@ixo/editor 6.33.0 → 6.35.0

package/dist/core/index.d.ts

@@ -1,16 +1,23 @@
-import { k as FlowAgentExecutor, h as FlowAgentCommand, j as FlowAgentContext, i as FlowAgentCommandResult, an as FlowAgentBlockerCause, n as FlowAgentPublicNodeState, m as FlowAgentNodeSnapshot, ao as CompiledBlock, C as CompiledFlow, ap as CompiledEdge, s as FlowConnectionBinding } from '../connections-1NtNQrsY.js';
-export { aq as AcquireFlowAgentLeaseParams, ar as ActionBlockLike, as as ActionExecutionCompletionState, at as ActorConstraint, A as AuthorizationResult, B as BaseUcanFlow, au as BuildActionRunInputsParams, av as BuildActionRunInputsResult, a as BuildFlowAgentContextParams, aw as CompiledFlowNode, b as CompilerRegistry, ax as ConditionRef, ay as CreateAgentCommandParams, az as EvaluateFlowAgentPolicyParams, aA as ExecuteActionBlockParams, aB as ExecuteActionBlockResult, E as ExecuteNodeParams, c as ExecutionContext, d as ExecutionOutcome, F as FLOW_CONNECTIONS_MAP_KEY, e as FLOW_CONNECTION_BINDINGS_MAP_KEY, f as FLOW_PARTICIPANTS_MAP_KEY, g as FlowAgentActor, aC as FlowAgentCommandBase, aD as FlowAgentCommandStatus, aE as FlowAgentCommandType, l as FlowAgentLease, aF as FlowAgentLedgerEvent, aG as FlowAgentLedgerEventType, aH as FlowAgentMaps, aI as FlowAgentOrchestratorOptions, aJ as FlowAgentPolicyDecision, aK as FlowAgentRunPhase, o as FlowAgentService, aL as FlowAgentServiceOptions, p as FlowAgentTickResult, q as FlowCapability, r as FlowConnection, t as FlowConnectionRequirementKey, u as FlowParticipant, v as FlowStrategy, M as MergeResult, N as NodeActionResult, R as ReadFlowOptions, w as ReadFlowResult, aM as RuntimeRef, S as SetupFlowOptions, y as SetupFlowResult, aN as TTLConstraint, aO as TriggerResolutionContext, aP as TriggerSpec, z as acquireFlowAgentLease, D as appendAgentLedgerEvent, aQ as buildActionRunInputs, G as buildAuthzFromProps, H as buildFlowAgentContext, I as buildFlowNodeFromBlock, aR as canMatches, J as cleanupExpiredFlowAgentLeases, K as compileBaseUcanFlow, aS as computeAgentCommandId, L as createAgentCommand, O as decompileToBaseUcanFlow, P as evaluateFlowAgentPolicy, aT as executeActionBlock, Q as executeNode, T as executeQueuedAgentCommands, U as getActiveEditor, V as getFlowAgentMaps, W as isAuthorized, aU as isCapabilityMatch, aV as isExternalMutation, aW as isRuntimeRef, X as mergeCompiledFlows, Y as planRalphLoopCommands, Z as queueAgentCommand, aX as readAgentCommands, _ as readAgentLedgerEvents, $ as readCompiledFlowFromYDoc, a0 as readFlow, aY as readFlowAgentLeases, a1 as readFlowAsBaseUcan, a2 as readFlowConnectionBindings, a3 as readFlowConnections, a4 as readFlowFromEditor, a5 as readFlowParticipants, a6 as readQueuedAgentCommands, a7 as releaseFlowAgentLease, a8 as removeFlowConnection, a9 as removeFlowConnectionBinding, aa as removeFlowParticipant, aZ as requiredCapabilityForCommand, a_ as resolveRuntimeRefs, a$ as resourceMatches, ab as setActiveEditor, ac as setFlowConnectionOptional, ad as setFlowConnectionRequires, ae as setFlowParticipantPowerLevel, af as setFlowParticipantRequirements, ag as setupFlowFromBaseUcan, ah as tickFlowAgent, b0 as updateAgentCommand, ai as upsertFlowConnection, aj as upsertFlowConnectionBinding, ak as upsertFlowParticipant, al as validateAgentCommand, am as validateFlowAgentLease } from '../connections-1NtNQrsY.js';
-import { au as TopicSemanticRecordDefinition, av as TopicActionMetadata, aw as ActionEventDefinition, ax as ActionDoneContract, aj as ActionDefinition, ay as OutputSchemaField, az as ActionRiskTier, aA as ActionSchedulingContract, ab as ActionServices, aB as TopicActionInvocationV1, aC as TopicActionReceiptV2, aD as TopicActionRecord, aE as TopicActionRuntimeProvider, af as TopicActionBridge, ah as TopicActionWriteBackResult, ai as FlowNodeRuntimeState, aF as RunEventInput, ad as RunEventAppender, F as FlowRuntimeStateManager, aG as RunJsonValue, aH as ActionRunContext, aI as CompletionCheck, w as StoredInvocation, aJ as ReadBackTerminalState, ag as ActionResult, aK as ActionReadBackMetadata, a9 as IxoEditorType, aa as PendingInvocation, aL as ActionProofDeclaration, aM as RunRecordDetails, G as UcanService, ac as ActionHandlers, z as UcanDelegationStore, v as StoredDelegation, g as InvocationStore, aN as FlowMetadata, a7 as FlowNode } from '../runtime-BFwvCQDF.js';
-export { aO as ActionContext, aP as ActionRunEventInput, aQ as AgentRuntimeService, aR as BidService, aS as CancelRunParams, aT as CarbonService, aU as ClaimCollectionURI, aV as ClaimService, aW as CloseRunParams, aX as CollectionService, aY as CollectionUsersService, aZ as CreateDelegationParams, a_ as CreateInvocationParams, a$ as CreateRootDelegationParams, b0 as DID, D as DelegationChainValidationResult, e as DelegationGrant, b1 as EmailService, b2 as EntityService, b3 as EvalRegisterService, b4 as EvaluationRuntimeService, a8 as EvaluationStatus, b5 as EvidenceService, b6 as ExecutionWithInvocationResult, b7 as ExplicitRunRequiredError, b8 as FailedListenerRun, b9 as FindProofsResult, ba as FinishRunResult, a6 as FlowNodeAuthzExtension, bb as FlowNodeBase, bc as FlowNotMigratedError, bd as FlowRunLifecycleService, be as HttpService, bf as InMemoryTopicActionOutboxStore, bg as IncidentService, bh as IntegrationsService, bi as InvocationRequest, bj as InvocationResult, bk as LEGACY_RUN_STORAGE_VERSION, bl as LifecycleRunEventInput, bm as LinkedClaim, bn as MULTI_RUN_STORAGE_VERSION, bo as MatrixCredentialService, bp as MigrateFlowParams, bq as MigrateFlowResult, br as MultiRunMigrationResult, bs as NodeServiceReport, bt as NodeState, bu as NotifyService, bv as OracleService, bw as RUNS_TERMINAL_MAP_KEY, bx as RUN_RECORD_AUDIT_TYPE, by as RUN_STORAGE_VERSION_KEY, bz as RecordFlowActionPhaseParams, bA as RubricService, bB as RunDefinitionBlock, bC as RunDefinitionDrift, bD as RunDefinitionSnapshot, bE as RunJsonObject, bF as RunLifecycleAuthorizationDecision, bG as RunLifecycleAuthorizationError, bH as RunLifecycleAuthorizationRequest, bI as RunLifecycleAuthorizer, bJ as RunLifecycleCapability, bK as RunLogEventInput, bL as RunManifest, bM as RunMeta, bN as RunNotMigratedError, bO as RunNotReadyError, bP as RunSnapshot, bQ as RunStorageVersion, bR as RunTerminalRecord, bS as SettlementService, bT as StartRunParams, bU as StartRunResult, bV as TerminalRunExecutionError, bW as TopicActionOutboxEntry, bX as TopicActionOutboxStore, bY as TopicActionReceiptSigner, bZ as TopicActionReceiptSink, b_ as TopicActionReceiptStatus, b$ as TopicActionReceiptVerifier, c0 as TopicActionTerminalStatus, c1 as TopicActionThreadUpdateV1, c2 as TopicActionWriteBackState, ae as TopicExecutionContext, c3 as TopicOperationAppendResult, c4 as TopicRevisionConflictError, c5 as TopicService, U as UcanCapability, H as UcanServiceConfig, J as UcanServiceHandlers, c6 as UnknownRunError, c7 as UnsignedTopicActionReceiptV2, c8 as YjsTopicActionOutboxStore, c9 as adoptLegacyRuntime, ca as appendRunRecord, cb as assertRunActionExecutionAllowed, cc as buildRunDefinitionSnapshot, cd as buildTopicActionThreadUpdate, ce as cancelRun, cf as clearAllActionState, cg as clearRuntimeForTemplateClone, ch as closeRun, ci as collectPhantomLegacyRun, cj as computePendingInvocationId, ck as computeRunDefinitionHash, cl as computeRunSummary, cm as countPendingInvocations, Y as createInvocationStore, Z as createMemoryInvocationStore, _ as createMemoryUcanDelegationStore, cn as createRunId, co as createRunRuntimeReader, cp as createRunRuntimeReaderWithDoc, cq as createRunScopedRuntimeManager, cr as createRunUlid, $ as createRuntimeStateManager, a0 as createUcanDelegationStore, a1 as createUcanService, cs as createYDocRuntimeManager, ct as deleteActionState, cu as detectRunDefinitionDrift, cv as enableMultiRunStorage, cw as ensureRun, cx as findFailedListenersForSourceRun, cy as getOrCreateBlockPendingMap, cz as getPendingInvocationsMap, cA as getRunActionsMap, cB as getRunMeta, cC as getRunStorageVersion, cD as getRunsMap, cE as getRunsTerminalMap, cF as hasLegacyRuntimeHistory, cG as isBelowTheLineBlock, cH as isLegacyRuntimeAdoptionEnabled, cI as isRecordInRun, cJ as listOpenRuns, cK as listRuns, cL as migrateFlowToSessions, cM as queuePendingInvocation, cN as readActionState, cO as readActionStates, cP as readPendingInvocations, cQ as readRunActionStates, cR as readRunRecords, cS as recordRunDefinitionDrift, cT as removePendingInvocation, cU as replayFailedListenerRun, cV as resetActionState, cW as resolveActiveRunId, cX as resolveRecordRunId, cY as resolveRunIdForExecution, cZ as resolveRunIdForRead, c_ as seedRunFromLegacyRuntime, c$ as setAdvisoryActiveRunId, d0 as setMultiRunStorage, d1 as snapshotInputRefs, d2 as startRun, d3 as subscribeToActionState, d4 as toRunJsonValue, d5 as topicActionReceiptSigningPayload, d6 as topicActionThreadUpdateBody, d7 as topicActionThreadUpdateId, d8 as topicActionThreadUpdateTransactionId, d9 as topicSemanticRecordsDigest, da as usesLegacyRuntimeCompatibility, db as writeActionState } from '../runtime-BFwvCQDF.js';
