@electric-ax/agents-server 0.4.15 → 0.4.16

package/dist/index.d.ts

@@ -190,6 +190,56 @@ import * as drizzle_orm_pg_core238 from "drizzle-orm/pg-core";
 import * as drizzle_orm_pg_core239 from "drizzle-orm/pg-core";
 import * as drizzle_orm_pg_core240 from "drizzle-orm/pg-core";
 import * as drizzle_orm_pg_core241 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core242 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core243 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core244 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core245 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core246 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core247 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core248 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core249 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core250 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core251 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core252 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core253 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core254 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core255 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core256 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core257 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core258 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core259 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core260 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core261 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core262 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core263 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core264 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core265 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core266 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core267 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core268 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core269 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core270 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core271 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core272 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core273 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core274 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core275 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core276 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core277 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core278 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core279 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core280 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core281 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core282 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core283 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core284 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core285 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core286 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core287 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core288 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core289 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core290 from "drizzle-orm/pg-core";
+import * as drizzle_orm_pg_core291 from "drizzle-orm/pg-core";
 import { JsonWebKey, KeyObject } from "node:crypto";
 import { EntityTags, EventPointer, EventSourceBucket, EventSourceContract, EventSourceContract as EventSourceContract$1, EventSourceFilter, EventSourceSubscription, EventSourceSubscription as EventSourceSubscription$1, EventSourceSubscriptionInput, SubscriptionLifetime, WebhookNotification, WebhookSignatureVerifierConfig } from "@electric-ax/agents-runtime";
 import { MaybePromise } from "@durable-streams/client";
@@ -199,7 +249,7 @@ import { Agent } from "undici";
 
 //#region src/db/schema.d.ts
 declare namespace schema_d_exports {
-  export { consumerCallbacks, consumerClaims, entities, entityBridges, entityDispatchState, entityManifestSources, entityTypes, runnerRuntimeDiagnostics, runners, scheduledTasks, subscriptionWebhooks, tagStreamOutbox, users, wakeNotifications, wakeRegistrations };
+  export { consumerCallbacks, consumerClaims, entities, entityBridges, entityDispatchState, entityEffectivePermissions, entityLineage, entityManifestSources, entityPermissionGrants, entityTypePermissionGrants, entityTypes, runnerRuntimeDiagnostics, runners, scheduledTasks, sharedStateLinks, subscriptionWebhooks, tagStreamOutbox, users, wakeNotifications, wakeRegistrations };
 }
 declare const entityTypes: drizzle_orm_pg_core64.PgTableWithColumns<{
   name: "entity_types";
@@ -734,11 +784,777 @@ declare const entities: drizzle_orm_pg_core86.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
+declare const entityTypePermissionGrants: drizzle_orm_pg_core97.PgTableWithColumns<{
+  name: "entity_type_permission_grants";
+  schema: undefined;
+  columns: {
+    id: drizzle_orm_pg_core87.PgColumn<{
+      name: "id";
+      tableName: "entity_type_permission_grants";
+      dataType: "number";
+      columnType: "PgBigSerial53";
+      data: number;
+      driverParam: number;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: true;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    tenantId: drizzle_orm_pg_core88.PgColumn<{
+      name: "tenant_id";
+      tableName: "entity_type_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    entityType: drizzle_orm_pg_core89.PgColumn<{
+      name: "entity_type";
+      tableName: "entity_type_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    permission: drizzle_orm_pg_core90.PgColumn<{
+      name: "permission";
+      tableName: "entity_type_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    subjectKind: drizzle_orm_pg_core91.PgColumn<{
+      name: "subject_kind";
+      tableName: "entity_type_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    subjectValue: drizzle_orm_pg_core92.PgColumn<{
+      name: "subject_value";
+      tableName: "entity_type_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdBy: drizzle_orm_pg_core93.PgColumn<{
+      name: "created_by";
+      tableName: "entity_type_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    expiresAt: drizzle_orm_pg_core94.PgColumn<{
+      name: "expires_at";
+      tableName: "entity_type_permission_grants";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdAt: drizzle_orm_pg_core95.PgColumn<{
+      name: "created_at";
+      tableName: "entity_type_permission_grants";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    updatedAt: drizzle_orm_pg_core96.PgColumn<{
+      name: "updated_at";
+      tableName: "entity_type_permission_grants";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+  };
+  dialect: "pg";
+}>;
+declare const entityLineage: drizzle_orm_pg_core103.PgTableWithColumns<{
+  name: "entity_lineage";
+  schema: undefined;
+  columns: {
+    tenantId: drizzle_orm_pg_core98.PgColumn<{
+      name: "tenant_id";
+      tableName: "entity_lineage";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    ancestorUrl: drizzle_orm_pg_core99.PgColumn<{
+      name: "ancestor_url";
+      tableName: "entity_lineage";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    descendantUrl: drizzle_orm_pg_core100.PgColumn<{
+      name: "descendant_url";
+      tableName: "entity_lineage";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    depth: drizzle_orm_pg_core101.PgColumn<{
+      name: "depth";
+      tableName: "entity_lineage";
+      dataType: "number";
+      columnType: "PgInteger";
+      data: number;
+      driverParam: string | number;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdAt: drizzle_orm_pg_core102.PgColumn<{
+      name: "created_at";
+      tableName: "entity_lineage";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+  };
+  dialect: "pg";
+}>;
+declare const entityPermissionGrants: drizzle_orm_pg_core116.PgTableWithColumns<{
+  name: "entity_permission_grants";
+  schema: undefined;
+  columns: {
+    id: drizzle_orm_pg_core104.PgColumn<{
+      name: "id";
+      tableName: "entity_permission_grants";
+      dataType: "number";
+      columnType: "PgBigSerial53";
+      data: number;
+      driverParam: number;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: true;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    tenantId: drizzle_orm_pg_core105.PgColumn<{
+      name: "tenant_id";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    entityUrl: drizzle_orm_pg_core106.PgColumn<{
+      name: "entity_url";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    permission: drizzle_orm_pg_core107.PgColumn<{
+      name: "permission";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    subjectKind: drizzle_orm_pg_core108.PgColumn<{
+      name: "subject_kind";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    subjectValue: drizzle_orm_pg_core109.PgColumn<{
+      name: "subject_value";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    propagation: drizzle_orm_pg_core110.PgColumn<{
