@powerhousedao/reactor-api 6.2.3-dev.33 → 6.2.3-dev.35

package/dist/index.mjs

@@ -1,12 +1,13 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="66ae2db7-0d74-5986-a811-364313026902")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="9e720347-46a5-5d4d-a73c-901d11fe454f")}catch(e){}}();
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
-import { C as AuthorizationPolicy, D as AuthenticationRequiredError, E as AuthEvaluationUnsupportedError, O as ForbiddenError, S as createCanonicalDocumentIdResolver, T as createAuthorizationService, _ as loadProcessors, a as pieceListLocation, b as callerSubject, c as buildGraphQlDocument, d as buildGraphqlOperations, f as isSubgraphClass, g as loadDocumentModels, k as MalformedStoredOperationError, l as buildGraphQlDriveDocument, m as extractUpgradeManifests, o as piecesFromCdnList, p as debounce, r as PIECE_SOURCE_LIST, s as piecesFromListModule, u as buildGraphqlOperation, v as loadSubgraphs, w as AuthorizedDocumentHandle, x as CanonicalDocumentIdResolutionError, y as BaseSubgraph } from "./pieces-swupjgIO.mjs";
+import { A as RefusalNotRecordedError, C as AuthorizationPolicy, D as AuthenticationRequiredError, E as AuthEvaluationUnsupportedError, O as ForbiddenError, S as createCanonicalDocumentIdResolver, T as createAuthorizationService, _ as loadProcessors, a as pieceListLocation, b as callerSubject, c as buildGraphQlDocument, d as buildGraphqlOperations, f as isSubgraphClass, g as loadDocumentModels, k as MalformedStoredOperationError, l as buildGraphQlDriveDocument, m as extractUpgradeManifests, o as piecesFromCdnList, p as debounce, r as PIECE_SOURCE_LIST, s as piecesFromListModule, u as buildGraphqlOperation, v as loadSubgraphs, w as AuthorizedDocumentHandle, x as CanonicalDocumentIdResolutionError, y as BaseSubgraph } from "./pieces-Bi5qxpi5.mjs";
 import { AnalyticsQueryEngine } from "@powerhousedao/analytics-engine-core";
 import { AnalyticsModel, AnalyticsResolvers, typedefs } from "@powerhousedao/analytics-engine-graphql";
 import { gql } from "graphql-tag";
 import { GraphQLError, Kind, Lexer, Source, TokenKind, parse, print, visit } from "graphql";
-import { AuthEnforcementDisabledError, BareReadGate, ChannelError, ChannelErrorSource, DEFAULT_DRIVE_CONTAINER_TYPES, DriveCollectionId, JobStatus, ModelReadGate, PropagationMode as PropagationMode$1, SyncOperation, SyncScopeGate, consolidateSyncOperations, createReactorHostModuleBase, driveIdFromUrl, envelopesToSyncOperations, parseDriveUrl, readDecisionModel, syncOperationErrorType } from "@powerhousedao/reactor";
+import { AuthEnforcementDisabledError, BareReadGate, ChannelError, ChannelErrorSource, DEFAULT_DRIVE_CONTAINER_TYPES, DriveCollectionId, JobStatus, ModelReadGate, PropagationMode as PropagationMode$1, SyncOperation, SyncScopeGate, consolidateSyncOperations, createReactorHostModuleBase, driveIdFromUrl, envelopesToSyncOperations, parseDriveUrl, readDecisionModel, supportsPurgeRefusals, syncOperationErrorType } from "@powerhousedao/reactor";
+import { deserializeSignature, readPeerManifest, serializeSignature, setName, withSignaturePolicy } from "@powerhousedao/shared/document-model";
 import { ConsoleLogger, childLogger, documentModelDocumentModelModule } from "document-model";
 import path, { isAbsolute, join } from "node:path";
 import { match } from "path-to-regexp";
@@ -20,7 +21,6 @@ import { buildSubgraphSchema } from "@apollo/subgraph";
 import { typeDefs } from "@powerhousedao/document-engineering/graphql";
 import { camelCase, kebabCase, pascalCase } from "change-case";
 import { GraphQLJSON, GraphQLJSONObject } from "graphql-type-json";
-import { deserializeSignature, readPeerManifest, serializeSignature, setName, withSignaturePolicy } from "@powerhousedao/shared/document-model";
 import * as z$1 from "zod";
 import { z } from "zod";
 import { createHandler } from "graphql-sse/lib/use/fetch";
@@ -87,7 +87,30 @@ var AnalyticsSubgraph = class extends BaseSubgraph {
 };
 //#endregion
 //#region src/graphql/auth/schema.graphql
