_at";
       tableName: "subscription_webhooks";
       dataType: "date";
@@ -2387,11 +3203,11 @@ declare const subscriptionWebhooks: drizzle_orm_pg_core188.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const consumerCallbacks: drizzle_orm_pg_core194.PgTableWithColumns<{
+declare const consumerCallbacks: drizzle_orm_pg_core242.PgTableWithColumns<{
   name: "consumer_callbacks";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core189.PgColumn<{
+    tenantId: drizzle_orm_pg_core237.PgColumn<{
       name: "tenant_id";
       tableName: "consumer_callbacks";
       dataType: "string";
@@ -2408,7 +3224,7 @@ declare const consumerCallbacks: drizzle_orm_pg_core194.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    consumerId: drizzle_orm_pg_core190.PgColumn<{
+    consumerId: drizzle_orm_pg_core238.PgColumn<{
       name: "consumer_id";
       tableName: "consumer_callbacks";
       dataType: "string";
@@ -2425,7 +3241,7 @@ declare const consumerCallbacks: drizzle_orm_pg_core194.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    callbackUrl: drizzle_orm_pg_core191.PgColumn<{
+    callbackUrl: drizzle_orm_pg_core239.PgColumn<{
       name: "callback_url";
       tableName: "consumer_callbacks";
       dataType: "string";
@@ -2442,7 +3258,7 @@ declare const consumerCallbacks: drizzle_orm_pg_core194.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    primaryStream: drizzle_orm_pg_core192.PgColumn<{
+    primaryStream: drizzle_orm_pg_core240.PgColumn<{
       name: "primary_stream";
       tableName: "consumer_callbacks";
       dataType: "string";
@@ -2459,7 +3275,7 @@ declare const consumerCallbacks: drizzle_orm_pg_core194.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core193.PgColumn<{
+    createdAt: drizzle_orm_pg_core241.PgColumn<{
       name: "created_at";
       tableName: "consumer_callbacks";
       dataType: "date";
@@ -2479,11 +3295,11 @@ declare const consumerCallbacks: drizzle_orm_pg_core194.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
+declare const scheduledTasks: drizzle_orm_pg_core258.PgTableWithColumns<{
   name: "scheduled_tasks";
   schema: undefined;
   columns: {
-    id: drizzle_orm_pg_core195.PgColumn<{
+    id: drizzle_orm_pg_core243.PgColumn<{
       name: "id";
       tableName: "scheduled_tasks";
       dataType: "number";
@@ -2500,7 +3316,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    tenantId: drizzle_orm_pg_core196.PgColumn<{
+    tenantId: drizzle_orm_pg_core244.PgColumn<{
       name: "tenant_id";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2517,7 +3333,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    kind: drizzle_orm_pg_core197.PgColumn<{
+    kind: drizzle_orm_pg_core245.PgColumn<{
       name: "kind";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2534,7 +3350,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    payload: drizzle_orm_pg_core198.PgColumn<{
+    payload: drizzle_orm_pg_core246.PgColumn<{
       name: "payload";
       tableName: "scheduled_tasks";
       dataType: "json";
@@ -2551,7 +3367,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    fireAt: drizzle_orm_pg_core199.PgColumn<{
+    fireAt: drizzle_orm_pg_core247.PgColumn<{
       name: "fire_at";
       tableName: "scheduled_tasks";
       dataType: "date";
@@ -2568,7 +3384,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    cronExpression: drizzle_orm_pg_core200.PgColumn<{
+    cronExpression: drizzle_orm_pg_core248.PgColumn<{
       name: "cron_expression";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2585,7 +3401,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    cronTimezone: drizzle_orm_pg_core201.PgColumn<{
+    cronTimezone: drizzle_orm_pg_core249.PgColumn<{
       name: "cron_timezone";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2602,7 +3418,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    cronTickNumber: drizzle_orm_pg_core202.PgColumn<{