+      name: "propagation";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    copyToChildren: drizzle_orm_pg_core111.PgColumn<{
+      name: "copy_to_children";
+      tableName: "entity_permission_grants";
+      dataType: "boolean";
+      columnType: "PgBoolean";
+      data: boolean;
+      driverParam: boolean;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdBy: drizzle_orm_pg_core112.PgColumn<{
+      name: "created_by";
+      tableName: "entity_permission_grants";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    expiresAt: drizzle_orm_pg_core113.PgColumn<{
+      name: "expires_at";
+      tableName: "entity_permission_grants";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdAt: drizzle_orm_pg_core114.PgColumn<{
+      name: "created_at";
+      tableName: "entity_permission_grants";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    updatedAt: drizzle_orm_pg_core115.PgColumn<{
+      name: "updated_at";
+      tableName: "entity_permission_grants";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+  };
+  dialect: "pg";
+}>;
+declare const entityEffectivePermissions: drizzle_orm_pg_core127.PgTableWithColumns<{
+  name: "entity_effective_permissions";
+  schema: undefined;
+  columns: {
+    id: drizzle_orm_pg_core117.PgColumn<{
+      name: "id";
+      tableName: "entity_effective_permissions";
+      dataType: "number";
+      columnType: "PgBigSerial53";
+      data: number;
+      driverParam: number;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: true;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    tenantId: drizzle_orm_pg_core118.PgColumn<{
+      name: "tenant_id";
+      tableName: "entity_effective_permissions";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    entityUrl: drizzle_orm_pg_core119.PgColumn<{
+      name: "entity_url";
+      tableName: "entity_effective_permissions";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    sourceEntityUrl: drizzle_orm_pg_core120.PgColumn<{
+      name: "source_entity_url";
+      tableName: "entity_effective_permissions";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    sourceGrantId: drizzle_orm_pg_core121.PgColumn<{
+      name: "source_grant_id";
+      tableName: "entity_effective_permissions";
+      dataType: "number";
+      columnType: "PgBigInt53";
+      data: number;
+      driverParam: string | number;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    permission: drizzle_orm_pg_core122.PgColumn<{
+      name: "permission";
+      tableName: "entity_effective_permissions";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    subjectKind: drizzle_orm_pg_core123.PgColumn<{
+      name: "subject_kind";
+      tableName: "entity_effective_permissions";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    subjectValue: drizzle_orm_pg_core124.PgColumn<{
+      name: "subject_value";
+      tableName: "entity_effective_permissions";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    expiresAt: drizzle_orm_pg_core125.PgColumn<{
+      name: "expires_at";
+      tableName: "entity_effective_permissions";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdAt: drizzle_orm_pg_core126.PgColumn<{
+      name: "created_at";
+      tableName: "entity_effective_permissions";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+  };
+  dialect: "pg";
+}>;
+declare const sharedStateLinks: drizzle_orm_pg_core134.PgTableWithColumns<{
+  name: "shared_state_links";
+  schema: undefined;
+  columns: {
+    tenantId: drizzle_orm_pg_core128.PgColumn<{
+      name: "tenant_id";
+      tableName: "shared_state_links";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    sharedStateId: drizzle_orm_pg_core129.PgColumn<{
+      name: "shared_state_id";
+      tableName: "shared_state_links";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    ownerEntityUrl: drizzle_orm_pg_core130.PgColumn<{
+      name: "owner_entity_url";
+      tableName: "shared_state_links";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    manifestKey: drizzle_orm_pg_core131.PgColumn<{
+      name: "manifest_key";
+      tableName: "shared_state_links";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: true;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    createdAt: drizzle_orm_pg_core132.PgColumn<{
+      name: "created_at";
+      tableName: "shared_state_links";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    updatedAt: drizzle_orm_pg_core133.PgColumn<{
+      name: "updated_at";
+      tableName: "shared_state_links";
+      dataType: "date";
+      columnType: "PgTimestamp";
+      data: Date;
+      driverParam: string;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+  };
+  dialect: "pg";
+}>;
+declare const users: drizzle_orm_pg_core146.PgTableWithColumns<{
   name: "users";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core87.PgColumn<{
+    tenantId: drizzle_orm_pg_core135.PgColumn<{
       name: "tenant_id";
       tableName: "users";
       dataType: "string";
@@ -755,7 +1571,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    id: drizzle_orm_pg_core88.PgColumn<{
+    id: drizzle_orm_pg_core136.PgColumn<{
       name: "id";
       tableName: "users";
       dataType: "string";
@@ -772,7 +1588,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    displayName: drizzle_orm_pg_core89.PgColumn<{
+    displayName: drizzle_orm_pg_core137.PgColumn<{
       name: "display_name";
       tableName: "users";
       dataType: "string";
@@ -789,7 +1605,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    email: drizzle_orm_pg_core90.PgColumn<{
+    email: drizzle_orm_pg_core138.PgColumn<{
       name: "email";
       tableName: "users";
       dataType: "string";
@@ -806,7 +1622,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    avatarUrl: drizzle_orm_pg_core91.PgColumn<{
+    avatarUrl: drizzle_orm_pg_core139.PgColumn<{
       name: "avatar_url";
       tableName: "users";
       dataType: "string";
@@ -823,7 +1639,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    authProvider: drizzle_orm_pg_core92.PgColumn<{
+    authProvider: drizzle_orm_pg_core140.PgColumn<{
       name: "auth_provider";
       tableName: "users";
       dataType: "string";
@@ -840,7 +1656,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    authSubject: drizzle_orm_pg_core93.PgColumn<{
+    authSubject: drizzle_orm_pg_core141.PgColumn<{
       name: "auth_subject";
       tableName: "users";
       dataType: "string";
@@ -857,7 +1673,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    profile: drizzle_orm_pg_core94.PgColumn<{
+    profile: drizzle_orm_pg_core142.PgColumn<{
       name: "profile";
       tableName: "users";
       dataType: "json";
@@ -874,7 +1690,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    metadata: drizzle_orm_pg_core95.PgColumn<{
+    metadata: drizzle_orm_pg_core143.PgColumn<{
       name: "metadata";
       tableName: "users";
       dataType: "json";
@@ -891,7 +1707,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core96.PgColumn<{
+    createdAt: drizzle_orm_pg_core144.PgColumn<{
       name: "created_at";
       tableName: "users";
       dataType: "date";
@@ -908,7 +1724,7 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core97.PgColumn<{
+    updatedAt: drizzle_orm_pg_core145.PgColumn<{
       name: "updated_at";
       tableName: "users";
       dataType: "date";
@@ -928,11 +1744,11 @@ declare const users: drizzle_orm_pg_core98.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
+declare const runners: drizzle_orm_pg_core157.PgTableWithColumns<{
   name: "runners";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core99.PgColumn<{
+    tenantId: drizzle_orm_pg_core147.PgColumn<{
       name: "tenant_id";
       tableName: "runners";
       dataType: "string";
@@ -949,7 +1765,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    id: drizzle_orm_pg_core100.PgColumn<{
+    id: drizzle_orm_pg_core148.PgColumn<{
       name: "id";
       tableName: "runners";
       dataType: "string";
@@ -966,7 +1782,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    ownerPrincipal: drizzle_orm_pg_core101.PgColumn<{
+    ownerPrincipal: drizzle_orm_pg_core149.PgColumn<{
       name: "owner_principal";
       tableName: "runners";
       dataType: "string";
@@ -983,7 +1799,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    label: drizzle_orm_pg_core102.PgColumn<{
+    label: drizzle_orm_pg_core150.PgColumn<{
       name: "label";
       tableName: "runners";
       dataType: "string";
@@ -1000,7 +1816,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    kind: drizzle_orm_pg_core103.PgColumn<{
+    kind: drizzle_orm_pg_core151.PgColumn<{
       name: "kind";
       tableName: "runners";
       dataType: "string";
@@ -1017,7 +1833,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    adminStatus: drizzle_orm_pg_core104.PgColumn<{
+    adminStatus: drizzle_orm_pg_core152.PgColumn<{
       name: "admin_status";
       tableName: "runners";
       dataType: "string";
@@ -1034,7 +1850,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    wakeStream: drizzle_orm_pg_core105.PgColumn<{