+import { aw as TopicSemanticRecordDefinition, ax as TopicActionMetadata, ay as ActionEventDefinition, az as ActionDoneContract, ak as ActionDefinition, aA as OutputSchemaField, aB as ActionRiskTier, aC as ActionSchedulingContract, ab as ActionServices, aD as TopicActionInvocationV1, aE as TopicActionReceiptV2, aF as TopicActionRecord, aG as TopicActionRuntimeProvider, af as TopicActionBridge, ai as TopicActionWriteBackResult, aH as DesignPodService, aI as DesignPodPhaseId, aJ as DesignPodControlId, aK as DesignPodActionProofV1, aL as DesignPodPhaseCommitmentV1, aM as DesignPodArtifactReceiptV1, aN as LegacyDesignPodEvidenceV1, aO as DesignPodProjectIdentityV1, aP as DesignPodControlRevisionV1, al as DesignPodMethodId, aQ as DesignPodReviewRecordV1, aR as DesignPodMethodManifestV1, aS as DesignPodFlowStateV1, aT as DesignPodPhaseDefinitionV1, aj as FlowNodeRuntimeState, aU as RunEventInput, ad as RunEventAppender, F as FlowRuntimeStateManager, aV as RunJsonValue, aW as ActionRunContext, aX as CompletionCheck, w as StoredInvocation, aY as ReadBackTerminalState, ah as ActionResult, aZ as ActionReadBackMetadata, a9 as IxoEditorType, aa as PendingInvocation, a_ as ActionProofDeclaration, a$ as RunRecordDetails, G as UcanService, ac as ActionHandlers, z as UcanDelegationStore, v as StoredDelegation, g as InvocationStore, b0 as FlowMetadata, a7 as FlowNode } from '../types-Dqk5MTfW.js';
+export { b1 as ActionContext, b2 as ActionRunEventInput, b3 as AgentRuntimeService, b4 as BidService, b5 as CancelRunParams, b6 as CarbonService, b7 as ClaimCollectionURI, b8 as ClaimService, b9 as CloseRunParams, ba as CollectionService, bb as CollectionUsersService, bc as CompileDesignPodReleaseOptions, bd as CompiledDesignPodReleaseV1, be as CreateDelegationParams, bf as CreateInvocationParams, bg as CreateRootDelegationParams, bh as CredentialIssuanceService, bi as DESIGN_POD_CONTROL_IDS, bj as DESIGN_POD_METHODS, bk as DESIGN_POD_PHASE_IDS, bl as DESIGN_POD_TEMPLATE_ID, bm as DESIGN_YOMA_METHOD_V1, bn as DID, D as DelegationChainValidationResult, e as DelegationGrant, bo as DesignPodChecklistItemDefinitionV1, bp as DesignPodChecklistRecordV1, bq as DesignPodControlDefinitionV1, br as DesignPodControlStatus, bs as DesignPodInvocationVerificationRequestV1, bt as DesignPodInvocationVerifier, bu as DesignPodPackageFileV1, bv as DesignPodProtocolRecordV1, bw as DesignPodReleaseRecordV1, bx as DesignPodReviewAssignmentV1, by as DesignPodReviewRequestV1, ag as DesignPodRuntimeAuthorityV1, bz as DomainVfsService, bA as EmailService, bB as EntityService, bC as EvalRegisterService, bD as EvaluationRuntimeService, a8 as EvaluationStatus, bE as EvidenceService, bF as ExecutionWithInvocationResult, bG as ExplicitRunRequiredError, bH as FailedListenerRun, bI as FindProofsResult, bJ as FinishRunResult, bK as FlowInvocationService, a6 as FlowNodeAuthzExtension, bL as FlowNodeBase, bM as FlowNotMigratedError, bN as FlowRunLifecycleService, bO as FundingVerificationService, bP as HttpService, bQ as InMemoryTopicActionOutboxStore, bR as IncidentService, bS as IntegrationsService, bT as InvocationRequest, bU as InvocationResult, bV as LEGACY_RUN_STORAGE_VERSION, bW as LifecycleRunEventInput, bX as LinkedClaim, bY as MULTI_RUN_STORAGE_VERSION, bZ as MatrixCredentialService, b_ as MigrateFlowParams, b$ as MigrateFlowResult, c0 as MultiRunMigrationResult, c1 as NodeServiceReport, c2 as NodeState, c3 as NotifyService, c4 as OracleService, c5 as OutcomeCertificateService, c6 as PROFESSIONAL_SERVICE_METHOD_V1, c7 as RUNS_TERMINAL_MAP_KEY, c8 as RUNS_TERMINAL_PENDING_MAP_KEY, c9 as RUN_RECORD_AUDIT_TYPE, ca as RUN_STORAGE_VERSION_KEY, cb as RecordFlowActionPhaseParams, cc as RubricService, cd as RunDefinitionBlock, ce as RunDefinitionDrift, cf as RunDefinitionSnapshot, cg as RunJsonObject, ch as RunLifecycleAuthorizationDecision, ci as RunLifecycleAuthorizationError, cj as RunLifecycleAuthorizationRequest, ck as RunLifecycleAuthorizer, cl as RunLifecycleCapability, cm as RunLogEventInput, cn as RunManifest, co as RunMeta, cp as RunNotMigratedError, cq as RunNotReadyError, cr as RunSnapshot, cs as RunStorageVersion, ct as RunTerminalAuthorizationProof, cu as RunTerminalRecord, cv as RunTerminalReservation, cw as SettlementService, cx as StartRunParams, cy as StartRunResult, cz as TerminalRunExecutionError, cA as TopicActionOutboxEntry, cB as TopicActionOutboxStore, cC as TopicActionReceiptSigner, cD as TopicActionReceiptSink, cE as TopicActionReceiptStatus, cF as TopicActionReceiptVerifier, cG as TopicActionTerminalStatus, cH as TopicActionThreadUpdateV1, cI as TopicActionWriteBackState, ae as TopicExecutionContext, cJ as TopicOperationAppendResult, cK as TopicRevisionConflictError, cL as TopicService, U as UcanCapability, H as UcanServiceConfig, J as UcanServiceHandlers, cM as UnknownRunError, cN as UnsignedTopicActionReceiptV2, cO as YjsTopicActionOutboxStore, cP as YoIdLinkService, cQ as YomaOpportunityService, cR as adoptLegacyRuntime, cS as appendRunRecord, cT as assertRunActionExecutionAllowed, cU as buildRunDefinitionSnapshot, cV as buildTopicActionThreadUpdate, cW as cancelRun, cX as clearAllActionState, cY as clearRuntimeForTemplateClone, cZ as closeRun, c_ as collectPhantomLegacyRun, c$ as compileDesignPodRelease, d0 as computePendingInvocationId, d1 as computeRunDefinitionHash, d2 as computeRunSummary, d3 as countPendingInvocations, Y as createInvocationStore, Z as createMemoryInvocationStore, _ as createMemoryUcanDelegationStore, d4 as createRunId, d5 as createRunRuntimeReader, d6 as createRunRuntimeReaderWithDoc, d7 as createRunScopedRuntimeManager, d8 as createRunTerminalAuthorizationProof, d9 as createRunUlid, $ as createRuntimeStateManager, a0 as createUcanDelegationStore, a1 as createUcanService, da as createYDocRuntimeManager, db as deleteActionState, dc as detectRunDefinitionDrift, dd as enableMultiRunStorage, de as ensureRun, df as findFailedListenersForSourceRun, dg as getOrCreateBlockPendingMap, dh as getPendingInvocationsMap, di as getRunActionsMap, dj as getRunMeta, dk as getRunStorageVersion, dl as getRunsMap, dm as getRunsTerminalMap, dn as getRunsTerminalPendingMap, dp as hasLegacyRuntimeHistory, dq as isBelowTheLineBlock, dr as isLegacyRuntimeAdoptionEnabled, ds as isRecordInRun, dt as isRunTerminalOrPending, du as listOpenRuns, dv as listRuns, dw as migrateFlowToSessions, dx as queuePendingInvocation, dy as readActionState, dz as readActionStates, dA as readPendingInvocations, dB as readRunActionStates, dC as readRunRecords, dD as recordRunDefinitionDrift, dE as removePendingInvocation, dF as replayFailedListenerRun, dG as resetActionState, dH as resolveActiveRunId, dI as resolveRecordRunId, dJ as resolveRunIdForExecution, dK as resolveRunIdForRead, dL as seedRunFromLegacyRuntime, dM as setAdvisoryActiveRunId, dN as setMultiRunStorage, dO as snapshotInputRefs, dP as startRun, dQ as subscribeToActionState, dR as toRunJsonValue, dS as topicActionReceiptSigningPayload, dT as topicActionThreadUpdateBody, dU as topicActionThreadUpdateId, dV as topicActionThreadUpdateTransactionId, dW as topicSemanticRecordsDigest, dX as usesLegacyRuntimeCompatibility, dY as writeActionState } from '../types-Dqk5MTfW.js';
 import * as Y from 'yjs';
-import { Map, Doc } from 'yjs';
+import { Doc, Map } from 'yjs';
+import { B as BaseUcanFlow, k as FlowAgentExecutor, h as FlowAgentCommand, j as FlowAgentContext, i as FlowAgentCommandResult, ao as FlowAgentBlockerCause, n as FlowAgentPublicNodeState, m as FlowAgentNodeSnapshot, ap as CompiledBlock, C as CompiledFlow, aq as CompiledEdge, s as FlowConnectionBinding } from '../connections-CEcurtWI.js';