-var schema_default$2 = "# Auth Subgraph Schema\n# Contains all document permission and authorization related types\n\nscalar DateTime\n\n# Permission levels for documents\nenum DocumentPermissionLevel {\n  # Can fetch and read the document\n  READ\n  # Can push updates and modify the document\n  WRITE\n  # Can manage document permissions and settings\n  ADMIN\n}\n\n# Document permission entry\ntype DocumentPermissionEntry {\n  documentId: String!\n  userAddress: String!\n  permission: DocumentPermissionLevel!\n  grantedBy: String!\n  createdAt: DateTime!\n  updatedAt: DateTime!\n}\n\n# Operation user permission entry\ntype OperationUserPermission {\n  documentId: String!\n  operationType: String!\n  userAddress: String!\n  grantedBy: String!\n  createdAt: DateTime!\n}\n\n# Combined document access info\ntype DocumentAccessInfo {\n  documentId: String!\n  permissions: [DocumentPermissionEntry!]!\n}\n\n# Operation permissions info\ntype OperationPermissionsInfo {\n  documentId: String!\n  operationType: String!\n  userPermissions: [OperationUserPermission!]!\n}\n\n# Document protection info\ntype DocumentProtectionInfo {\n  documentId: String!\n  protected: Boolean!\n  ownerAddress: String\n}\n\ntype Query {\n  # Get permissions for a document (requires ADMIN permission or global admin)\n  documentAccess(documentId: String!): DocumentAccessInfo!\n\n  # Get protection status for a document (requires ADMIN permission or global admin)\n  documentProtection(documentId: String!): DocumentProtectionInfo!\n\n  # Get all documents the current user has explicit access to\n  userDocumentPermissions: [DocumentPermissionEntry!]!\n\n  # Get operation permissions for a document and operation type\n  # (requires ADMIN permission or global admin)\n  operationPermissions(\n    documentId: String!\n    operationType: String!\n  ): OperationPermissionsInfo!\n\n  # Check if the current user can execute a specific operation on a document\n  canExecuteOperation(documentId: String!, operationType: String!): Boolean!\n}\n\ntype Mutation {\n  # Set document protection status (requires ADMIN permission or global admin)\n  setDocumentProtection(\n    documentId: String!\n    protected: Boolean!\n  ): DocumentProtectionInfo!\n\n  # Transfer document ownership (requires ADMIN permission or global admin)\n  transferDocumentOwnership(\n    documentId: String!\n    newOwnerAddress: String!\n  ): DocumentProtectionInfo!\n\n  # Grant a user permission on a document (requires ADMIN permission or global admin)\n  grantDocumentPermission(\n    documentId: String!\n    userAddress: String!\n    permission: DocumentPermissionLevel!\n  ): DocumentPermissionEntry!\n\n  # Revoke a user's permission on a document (requires ADMIN permission or global admin)\n  revokeDocumentPermission(documentId: String!, userAddress: String!): Boolean!\n\n  # --- Operation Permissions ---\n\n  # Grant a user permission to execute an operation on a document\n  grantOperationPermission(\n    documentId: String!\n    operationType: String!\n    userAddress: String!\n  ): OperationUserPermission!\n\n  # Revoke a user's permission to execute an operation\n  revokeOperationPermission(\n    documentId: String!\n    operationType: String!\n    userAddress: String!\n  ): Boolean!\n}\n";
+var schema_default$2 = "# Auth Subgraph Schema\n# Contains all document permission and authorization related types\n\nscalar DateTime\n\n# Permission levels for documents\nenum DocumentPermissionLevel {\n  # Can fetch and read the document\n  READ\n  # Can push updates and modify the document\n  WRITE\n  # Can manage document permissions and settings\n  ADMIN\n}\n\n# Document permission entry\ntype DocumentPermissionEntry {\n  documentId: String!\n  userAddress: String!\n  permission: DocumentPermissionLevel!\n  grantedBy: String!\n  createdAt: DateTime!\n  updatedAt: DateTime!\n}\n\n# Operation user permission entry\ntype OperationUserPermission {\n  documentId: String!\n  operationType: String!\n  userAddress: String!\n  grantedBy: String!\n  createdAt: DateTime!\n}\n\n# Combined document access info\ntype DocumentAccessInfo {\n  documentId: String!\n  permissions: [DocumentPermissionEntry!]!\n}\n\n# Operation permissions info\ntype OperationPermissionsInfo {\n  documentId: String!\n  operationType: String!\n  userPermissions: [OperationUserPermission!]!\n}\n\n# Document protection info\ntype DocumentProtectionInfo {\n  documentId: String!\n  protected: Boolean!\n  ownerAddress: String\n}\n\ntype Query {\n  # Get permissions for a document (requires ADMIN permission or global admin)\n  documentAccess(\n    documentIdOrSlug: String\n    documentId: String @deprecated(reason: \"Use documentIdOrSlug.\")\n  ): DocumentAccessInfo!\n\n  # Get protection status for a document (requires ADMIN permission or global admin)\n  documentProtection(\n    documentIdOrSlug: String\n    documentId: String @deprecated(reason: \"Use documentIdOrSlug.\")\n  ): DocumentProtectionInfo!