+    wakeStream: drizzle_orm_pg_core153.PgColumn<{
       name: "wake_stream";
       tableName: "runners";
       dataType: "string";
@@ -1051,7 +1867,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    sandboxProfiles: drizzle_orm_pg_core106.PgColumn<{
+    sandboxProfiles: drizzle_orm_pg_core154.PgColumn<{
       name: "sandbox_profiles";
       tableName: "runners";
       dataType: "json";
@@ -1068,7 +1884,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core107.PgColumn<{
+    createdAt: drizzle_orm_pg_core155.PgColumn<{
       name: "created_at";
       tableName: "runners";
       dataType: "date";
@@ -1085,7 +1901,7 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core108.PgColumn<{
+    updatedAt: drizzle_orm_pg_core156.PgColumn<{
       name: "updated_at";
       tableName: "runners";
       dataType: "date";
@@ -1105,11 +1921,11 @@ declare const runners: drizzle_orm_pg_core109.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumns<{
+declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core166.PgTableWithColumns<{
   name: "runner_runtime_diagnostics";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core110.PgColumn<{
+    tenantId: drizzle_orm_pg_core158.PgColumn<{
       name: "tenant_id";
       tableName: "runner_runtime_diagnostics";
       dataType: "string";
@@ -1126,7 +1942,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    runnerId: drizzle_orm_pg_core111.PgColumn<{
+    runnerId: drizzle_orm_pg_core159.PgColumn<{
       name: "runner_id";
       tableName: "runner_runtime_diagnostics";
       dataType: "string";
@@ -1143,7 +1959,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    ownerPrincipal: drizzle_orm_pg_core112.PgColumn<{
+    ownerPrincipal: drizzle_orm_pg_core160.PgColumn<{
       name: "owner_principal";
       tableName: "runner_runtime_diagnostics";
       dataType: "string";
@@ -1160,7 +1976,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    wakeStreamOffset: drizzle_orm_pg_core113.PgColumn<{
+    wakeStreamOffset: drizzle_orm_pg_core161.PgColumn<{
       name: "wake_stream_offset";
       tableName: "runner_runtime_diagnostics";
       dataType: "string";
@@ -1177,7 +1993,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastSeenAt: drizzle_orm_pg_core114.PgColumn<{
+    lastSeenAt: drizzle_orm_pg_core162.PgColumn<{
       name: "last_seen_at";
       tableName: "runner_runtime_diagnostics";
       dataType: "date";
@@ -1194,7 +2010,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    livenessLeaseExpiresAt: drizzle_orm_pg_core115.PgColumn<{
+    livenessLeaseExpiresAt: drizzle_orm_pg_core163.PgColumn<{
       name: "liveness_lease_expires_at";
       tableName: "runner_runtime_diagnostics";
       dataType: "date";
@@ -1211,7 +2027,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    diagnostics: drizzle_orm_pg_core116.PgColumn<{
+    diagnostics: drizzle_orm_pg_core164.PgColumn<{
       name: "diagnostics";
       tableName: "runner_runtime_diagnostics";
       dataType: "json";
@@ -1228,7 +2044,7 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core117.PgColumn<{
+    updatedAt: drizzle_orm_pg_core165.PgColumn<{
       name: "updated_at";
       tableName: "runner_runtime_diagnostics";
       dataType: "date";
@@ -1248,11 +2064,11 @@ declare const runnerRuntimeDiagnostics: drizzle_orm_pg_core118.PgTableWithColumn
   };
   dialect: "pg";
 }>;
-declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
+declare const entityDispatchState: drizzle_orm_pg_core186.PgTableWithColumns<{
   name: "entity_dispatch_state";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core119.PgColumn<{
+    tenantId: drizzle_orm_pg_core167.PgColumn<{
       name: "tenant_id";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1269,7 +2085,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    entityUrl: drizzle_orm_pg_core120.PgColumn<{
+    entityUrl: drizzle_orm_pg_core168.PgColumn<{
       name: "entity_url";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1286,7 +2102,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    pendingSourceStreams: drizzle_orm_pg_core121.PgColumn<{
+    pendingSourceStreams: drizzle_orm_pg_core169.PgColumn<{
       name: "pending_source_streams";
       tableName: "entity_dispatch_state";
       dataType: "json";
@@ -1303,7 +2119,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    pendingReason: drizzle_orm_pg_core122.PgColumn<{
+    pendingReason: drizzle_orm_pg_core170.PgColumn<{
       name: "pending_reason";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1320,7 +2136,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    pendingSince: drizzle_orm_pg_core123.PgColumn<{
+    pendingSince: drizzle_orm_pg_core171.PgColumn<{
       name: "pending_since";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1337,7 +2153,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    outstandingWakeId: drizzle_orm_pg_core124.PgColumn<{
+    outstandingWakeId: drizzle_orm_pg_core172.PgColumn<{
       name: "outstanding_wake_id";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1354,7 +2170,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    outstandingWakeTarget: drizzle_orm_pg_core125.PgColumn<{
+    outstandingWakeTarget: drizzle_orm_pg_core173.PgColumn<{
       name: "outstanding_wake_target";
       tableName: "entity_dispatch_state";
       dataType: "json";
@@ -1371,7 +2187,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    outstandingWakeCreatedAt: drizzle_orm_pg_core126.PgColumn<{
+    outstandingWakeCreatedAt: drizzle_orm_pg_core174.PgColumn<{
       name: "outstanding_wake_created_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1388,7 +2204,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    activeConsumerId: drizzle_orm_pg_core127.PgColumn<{
+    activeConsumerId: drizzle_orm_pg_core175.PgColumn<{
       name: "active_consumer_id";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1405,7 +2221,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    activeRunnerId: drizzle_orm_pg_core128.PgColumn<{
+    activeRunnerId: drizzle_orm_pg_core176.PgColumn<{
       name: "active_runner_id";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1422,7 +2238,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    activeEpoch: drizzle_orm_pg_core129.PgColumn<{
+    activeEpoch: drizzle_orm_pg_core177.PgColumn<{
       name: "active_epoch";
       tableName: "entity_dispatch_state";
       dataType: "number";
@@ -1439,7 +2255,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    activeClaimedAt: drizzle_orm_pg_core130.PgColumn<{
+    activeClaimedAt: drizzle_orm_pg_core178.PgColumn<{
       name: "active_claimed_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1456,7 +2272,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    activeLeaseExpiresAt: drizzle_orm_pg_core131.PgColumn<{
+    activeLeaseExpiresAt: drizzle_orm_pg_core179.PgColumn<{
       name: "active_lease_expires_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1473,7 +2289,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastWakeId: drizzle_orm_pg_core132.PgColumn<{
+    lastWakeId: drizzle_orm_pg_core180.PgColumn<{
       name: "last_wake_id";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1490,7 +2306,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastClaimedAt: drizzle_orm_pg_core133.PgColumn<{
+    lastClaimedAt: drizzle_orm_pg_core181.PgColumn<{
       name: "last_claimed_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1507,7 +2323,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastReleasedAt: drizzle_orm_pg_core134.PgColumn<{
+    lastReleasedAt: drizzle_orm_pg_core182.PgColumn<{
       name: "last_released_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1524,7 +2340,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastCompletedAt: drizzle_orm_pg_core135.PgColumn<{
+    lastCompletedAt: drizzle_orm_pg_core183.PgColumn<{
       name: "last_completed_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1541,7 +2357,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastError: drizzle_orm_pg_core136.PgColumn<{
+    lastError: drizzle_orm_pg_core184.PgColumn<{
       name: "last_error";
       tableName: "entity_dispatch_state";
       dataType: "string";
@@ -1558,7 +2374,7 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core137.PgColumn<{
+    updatedAt: drizzle_orm_pg_core185.PgColumn<{
       name: "updated_at";
       tableName: "entity_dispatch_state";
       dataType: "date";
@@ -1578,11 +2394,11 @@ declare const entityDispatchState: drizzle_orm_pg_core138.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
+declare const wakeNotifications: drizzle_orm_pg_core203.PgTableWithColumns<{
   name: "wake_notifications";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core139.PgColumn<{
+    tenantId: drizzle_orm_pg_core187.PgColumn<{
       name: "tenant_id";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1599,7 +2415,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    wakeId: drizzle_orm_pg_core140.PgColumn<{
+    wakeId: drizzle_orm_pg_core188.PgColumn<{