+export { ar as AcquireFlowAgentLeaseParams, as as ActionBlockLike, at as ActionExecutionCompletionState, au as ActorConstraint, A as AuthorizationResult, av as BuildActionRunInputsParams, aw as BuildActionRunInputsResult, a as BuildFlowAgentContextParams, ax as CompiledFlowNode, b as CompilerRegistry, ay as ConditionRef, az as CreateAgentCommandParams, aA as EvaluateFlowAgentPolicyParams, aB as ExecuteActionBlockParams, aC as ExecuteActionBlockResult, E as ExecuteNodeParams, c as ExecutionContext, d as ExecutionOutcome, F as FLOW_CONNECTIONS_MAP_KEY, e as FLOW_CONNECTION_BINDINGS_MAP_KEY, f as FLOW_PARTICIPANTS_MAP_KEY, g as FlowAgentActor, aD as FlowAgentCommandBase, aE as FlowAgentCommandStatus, aF as FlowAgentCommandType, l as FlowAgentLease, aG as FlowAgentLedgerEvent, aH as FlowAgentLedgerEventType, aI as FlowAgentMaps, aJ as FlowAgentOrchestratorOptions, aK as FlowAgentPolicyDecision, aL as FlowAgentRunPhase, o as FlowAgentService, aM as FlowAgentServiceOptions, p as FlowAgentTickResult, q as FlowCapability, r as FlowConnection, t as FlowConnectionRequirementKey, u as FlowParticipant, v as FlowStrategy, M as MergeResult, N as NodeActionResult, R as ReadFlowOptions, w as ReadFlowResult, aN as RuntimeRef, aO as SeedDesignPodTemplateOptions, S as SetupFlowOptions, y as SetupFlowResult, aP as TTLConstraint, aQ as TriggerResolutionContext, aR as TriggerSpec, z as acquireFlowAgentLease, D as appendAgentLedgerEvent, aS as buildActionRunInputs, G as buildAuthzFromProps, H as buildFlowAgentContext, I as buildFlowNodeFromBlock, aT as canMatches, J as cleanupExpiredFlowAgentLeases, K as compileBaseUcanFlow, aU as computeAgentCommandId, L as createAgentCommand, O as decompileToBaseUcanFlow, P as evaluateFlowAgentPolicy, aV as executeActionBlock, Q as executeNode, T as executeQueuedAgentCommands, U as getActiveEditor, V as getFlowAgentMaps, W as isAuthorized, aW as isCapabilityMatch, aX as isExternalMutation, aY as isRuntimeRef, X as mergeCompiledFlows, Y as planRalphLoopCommands, Z as queueAgentCommand, aZ as readAgentCommands, _ as readAgentLedgerEvents, $ as readCompiledFlowFromYDoc, a0 as readFlow, a_ as readFlowAgentLeases, a1 as readFlowAsBaseUcan, a2 as readFlowConnectionBindings, a3 as readFlowConnections, a4 as readFlowFromEditor, a5 as readFlowParticipants, a6 as readQueuedAgentCommands, a7 as releaseFlowAgentLease, a8 as removeFlowConnection, a9 as removeFlowConnectionBinding, aa as removeFlowParticipant, a$ as requiredCapabilityForCommand, b0 as resolveRuntimeRefs, b1 as resourceMatches, b2 as seedDesignPodTemplateFlow, ab as setActiveEditor, ac as setFlowConnectionAgent, ad as setFlowConnectionOptional, ae as setFlowConnectionRequires, af as setFlowParticipantPowerLevel, ag as setFlowParticipantRequirements, b3 as setFlowParticipantSteps, ah as setupFlowFromBaseUcan, ai as tickFlowAgent, b4 as updateAgentCommand, aj as upsertFlowConnection, ak as upsertFlowConnectionBinding, al as upsertFlowParticipant, am as validateAgentCommand, an as validateFlowAgentLease } from '../connections-CEcurtWI.js';
+import { MatrixProvider } from '@ixo/matrix-crdt';
+import { MatrixClient } from 'matrix-js-sdk';
+import { f as ActionSafety, $ as FlowId, a2 as FlowRevisionId, D as DID, R as FlowDefinitionRevisionSigner, Q as FlowDefinitionRevisionRepository, aJ as Sha256Digest, A as ActionContractRef, O as FlowDefinitionRef, T as FlowDefinitionRevisionV1 } from '../index-b9xxXGFs.js';
+export { a as ActionContractResolutionError, b as ActionContractResolutionErrorCode, c as ActionContractV1, bz as ActionManifestV2Action, bA as ActionManifestV2Compatibility, bB as ActionManifestV2Integrity, bC as ActionManifestV2Issuer, bD as ActionManifestV2Package, bE as ActionManifestV2Payload, bF as ActionManifestV2Primitive, bG as ActionManifestV2SignatureVerificationInput, bH as ActionManifestV2Signer, bI as ActionManifestV2TrustPolicy, bJ as ActionManifestV2VerificationError, bK as ActionManifestV2VerificationErrorCode, d as ActionOutcomeEvidenceV1, e as ActionOutcomeInputV1, g as AttemptId, B as Brand, C as CancelPeerRunCommandV1, h as CanonicalJsonValue, i as ComposioActionAvailabilityPayloadV1, j as ComposioActionAvailabilityV1, k as ComposioAvailabilityResolver, l as ComposioAvailabilitySigner, m as ComposioAvailabilityTrustPolicy, n as ComposioContractMismatchError, o as CreatePeerExecutorOptions, E as EffectClaimAdmissionV1, p as EffectClaimLedger, q as EffectClaimRecordV1, r as EffectClaimRequestV1, s as EffectClaimResultV1, t as EffectClaimStatus, u as EffectClaimTransitionError, v as EffectDisposition, w as EncryptedMatrixFlowDefinitionRevisionRepository, x as EventId, y as ExecutePeerAttemptCommandV1, z as ExecutionPolicyPayloadV1, F as ExecutionPolicySigner, G as ExecutionPolicyTrustPolicy, H as ExecutionPolicyV1, I as ExplicitComposioGateway, J as FLOW_CAPABILITIES, K as FLOW_RUN_PROJECTIONS_MAP_KEY, L as FinalizePeerRunCommandV1, M as FlowContractIntegrityV1, N as FlowDataClassification, P as FlowDefinitionRevisionPayloadV1, S as FlowDefinitionRevisionTrustPolicy, U as FlowDefinitionVerificationError, V as FlowEventAppendResult, W as FlowEventEnvelopeV1, X as FlowEventPayloadV1, Y as FlowEventSigner, Z as FlowEventTrustPolicy, _ as FlowEventValidationError, a0 as FlowJsonObject, a1 as FlowJsonValue, a3 as FlowRunAttemptProjectionV1, a4 as FlowRunProjectionRepairResult, a5 as FlowRunProjectionV1, a6 as FlowRunTimelineEntryV1, a7 as FlowStepDefinitionV1, a8 as FlowStepTtlV1, a9 as FlowTriggerV1, aa as HistoricalActionManifestRepository, ab as HistoricalManifestActionContractResolver, ac as IdempotencyKey, ad as InvocationAuthorizer, ae as MATRIX_FLOW_DEFINITION_ANCHOR_TYPE, af as MATRIX_FLOW_EVENT_TYPE, ag as ManifestBoundActionAdapter, ah as ManifestBoundComposioActionAdapter, bL as ManifestV2JsonValue, ai as MatrixDefinitionAnchorPayloadV1, aj as MatrixDefinitionAnchorSigner, ak as MatrixDefinitionAnchorTrustPolicy, al as MatrixDefinitionAnchorV1, am as MatrixDefinitionTransport, an as MatrixFlowEventObservationV1, ao as MatrixFlowEventStore, ap as MatrixRoomFlowEventStore, aq as MatrixRunEventCarrierV1, ar as MatrixRunEventPageV1, as as MatrixRunEventTransport, at as PeerAttemptResult, au as PeerExecutionError, av as PeerExecutor, aw as ProviderInvocationResult, ax as ProviderReadbackResult, ay as ReceiptId, az as ReducedAttemptV1, aA as ReducedFlowRunV1, aB as RejectedMatrixFlowEventV1, aC as RevisionCipher, aD as RunFinalizationAttemptSummaryV1, aE as RunFinalizationSummaryV1, aF as RunGenesisV1, aG as RunId, aH as RunTerminalStatusV1, aI as RuntimeContractV1, bM as SignedActionManifestV2, aK as StartPeerRunCommandV1, aL as TopicReceiptDelivery, aM as TopicReceiptOutbox, aN as TopicReceiptOutboxRecordV1, aO as TopicRequestRefV1, aP as UNIVERSAL_ACTION_COMPLETED_OUTCOME, aQ as UnsignedFlowEventEnvelopeV1, aR as VerifiedActionContractResolver, bN as VerifiedActionManifestV2, aS as VerifiedAttemptAuthorization, aT as VerifiedComposioActionAvailabilityV1, aU as VerifiedExecutionPolicyV1, aV as VerifiedFlowDefinitionRevisionV1, aW as VerifiedFlowEventEnvelopeV1, aX as VerifiedInvocation, aY as armEffectClaim, aZ as buildFlowResourceUri, a_ as canonicalizeJson, bO as canonicalizeManifestV2Payload, a$ as claimEffect, b0 as computeActionContractDigest, bP as computeActionManifestV2Digest, b1 as computeComposioAvailabilityDigest, b2 as computeExecutionPolicyDigest, b3 as computeFlowDefinitionDigest, b4 as createPeerExecutor, b5 as deepFreezeJson, b6 as deriveAttemptId, b7 as deriveEffectClaimKey, b8 as deriveEventId, b9 as deriveReceiptId, ba as deriveRunId, bb as digestCanonicalJson, bc as drainTopicReceiptOutbox, bd as fingerprintFlowCommand, be as flowRunProjectionStorageKey, bf as markEffectNeedsVerification, bg as matrixFlowEventTransactionId, bh as persistSignedTopicReceipt, bi as prepareEffectSuccess, bj as projectFlowRun, bk as readFlowRunProjection, bl as reduceFlowEvents, bm as renewEffectClaim, bn as repairFlowRunProjection, bo as resolveEffectClaim, bQ as signActionManifestV2, bp as signComposioActionAvailability, bq as signExecutionPolicy, br as signFlowDefinitionRevision, bs as signFlowEvent, bt as signMatrixDefinitionAnchor, bR as verifyActionManifestV2, bu as verifyComposioActionAvailability, bv as verifyExecutionPolicy, bw as verifyFlowDefinitionRevision, bx as verifyFlowEvent, by as verifyMatrixDefinitionAnchor } from '../index-b9xxXGFs.js';
+export { F as FlowProtocolGateV1, L as LegacyFlowFrozenError, a as LegacyFlowOperation, b as assertLegacyFlowOperationAllowed } from '../legacy-BpgIqaQ5.js';
 import { ErrorObject } from 'ajv/dist/2020.js';
 export { a as NODE_CONTEXT_MAP_NAME, b as NODE_CONTEXT_OVERRIDES_MAP_NAME, c as NodeContextFieldProvenance, N as NodeContextRecord, i as isNodeContextRecord } from '../nodeContext-CV9D4s3X.js';
-import 'matrix-js-sdk';
 import '@blocknote/core';
 import 'react';
 import '@ixo/ucan';
 
+declare function canonicalDesignPodJson(value: unknown): string;