+    cronTickNumber: drizzle_orm_pg_core250.PgColumn<{
       name: "cron_tick_number";
       tableName: "scheduled_tasks";
       dataType: "number";
@@ -2619,7 +3435,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    ownerEntityUrl: drizzle_orm_pg_core203.PgColumn<{
+    ownerEntityUrl: drizzle_orm_pg_core251.PgColumn<{
       name: "owner_entity_url";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2636,7 +3452,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    manifestKey: drizzle_orm_pg_core204.PgColumn<{
+    manifestKey: drizzle_orm_pg_core252.PgColumn<{
       name: "manifest_key";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2653,7 +3469,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimedBy: drizzle_orm_pg_core205.PgColumn<{
+    claimedBy: drizzle_orm_pg_core253.PgColumn<{
       name: "claimed_by";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2670,7 +3486,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimedAt: drizzle_orm_pg_core206.PgColumn<{
+    claimedAt: drizzle_orm_pg_core254.PgColumn<{
       name: "claimed_at";
       tableName: "scheduled_tasks";
       dataType: "date";
@@ -2687,7 +3503,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    completedAt: drizzle_orm_pg_core207.PgColumn<{
+    completedAt: drizzle_orm_pg_core255.PgColumn<{
       name: "completed_at";
       tableName: "scheduled_tasks";
       dataType: "date";
@@ -2704,7 +3520,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastError: drizzle_orm_pg_core208.PgColumn<{
+    lastError: drizzle_orm_pg_core256.PgColumn<{
       name: "last_error";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2721,7 +3537,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core209.PgColumn<{
+    createdAt: drizzle_orm_pg_core257.PgColumn<{
       name: "created_at";
       tableName: "scheduled_tasks";
       dataType: "date";
@@ -2741,11 +3557,11 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
+declare const entityBridges: drizzle_orm_pg_core270.PgTableWithColumns<{
   name: "entity_bridges";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core211.PgColumn<{
+    tenantId: drizzle_orm_pg_core259.PgColumn<{
       name: "tenant_id";
       tableName: "entity_bridges";
       dataType: "string";
@@ -2762,7 +3578,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    sourceRef: drizzle_orm_pg_core212.PgColumn<{
+    sourceRef: drizzle_orm_pg_core260.PgColumn<{
       name: "source_ref";
       tableName: "entity_bridges";
       dataType: "string";
@@ -2779,7 +3595,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    tags: drizzle_orm_pg_core213.PgColumn<{
+    tags: drizzle_orm_pg_core261.PgColumn<{
       name: "tags";
       tableName: "entity_bridges";
       dataType: "json";
@@ -2796,7 +3612,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    streamUrl: drizzle_orm_pg_core214.PgColumn<{
+    streamUrl: drizzle_orm_pg_core262.PgColumn<{
       name: "stream_url";
       tableName: "entity_bridges";
       dataType: "string";
@@ -2813,7 +3629,41 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    shapeHandle: drizzle_orm_pg_core215.PgColumn<{
+    principalUrl: drizzle_orm_pg_core263.PgColumn<{
+      name: "principal_url";
+      tableName: "entity_bridges";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    principalKind: drizzle_orm_pg_core264.PgColumn<{
+      name: "principal_kind";
+      tableName: "entity_bridges";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    shapeHandle: drizzle_orm_pg_core265.PgColumn<{
       name: "shape_handle";
       tableName: "entity_bridges";
       dataType: "string";
@@ -2830,7 +3680,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    shapeOffset: drizzle_orm_pg_core216.PgColumn<{
+    shapeOffset: drizzle_orm_pg_core266.PgColumn<{
       name: "shape_offset";
       tableName: "entity_bridges";
       dataType: "string";