       name: "wake_id";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1616,7 +2432,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    entityUrl: drizzle_orm_pg_core141.PgColumn<{
+    entityUrl: drizzle_orm_pg_core189.PgColumn<{
       name: "entity_url";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1633,7 +2449,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    targetType: drizzle_orm_pg_core142.PgColumn<{
+    targetType: drizzle_orm_pg_core190.PgColumn<{
       name: "target_type";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1650,7 +2466,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    targetRunnerId: drizzle_orm_pg_core143.PgColumn<{
+    targetRunnerId: drizzle_orm_pg_core191.PgColumn<{
       name: "target_runner_id";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1667,7 +2483,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    targetWebhookUrl: drizzle_orm_pg_core144.PgColumn<{
+    targetWebhookUrl: drizzle_orm_pg_core192.PgColumn<{
       name: "target_webhook_url";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1684,7 +2500,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    targetWorkerPoolId: drizzle_orm_pg_core145.PgColumn<{
+    targetWorkerPoolId: drizzle_orm_pg_core193.PgColumn<{
       name: "target_worker_pool_id";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1701,7 +2517,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    runnerWakeStream: drizzle_orm_pg_core146.PgColumn<{
+    runnerWakeStream: drizzle_orm_pg_core194.PgColumn<{
       name: "runner_wake_stream";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1718,7 +2534,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    runnerWakeStreamOffset: drizzle_orm_pg_core147.PgColumn<{
+    runnerWakeStreamOffset: drizzle_orm_pg_core195.PgColumn<{
       name: "runner_wake_stream_offset";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1735,7 +2551,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    notificationPublic: drizzle_orm_pg_core148.PgColumn<{
+    notificationPublic: drizzle_orm_pg_core196.PgColumn<{
       name: "notification_public";
       tableName: "wake_notifications";
       dataType: "json";
@@ -1752,7 +2568,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    deliveryStatus: drizzle_orm_pg_core149.PgColumn<{
+    deliveryStatus: drizzle_orm_pg_core197.PgColumn<{
       name: "delivery_status";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1769,7 +2585,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimStatus: drizzle_orm_pg_core150.PgColumn<{
+    claimStatus: drizzle_orm_pg_core198.PgColumn<{
       name: "claim_status";
       tableName: "wake_notifications";
       dataType: "string";
@@ -1786,7 +2602,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core151.PgColumn<{
+    createdAt: drizzle_orm_pg_core199.PgColumn<{
       name: "created_at";
       tableName: "wake_notifications";
       dataType: "date";
@@ -1803,7 +2619,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    deliveredAt: drizzle_orm_pg_core152.PgColumn<{
+    deliveredAt: drizzle_orm_pg_core200.PgColumn<{
       name: "delivered_at";
       tableName: "wake_notifications";
       dataType: "date";
@@ -1820,7 +2636,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimedAt: drizzle_orm_pg_core153.PgColumn<{
+    claimedAt: drizzle_orm_pg_core201.PgColumn<{
       name: "claimed_at";
       tableName: "wake_notifications";
       dataType: "date";
@@ -1837,7 +2653,7 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    resolvedAt: drizzle_orm_pg_core154.PgColumn<{
+    resolvedAt: drizzle_orm_pg_core202.PgColumn<{
       name: "resolved_at";
       tableName: "wake_notifications";
       dataType: "date";
@@ -1857,11 +2673,11 @@ declare const wakeNotifications: drizzle_orm_pg_core155.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
+declare const consumerClaims: drizzle_orm_pg_core218.PgTableWithColumns<{
   name: "consumer_claims";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core156.PgColumn<{
+    tenantId: drizzle_orm_pg_core204.PgColumn<{
       name: "tenant_id";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1878,7 +2694,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    consumerId: drizzle_orm_pg_core157.PgColumn<{
+    consumerId: drizzle_orm_pg_core205.PgColumn<{
       name: "consumer_id";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1895,7 +2711,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    epoch: drizzle_orm_pg_core158.PgColumn<{
+    epoch: drizzle_orm_pg_core206.PgColumn<{
       name: "epoch";
       tableName: "consumer_claims";
       dataType: "number";
@@ -1912,7 +2728,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    wakeId: drizzle_orm_pg_core159.PgColumn<{
+    wakeId: drizzle_orm_pg_core207.PgColumn<{
       name: "wake_id";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1929,7 +2745,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    entityUrl: drizzle_orm_pg_core160.PgColumn<{
+    entityUrl: drizzle_orm_pg_core208.PgColumn<{
       name: "entity_url";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1946,7 +2762,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    streamPath: drizzle_orm_pg_core161.PgColumn<{
+    streamPath: drizzle_orm_pg_core209.PgColumn<{
       name: "stream_path";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1963,7 +2779,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    runnerId: drizzle_orm_pg_core162.PgColumn<{
+    runnerId: drizzle_orm_pg_core210.PgColumn<{
       name: "runner_id";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1980,7 +2796,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    status: drizzle_orm_pg_core163.PgColumn<{
+    status: drizzle_orm_pg_core211.PgColumn<{
       name: "status";
       tableName: "consumer_claims";
       dataType: "string";
@@ -1997,7 +2813,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimedAt: drizzle_orm_pg_core164.PgColumn<{
+    claimedAt: drizzle_orm_pg_core212.PgColumn<{
       name: "claimed_at";
       tableName: "consumer_claims";
       dataType: "date";
@@ -2014,7 +2830,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastHeartbeatAt: drizzle_orm_pg_core165.PgColumn<{
+    lastHeartbeatAt: drizzle_orm_pg_core213.PgColumn<{
       name: "last_heartbeat_at";
       tableName: "consumer_claims";
       dataType: "date";
@@ -2031,7 +2847,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    leaseExpiresAt: drizzle_orm_pg_core166.PgColumn<{
+    leaseExpiresAt: drizzle_orm_pg_core214.PgColumn<{
       name: "lease_expires_at";
       tableName: "consumer_claims";
       dataType: "date";
@@ -2048,7 +2864,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    releasedAt: drizzle_orm_pg_core167.PgColumn<{
+    releasedAt: drizzle_orm_pg_core215.PgColumn<{
       name: "released_at";
       tableName: "consumer_claims";
       dataType: "date";
@@ -2065,7 +2881,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    ackedStreams: drizzle_orm_pg_core168.PgColumn<{
+    ackedStreams: drizzle_orm_pg_core216.PgColumn<{
       name: "acked_streams";
       tableName: "consumer_claims";
       dataType: "json";
@@ -2082,7 +2898,7 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core169.PgColumn<{
+    updatedAt: drizzle_orm_pg_core217.PgColumn<{
       name: "updated_at";
       tableName: "consumer_claims";
       dataType: "date";
@@ -2102,11 +2918,11 @@ declare const consumerClaims: drizzle_orm_pg_core170.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
+declare const wakeRegistrations: drizzle_orm_pg_core231.PgTableWithColumns<{
   name: "wake_registrations";
   schema: undefined;
   columns: {
-    id: drizzle_orm_pg_core171.PgColumn<{
+    id: drizzle_orm_pg_core219.PgColumn<{
       name: "id";
       tableName: "wake_registrations";
       dataType: "number";
@@ -2123,7 +2939,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    tenantId: drizzle_orm_pg_core172.PgColumn<{
+    tenantId: drizzle_orm_pg_core220.PgColumn<{
       name: "tenant_id";
       tableName: "wake_registrations";
       dataType: "string";
@@ -2140,7 +2956,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    subscriberUrl: drizzle_orm_pg_core173.PgColumn<{
+    subscriberUrl: drizzle_orm_pg_core221.PgColumn<{
       name: "subscriber_url";
       tableName: "wake_registrations";
       dataType: "string";
@@ -2157,7 +2973,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    sourceUrl: drizzle_orm_pg_core174.PgColumn<{
+    sourceUrl: drizzle_orm_pg_core222.PgColumn<{
       name: "source_url";
       tableName: "wake_registrations";
       dataType: "string";
@@ -2174,7 +2990,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    condition: drizzle_orm_pg_core175.PgColumn<{
+    condition: drizzle_orm_pg_core223.PgColumn<{
       name: "condition";
       tableName: "wake_registrations";
       dataType: "json";
@@ -2191,7 +3007,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    debounceMs: drizzle_orm_pg_core176.PgColumn<{
+    debounceMs: drizzle_orm_pg_core224.PgColumn<{