+declare function digestDesignPodValue(value: unknown): Promise<string>;
+
 /** Keep the complete record batch comfortably below Matrix's event-size ceiling. */
 declare const MAX_TOPIC_SEMANTIC_RECORDS_PER_RECEIPT = 25;
 declare const MAX_TOPIC_SEMANTIC_RECORD_BATCH_BYTES: number;
@@ -83,10 +90,12 @@ interface CapabilityPatternCoversCanOptions {
 }
 /** Return true when a capability pattern grants the requested `can` ability. */
 declare function capabilityPatternCoversCan(pattern: string, can: string, options?: CapabilityPatternCoversCanOptions): boolean;
-type ActionRegistrationDefinition<TInputs extends Record<string, any>> = Omit<ActionDefinition<TInputs>, 'displayName' | 'description'> & Partial<Pick<ActionDefinition<TInputs>, 'displayName' | 'description'>>;
+type ActionRegistrationDefinition<TInputs extends Record<string, any>> = Omit<ActionDefinition<TInputs>, 'displayName' | 'description' | 'contractVersion'> & Partial<Pick<ActionDefinition<TInputs>, 'displayName' | 'description' | 'contractVersion'>>;
 declare function registerAction<TInputs extends Record<string, any> = Record<string, any>>(definition: ActionRegistrationDefinition<TInputs>): void;
 declare function getAction(type: string): ActionDefinition | undefined;
 declare function getAllActions(): ActionDefinition[];
+/** Whether an action is a standing capability that can never fold to Done. */
+declare function isNeverDoneAction(type: string | undefined | null): boolean;
 /** All (alias → canonical type) pairs, for manifest generation and consistency checks. */
 declare function getAliasEntries(): Array<[string, string]>;
 declare function hasAction(type: string): boolean;
@@ -131,6 +140,7 @@ interface ManifestDoneDeclaration {
 }
 interface ActionManifestEntry {
     type: string;
+    contractVersion: string;
     displayName: string;
     description: string;
     aliases: string[];
@@ -151,6 +161,8 @@ interface ActionManifestEntry {
     hidden: boolean;
     deprecated: boolean;
     supersededBy?: string;
+    requiredCapability?: string;
+    requiresSignedInvocation: boolean;
     proof: ManifestProofDeclaration;
     done: ManifestDoneDeclaration;
     inputSchema: object;
@@ -186,7 +198,7 @@ interface ActionManifest {
 declare function generateActionManifest(): ActionManifest;
 interface ActionManifestIssue {
     actionType: string;
-    code: 'MISSING_CAN' | 'MISSING_PRESENTATION' | 'MISSING_INPUT_SCHEMA' | 'MISSING_OUTPUT_SCHEMA' | 'SIDE_EFFECT_WITHOUT_PROOF' | 'MISSING_TOPIC_POLICY' | 'INVALID_TOPIC_POLICY' | 'INVALID_SEMANTIC_RECORD_DEFINITION';
+    code: 'MISSING_CAN' | 'MISSING_CONTRACT_VERSION' | 'MISSING_PRESENTATION' | 'MISSING_INPUT_SCHEMA' | 'MISSING_OUTPUT_SCHEMA' | 'SIDE_EFFECT_WITHOUT_PROOF' | 'MISSING_TOPIC_POLICY' | 'INVALID_TOPIC_POLICY' | 'INVALID_SEMANTIC_RECORD_DEFINITION';
     message: string;
 }
 /** CI/build gate for the public portable registry contract. */
@@ -194,121 +206,6 @@ declare function actionManifestIssues(manifest?: ActionManifest): ActionManifest
 
 declare function sha256Digest(value: unknown): `sha256:${string}`;
 
-/** JSON values accepted by the Manifest v2 portable contract. */
-type ManifestV2JsonValue = null | boolean | number | string | ManifestV2JsonValue[] | {
-    [key: string]: ManifestV2JsonValue;
-};
-interface ActionManifestV2Package {
-    name: string;
-    version: string;
-    sourceCommit: string;
-    buildId?: string;
-    distributionUrl?: string;
-}
-interface ActionManifestV2Issuer {
-    did: string;
-    verificationMethod: string;
-}
-interface ActionManifestV2Compatibility {
-    engine: {
-        versionRange: string;
-    };
-    flowSchemaVersions: string[];
-    features: string[];
-}
-/**
- * The complete action and primitive groups are introduced by the registry
- * migration. Keeping their extension fields JSON-only prevents executable
- * functions or class instances from crossing this portable boundary.
- */
-type ActionManifestV2Action = {
-    type: string;
-    contractVersion: string;
-    aliases?: string[];
-} & Record<string, ManifestV2JsonValue>;
-type ActionManifestV2Primitive = {
-    type: string;
-    contractVersion: string;
-    aliases?: string[];
-} & Record<string, ManifestV2JsonValue>;
-/** The unsigned, portable portion of an Action Manifest v2 envelope. */
-interface ActionManifestV2Payload {
-    manifestVersion: '2.0';
-    manifestId: string;
-    generatedAt: string;
-    package: ActionManifestV2Package;
-    issuer: ActionManifestV2Issuer;
-    compatibility: ActionManifestV2Compatibility;
-    actions: ActionManifestV2Action[];
-    primitives: ActionManifestV2Primitive[];
-}
-interface ActionManifestV2Integrity {
-    canonicalization: 'RFC8785';
-    digest: {
-        algorithm: 'SHA-256';
-        value: `sha256:${string}`;
-    };
-    signature: {
-        algorithm: string;
-        verificationMethod: string;
-        value: string;
-    };
-}
-type SignedActionManifestV2 = ActionManifestV2Payload & {
-    integrity: ActionManifestV2Integrity;
-};
-declare const verifiedActionManifestV2: unique symbol;
-type DeepReadonly<T> = T extends readonly (infer Item)[] ? readonly DeepReadonly<Item>[] : T extends object ? {
-    readonly [Key in keyof T]: DeepReadonly<T[Key]>;
-} : T;
-/** A manifest that crossed the trust-policy boundary successfully. */
-type VerifiedActionManifestV2 = DeepReadonly<SignedActionManifestV2> & {
-    readonly [verifiedActionManifestV2]: true;
-};
-interface ActionManifestV2Signer {
-    issuerDid: string;
-    verificationMethod: string;
-    algorithm: string;
-    sign(data: Uint8Array): Promise<string>;
-}
-interface ActionManifestV2SignatureVerificationInput {
-    issuerDid: string;
-    verificationMethod: string;
-    algorithm: string;
-    data: Uint8Array;
-    signature: string;
-}
-interface ActionManifestV2TrustPolicy {
-    trustedIssuerDids: readonly string[];
-    revokedIssuerDids?: readonly string[];
-    allowedSignatureAlgorithms: readonly string[];
-    verifySignature(input: ActionManifestV2SignatureVerificationInput): Promise<boolean>;
-}
-type ActionManifestV2VerificationErrorCode = 'INVALID_MANIFEST' | 'UNSUPPORTED_MANIFEST_VERSION' | 'UNSIGNED_MANIFEST' | 'SIGNER_MISMATCH' | 'DUPLICATE_CONTRACT_TYPE' | 'AMBIGUOUS_ALIAS' | 'UNSORTED_CONTRACTS' | 'UNTRUSTED_ISSUER' | 'REVOKED_ISSUER' | 'VERIFICATION_METHOD_MISMATCH' | 'DISALLOWED_SIGNATURE_ALGORITHM' | 'DIGEST_MISMATCH' | 'INVALID_SIGNATURE';
-declare class ActionManifestV2VerificationError extends Error {
-    readonly code: ActionManifestV2VerificationErrorCode;
-    constructor(code: ActionManifestV2VerificationErrorCode, message: string);
-}
-/**
- * Serialize a Manifest v2 payload using the RFC 8785 JSON Canonicalization
- * Scheme. Invalid JSON-domain values are rejected rather than being silently
- * omitted or coerced.
- */
-declare function canonicalizeManifestV2Payload(payload: ActionManifestV2Payload): string;
-/** Compute the content address for the unsigned Manifest v2 payload. */
-declare function computeActionManifestV2Digest(payload: ActionManifestV2Payload): Promise<string>;
-/**
- * Sign a portable Manifest v2 payload. The host owns key resolution and the
- * concrete signature algorithm; this module owns canonical bytes and issuer
- * binding.
- */
-declare function signActionManifestV2(payload: ActionManifestV2Payload, signer: ActionManifestV2Signer): Promise<SignedActionManifestV2>;
-/**
- * Load a signed manifest across the execution trust boundary. Every failure
- * throws; this API never returns a partially trusted or downgraded contract.
- */
-declare function verifyActionManifestV2(candidate: unknown, trustPolicy: ActionManifestV2TrustPolicy): Promise<VerifiedActionManifestV2>;
-
 /** JSON Schema 2020-12 for the signed Manifest v2 envelope. */
 declare const ACTION_MANIFEST_V2_SCHEMA: {
     readonly $schema: "https://json-schema.org/draft/2020-12/schema";
@@ -624,6 +521,166 @@ declare class ManifestBoundTopicExecutorAdapter {
 declare const createQiForgeTopicExecutorAdapter: (executor: ExternalTopicExecutorPort, bridge: TopicActionBridge) => ManifestBoundTopicExecutorAdapter;
 declare const createMcpTopicExecutorAdapter: (executor: ExternalTopicExecutorPort, bridge: TopicActionBridge) => ManifestBoundTopicExecutorAdapter;
 
+/**
+ * Re-authenticate the exact published Design POD release before its run may
+ * become terminal. Collaborative release fields are indexes only: closure is
+ * bound to a signed publish invocation and authoritative IXO readback.