@@ -2847,7 +3697,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastObserverActivityAt: drizzle_orm_pg_core217.PgColumn<{
+    lastObserverActivityAt: drizzle_orm_pg_core267.PgColumn<{
       name: "last_observer_activity_at";
       tableName: "entity_bridges";
       dataType: "date";
@@ -2864,7 +3714,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core218.PgColumn<{
+    createdAt: drizzle_orm_pg_core268.PgColumn<{
       name: "created_at";
       tableName: "entity_bridges";
       dataType: "date";
@@ -2881,7 +3731,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core219.PgColumn<{
+    updatedAt: drizzle_orm_pg_core269.PgColumn<{
       name: "updated_at";
       tableName: "entity_bridges";
       dataType: "date";
@@ -2901,11 +3751,11 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
+declare const entityManifestSources: drizzle_orm_pg_core277.PgTableWithColumns<{
   name: "entity_manifest_sources";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core221.PgColumn<{
+    tenantId: drizzle_orm_pg_core271.PgColumn<{
       name: "tenant_id";
       tableName: "entity_manifest_sources";
       dataType: "string";
@@ -2922,7 +3772,7 @@ declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    ownerEntityUrl: drizzle_orm_pg_core222.PgColumn<{
+    ownerEntityUrl: drizzle_orm_pg_core272.PgColumn<{
       name: "owner_entity_url";
       tableName: "entity_manifest_sources";
       dataType: "string";
@@ -2939,7 +3789,7 @@ declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    manifestKey: drizzle_orm_pg_core223.PgColumn<{
+    manifestKey: drizzle_orm_pg_core273.PgColumn<{
       name: "manifest_key";
       tableName: "entity_manifest_sources";
       dataType: "string";
@@ -2956,7 +3806,7 @@ declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    sourceRef: drizzle_orm_pg_core224.PgColumn<{
+    sourceRef: drizzle_orm_pg_core274.PgColumn<{
       name: "source_ref";
       tableName: "entity_manifest_sources";
       dataType: "string";
@@ -2973,7 +3823,7 @@ declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core225.PgColumn<{
+    createdAt: drizzle_orm_pg_core275.PgColumn<{
       name: "created_at";
       tableName: "entity_manifest_sources";
       dataType: "date";
@@ -2990,7 +3840,7 @@ declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core226.PgColumn<{
+    updatedAt: drizzle_orm_pg_core276.PgColumn<{
       name: "updated_at";
       tableName: "entity_manifest_sources";
       dataType: "date";
@@ -3010,11 +3860,11 @@ declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
+declare const tagStreamOutbox: drizzle_orm_pg_core291.PgTableWithColumns<{
   name: "tag_stream_outbox";
   schema: undefined;
   columns: {
-    id: drizzle_orm_pg_core228.PgColumn<{
+    id: drizzle_orm_pg_core278.PgColumn<{
       name: "id";
       tableName: "tag_stream_outbox";
       dataType: "number";
@@ -3031,7 +3881,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    tenantId: drizzle_orm_pg_core229.PgColumn<{
+    tenantId: drizzle_orm_pg_core279.PgColumn<{
       name: "tenant_id";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3048,7 +3898,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    entityUrl: drizzle_orm_pg_core230.PgColumn<{
+    entityUrl: drizzle_orm_pg_core280.PgColumn<{
       name: "entity_url";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3065,7 +3915,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    collection: drizzle_orm_pg_core231.PgColumn<{
+    collection: drizzle_orm_pg_core281.PgColumn<{
       name: "collection";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3082,7 +3932,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    op: drizzle_orm_pg_core232.PgColumn<{
+    op: drizzle_orm_pg_core282.PgColumn<{
       name: "op";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3099,7 +3949,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    key: drizzle_orm_pg_core233.PgColumn<{