       name: "debounce_ms";
       tableName: "wake_registrations";
       dataType: "number";
@@ -2208,7 +3024,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    timeoutMs: drizzle_orm_pg_core177.PgColumn<{
+    timeoutMs: drizzle_orm_pg_core225.PgColumn<{
       name: "timeout_ms";
       tableName: "wake_registrations";
       dataType: "number";
@@ -2225,7 +3041,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    oneShot: drizzle_orm_pg_core178.PgColumn<{
+    oneShot: drizzle_orm_pg_core226.PgColumn<{
       name: "one_shot";
       tableName: "wake_registrations";
       dataType: "boolean";
@@ -2242,7 +3058,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    timeoutConsumed: drizzle_orm_pg_core179.PgColumn<{
+    timeoutConsumed: drizzle_orm_pg_core227.PgColumn<{
       name: "timeout_consumed";
       tableName: "wake_registrations";
       dataType: "boolean";
@@ -2259,7 +3075,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    includeResponse: drizzle_orm_pg_core180.PgColumn<{
+    includeResponse: drizzle_orm_pg_core228.PgColumn<{
       name: "include_response";
       tableName: "wake_registrations";
       dataType: "boolean";
@@ -2276,7 +3092,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    manifestKey: drizzle_orm_pg_core181.PgColumn<{
+    manifestKey: drizzle_orm_pg_core229.PgColumn<{
       name: "manifest_key";
       tableName: "wake_registrations";
       dataType: "string";
@@ -2293,7 +3109,7 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core182.PgColumn<{
+    createdAt: drizzle_orm_pg_core230.PgColumn<{
       name: "created_at";
       tableName: "wake_registrations";
       dataType: "date";
@@ -2313,11 +3129,11 @@ declare const wakeRegistrations: drizzle_orm_pg_core183.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const subscriptionWebhooks: drizzle_orm_pg_core188.PgTableWithColumns<{
+declare const subscriptionWebhooks: drizzle_orm_pg_core236.PgTableWithColumns<{
   name: "subscription_webhooks";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core184.PgColumn<{
+    tenantId: drizzle_orm_pg_core232.PgColumn<{
       name: "tenant_id";
       tableName: "subscription_webhooks";
       dataType: "string";
@@ -2334,7 +3150,7 @@ declare const subscriptionWebhooks: drizzle_orm_pg_core188.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    subscriptionId: drizzle_orm_pg_core185.PgColumn<{
+    subscriptionId: drizzle_orm_pg_core233.PgColumn<{
       name: "subscription_id";
       tableName: "subscription_webhooks";
       dataType: "string";
@@ -2351,7 +3167,7 @@ declare const subscriptionWebhooks: drizzle_orm_pg_core188.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    webhookUrl: drizzle_orm_pg_core186.PgColumn<{
+    webhookUrl: drizzle_orm_pg_core234.PgColumn<{
       name: "webhook_url";
       tableName: "subscription_webhooks";
       dataType: "string";
@@ -2368,7 +3184,7 @@ declare const subscriptionWebhooks: drizzle_orm_pg_core188.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core187.PgColumn<{
+    createdAt: drizzle_orm_pg_core235.PgColumn<{
       name: "created_at";
       tableName: "subscription_webhooks";
       dataType: "date";
@@ -2388,11 +3204,11 @@ declare const subscriptionWebhooks: drizzle_orm_pg_core188.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const consumerCallbacks: drizzle_orm_pg_core194.PgTableWithColumns<{
+declare const consumerCallbacks: drizzle_orm_pg_core242.PgTableWithColumns<{
   name: "consumer_callbacks";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core189.PgColumn<{
+    tenantId: drizzle_orm_pg_core237.PgColumn<{
       name: "tenant_id";
       tableName: "consumer_callbacks";
       dataType: "string";
@@ -2409,7 +3225,7 @@ declare const consumerCallbacks: drizzle_orm_pg_core194.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    consumerId: drizzle_orm_pg_core190.PgColumn<{
+    consumerId: drizzle_orm_pg_core238.PgColumn<{
       name: "consumer_id";
       tableName: "consumer_callbacks";
       dataType: "string";
@@ -2426,7 +3242,7 @@ declare const consumerCallbacks: drizzle_orm_pg_core194.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    callbackUrl: drizzle_orm_pg_core191.PgColumn<{
+    callbackUrl: drizzle_orm_pg_core239.PgColumn<{
       name: "callback_url";
       tableName: "consumer_callbacks";
       dataType: "string";
@@ -2443,7 +3259,7 @@ declare const consumerCallbacks: drizzle_orm_pg_core194.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    primaryStream: drizzle_orm_pg_core192.PgColumn<{
+    primaryStream: drizzle_orm_pg_core240.PgColumn<{
       name: "primary_stream";
       tableName: "consumer_callbacks";
       dataType: "string";
@@ -2460,7 +3276,7 @@ declare const consumerCallbacks: drizzle_orm_pg_core194.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core193.PgColumn<{
+    createdAt: drizzle_orm_pg_core241.PgColumn<{
       name: "created_at";
       tableName: "consumer_callbacks";
       dataType: "date";
@@ -2480,11 +3296,11 @@ declare const consumerCallbacks: drizzle_orm_pg_core194.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
+declare const scheduledTasks: drizzle_orm_pg_core258.PgTableWithColumns<{
   name: "scheduled_tasks";
   schema: undefined;
   columns: {
-    id: drizzle_orm_pg_core195.PgColumn<{
+    id: drizzle_orm_pg_core243.PgColumn<{
       name: "id";
       tableName: "scheduled_tasks";
       dataType: "number";
@@ -2501,7 +3317,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    tenantId: drizzle_orm_pg_core196.PgColumn<{
+    tenantId: drizzle_orm_pg_core244.PgColumn<{
       name: "tenant_id";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2518,7 +3334,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    kind: drizzle_orm_pg_core197.PgColumn<{
+    kind: drizzle_orm_pg_core245.PgColumn<{
       name: "kind";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2535,7 +3351,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    payload: drizzle_orm_pg_core198.PgColumn<{
+    payload: drizzle_orm_pg_core246.PgColumn<{
       name: "payload";
       tableName: "scheduled_tasks";
       dataType: "json";
@@ -2552,7 +3368,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    fireAt: drizzle_orm_pg_core199.PgColumn<{
+    fireAt: drizzle_orm_pg_core247.PgColumn<{
       name: "fire_at";
       tableName: "scheduled_tasks";
       dataType: "date";
@@ -2569,7 +3385,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    cronExpression: drizzle_orm_pg_core200.PgColumn<{
+    cronExpression: drizzle_orm_pg_core248.PgColumn<{
       name: "cron_expression";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2586,7 +3402,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    cronTimezone: drizzle_orm_pg_core201.PgColumn<{
+    cronTimezone: drizzle_orm_pg_core249.PgColumn<{
       name: "cron_timezone";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2603,7 +3419,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    cronTickNumber: drizzle_orm_pg_core202.PgColumn<{
+    cronTickNumber: drizzle_orm_pg_core250.PgColumn<{
       name: "cron_tick_number";
       tableName: "scheduled_tasks";
       dataType: "number";
@@ -2620,7 +3436,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    ownerEntityUrl: drizzle_orm_pg_core203.PgColumn<{
+    ownerEntityUrl: drizzle_orm_pg_core251.PgColumn<{
       name: "owner_entity_url";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2637,7 +3453,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    manifestKey: drizzle_orm_pg_core204.PgColumn<{
+    manifestKey: drizzle_orm_pg_core252.PgColumn<{
       name: "manifest_key";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2654,7 +3470,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimedBy: drizzle_orm_pg_core205.PgColumn<{
+    claimedBy: drizzle_orm_pg_core253.PgColumn<{
       name: "claimed_by";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2671,7 +3487,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimedAt: drizzle_orm_pg_core206.PgColumn<{
+    claimedAt: drizzle_orm_pg_core254.PgColumn<{
       name: "claimed_at";
       tableName: "scheduled_tasks";
       dataType: "date";
@@ -2688,7 +3504,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    completedAt: drizzle_orm_pg_core207.PgColumn<{
+    completedAt: drizzle_orm_pg_core255.PgColumn<{
       name: "completed_at";
       tableName: "scheduled_tasks";
       dataType: "date";
@@ -2705,7 +3521,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastError: drizzle_orm_pg_core208.PgColumn<{
+    lastError: drizzle_orm_pg_core256.PgColumn<{
       name: "last_error";
       tableName: "scheduled_tasks";
       dataType: "string";
@@ -2722,7 +3538,7 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core209.PgColumn<{
+    createdAt: drizzle_orm_pg_core257.PgColumn<{
       name: "created_at";
       tableName: "scheduled_tasks";
       dataType: "date";
@@ -2742,11 +3558,11 @@ declare const scheduledTasks: drizzle_orm_pg_core210.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
+declare const entityBridges: drizzle_orm_pg_core270.PgTableWithColumns<{