+ */
+declare function verifyDesignPodPublishedRun(params: {
+    yDoc: Y.Doc;
+    runId: string;
+    flowUri: string;
+    service: DesignPodService;
+}): Promise<{
+    valid: boolean;
+    error?: string;
+}>;
+
+declare const DESIGN_POD_DEFINITION_MAP_KEY = "designPodDefinition";
+declare const DESIGN_POD_STATE_MAP_KEY = "designPodState";
+/** Actors arrive as bare ixo1 addresses or did strings depending on the host — compare identity, not spelling. */
+declare function sameDesignPodActor(a: string | undefined, b: string | undefined): boolean;
+declare function seedDesignPodMethodDefinition(doc: Y.Doc, methodId: DesignPodMethodId): DesignPodMethodManifestV1;
+declare function initializeDesignPod(doc: Y.Doc, methodId: DesignPodMethodId, identity: Omit<DesignPodProjectIdentityV1, 'methodManifestDigest'>): Promise<DesignPodProjectIdentityV1>;
+declare function readDesignPodDefinition(doc: Y.Doc): DesignPodMethodManifestV1 | undefined;
+declare function readDesignPodState(doc: Y.Doc): DesignPodFlowStateV1 | undefined;
+declare function updateDesignPodControl(doc: Y.Doc, params: {
+    controlId: DesignPodControlId;
+    content: Record<string, unknown>;
+    actorDid: string;
+    now?: string;
+    importedLegacy?: boolean;
+    expectedBaseDigest?: string | null;
+    /** Pinned session that authorizes this mutation; checked again in the final Yjs transaction. */
+    sessionRunId?: string;
+}): Promise<DesignPodControlRevisionV1>;
+declare function createDesignPodArtifactReceipt(doc: Y.Doc, receipt: Omit<DesignPodArtifactReceiptV1, 'schemaVersion'>): DesignPodArtifactReceiptV1;
+declare function commitDesignPodPhase(doc: Y.Doc, params: {
+    phaseId: DesignPodPhaseId;
+    actorDid: string;
+    decision: 'Yes, continue';
+    expectedControlDigests: Partial<Record<DesignPodControlId, string>>;
+    proof: DesignPodActionProofV1;
+    now?: string;
+}): Promise<DesignPodPhaseCommitmentV1>;
+declare function computeDesignPodRevisionSetDigest(doc: Y.Doc): Promise<string>;
+declare function markDesignPodReviewed(doc: Y.Doc, params: {
+    reviewerDid: string;
+    revisionSetDigest: string;
+    decision: 'approved' | 'changes_required';
+    assignmentDigest: string;
+    reviewRequestDigest: string;
+    proof: DesignPodActionProofV1;
+    now?: string;
+}): DesignPodReviewRecordV1;
+declare function importLegacyDesignPodEvidence(doc: Y.Doc, evidence: LegacyDesignPodEvidenceV1, identity: Omit<DesignPodProjectIdentityV1, 'methodManifestDigest'>, persistence: {
+    persistArtifact(params: {
+        designProjectEntityDid: string;
+        controlId: DesignPodControlId;
+        revision: number;
+        digest: string;
+        content: Record<string, unknown>;
+    }): Promise<Omit<DesignPodArtifactReceiptV1, 'schemaVersion' | 'controlId' | 'digest'>>;
+    verifyArtifactReceipt(params: {
+        designProjectEntityDid: string;
+        revision: DesignPodControlRevisionV1;
+        receipt: DesignPodArtifactReceiptV1;
+    }): Promise<Omit<DesignPodArtifactReceiptV1, 'schemaVersion' | 'controlId' | 'digest'>>;
+}): Promise<void>;
+
+/**
+ * The provider-facing builder Flow. The method definition is pinned in a
+ * separate Y.Map; these five blocks are the only phase ceremonies a provider
+ * operates. The additional governed blocks make independent review,
+ * compilation, and publication executable without exposing seventeen controls
+ * as workflow stages.
+ */
+declare function createDesignPodPortalJourneyPlan(methodId: DesignPodMethodId): BaseUcanFlow;
+declare const PROFESSIONAL_SERVICE_DESIGN_POD_PLAN_V1: BaseUcanFlow;
+declare const YOMA_DESIGN_POD_PLAN_V1: BaseUcanFlow;
+
+/**
+ * One operational Flow template as it travels inside a published release package
+ * (`/apps/flows/<id>.json`). Structurally what the compiler emits; parsed back
+ * defensively here because it arrives as package bytes, not as a live object.
+ */
+interface DesignPodOperationalFlowV1 {
+    schemaVersion: '1.0';
+    kind: 'OperationalFlowTemplate';
+    id: string;
+    title: string;
+    sourceControlIds: string[];
+    nodes: Array<{
+        id: string;
+        sequence: number;
+        actionType: string;
+        inputs?: Record<string, unknown>;
+    }>;
+}
+declare function parseDesignPodOperationalFlow(raw: unknown): DesignPodOperationalFlowV1 | undefined;
+/**
+ * Turn a packaged operational Flow template into a Base UCAN plan, so minting a
+ * protocol reuses the same compile-into-a-room path the Portal already seeds
+ * Design PODs with (`setupFlowFromBaseUcan`).
+ *
+ * The plan is keyed by capability (`can`), so each node's `actionType` is
+ * resolved through the registry. Any per-node `inputs` the package carries are
+ * passed through as `nb` — today the compiler emits none, but a package that
+ * parameterizes its blocks from the design needs no change here.
+ */
+declare function createDesignPodOperationalFlowPlan(flow: DesignPodOperationalFlowV1): BaseUcanFlow;
+
+/**
+ * The companion prompt for "fill this phase". Lives in core so the journey
+ * sidebar and the block's own detail panel send the assistant the exact same
+ * instructions — two copies of this text WILL drift.
+ */
+declare function buildDesignPodPhasePrompt(definition: DesignPodMethodManifestV1, state: DesignPodFlowStateV1, phase: DesignPodPhaseDefinitionV1): string;
+
+interface FlowDocumentCheckpoint {
+    update: Uint8Array;
+    token: string;
+    savedAt: number;
+}
+
+type SharedFlowDocumentStatus = 'disconnected' | 'connecting' | 'connected' | 'error';
+declare function readFlowDocumentHistory(client: MatrixClient, roomId: string, checkpoint?: FlowDocumentCheckpoint): Promise<{
+    update: Uint8Array<ArrayBufferLike>;
+    token: string | undefined;
+}>;
+declare class SharedFlowDocument {
+    readonly client: MatrixClient;
+    readonly roomId: string;
+    readonly doc: Y.Doc;
+    lastAccess: number;
+    status: SharedFlowDocumentStatus;
+    ready: boolean;
+    error?: string;
+    provider: MatrixProvider | null;
+    private listeners;
+    private live;
+    private pending?;
+    private checkpoint?;
+    private idle?;
+    private retry?;
+    private stopTimer?;
+    private stopping?;
+    private attempt;
+    private generation;
+    constructor(client: MatrixClient, roomId: string);
+    private notify;
+    private flush;
+    private watchPageExit;
+    evictIfIdle(): boolean;
+    subscribe(listener: () => void, live?: boolean): () => void;
+    connect(): Promise<void>;
+    private fail;
+    private save;
+    private stopProvider;
+    reconnect: () => Promise<void>;
+}
+declare function getSharedFlowDocument(client: MatrixClient, roomId: string): SharedFlowDocument;
+
 type ConditionOperator = 'equals' | 'not_equals' | 'greater_than' | 'less_than' | 'contains' | 'not_contains' | 'is_empty' | 'is_not_empty';
 interface BlockCondition {
     id: string;
@@ -787,7 +844,12 @@ declare function boundRunEventJson(value: unknown): RunJsonValue;
  */
 declare function isActionDone<TInputs extends Record<string, any> = Record<string, any>>(action: ActionDefinition<TInputs> | undefined, actionState: FlowNodeRuntimeState, runContext: ActionRunContext): boolean;
 declare function isActionTypeDone(actionType: string | undefined, actionState: FlowNodeRuntimeState, runContext: ActionRunContext): boolean;
-type CompletionReconciliationTransition = 'unchanged' | 'adopted' | 'needs_verification' | 'unknown';
+/**
+ * `reopened`: a `reopenable` action's completed entry read back as not done —
+ * new work arrived. The entry keeps its state and proof; only the check output
+ * is merged so the pure fold now says "not done".
+ */
+type CompletionReconciliationTransition = 'unchanged' | 'adopted' | 'reopened' | 'needs_verification' | 'unknown';
 interface ReconcileCompletionParams<TInputs extends Record<string, any> = Record<string, any>> {
     yDoc: Y.Doc;
     sessionRunId: string;
@@ -798,6 +860,7 @@ interface ReconcileCompletionParams<TInputs extends Record<string, any> = Record
     flowUri?: string;
     actorDid?: string;
     services?: ActionRunContext['services'];
+    handlers?: ActionRunContext['handlers'];
     now?: () => number;
 }
 interface ReconcileCompletionResult {
@@ -815,6 +878,30 @@ interface ReconcileCompletionResult {
  * instead moves a contradictory completed entry to human verification.
  */
 declare function reconcileCompletion<TInputs extends Record<string, any> = Record<string, any>>(params: ReconcileCompletionParams<TInputs>): Promise<ReconcileCompletionResult>;
+interface ReconcileCheckableCompletionsParams {
+    yDoc: Y.Doc;
+    sessionRunId: string;
+    /** Manifest block id → action type, as frozen into the session. */
+    actionTypes: Record<string, string>;
+    /** The block's resolved inputs, as its own execution would see them. */
+    inputsFor: (blockId: string, actionType: string) => Record<string, any>;
+    flowId?: string;
+    flowUri?: string;
+    actorDid?: string;
+    services?: ActionRunContext['services'];
+    handlers?: ActionRunContext['handlers'];
+    now?: () => number;
+}
+/**
+ * Refresh every block whose action declares an external `check`, in manifest
+ * order. This is the "on a close attempt" read: the session summary is a pure
+ * fold over stored snapshots, so a close must first give each snapshot-backed
+ * action one chance to notice work that arrived while nobody was looking.
+ *
+ * A check that throws is reported as `unknown` and leaves the entry untouched;
+ * the close then judges the entry on what is already stored.