+    key: drizzle_orm_pg_core283.PgColumn<{
       name: "key";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3116,7 +3966,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    rowData: drizzle_orm_pg_core234.PgColumn<{
+    rowData: drizzle_orm_pg_core284.PgColumn<{
       name: "row_data";
       tableName: "tag_stream_outbox";
       dataType: "json";
@@ -3133,7 +3983,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    attemptCount: drizzle_orm_pg_core235.PgColumn<{
+    attemptCount: drizzle_orm_pg_core285.PgColumn<{
       name: "attempt_count";
       tableName: "tag_stream_outbox";
       dataType: "number";
@@ -3150,7 +4000,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastError: drizzle_orm_pg_core236.PgColumn<{
+    lastError: drizzle_orm_pg_core286.PgColumn<{
       name: "last_error";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3167,7 +4017,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimedBy: drizzle_orm_pg_core237.PgColumn<{
+    claimedBy: drizzle_orm_pg_core287.PgColumn<{
       name: "claimed_by";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3184,7 +4034,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimedAt: drizzle_orm_pg_core238.PgColumn<{
+    claimedAt: drizzle_orm_pg_core288.PgColumn<{
       name: "claimed_at";
       tableName: "tag_stream_outbox";
       dataType: "date";
@@ -3201,7 +4051,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    deadLetteredAt: drizzle_orm_pg_core239.PgColumn<{
+    deadLetteredAt: drizzle_orm_pg_core289.PgColumn<{
       name: "dead_lettered_at";
       tableName: "tag_stream_outbox";
       dataType: "date";
@@ -3218,7 +4068,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core240.PgColumn<{
+    createdAt: drizzle_orm_pg_core290.PgColumn<{
       name: "created_at";
       tableName: "tag_stream_outbox";
       dataType: "date";
@@ -3281,6 +4131,68 @@ interface DispatchPolicy {
 type RunnerKind = `local` | `cloud-worker` | `sandbox` | `ci` | `server`;
 type RunnerAdminStatus = `enabled` | `disabled`;
 type RunnerLiveness = `online` | `offline`;
+type PermissionSubjectKind = `principal` | `principal_kind`;
+type PermissionSubject = {
+  subject_kind: PermissionSubjectKind;
+  subject_value: string;
+};
+type EntityPermission = `read` | `write` | `delete` | `signal` | `fork` | `schedule` | `spawn` | `manage`;
+type EntityTypePermission = `spawn` | `manage`;
+type EntityPermissionPropagation = `self` | `descendants`;
+interface EntityPermissionGrant extends PermissionSubject {
+  id: number;
+  entity_url: string;
+  permission: EntityPermission;
+  propagation: EntityPermissionPropagation;
+  copy_to_children: boolean;
+  created_by?: string;
+  expires_at?: string;
+  created_at: string;
+  updated_at: string;
+}
+interface EntityTypePermissionGrant extends PermissionSubject {
+  id: number;
+  entity_type: string;
+  permission: EntityTypePermission;
+  created_by?: string;
+  expires_at?: string;
+  created_at: string;
+  updated_at: string;
+}
+interface EntityTypePermissionGrantInput extends PermissionSubject {
+  permission: EntityTypePermission;
+  expires_at?: string;
+}
+type AuthorizationResource = {
+  kind: `entity`;
+  entity: ElectricAgentsEntity;
+} | {
+  kind: `entity_type`;
+  entityType: ElectricAgentsEntityType;
+} | {
+  kind: `entity_type_registration`;
+  entityTypeName: string;
+} | {
+  kind: `shared_state`;
+  sharedStateId: string;
+  linkedEntityUrls: Array<string>;
+};
+type AuthorizationDecision = {
+  decision: `allow` | `deny`;
+  expires_at?: string;
+};
+type AuthorizeRequest = (input: {
+  tenant: string;
+  principal: Principal;
+  verb: EntityPermission | EntityTypePermission;
+  resource: AuthorizationResource;
+  request?: {
+    method: string;
+    url: string;
+    headers: Record<string, string>;
+  };
+  builtInAllowed: boolean;
+}) => Promise<AuthorizationDecision> | AuthorizationDecision;
 type WakeDeliveryStatus = `queued` | `delivered` | `failed` | `superseded`;