   name: "entity_bridges";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core211.PgColumn<{
+    tenantId: drizzle_orm_pg_core259.PgColumn<{
       name: "tenant_id";
       tableName: "entity_bridges";
       dataType: "string";
@@ -2763,7 +3579,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    sourceRef: drizzle_orm_pg_core212.PgColumn<{
+    sourceRef: drizzle_orm_pg_core260.PgColumn<{
       name: "source_ref";
       tableName: "entity_bridges";
       dataType: "string";
@@ -2780,7 +3596,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    tags: drizzle_orm_pg_core213.PgColumn<{
+    tags: drizzle_orm_pg_core261.PgColumn<{
       name: "tags";
       tableName: "entity_bridges";
       dataType: "json";
@@ -2797,7 +3613,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    streamUrl: drizzle_orm_pg_core214.PgColumn<{
+    streamUrl: drizzle_orm_pg_core262.PgColumn<{
       name: "stream_url";
       tableName: "entity_bridges";
       dataType: "string";
@@ -2814,7 +3630,41 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    shapeHandle: drizzle_orm_pg_core215.PgColumn<{
+    principalUrl: drizzle_orm_pg_core263.PgColumn<{
+      name: "principal_url";
+      tableName: "entity_bridges";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    principalKind: drizzle_orm_pg_core264.PgColumn<{
+      name: "principal_kind";
+      tableName: "entity_bridges";
+      dataType: "string";
+      columnType: "PgText";
+      data: string;
+      driverParam: string;
+      notNull: false;
+      hasDefault: false;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: [string, ...string[]];
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
+    shapeHandle: drizzle_orm_pg_core265.PgColumn<{
       name: "shape_handle";
       tableName: "entity_bridges";
       dataType: "string";
@@ -2831,7 +3681,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    shapeOffset: drizzle_orm_pg_core216.PgColumn<{
+    shapeOffset: drizzle_orm_pg_core266.PgColumn<{
       name: "shape_offset";
       tableName: "entity_bridges";
       dataType: "string";
@@ -2848,7 +3698,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastObserverActivityAt: drizzle_orm_pg_core217.PgColumn<{
+    lastObserverActivityAt: drizzle_orm_pg_core267.PgColumn<{
       name: "last_observer_activity_at";
       tableName: "entity_bridges";
       dataType: "date";
@@ -2865,7 +3715,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core218.PgColumn<{
+    createdAt: drizzle_orm_pg_core268.PgColumn<{
       name: "created_at";
       tableName: "entity_bridges";
       dataType: "date";
@@ -2882,7 +3732,7 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core219.PgColumn<{
+    updatedAt: drizzle_orm_pg_core269.PgColumn<{
       name: "updated_at";
       tableName: "entity_bridges";
       dataType: "date";
@@ -2902,11 +3752,11 @@ declare const entityBridges: drizzle_orm_pg_core220.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
+declare const entityManifestSources: drizzle_orm_pg_core277.PgTableWithColumns<{
   name: "entity_manifest_sources";
   schema: undefined;
   columns: {
-    tenantId: drizzle_orm_pg_core221.PgColumn<{
+    tenantId: drizzle_orm_pg_core271.PgColumn<{
       name: "tenant_id";
       tableName: "entity_manifest_sources";
       dataType: "string";
@@ -2923,7 +3773,7 @@ declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    ownerEntityUrl: drizzle_orm_pg_core222.PgColumn<{
+    ownerEntityUrl: drizzle_orm_pg_core272.PgColumn<{
       name: "owner_entity_url";
       tableName: "entity_manifest_sources";
       dataType: "string";
@@ -2940,7 +3790,7 @@ declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    manifestKey: drizzle_orm_pg_core223.PgColumn<{
+    manifestKey: drizzle_orm_pg_core273.PgColumn<{
       name: "manifest_key";
       tableName: "entity_manifest_sources";
       dataType: "string";
@@ -2957,7 +3807,7 @@ declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    sourceRef: drizzle_orm_pg_core224.PgColumn<{
+    sourceRef: drizzle_orm_pg_core274.PgColumn<{
       name: "source_ref";
       tableName: "entity_manifest_sources";
       dataType: "string";
@@ -2974,7 +3824,7 @@ declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core225.PgColumn<{
+    createdAt: drizzle_orm_pg_core275.PgColumn<{
       name: "created_at";
       tableName: "entity_manifest_sources";
       dataType: "date";
@@ -2991,7 +3841,7 @@ declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    updatedAt: drizzle_orm_pg_core226.PgColumn<{
+    updatedAt: drizzle_orm_pg_core276.PgColumn<{
       name: "updated_at";
       tableName: "entity_manifest_sources";
       dataType: "date";
@@ -3011,11 +3861,11 @@ declare const entityManifestSources: drizzle_orm_pg_core227.PgTableWithColumns<{
   };
   dialect: "pg";
 }>;
-declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
+declare const tagStreamOutbox: drizzle_orm_pg_core291.PgTableWithColumns<{
   name: "tag_stream_outbox";
   schema: undefined;
   columns: {
-    id: drizzle_orm_pg_core228.PgColumn<{
+    id: drizzle_orm_pg_core278.PgColumn<{
       name: "id";
       tableName: "tag_stream_outbox";
       dataType: "number";
@@ -3032,7 +3882,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    tenantId: drizzle_orm_pg_core229.PgColumn<{
+    tenantId: drizzle_orm_pg_core279.PgColumn<{
       name: "tenant_id";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3049,7 +3899,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    entityUrl: drizzle_orm_pg_core230.PgColumn<{
+    entityUrl: drizzle_orm_pg_core280.PgColumn<{
       name: "entity_url";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3066,7 +3916,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    collection: drizzle_orm_pg_core231.PgColumn<{
+    collection: drizzle_orm_pg_core281.PgColumn<{
       name: "collection";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3083,7 +3933,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    op: drizzle_orm_pg_core232.PgColumn<{
+    op: drizzle_orm_pg_core282.PgColumn<{
       name: "op";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3100,7 +3950,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    key: drizzle_orm_pg_core233.PgColumn<{
+    key: drizzle_orm_pg_core283.PgColumn<{
       name: "key";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3117,7 +3967,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    rowData: drizzle_orm_pg_core234.PgColumn<{
+    rowData: drizzle_orm_pg_core284.PgColumn<{
       name: "row_data";
       tableName: "tag_stream_outbox";
       dataType: "json";
@@ -3134,7 +3984,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    attemptCount: drizzle_orm_pg_core235.PgColumn<{
+    attemptCount: drizzle_orm_pg_core285.PgColumn<{
       name: "attempt_count";
       tableName: "tag_stream_outbox";
       dataType: "number";
@@ -3151,7 +4001,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    lastError: drizzle_orm_pg_core236.PgColumn<{
+    lastError: drizzle_orm_pg_core286.PgColumn<{
       name: "last_error";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3168,7 +4018,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimedBy: drizzle_orm_pg_core237.PgColumn<{
+    claimedBy: drizzle_orm_pg_core287.PgColumn<{
       name: "claimed_by";
       tableName: "tag_stream_outbox";
       dataType: "string";
@@ -3185,7 +4035,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    claimedAt: drizzle_orm_pg_core238.PgColumn<{
+    claimedAt: drizzle_orm_pg_core288.PgColumn<{
       name: "claimed_at";
       tableName: "tag_stream_outbox";
       dataType: "date";
@@ -3202,7 +4052,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    deadLetteredAt: drizzle_orm_pg_core239.PgColumn<{
+    deadLetteredAt: drizzle_orm_pg_core289.PgColumn<{
       name: "dead_lettered_at";
       tableName: "tag_stream_outbox";
       dataType: "date";
@@ -3219,7 +4069,7 @@ declare const tagStreamOutbox: drizzle_orm_pg_core241.PgTableWithColumns<{
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
-    createdAt: drizzle_orm_pg_core240.PgColumn<{
+    createdAt: drizzle_orm_pg_core290.PgColumn<{
       name: "created_at";
       tableName: "tag_stream_outbox";
       dataType: "date";
@@ -3282,6 +4132,68 @@ interface DispatchPolicy {
 type RunnerKind = `local` | `cloud-worker` | `sandbox` | `ci` | `server`;
 type RunnerAdminStatus = `enabled` | `disabled`;
 type RunnerLiveness = `online` | `offline`;
+type PermissionSubjectKind = `principal` | `principal_kind`;
+type PermissionSubject = {
+  subject_kind: PermissionSubjectKind;
+  subject_value: string;
+};
+type EntityPermission = `read` | `write` | `delete` | `signal` | `fork` | `schedule` | `spawn` | `manage`;
+type EntityTypePermission = `spawn` | `manage`;
+type EntityPermissionPropagation = `self` | `descendants`;
+interface EntityPermissionGrant extends PermissionSubject {
+  id: number;
+  entity_url: string;
+  permission: EntityPermission;
+  propagation: EntityPermissionPropagation;
+  copy_to_children: boolean;
+  created_by?: string;