+ */
+declare function reconcileCheckableCompletions(params: ReconcileCheckableCompletionsParams): Promise<Record<string, ReconcileCompletionResult>>;
 
 declare const INVOCATIONS_MAP_KEY = "invocations";
 /**
@@ -918,6 +1005,31 @@ declare function validateActionProof(action: Pick<ActionDefinition, 'type' | 'si
     proof?: ActionProofDeclaration;
 }, output: Record<string, unknown>): ProofValidationResult;
 
+/**
+ * What the run ledger says about one execution attempt.
+ *
+ * Reduced from the signed `ixo.qi.flow.event.v1` chain the flow manager
+ * appends to the room — `action.requested`, `started`, `effect_armed`,
+ * `succeeded` — each event Ed25519-signed by the oracle and naming the
+ * delegation it ran under.
+ */
+interface RunAttestation {
+    attemptId?: string;
+    stepId?: string;
+    disposition?: string;
+    runId?: string;
+}
+/**
+ * A lookup from attempt id to what the run ledger recorded for it.
+ *
+ * Built from the projections in the document, so it is the same class of
+ * evidence as the invocation store below: presence in a room-writable map,
+ * not a re-verification of signatures. It is grounded better — the projection
+ * is reduced from signed events — but the check is presence, and a completion
+ * that passes it is not unforgeable. `completionEventId` on the action is the
+ * pointer a read-time signature check would follow.
+ */
+declare function runLedgerAttestations(yDoc: Doc | null | undefined): (attemptId: string) => RunAttestation | undefined;
 type CompletionVerificationStatus = 'verified' | 'unverified' | 'not_completed';
 interface CompletionVerification {
     status: CompletionVerificationStatus;
@@ -931,6 +1043,13 @@ interface VerifyCompletionParams {
     actionType?: string;
     /** Invocation lookup, typically backed by the doc's `invocations` Y.Map. */
     getInvocation?: (cid: string) => StoredInvocation | undefined | null;
+    /**
+     * Run-ledger lookup, from {@link runLedgerAttestations}. Supply it wherever a
+     * flow may be executed by the flow manager, which is every flow with an
+     * oracle in the room: without it, every step the oracle completes reads as
+     * unverified for want of an invocation it is never going to mint.
+     */
+    getRunAttestation?: (attemptId: string) => RunAttestation | undefined | null;
     /** Flow schema version; UCAN binding is only required when the version policy demands it. */
     schemaVersion?: string;
 }
@@ -1156,10 +1275,6 @@ interface VersionPolicy {
 declare const VERSION_MANIFEST: Record<FlowVersionString, VersionPolicy>;
 /** The version stamped on newly created flows */
 declare const LATEST_VERSION: FlowVersionString;
-/** Read the current state of the temporary kill switch above. */
-declare function isTempUcanEnforcementDisabled(): boolean;
-/** Toggle the temporary kill switch (test hook / consumer escape hatch). */
-declare function setTempUcanEnforcementDisabled(disabled: boolean): void;
 /**
  * Get the policy for a given schema version.
  * Unknown versions fall back to the strictest (latest) policy.
@@ -1198,13 +1313,7 @@ interface ClassifyNodeStateInput {
     runtime: FlowNodeRuntimeState;
     now: number;
     pendingInvocationCount?: number;
-    /**
-     * Verification of a `completed` runtime entry (see
-     * `flowEngine/verifiedCompletion.ts`). When provided and 'unverified', the
-     * node classifies as Blocked instead of Done — the planner must not advance
-     * past a completion that lacks proof or a valid invocation. Omitted ⇒
-     * legacy behavior (completed = Done).
-     */
+    /** Diagnostic completion result. The stored completed state remains Done. */
     completionVerification?: CompletionVerification;
 }
 declare function classifyBlockerCause(block: unknown, runtime: FlowNodeRuntimeState): FlowAgentBlockerCause | undefined;
@@ -1412,6 +1521,50 @@ declare function computeCID(content: Uint8Array): Promise<string>;
  */
 declare function computeJsonCID(obj: Record<string, any>): Promise<string>;
 
+/**
+ * How each action runs, by action type. The runner reads the `safety` this
+ * pins onto the node and chooses a path from it:
+ *
+ * - `pure`                 run in-process, no service and no grant beyond the flow's own.
+ * - `provider_idempotent`  run in-process against a provider (an HTTP endpoint, an API).
+ * - `fenced`               hand to a helper oracle over the flow-work protocol.
+ * - `approval_only`        a person runs it; the runner never does.
+ *
+ * Only types listed here are taken off the `fenced` default. `fenced` is the
+ * safe outcome: with no helper the runner leaves the step for a person instead
+ * of running something it cannot fence. `qi/noop` and `qi/data.constant` are
+ * not registry actions — the runner's own pure-flow path uses them — but they
+ * are named here so both sides read one table.
+ *
+ * A human-owned action is `approval_only` whatever this table says.
+ */
+declare const ACTION_SAFETY_BY_TYPE: Readonly<Record<string, ActionSafety>>;
+/** The safety an action of this type runs under. */
+declare function resolveActionSafety(type: string, executionOwner: 'agent' | 'human' | undefined): ActionSafety;
+/** Add missing execution contracts to an existing typed flow document. */
+declare function ensureFlowExecutionMetadata(yDoc: Doc): boolean;
+/**
+ * Move a pre-vNext flow document onto the typed draft shape, in place.
+ *
+ * A document authored before the vNext draft shape keeps its per-block props
+ * only in the BlockNote `document` fragment; `qi.flow.nodes` carries the graph
+ * with empty `props`. The runner cannot read such a document: it has no action
+ * contract, no execution owner and no definition digest, and `readFlowDocument`
+ * treats the fragment as the authority (`nodePropsAreAuthoritative`).
+ *
+ * Adoption copies the fragment props onto the nodes that have none, marks the
+ * document `draftSchemaVersion` 1, and then stamps the execution metadata. At
+ * the moment of adoption the node props equal the fragment props, so every
+ * reader sees exactly what it saw before.
+ *
+ * Every write is additive: a node that already has props keeps them, and a
+ * document that is already vNext is only re-stamped if something is missing.
+ * Calling this twice on the same document writes nothing the second time.
+ *
+ * Returns `true` when the document changed.
+ */
+declare function adoptLegacyFlowDocument(yDoc: Doc): boolean;
+
 /**
  * Writes compiled blocks into BlockNote's collaborative XmlFragment using the
  * ProseMirror/Yjs structure that BlockNote reads from collaboration.
@@ -1479,8 +1632,9 @@ interface FlowDocumentRead {
  * - per-block props   ← `readBlocksFromFragment` (inputs/conditions/trigger/ttl/icon/…)
  * - per-block runtime ← the run's `actions` map, resolved against the flat `runtime` mirror
  *
- * Fragment props are authoritative for the denormalized fields (`title`/`description`); the
- * node-map copy is used only as a fallback when the fragment didn't persist them.
+ * For vNext drafts, complete node-map props are authoritative and the BlockNote
+ * fragment is a rebuildable projection. Pre-vNext documents retain the fragment
+ * as their read authority until they are explicitly republished.
  *
  * Returns `null` when the doc has no flow at all (mirrors `readCompiledFlowFromYDoc`).
  */
@@ -1494,6 +1648,9 @@ interface AddFlowNodeOptions {
     title?: string;
     /** Optional extra block props merged over the compiled defaults. */
     props?: Record<string, string>;
+    /** Stable ids supplied by a graph-aware command. Generated only for legacy callers. */
+    nodeId?: string;
+    blockId?: string;
 }
 /**
  * Add a step to the flow document — the inverse of `removeFlowNode`. Inserts an
@@ -1520,6 +1677,20 @@ declare function addFlowNode(yDoc: Doc, opts: AddFlowNodeOptions): {
  * Returns `false` when no block with `blockId` exists.
  */
 declare function setBlockProps(yDoc: Doc, blockId: string, partial: Record<string, string>): boolean;
+/**
+ * Mirror a BlockNote prop mutation into the canonical typed Flow draft.
+ * BlockNote already wrote its own projection before this function runs.
+ */
+declare function syncFlowNodePropsFromProjection(yDoc: Doc, blockId: string, partial: Record<string, string>, legacyBaseline?: Record<string, string>): boolean;
+interface FlowProjectionDrift {
+    nodeId: string;
+    blockId: string;
+    kind: 'missing_block' | 'props_mismatch';
+}
+/** Pure projection audit. Executable meaning always comes from qi.flow.nodes. */
+declare function auditFlowProjections(yDoc: Doc): FlowProjectionDrift[];
+/** Rebuild only Flow action-block props. Narrative BlockNote content is preserved. */
+declare function repairFlowProjections(yDoc: Doc): FlowProjectionDrift[];
 /**
  * Remove one step from the flow document — fragment block + `qi.flow.*` entries + its
  * `runtime` entry + any edges touching it — in one transaction. Siblings untouched.