 type WakeClaimStatus = `unclaimed` | `claimed` | `completed` | `expired`;
 type ConsumerClaimStatus = `active` | `released` | `expired` | `failed`;
@@ -3454,7 +4366,6 @@ interface ElectricAgentsEntity {
   status: EntityStatus;
   streams: {
     main: string;
-    error: string;
   };
   subscription_id: string;
   dispatch_policy?: DispatchPolicy;
@@ -3484,7 +4395,6 @@ interface PublicElectricAgentsEntity {
   status: EntityStatus;
   streams: {
     main: string;
-    error: string;
   };
   dispatch_policy?: DispatchPolicy;
   tags: Record<string, string>;
@@ -3519,6 +4429,7 @@ interface RegisterEntityTypeRequest {
   state_schemas?: Record<string, Record<string, unknown>>;
   serve_endpoint?: string;
   default_dispatch_policy?: DispatchPolicy;
+  permission_grants?: Array<EntityTypePermissionGrantInput>;
 }
 interface TypedSpawnRequest {
   instance_id: string;
@@ -3549,6 +4460,8 @@ interface TypedSpawnRequest {
 }
 interface SendRequest {
   from?: string;
+  from_principal?: string;
+  from_agent?: string;
   payload?: unknown;
   key?: string;
   type?: string;
@@ -3584,6 +4497,8 @@ interface EntityBridgeRow {
   sourceRef: string;
   tags: EntityTags;
   streamUrl: string;
+  principalUrl?: string;
+  principalKind?: string;
   shapeHandle?: string;
   shapeOffset?: string;
   lastObserverActivityAt: Date;
@@ -3663,12 +4578,33 @@ interface MaterializeReleasedClaimInput {
   ackedStreams?: Array<SourceStreamOffset>;
   releasedAt?: Date;
 }
+interface CreateEntityTypePermissionGrantInput {
+  entityType: string;
+  permission: EntityTypePermission;
+  subjectKind: PermissionSubjectKind;
+  subjectValue: string;
+  createdBy?: string;
+  expiresAt?: Date;
+}
+interface CreateEntityPermissionGrantInput {
+  entityUrl: string;
+  permission: EntityPermission;
+  subjectKind: PermissionSubjectKind;
+  subjectValue: string;
+  propagation?: EntityPermissionPropagation;
+  copyToChildren?: boolean;
+  createdBy?: string;
+  expiresAt?: Date;
+}
 declare class PostgresRegistry {
   private db;
   readonly tenantId: string;
+  private lastPermissionPruneStartedAt;
+  private permissionPrunePromise;
   constructor(db: DrizzleDB, tenantId?: string);
   initialize(): Promise<void>;
   close(): void;
+  ensureUserForPrincipal(principal: Principal): Promise<void>;
   createRunner(input: RegisterRunnerInput): Promise<ElectricAgentsRunner>;
   /**
    * Every sandbox profile advertised by a runner in this tenant (one entry
@@ -3716,10 +4652,38 @@ declare class PostgresRegistry {
     limit?: number;
     offset?: number;
     created_by?: string;
+    readableBy?: {
+      principalUrl: string;
+      principalKind: string;
+      bypass?: boolean;
+    };
   }): Promise<{
     entities: Array<ElectricAgentsEntity>;
     total: number;
   }>;
+  createEntityTypePermissionGrant(input: CreateEntityTypePermissionGrantInput): Promise<EntityTypePermissionGrant>;
+  ensureEntityTypePermissionGrant(input: CreateEntityTypePermissionGrantInput): Promise<EntityTypePermissionGrant>;
+  listEntityTypePermissionGrants(entityType: string): Promise<Array<EntityTypePermissionGrant>>;
+  deleteEntityTypePermissionGrant(entityType: string, grantId: number): Promise<boolean>;
+  hasEntityTypePermission(entityType: string, permission: EntityTypePermission, subject: {
+    principalUrl: string;
+    principalKind: string;
+  }): Promise<boolean>;
+  createEntityPermissionGrant(input: CreateEntityPermissionGrantInput): Promise<EntityPermissionGrant>;
+  listEntityPermissionGrants(entityUrl: string): Promise<Array<EntityPermissionGrant>>;
+  deleteEntityPermissionGrant(entityUrl: string, grantId: number): Promise<boolean>;
+  copyEntityPermissionGrantsForSpawn(parentEntityUrl: string, childEntityUrl: string, createdBy?: string): Promise<Array<EntityPermissionGrant>>;
+  hasEntityPermission(entityUrl: string, permission: EntityPermission, subject: {