+  expires_at?: string;
+  created_at: string;
+  updated_at: string;
+}
+interface EntityTypePermissionGrant extends PermissionSubject {
+  id: number;
+  entity_type: string;
+  permission: EntityTypePermission;
+  created_by?: string;
+  expires_at?: string;
+  created_at: string;
+  updated_at: string;
+}
+interface EntityTypePermissionGrantInput extends PermissionSubject {
+  permission: EntityTypePermission;
+  expires_at?: string;
+}
+type AuthorizationResource = {
+  kind: `entity`;
+  entity: ElectricAgentsEntity;
+} | {
+  kind: `entity_type`;
+  entityType: ElectricAgentsEntityType;
+} | {
+  kind: `entity_type_registration`;
+  entityTypeName: string;
+} | {
+  kind: `shared_state`;
+  sharedStateId: string;
+  linkedEntityUrls: Array<string>;
+};
+type AuthorizationDecision = {
+  decision: `allow` | `deny`;
+  expires_at?: string;
+};
+type AuthorizeRequest = (input: {
+  tenant: string;
+  principal: Principal;
+  verb: EntityPermission | EntityTypePermission;
+  resource: AuthorizationResource;
+  request?: {
+    method: string;
+    url: string;
+    headers: Record<string, string>;
+  };
+  builtInAllowed: boolean;
+}) => Promise<AuthorizationDecision> | AuthorizationDecision;
 type WakeDeliveryStatus = `queued` | `delivered` | `failed` | `superseded`;
 type WakeClaimStatus = `unclaimed` | `claimed` | `completed` | `expired`;
 type ConsumerClaimStatus = `active` | `released` | `expired` | `failed`;
@@ -3455,7 +4367,6 @@ interface ElectricAgentsEntity {
   status: EntityStatus;
   streams: {
     main: string;
-    error: string;
   };
   subscription_id: string;
   dispatch_policy?: DispatchPolicy;
@@ -3485,7 +4396,6 @@ interface PublicElectricAgentsEntity {
   status: EntityStatus;
   streams: {
     main: string;
-    error: string;
   };
   dispatch_policy?: DispatchPolicy;
   tags: Record<string, string>;
@@ -3520,6 +4430,7 @@ interface RegisterEntityTypeRequest {
   state_schemas?: Record<string, Record<string, unknown>>;
   serve_endpoint?: string;
   default_dispatch_policy?: DispatchPolicy;
+  permission_grants?: Array<EntityTypePermissionGrantInput>;
 }
 interface TypedSpawnRequest {
   instance_id: string;
@@ -3550,6 +4461,8 @@ interface TypedSpawnRequest {
 }
 interface SendRequest {
   from?: string;
+  from_principal?: string;
+  from_agent?: string;
   payload?: unknown;
   key?: string;
   type?: string;
@@ -3585,6 +4498,8 @@ interface EntityBridgeRow {
   sourceRef: string;
   tags: EntityTags;
   streamUrl: string;
+  principalUrl?: string;
+  principalKind?: string;
   shapeHandle?: string;
   shapeOffset?: string;
   lastObserverActivityAt: Date;
@@ -3664,12 +4579,33 @@ interface MaterializeReleasedClaimInput {
   ackedStreams?: Array<SourceStreamOffset>;
   releasedAt?: Date;
 }
+interface CreateEntityTypePermissionGrantInput {
+  entityType: string;
+  permission: EntityTypePermission;
+  subjectKind: PermissionSubjectKind;
+  subjectValue: string;
+  createdBy?: string;
+  expiresAt?: Date;
+}
+interface CreateEntityPermissionGrantInput {
+  entityUrl: string;
+  permission: EntityPermission;
+  subjectKind: PermissionSubjectKind;
+  subjectValue: string;
+  propagation?: EntityPermissionPropagation;
+  copyToChildren?: boolean;
+  createdBy?: string;
+  expiresAt?: Date;
+}
 declare class PostgresRegistry {
   private db;
   readonly tenantId: string;
+  private lastPermissionPruneStartedAt;
+  private permissionPrunePromise;
   constructor(db: DrizzleDB, tenantId?: string);
   initialize(): Promise<void>;
   close(): void;
+  ensureUserForPrincipal(principal: Principal): Promise<void>;
   createRunner(input: RegisterRunnerInput): Promise<ElectricAgentsRunner>;
   /**
    * Every sandbox profile advertised by a runner in this tenant (one entry
@@ -3717,10 +4653,38 @@ declare class PostgresRegistry {
     limit?: number;
     offset?: number;
     created_by?: string;
+    readableBy?: {
+      principalUrl: string;
+      principalKind: string;
+      bypass?: boolean;
+    };
   }): Promise<{
     entities: Array<ElectricAgentsEntity>;
     total: number;
   }>;
+  createEntityTypePermissionGrant(input: CreateEntityTypePermissionGrantInput): Promise<EntityTypePermissionGrant>;
+  ensureEntityTypePermissionGrant(input: CreateEntityTypePermissionGrantInput): Promise<EntityTypePermissionGrant>;
+  listEntityTypePermissionGrants(entityType: string): Promise<Array<EntityTypePermissionGrant>>;
+  deleteEntityTypePermissionGrant(entityType: string, grantId: number): Promise<boolean>;
+  hasEntityTypePermission(entityType: string, permission: EntityTypePermission, subject: {
+    principalUrl: string;
+    principalKind: string;
+  }): Promise<boolean>;
+  createEntityPermissionGrant(input: CreateEntityPermissionGrantInput): Promise<EntityPermissionGrant>;
+  listEntityPermissionGrants(entityUrl: string): Promise<Array<EntityPermissionGrant>>;
+  deleteEntityPermissionGrant(entityUrl: string, grantId: number): Promise<boolean>;
+  copyEntityPermissionGrantsForSpawn(parentEntityUrl: string, childEntityUrl: string, createdBy?: string): Promise<Array<EntityPermissionGrant>>;
+  hasEntityPermission(entityUrl: string, permission: EntityPermission, subject: {
+    principalUrl: string;
+    principalKind: string;
+  }): Promise<boolean>;
+  replaceSharedStateLink(ownerEntityUrl: string, manifestKey: string, sharedStateId?: string): Promise<void>;
+  listSharedStateLinkedEntityUrls(sharedStateId: string): Promise<Array<string>>;
+  pruneExpiredPermissionGrants(now?: Date, options?: {
+    force?: boolean;
+  }): Promise<void>;
+  private pruneExpiredPermissionGrantsNow;
+  private materializeEntityPermissionGrant;
   updateStatus(entityUrl: string, status: EntityStatus): Promise<void>;
   updateStatusWithTxid(entityUrl: string, status: EntityStatus): Promise<number | null>;
   touchEntityWithTxid(entityUrl: string): Promise<number | null>;
@@ -3738,6 +4702,8 @@ declare class PostgresRegistry {
     sourceRef: string;
     tags: EntityTags;
     streamUrl: string;
+    principalUrl: string;
+    principalKind: string;
   }): Promise<EntityBridgeRow>;
   getEntityBridge(sourceRef: string): Promise<EntityBridgeRow | null>;
   listEntityBridges(tenantId?: string | null): Promise<Array<EntityBridgeRow>>;
@@ -3758,6 +4724,8 @@ declare class PostgresRegistry {
   releaseTagOutboxClaims(workerId: string, tenantId?: string | null): Promise<void>;
   deleteEntity(url: string): Promise<void>;
   private rowToEntityType;
+  private rowToEntityTypePermissionGrant;
+  private rowToEntityPermissionGrant;
   private rowToEntity;
   private rowToEntityBridge;
   private rowToTagStreamOutbox;
@@ -3885,7 +4853,7 @@ declare class StreamClient {
 interface EntityBridgeCoordinator {
   start(): Promise<void>;
   stop(): Promise<void>;
-  register(tagsInput: unknown): Promise<{
+  register(tagsInput: unknown, principalUrl: string, principalKind: string): Promise<{
     sourceRef: string;
     streamUrl: string;
   }>;
@@ -3928,13 +4896,13 @@ declare class EntityProjector {
   forTenant(tenantId: string, registry?: PostgresRegistry): EntityProjectorTenantFacade;
   start(): Promise<void>;
   stop(): Promise<void>;
-  register(tenantId: string, registry: PostgresRegistry, tagsInput: unknown): Promise<{
+  register(tenantId: string, registry: PostgresRegistry, tagsInput: unknown, principalUrl: string, principalKind: string): Promise<{
     sourceRef: string;
     streamUrl: string;
   }>;
   touchByStreamPath(tenantId: string, registry: PostgresRegistry, streamPath: string): Promise<void>;
   beginClientRead(tenantId: string, registry: PostgresRegistry, streamPath: string): Promise<(() => Promise<void>) | null>;
-  onEntityChanged(_tenantId: string, _entityUrl: string): Promise<void>;
+  onEntityChanged(tenantId: string, entityUrl: string): Promise<void>;
   loadTenantBridges(tenantId: string, registry?: PostgresRegistry): Promise<void>;
   private resetReady;
   private waitUntilReady;
@@ -3961,7 +4929,7 @@ declare class EntityProjectorTenantFacade implements EntityBridgeCoordinator {
   constructor(projector: EntityProjector, tenantId: string, registry: PostgresRegistry);
   start(): Promise<void>;
   stop(): Promise<void>;
-  register(tagsInput: unknown): Promise<{
+  register(tagsInput: unknown, principalUrl: string, principalKind: string): Promise<{
     sourceRef: string;
     streamUrl: string;
   }>;
@@ -3989,6 +4957,8 @@ declare class ClaimWriteTokenStore {
 interface DelayedSendPayload {
   entityUrl: string;
   from?: string;
+  from_principal?: string;
+  from_agent?: string;
   payload: unknown;
   key?: string;
   type?: string;
@@ -4099,6 +5069,8 @@ interface WakeEvalResult {
       kind: `insert` | `update` | `delete`;
       key: string;
       from?: string;
+      from_principal?: string;
+      from_agent?: string;
       payload?: unknown;
       timestamp?: string;
       message_type?: string;
@@ -4243,14 +5215,14 @@ type ForkSubtreeOptions = {
   rootInstanceId?: string;
   waitTimeoutMs?: number;
   waitPollMs?: number;
+  createdBy?: string;
   /**
    * Optional anchor pointing at an event on the source root's `main` stream.