@@ -1579,6 +1750,119 @@ declare function resetStepRuntime(yDoc: Doc, blockId: string, runId?: string): v
  */
 declare function setFormAnswers(yDoc: Doc, blockId: string, answers: Record<string, unknown>, runId?: string): void;
 
+type FlowDraftCommandOperation = {
+    kind: 'add-step';
+    nodeId: string;
+    blockId: string;
+    actionType: string;
+    afterNodeId?: string;
+    title?: string;
+    props?: Record<string, string>;
+} | {
+    kind: 'update-step-props';
+    blockId: string;
+    props: Record<string, string>;
+} | {
+    kind: 'remove-step';
+    nodeId: string;
+} | {
+    kind: 'reorder-steps';
+    order: string[];
+} | {
+    kind: 'set-meta';
+    values: Record<string, string | number | boolean | null>;
+};
+interface FlowDraftCommand {
+    kind: 'qi.flow.draft-command';
+    schemaVersion: '1.0';
+    commandId: string;
+    expectedRevision: number;
+    actorDid: string;
+    operation: FlowDraftCommandOperation;
+}
+interface FlowDraftCommandResult {
+    outcome: 'applied' | 'duplicate';
+    commandId: string;
+    revision: number;
+    nodeId?: string;
+    blockId?: string;
+}
+interface FlowDraftSnapshot {
+    revision: number;
+    document: FlowDocumentRead | null;
+}
+interface FlowDefinitionDraftRepository {
+    read(): FlowDraftSnapshot;
+    apply(command: FlowDraftCommand): FlowDraftCommandResult;
+    applyBatch(commands: readonly FlowDraftCommand[]): FlowDraftCommandResult[];
+    auditProjections(): FlowProjectionDrift[];
+    repairProjections(): FlowProjectionDrift[];
+}
+declare class FlowDraftCommandError extends Error {
+    readonly code: 'REVISION_CONFLICT' | 'IDEMPOTENCY_CONFLICT' | 'INVALID_COMMAND' | 'REFERENCED_STEP';
+    readonly details?: Record<string, unknown> | undefined;
+    constructor(code: 'REVISION_CONFLICT' | 'IDEMPOTENCY_CONFLICT' | 'INVALID_COMMAND' | 'REFERENCED_STEP', message: string, details?: Record<string, unknown> | undefined);
+}
+/** One idempotent mutation waist for Portal, Oracles, and headless authoring. */
+declare function createYjsFlowDefinitionDraftRepository(yDoc: Doc): FlowDefinitionDraftRepository;
+
+interface PublishFlowDefinitionParams {
+    yDoc: Doc;
+    flowId: FlowId;
+    revision: FlowRevisionId;
+    publishedAt: string;
+    publishedBy: DID;
+    signer: FlowDefinitionRevisionSigner;
+    repository: FlowDefinitionRevisionRepository;
+    actionManifestDigest: Sha256Digest;
+    actionContracts: Readonly<Record<string, ActionContractRef>>;
+    expectedParent?: FlowDefinitionRef;
+    source?: {
+        operation: 'republish-legacy' | 'instantiate-template' | 'fork';
+        ref: string;
+    };
+}
+interface PublishFlowDefinitionResult {
+    outcome: 'published' | 'exists';
+    ref: FlowDefinitionRef;
+    revision: FlowDefinitionRevisionV1;
+}
+declare class FlowDefinitionPublicationError extends Error {
+    readonly code: 'NOT_VNEXT_DRAFT' | 'EMPTY_FLOW' | 'MISSING_ACTION_CONTRACT' | 'INVALID_CONFIGURATION' | 'INVALID_TRIGGER' | 'PARENT_CONFLICT';
+    constructor(code: 'NOT_VNEXT_DRAFT' | 'EMPTY_FLOW' | 'MISSING_ACTION_CONTRACT' | 'INVALID_CONFIGURATION' | 'INVALID_TRIGGER' | 'PARENT_CONFLICT', message: string);
+}
+/** Publish one immutable revision from the canonical typed draft. */
+declare function publishFlowDefinitionRevision(params: PublishFlowDefinitionParams): Promise<PublishFlowDefinitionResult>;
+
+interface FlowDraftProposalPayloadV1 {
+    kind: 'qi.flow.draft-proposal';
+    schemaVersion: '1.0';
+    proposalId: string;
+    proposedBy: string;
+    proposedAt: string;
+    baseRevision: number;
+    operations: readonly FlowDraftCommandOperation[];
+    summary: string;
+}
+type FlowDraftProposalV1 = FlowDraftProposalPayloadV1 & {
+    proposalDigest: Sha256Digest;
+};
+interface FlowDraftProposalApprovalV1 {
+    kind: 'qi.flow.draft-proposal-approval';
+    schemaVersion: '1.0';
+    proposalId: string;
+    proposalDigest: Sha256Digest;
+    approvedBy: string;
+    approvedAt: string;
+    approvalReference: string;
+}
+declare function createFlowDraftProposal(payload: FlowDraftProposalPayloadV1): Promise<FlowDraftProposalV1>;
+/**
+ * Apply a reviewed Oracle proposal only when an external approval binds the
+ * exact proposal digest. The Oracle never receives direct Yjs access.
+ */
+declare function applyApprovedFlowDraftProposal(repository: FlowDefinitionDraftRepository, proposal: FlowDraftProposalV1, approval: FlowDraftProposalApprovalV1): Promise<FlowDraftCommandResult[]>;
+
 /**
  * The operator vocabulary the FE condition evaluator actually understands
  * (`src/mantine/blocks/utils/conditionEvaluator.ts`). The compiler historically wrote the
@@ -1752,4 +2036,4 @@ declare function createOracleInitFlowTemplate(): {
     nodes: FlowNode[];
 };
 
-export { ACTION_MANIFEST_V2_SCHEMA, ACTION_MANIFEST_VERSION, ACTION_REGISTRY_VERSION, ActionDefinition, ActionDoneContract, ActionHandlers, type ActionManifest, type ActionManifestEntry, type ActionManifestIssue, type ActionManifestV2Action, type ActionManifestV2Compatibility, type ActionManifestV2Integrity, type ActionManifestV2Issuer, type ActionManifestV2Package, type ActionManifestV2Payload, type ActionManifestV2Primitive, type ActionManifestV2SignatureVerificationInput, type ActionManifestV2Signer, type ActionManifestV2TrustPolicy, ActionManifestV2VerificationError, type ActionManifestV2VerificationErrorCode, ActionReadBackMetadata, type ActionReadBackResolution, type ActionReadBackResolver, type ActionReadBackResolverInput, ActionResult, ActionRunContext, ActionServices, type AddFlowNodeOptions, type BlockCondition, type BlockConditionInput, type BlockConditionsResult, type BlockExecutionEligibility, type BoundedRunOutput, type CapabilityPatternCoversCanOptions, type ClassifyNodeStateInput, CompiledBlock, CompiledEdge, CompiledFlow, CompletionCheck, type CompletionReconciliationTransition, type CompletionVerification, type CompletionVerificationStatus, type ConditionActionResult, type ConditionConfig, type ConditionEvaluationOptions, type ConditionEvaluationResult, type ConditionOperator, type DetailedResolution, type EvaluatorOperator, type ExecuteFlowAgentCoreCommandOptions, type ExecuteQueuedFlowAgentCoreCommandsOptions, type ExternalTopicExecutorPort, type ExternalTopicExecutorResult, FlowAgentBlockerCause, FlowAgentCommand, FlowAgentCommandResult, FlowAgentContext, FlowAgentExecutor, FlowAgentNodeSnapshot, FlowAgentPublicNodeState, FlowConnectionBinding, type FlowDocumentNode, type FlowDocumentRead, FlowNode, FlowNodeRuntimeState, FlowRuntimeStateManager, type FlowVersionString, INVOCATIONS_MAP_KEY, InvalidConditionConfigError, InvocationStore, LATEST_VERSION, MAX_RUN_ACTION_OUTPUT_BYTES, MAX_TOPIC_SEMANTIC_RECORDS_PER_RECEIPT, MAX_TOPIC_SEMANTIC_RECORD_BATCH_BYTES, ManifestBoundTopicExecutorAdapter, type ManifestDoneDeclaration, type ManifestProofDeclaration, type ManifestV2JsonValue, OutputSchemaField, PROOF_MISSING_CODE, type ParsedReference, PendingInvocation, type PendingRunTimelineEvent, type ProofValidationResult, ReadBackTerminalState, type ReconcileActionReadBackParams, type ReconcileActionReadBackResult, type ReconcileCompletionParams, type ReconcileCompletionResult, type ResolveReferencesOptions, RunEventAppender, RunEventInput, RunJsonValue, RunRecordDetails, type RunTimelineAppendResult, SERVICE_VERBS, STEP_COMPLETED_EVENT, STEP_COMPLETED_EVENT_NAME, type ServiceVerb, type SignedActionManifestV2, StoredDelegation, StoredInvocation, TopicActionBridge, TopicActionInvocationV1, TopicActionMetadata, TopicActionReceiptV2, TopicActionRecord, TopicActionWriteBackResult, TopicSemanticRecordDefinition, type TopicSemanticRecordValidationResult, UcanDelegationStore, UcanService, type UnresolvedReference, type UnresolvedReferenceReason, VERSION_MANIFEST, type VerifiedActionManifestV2, type VersionPolicy, XERO_ORACLE_WORKING_STATUSES, XERO_PAYMENT_CREATE_ACTION_TYPE, XERO_TOOLKIT, XERO_WORK_ITEMS_MAP_NAME, XERO_WORK_TERMINAL_MAP_NAME, type XeroWorkAttempt, type XeroWorkItem, type XeroWorkItemFilter, type XeroWorkKind, type XeroWorkProvenance, type XeroWorkSource, type XeroWorkStatus, type