+    principalUrl: string;
+    principalKind: string;
+  }): Promise<boolean>;
+  replaceSharedStateLink(ownerEntityUrl: string, manifestKey: string, sharedStateId?: string): Promise<void>;
+  listSharedStateLinkedEntityUrls(sharedStateId: string): Promise<Array<string>>;
+  pruneExpiredPermissionGrants(now?: Date, options?: {
+    force?: boolean;
+  }): Promise<void>;
+  private pruneExpiredPermissionGrantsNow;
+  private materializeEntityPermissionGrant;
   updateStatus(entityUrl: string, status: EntityStatus): Promise<void>;
   updateStatusWithTxid(entityUrl: string, status: EntityStatus): Promise<number | null>;
   touchEntityWithTxid(entityUrl: string): Promise<number | null>;
@@ -3737,6 +4701,8 @@ declare class PostgresRegistry {
     sourceRef: string;
     tags: EntityTags;
     streamUrl: string;
+    principalUrl: string;
+    principalKind: string;
   }): Promise<EntityBridgeRow>;
   getEntityBridge(sourceRef: string): Promise<EntityBridgeRow | null>;
   listEntityBridges(tenantId?: string | null): Promise<Array<EntityBridgeRow>>;
@@ -3757,6 +4723,8 @@ declare class PostgresRegistry {
   releaseTagOutboxClaims(workerId: string, tenantId?: string | null): Promise<void>;
   deleteEntity(url: string): Promise<void>;
   private rowToEntityType;
+  private rowToEntityTypePermissionGrant;
+  private rowToEntityPermissionGrant;
   private rowToEntity;
   private rowToEntityBridge;
   private rowToTagStreamOutbox;
@@ -3884,7 +4852,7 @@ declare class StreamClient {
 interface EntityBridgeCoordinator {
   start(): Promise<void>;
   stop(): Promise<void>;
-  register(tagsInput: unknown): Promise<{
+  register(tagsInput: unknown, principalUrl: string, principalKind: string): Promise<{
     sourceRef: string;
     streamUrl: string;
   }>;
@@ -3927,13 +4895,13 @@ declare class EntityProjector {
   forTenant(tenantId: string, registry?: PostgresRegistry): EntityProjectorTenantFacade;
   start(): Promise<void>;
   stop(): Promise<void>;
-  register(tenantId: string, registry: PostgresRegistry, tagsInput: unknown): Promise<{
+  register(tenantId: string, registry: PostgresRegistry, tagsInput: unknown, principalUrl: string, principalKind: string): Promise<{
     sourceRef: string;
     streamUrl: string;
   }>;
   touchByStreamPath(tenantId: string, registry: PostgresRegistry, streamPath: string): Promise<void>;
   beginClientRead(tenantId: string, registry: PostgresRegistry, streamPath: string): Promise<(() => Promise<void>) | null>;
-  onEntityChanged(_tenantId: string, _entityUrl: string): Promise<void>;
+  onEntityChanged(tenantId: string, entityUrl: string): Promise<void>;
   loadTenantBridges(tenantId: string, registry?: PostgresRegistry): Promise<void>;
   private resetReady;
   private waitUntilReady;
@@ -3960,7 +4928,7 @@ declare class EntityProjectorTenantFacade implements EntityBridgeCoordinator {
   constructor(projector: EntityProjector, tenantId: string, registry: PostgresRegistry);
   start(): Promise<void>;
   stop(): Promise<void>;
-  register(tagsInput: unknown): Promise<{
+  register(tagsInput: unknown, principalUrl: string, principalKind: string): Promise<{
     sourceRef: string;
     streamUrl: string;
   }>;
@@ -3988,6 +4956,8 @@ declare class ClaimWriteTokenStore {
 interface DelayedSendPayload {
   entityUrl: string;
   from?: string;
+  from_principal?: string;
+  from_agent?: string;
   payload: unknown;
   key?: string;
   type?: string;
@@ -4098,6 +5068,8 @@ interface WakeEvalResult {
       kind: `insert` | `update` | `delete`;
       key: string;
       from?: string;
+      from_principal?: string;
+      from_agent?: string;
       payload?: unknown;
       timestamp?: string;
       message_type?: string;
@@ -4242,14 +5214,14 @@ type ForkSubtreeOptions = {
   rootInstanceId?: string;
   waitTimeoutMs?: number;
   waitPollMs?: number;
+  createdBy?: string;
   /**
    * Optional anchor pointing at an event on the source root's `main` stream.