    * When set: only events at or before the pointer are kept on the root's
    * forked `main`, and the root's manifest is filtered so that descendants
    * spawned after the pointer are dropped from the fork (their now-orphan
    * subtrees are not forked). The pointer applies only to the root's
-   * `main` stream — `error` and shared-state streams clone at HEAD
-   * regardless.
+   * `main` stream; shared-state streams clone at HEAD regardless.
    */
   forkPointer?: EventPointer;
 };
@@ -4298,6 +5270,7 @@ declare class EntityManager {
   deleteEntityType(name: string): Promise<void>;
   ensurePrincipalEntityType(): Promise<ElectricAgentsEntityType>;
   ensurePrincipal(principal: Principal): Promise<ElectricAgentsEntity>;
+  private ensureUserPrincipal;
   /**
    * Spawn a new entity of the given type with durable streams.
    */
@@ -4392,7 +5365,10 @@ declare class EntityManager {
   }>;
   setTag(entityUrl: string, key: string, req: SetTagRequest, token: string): Promise<ElectricAgentsEntity>;
   deleteTag(entityUrl: string, key: string, token: string): Promise<ElectricAgentsEntity>;
-  ensureEntitiesMembershipStream(tags: Record<string, string>): Promise<{
+  ensureEntitiesMembershipStream(tags: Record<string, string>, principal: {
+    url: string;
+    kind: string;
+  }): Promise<{
     sourceRef: string;
     streamUrl: string;
   }>;
@@ -4462,8 +5438,9 @@ declare class EntityManager {
    * trigger webhook notification.
    */
   private deliverWakeResult;
-  private syncEntitiesManifestSource;
+  private syncManifestLinks;
   private extractEntitiesSourceRef;
+  private extractSharedStateId;
   /**
    * Read a child entity's stream and extract concatenated text deltas
    * for a specific run, plus any error messages for that run.
@@ -4550,6 +5527,7 @@ declare class ElectricAgentsTenantRuntime {
   private applyManifestFutureSendSchedule;
   private applyManifestEntitySource;
   private extractEntitiesSourceRef;
+  private extractSharedStateId;
   private maybeMarkEntityIdleAfterRunFinished;
 }
 
@@ -4718,6 +5696,7 @@ interface TenantContext {
   entityBridgeManager: EntityBridgeCoordinator;
   eventSources?: EventSourceCatalog;
   ensureEventSourceWakeSource?: (sourceUrl: string) => Promise<void> | void;
+  authorizeRequest?: AuthorizeRequest;
   isShuttingDown: () => boolean;
 }
 
@@ -4737,4 +5716,4 @@ declare class UnregisteredTenantError extends Error {
 declare function isUnregisteredTenantError(error: unknown): error is UnregisteredTenantError;
 
 //#endregion
-export { AgentsHost, AgentsHostOptions, AgentsHostTenantConfig, AgentsHostTenantRuntime, AuthenticateRequest, ConsumerClaim, DEFAULT_TENANT_ID, DispatchPolicy, DispatchTarget, DrizzleDB, DurableStreamsBearerProvider, DurableStreamsRoutingAdapter, DurableStreamsRoutingInput, Ed25519WebhookSignerOptions, ElectricAgentsEntity, ElectricAgentsEntityRow, ElectricAgentsEntityType, ElectricAgentsRunner, ElectricAgentsUser, EntityBridgeCoordinator, EntityDispatchState, EntityListFilter, EntitySignal, EntityStatus, EventSourceBucket, EventSourceCatalog, EventSourceContract, EventSourceFilter, EventSourceSubscription, EventSourceSubscriptionInput, GlobalRoutes, PgClient, Principal, PrincipalKind, PublicElectricAgentsEntity, PublicWakeNotification, RegisterEntityTypeRequest, RegisterRunnerRequest, RequestPrincipal, RunnerAdminStatus, RunnerHeartbeatRequest, RunnerKind, RunnerLiveness, SendRequest, SignalRequest, SignalResponse, SourceStreamOffset, StreamClient, StreamClientOptions, SubscriptionClaimResponse, SubscriptionCreateInput, SubscriptionLifetime, SubscriptionResponse, SubscriptionStreamInfo, TenantContext, TypedSpawnRequest, UnregisteredTenantError, WakeNotificationRow, WebhookJwks, WebhookPublicJwk, WebhookSigner, WebhookSigningKeyInput, WebhookSigningMetadata, assertEntitySignal, assertEntityStatus, createDb, createEd25519WebhookSigner, expectedSignalStatus, getDefaultWebhookSigner, globalRouter, isTerminalEntityStatus, isUnregisteredTenantError, pathPrefixedSingleTenantDurableStreamsRoutingAdapter, rejectsNormalWrites, runMigrations, streamRootDurableStreamsRoutingAdapter, tenantRootDurableStreamsRoutingAdapter, toPublicEntity, webhookSigningMetadata };
+export { AgentsHost, AgentsHostOptions, AgentsHostTenantConfig, AgentsHostTenantRuntime, AuthenticateRequest, AuthorizationDecision, AuthorizationResource, AuthorizeRequest, ConsumerClaim, DEFAULT_TENANT_ID, DispatchPolicy, DispatchTarget, DrizzleDB, DurableStreamsBearerProvider, DurableStreamsRoutingAdapter, DurableStreamsRoutingInput, Ed25519WebhookSignerOptions, ElectricAgentsEntity, ElectricAgentsEntityRow, ElectricAgentsEntityType, ElectricAgentsRunner, ElectricAgentsUser, EntityBridgeCoordinator, EntityDispatchState, EntityListFilter, EntityPermission, EntityPermissionGrant, EntityPermissionPropagation, EntitySignal, EntityStatus, EntityTypePermission, EntityTypePermissionGrant, EntityTypePermissionGrantInput, EventSourceBucket, EventSourceCatalog, EventSourceContract, EventSourceFilter, EventSourceSubscription, EventSourceSubscriptionInput, GlobalRoutes, PermissionSubject, PermissionSubjectKind, PgClient, Principal, PrincipalKind, PublicElectricAgentsEntity, PublicWakeNotification, RegisterEntityTypeRequest, RegisterRunnerRequest, RequestPrincipal, RunnerAdminStatus, RunnerHeartbeatRequest, RunnerKind, RunnerLiveness, SendRequest, SignalRequest, SignalResponse, SourceStreamOffset, StreamClient, StreamClientOptions, SubscriptionClaimResponse, SubscriptionCreateInput, SubscriptionLifetime, SubscriptionResponse, SubscriptionStreamInfo, TenantContext, TypedSpawnRequest, UnregisteredTenantError, WakeNotificationRow, WebhookJwks, WebhookPublicJwk, WebhookSigner, WebhookSigningKeyInput, WebhookSigningMetadata, assertEntitySignal, assertEntityStatus, createDb, createEd25519WebhookSigner, expectedSignalStatus, getDefaultWebhookSigner, globalRouter, isTerminalEntityStatus, isUnregisteredTenantError, pathPrefixedSingleTenantDurableStreamsRoutingAdapter, rejectsNormalWrites, runMigrations, streamRootDurableStreamsRoutingAdapter, tenantRootDurableStreamsRoutingAdapter, toPublicEntity, webhookSigningMetadata };