XeroWorkTerminalRecord, actionManifestIssues, actionTypeToCan, addFlowNode, appendRunTimelineEvent, appendRunTimelineEvents, boundRunActionOutput, boundRunEventJson, buildBlockConditionsProp, buildServicesFromHandlers, buildXeroInvoiceWorkKey, buildXeroPaymentWorkKey, canToActionType, canToType, canonicalizeManifestV2Payload, capabilityPatternCoversCan, classifyBlockerCause, classifyNodeState, computeActionManifestV2Digest, computeCID, computeJsonCID, createMcpTopicExecutorAdapter, createOracleInitFlowTemplate, createQiForgeTopicExecutorAdapter, createReference, createRunEventIdempotencyKey, dispatchFlowStartTriggers, doneWhenCompleted, evaluateBlockConditions, evaluateBlockConditionsForRun, evaluateBlockExecutionEligibilityForRun, evaluateCondition, executeFlowAgentCoreCommand, executeQueuedFlowAgentCoreCommands, findXeroWorkItems, findXeroWorkItemsForEditor, generateActionManifest, getAction, getActionByCan, getActionForBlock, getActionPresentation, getAliasEntries, getAllActions, getAllCanMappings, getEventsForBlock, getMissingActionInputs, getNestedValue, getOutputSchemaForBlock, getVersionPolicy, getXeroWorkItemsMap, getXeroWorkTerminalMap, hasAction, hasReferences, isActionDone, isActionTypeDone, isBlankInputValue, isTempUcanEnforcementDisabled, isVerifiedCompletion, isVersionAtLeast, markXeroWorkApproved, markXeroWorkApprovedForEditor, markXeroWorkCompleted, markXeroWorkCompletedForEditor, markXeroWorkFailed, markXeroWorkFailedForEditor, neverDone, normalizeActionReadBackMetadata, normalizeCan, normalizeCapabilityPattern, normalizeCondition, normalizeConditions, oracleInitSurveySchema, parseConditionConfig, parseConditionConfigStrict, parseReferences, parseServiceCan, readBlocksFromFragment, readFlowDocument, readFlowXeroBinding, readFlowXeroBindingFromEditor, readInvocationsForRun, readPendingRunTimelineEvents, reconcileActionReadBack, reconcileCompletion, reconcilePendingInvocations, registerAction, removeBlockFromFragment, removeFlowNode, reorderFlowNodes, replaceBlockInFragment, resetStepRuntime, resolveConditionSourceValue, resolveObjectReferences, resolveReferences, resolveReferencesDetailed, resolveSingleReference, retryPendingRunTimelineEvents, serviceCan, setBlockProps, setFormAnswers, setTempUcanEnforcementDisabled, sha256Digest, signActionManifestV2, snapshotNode, swapFlowBlocks, toEvaluatorOperator, typeToCan, updateNodeRuntime, updateXeroWorkReviewPayload, updateXeroWorkReviewPayloadForEditor, upsertXeroWorkItem, upsertXeroWorkItemForEditor, validateActionProof, validateTopicSemanticRecord, validateTopicSemanticRecordBatch, verifyActionManifestV2, verifyCompletion, writeCompiledBlocksToFragment, writeRunRecordAndReconcile, xeroOracleActivityForBlock, xeroOracleActivityForBlockForEditor };
+export { ACTION_MANIFEST_V2_SCHEMA, ACTION_MANIFEST_VERSION, ACTION_REGISTRY_VERSION, ACTION_SAFETY_BY_TYPE, ActionContractRef, ActionDefinition, ActionDoneContract, ActionHandlers, type ActionManifest, type ActionManifestEntry, type ActionManifestIssue, ActionReadBackMetadata, type ActionReadBackResolution, type ActionReadBackResolver, type ActionReadBackResolverInput, ActionResult, ActionRunContext, ActionSafety, ActionServices, type AddFlowNodeOptions, BaseUcanFlow, type BlockCondition, type BlockConditionInput, type BlockConditionsResult, type BlockExecutionEligibility, type BoundedRunOutput, type CapabilityPatternCoversCanOptions, type ClassifyNodeStateInput, CompiledBlock, CompiledEdge, CompiledFlow, CompletionCheck, type CompletionReconciliationTransition, type CompletionVerification, type CompletionVerificationStatus, type ConditionActionResult, type ConditionConfig, type ConditionEvaluationOptions, type ConditionEvaluationResult, type ConditionOperator, DESIGN_POD_DEFINITION_MAP_KEY, DESIGN_POD_STATE_MAP_KEY, DesignPodActionProofV1, DesignPodArtifactReceiptV1, DesignPodControlId, DesignPodControlRevisionV1, DesignPodFlowStateV1, DesignPodMethodId, DesignPodMethodManifestV1, type DesignPodOperationalFlowV1, DesignPodPhaseCommitmentV1, DesignPodPhaseDefinitionV1, DesignPodPhaseId, DesignPodProjectIdentityV1, DesignPodReviewRecordV1, DesignPodService, type DetailedResolution, type EvaluatorOperator, type ExecuteFlowAgentCoreCommandOptions, type ExecuteQueuedFlowAgentCoreCommandsOptions, type ExternalTopicExecutorPort, type ExternalTopicExecutorResult, FlowAgentBlockerCause, FlowAgentCommand, FlowAgentCommandResult, FlowAgentContext, FlowAgentExecutor, FlowAgentNodeSnapshot, FlowAgentPublicNodeState, FlowConnectionBinding, type FlowDefinitionDraftRepository, FlowDefinitionPublicationError, FlowDefinitionRef, FlowDefinitionRevisionRepository, FlowDefinitionRevisionSigner, FlowDefinitionRevisionV1, type FlowDocumentNode, type FlowDocumentRead, type FlowDraftCommand, FlowDraftCommandError, type FlowDraftCommandOperation, type FlowDraftCommandResult, type FlowDraftProposalApprovalV1, type FlowDraftProposalPayloadV1, type FlowDraftProposalV1, type FlowDraftSnapshot, FlowId, FlowNode, FlowNodeRuntimeState, type FlowProjectionDrift, FlowRevisionId, FlowRuntimeStateManager, type FlowVersionString, INVOCATIONS_MAP_KEY, InvalidConditionConfigError, InvocationStore, LATEST_VERSION, LegacyDesignPodEvidenceV1, MAX_RUN_ACTION_OUTPUT_BYTES, MAX_TOPIC_SEMANTIC_RECORDS_PER_RECEIPT, MAX_TOPIC_SEMANTIC_RECORD_BATCH_BYTES, ManifestBoundTopicExecutorAdapter, type ManifestDoneDeclaration, type ManifestProofDeclaration, OutputSchemaField, PROFESSIONAL_SERVICE_DESIGN_POD_PLAN_V1, PROOF_MISSING_CODE, type ParsedReference, PendingInvocation, type PendingRunTimelineEvent, type ProofValidationResult, type PublishFlowDefinitionParams, type PublishFlowDefinitionResult, ReadBackTerminalState, type ReconcileActionReadBackParams, type ReconcileActionReadBackResult, type ReconcileCheckableCompletionsParams, type ReconcileCompletionParams, type ReconcileCompletionResult, type ResolveReferencesOptions, RunEventAppender, RunEventInput, RunJsonValue, RunRecordDetails, type RunTimelineAppendResult, SERVICE_VERBS, STEP_COMPLETED_EVENT, STEP_COMPLETED_EVENT_NAME, type ServiceVerb, Sha256Digest, SharedFlowDocument, StoredDelegation, StoredInvocation, TopicActionBridge, TopicActionInvocationV1, TopicActionMetadata, TopicActionReceiptV2, TopicActionRecord, TopicActionWriteBackResult, TopicSemanticRecordDefinition, type TopicSemanticRecordValidationResult, UcanDelegationStore, UcanService, type UnresolvedReference, type UnresolvedReferenceReason, VERSION_MANIFEST, type VersionPolicy, XERO_ORACLE_WORKING_STATUSES, XERO_PAYMENT_CREATE_ACTION_TYPE, XERO_TOOLKIT, XERO_WORK_ITEMS_MAP_NAME, XERO_WORK_TERMINAL_MAP_NAME, type XeroWorkAttempt, type XeroWorkItem, type XeroWorkItemFilter, type XeroWorkKind, type XeroWorkProvenance, type XeroWorkSource, type XeroWorkStatus, type XeroWorkTerminalRecord, YOMA_DESIGN_POD_PLAN_V1, actionManifestIssues, actionTypeToCan, addFlowNode, adoptLegacyFlowDocument, appendRunTimelineEvent, appendRunTimelineEvents, applyApprovedFlowDraftProposal, auditFlowProjections, boundRunActionOutput, boundRunEventJson, buildBlockConditionsProp, buildDesignPodPhasePrompt, buildServicesFromHandlers, buildXeroInvoiceWorkKey, buildXeroPaymentWorkKey, canToActionType, canToType, canonicalDesignPodJson, capabilityPatternCoversCan, classifyBlockerCause, classifyNodeState, commitDesignPodPhase, computeCID, computeDesignPodRevisionSetDigest, computeJsonCID, createDesignPodArtifactReceipt, createDesignPodOperationalFlowPlan, createDesignPodPortalJourneyPlan, createFlowDraftProposal, createMcpTopicExecutorAdapter, createOracleInitFlowTemplate, createQiForgeTopicExecutorAdapter, createReference, createRunEventIdempotencyKey, createYjsFlowDefinitionDraftRepository, digestDesignPodValue, dispatchFlowStartTriggers, doneWhenCompleted, ensureFlowExecutionMetadata, evaluateBlockConditions, evaluateBlockConditionsForRun, evaluateBlockExecutionEligibilityForRun, evaluateCondition, executeFlowAgentCoreCommand, executeQueuedFlowAgentCoreCommands, findXeroWorkItems, findXeroWorkItemsForEditor, generateActionManifest, getAction, getActionByCan, getActionForBlock, getActionPresentation, getAliasEntries, getAllActions, getAllCanMappings, getEventsForBlock, getMissingActionInputs, getNestedValue, getOutputSchemaForBlock, getSharedFlowDocument, getVersionPolicy, getXeroWorkItemsMap, getXeroWorkTerminalMap, hasAction, hasReferences, importLegacyDesignPodEvidence, initializeDesignPod, isActionDone, isActionTypeDone, isBlankInputValue, isNeverDoneAction, isVerifiedCompletion, isVersionAtLeast, markDesignPodReviewed, markXeroWorkApproved, markXeroWorkApprovedForEditor, markXeroWorkCompleted, markXeroWorkCompletedForEditor, markXeroWorkFailed, markXeroWorkFailedForEditor, neverDone, normalizeActionReadBackMetadata, normalizeCan, normalizeCapabilityPattern, normalizeCondition, normalizeConditions, oracleInitSurveySchema, parseConditionConfig, parseConditionConfigStrict, parseDesignPodOperationalFlow, parseReferences, parseServiceCan, publishFlowDefinitionRevision, readBlocksFromFragment, readDesignPodDefinition, readDesignPodState, readFlowDocument, readFlowDocumentHistory, readFlowXeroBinding, readFlowXeroBindingFromEditor, readInvocationsForRun, readPendingRunTimelineEvents, reconcileActionReadBack, reconcileCheckableCompletions, reconcileCompletion, reconcilePendingInvocations, registerAction, removeBlockFromFragment, removeFlowNode, reorderFlowNodes, repairFlowProjections, replaceBlockInFragment, resetStepRuntime, resolveActionSafety, resolveConditionSourceValue, resolveObjectReferences, resolveReferences, resolveReferencesDetailed, resolveSingleReference, retryPendingRunTimelineEvents, runLedgerAttestations, sameDesignPodActor, seedDesignPodMethodDefinition, serviceCan, setBlockProps, setFormAnswers, sha256Digest, snapshotNode, swapFlowBlocks, syncFlowNodePropsFromProjection, toEvaluatorOperator, typeToCan, updateDesignPodControl, updateNodeRuntime, updateXeroWorkReviewPayload, updateXeroWorkReviewPayloadForEditor, upsertXeroWorkItem, upsertXeroWorkItemForEditor, validateActionProof, validateTopicSemanticRecord, validateTopicSemanticRecordBatch, verifyCompletion, verifyDesignPodPublishedRun, writeCompiledBlocksToFragment, writeRunRecordAndReconcile, xeroOracleActivityForBlock, xeroOracleActivityForBlockForEditor };