    * When set: only events at or before the pointer are kept on the root's
    * forked `main`, and the root's manifest is filtered so that descendants
    * spawned after the pointer are dropped from the fork (their now-orphan
    * subtrees are not forked). The pointer applies only to the root's
-   * `main` stream — `error` and shared-state streams clone at HEAD
-   * regardless.
+   * `main` stream; shared-state streams clone at HEAD regardless.
    */
   forkPointer?: EventPointer;
 };
@@ -4297,6 +5269,7 @@ declare class EntityManager {
   deleteEntityType(name: string): Promise<void>;
   ensurePrincipalEntityType(): Promise<ElectricAgentsEntityType>;
   ensurePrincipal(principal: Principal): Promise<ElectricAgentsEntity>;
+  private ensureUserPrincipal;
   /**
    * Spawn a new entity of the given type with durable streams.
    */
@@ -4391,7 +5364,10 @@ declare class EntityManager {
   }>;
   setTag(entityUrl: string, key: string, req: SetTagRequest, token: string): Promise<ElectricAgentsEntity>;
   deleteTag(entityUrl: string, key: string, token: string): Promise<ElectricAgentsEntity>;
-  ensureEntitiesMembershipStream(tags: Record<string, string>): Promise<{
+  ensureEntitiesMembershipStream(tags: Record<string, string>, principal: {
+    url: string;
+    kind: string;
+  }): Promise<{
     sourceRef: string;
     streamUrl: string;
   }>;
@@ -4461,8 +5437,9 @@ declare class EntityManager {
    * trigger webhook notification.
    */
   private deliverWakeResult;
-  private syncEntitiesManifestSource;
+  private syncManifestLinks;
   private extractEntitiesSourceRef;
+  private extractSharedStateId;
   /**
    * Read a child entity's stream and extract concatenated text deltas
    * for a specific run, plus any error messages for that run.
@@ -4549,6 +5526,7 @@ declare class ElectricAgentsTenantRuntime {
   private applyManifestFutureSendSchedule;
   private applyManifestEntitySource;
   private extractEntitiesSourceRef;
+  private extractSharedStateId;
   private maybeMarkEntityIdleAfterRunFinished;
 }
 
@@ -4717,6 +5695,7 @@ interface TenantContext {
   entityBridgeManager: EntityBridgeCoordinator;
   eventSources?: EventSourceCatalog;
   ensureEventSourceWakeSource?: (sourceUrl: string) => Promise<void> | void;
+  authorizeRequest?: AuthorizeRequest;
   isShuttingDown: () => boolean;
 }
 
@@ -4736,4 +5715,4 @@ declare class UnregisteredTenantError extends Error {
 declare function isUnregisteredTenantError(error: unknown): error is UnregisteredTenantError;
 
 //#endregion
-export { AgentsHost, AgentsHostOptions, AgentsHostTenantConfig, AgentsHostTenantRuntime, AuthenticateRequest, ConsumerClaim, DEFAULT_TENANT_ID, DispatchPolicy, DispatchTarget, DrizzleDB, DurableStreamsBearerProvider, DurableStreamsRoutingAdapter, DurableStreamsRoutingInput, Ed25519WebhookSignerOptions, ElectricAgentsEntity, ElectricAgentsEntityRow, ElectricAgentsEntityType, ElectricAgentsRunner, ElectricAgentsUser, EntityBridgeCoordinator, EntityDispatchState, EntityListFilter, EntitySignal, EntityStatus, EventSourceBucket, EventSourceCatalog, EventSourceContract, EventSourceFilter, EventSourceSubscription, EventSourceSubscriptionInput, GlobalRoutes, PgClient, Principal, PrincipalKind, PublicElectricAgentsEntity, PublicWakeNotification, RegisterEntityTypeRequest, RegisterRunnerRequest, RequestPrincipal, RunnerAdminStatus, RunnerHeartbeatRequest, RunnerKind, RunnerLiveness, SendRequest, SignalRequest, SignalResponse, SourceStreamOffset, StreamClient, StreamClientOptions, SubscriptionClaimResponse, SubscriptionCreateInput, SubscriptionLifetime, SubscriptionResponse, SubscriptionStreamInfo, TenantContext, TypedSpawnRequest, UnregisteredTenantError, WakeNotificationRow, WebhookJwks, WebhookPublicJwk, WebhookSigner, WebhookSigningKeyInput, WebhookSigningMetadata, assertEntitySignal, assertEntityStatus, createDb, createEd25519WebhookSigner, expectedSignalStatus, getDefaultWebhookSigner, globalRouter, isTerminalEntityStatus, isUnregisteredTenantError, pathPrefixedSingleTenantDurableStreamsRoutingAdapter, rejectsNormalWrites, runMigrations, streamRootDurableStreamsRoutingAdapter, tenantRootDurableStreamsRoutingAdapter, toPublicEntity, webhookSigningMetadata };
+export { AgentsHost, AgentsHostOptions, AgentsHostTenantConfig, AgentsHostTenantRuntime, AuthenticateRequest, AuthorizationDecision, AuthorizationResource, AuthorizeRequest, ConsumerClaim, DEFAULT_TENANT_ID, DispatchPolicy, DispatchTarget, DrizzleDB, DurableStreamsBearerProvider, DurableStreamsRoutingAdapter, DurableStreamsRoutingInput, Ed25519WebhookSignerOptions, ElectricAgentsEntity, ElectricAgentsEntityRow, ElectricAgentsEntityType, ElectricAgentsRunner, ElectricAgentsUser, EntityBridgeCoordinator, EntityDispatchState, EntityListFilter, EntityPermission, EntityPermissionGrant, EntityPermissionPropagation, EntitySignal, EntityStatus, EntityTypePermission, EntityTypePermissionGrant, EntityTypePermissionGrantInput, EventSourceBucket, EventSourceCatalog, EventSourceContract, EventSourceFilter, EventSourceSubscription, EventSourceSubscriptionInput, GlobalRoutes, PermissionSubject, PermissionSubjectKind, PgClient, Principal, PrincipalKind, PublicElectricAgentsEntity, PublicWakeNotification, RegisterEntityTypeRequest, RegisterRunnerRequest, RequestPrincipal, RunnerAdminStatus, RunnerHeartbeatRequest, RunnerKind, RunnerLiveness, SendRequest, SignalRequest, SignalResponse, SourceStreamOffset, StreamClient, StreamClientOptions, SubscriptionClaimResponse, SubscriptionCreateInput, SubscriptionLifetime, SubscriptionResponse, SubscriptionStreamInfo, TenantContext, TypedSpawnRequest, UnregisteredTenantError, WakeNotificationRow, WebhookJwks, WebhookPublicJwk, WebhookSigner, WebhookSigningKeyInput, WebhookSigningMetadata, assertEntitySignal, assertEntityStatus, createDb, createEd25519WebhookSigner, expectedSignalStatus, getDefaultWebhookSigner, globalRouter, isTerminalEntityStatus, isUnregisteredTenantError, pathPrefixedSingleTenantDurableStreamsRoutingAdapter, rejectsNormalWrites, runMigrations, streamRootDurableStreamsRoutingAdapter, tenantRootDurableStreamsRoutingAdapter, toPublicEntity, webhookSigningMetadata };