\n\n  # Get all documents the current user has explicit access to\n  userDocumentPermissions: [DocumentPermissionEntry!]!\n\n  # Get operation permissions for a document and operation type\n  # (requires ADMIN permission or global admin)\n  operationPermissions(\n    documentIdOrSlug: String\n    documentId: String @deprecated(reason: \"Use documentIdOrSlug.\")\n    operationType: String!\n  ): OperationPermissionsInfo!\n\n  # Check if the current user can execute a specific operation on a document\n  canExecuteOperation(\n    documentIdOrSlug: String\n    documentId: String @deprecated(reason: \"Use documentIdOrSlug.\")\n    operationType: String!\n  ): Boolean!\n}\n\ntype Mutation {\n  # Set document protection status (requires ADMIN permission or global admin)\n  setDocumentProtection(\n    documentIdOrSlug: String\n    documentId: String @deprecated(reason: \"Use documentIdOrSlug.\")\n    protected: Boolean!\n  ): DocumentProtectionInfo!\n\n  # Transfer document ownership (requires ADMIN permission or global admin)\n  transferDocumentOwnership(\n    documentIdOrSlug: String\n    documentId: String @deprecated(reason: \"Use documentIdOrSlug.\")\n    newOwnerAddress: String!\n  ): DocumentProtectionInfo!\n\n  # Grant a user permission on a document (requires ADMIN permission or global admin)\n  grantDocumentPermission(\n    documentIdOrSlug: String\n    documentId: String @deprecated(reason: \"Use documentIdOrSlug.\")\n    userAddress: String!\n    permission: DocumentPermissionLevel!\n  ): DocumentPermissionEntry!\n\n  # Revoke a user's permission on a document (requires ADMIN permission or global admin)\n  revokeDocumentPermission(\n    documentIdOrSlug: String\n    documentId: String @deprecated(reason: \"Use documentIdOrSlug.\")\n    userAddress: String!\n  ): Boolean!\n\n  # --- Operation Permissions ---\n\n  # Grant a user permission to execute an operation on a document\n  grantOperationPermission(\n    documentIdOrSlug: String\n    documentId: String @deprecated(reason: \"Use documentIdOrSlug.\")\n    operationType: String!\n    userAddress: String!\n  ): OperationUserPermission!\n\n  # Revoke a user's permission to execute an operation\n  revokeOperationPermission(\n    documentIdOrSlug: String\n    documentId: String @deprecated(reason: \"Use documentIdOrSlug.\")\n    operationType: String!\n    userAddress: String!\n  ): Boolean!\n}\n";
+//#endregion
+//#region src/graphql/argument-aliases.ts
+/** A renamed argument given under both names, or a required one under neither. */
+var ArgumentAliasError = class extends GraphQLError {
+	constructor(message) {
+		super(message, { extensions: { code: "BAD_USER_INPUT" } });
+	}
+};
+/** The value of a required argument that may still arrive under its old name. */
+function requireOneOf(args, name, deprecatedName) {
+	const current = args[name] ?? void 0;
+	const deprecated = args[deprecatedName] ?? void 0;
+	if (current !== void 0 && deprecated !== void 0) throw new ArgumentAliasError(`Pass ${name} or ${deprecatedName}, not both.`);
+	if (current === void 0 && deprecated === void 0) throw new ArgumentAliasError(`${name} is required.`);
+	return current ?? deprecated;
+}
+/** The value of an optional argument that may still arrive under its old name. */
+function optionalOneOf(args, name, deprecatedName) {
+	const current = args[name] ?? void 0;
+	const deprecated = args[deprecatedName] ?? void 0;
+	if (current !== void 0 && deprecated !== void 0) throw new ArgumentAliasError(`Pass ${name} or ${deprecatedName}, not both.`);
+	return current ?? deprecated;
+}
 //#endregion
 //#region src/graphql/auth/resolvers.ts
 async function documentAccess(service, authorizationService, args, userAddress) {
@@ -183,7 +206,7 @@ var AuthSubgraph = class extends BaseSubgraph {
 				this.logger.debug("documentAccess(@args)", args);
 				if (!this.documentPermissionService) throw new GraphQLError("DocumentPermissionService not available");
 				try {
-					return await documentAccess(this.documentPermissionService, this.authorizationService, await this.withCanonicalDocumentId(args, ctx), ctx.user?.address);
+					return await documentAccess(this.documentPermissionService, this.authorizationService, await this.#withCanonicalDocumentArgs(args, ctx), ctx.user?.address);
 				} catch (error) {
 					this.logger.error("Error in documentAccess: @error", error);
 					throw error;
@@ -204,7 +227,7 @@ var AuthSubgraph = class extends BaseSubgraph {
 				this.logger.debug("operationPermissions(@args)", args);
 				if (!this.documentPermissionService) throw new GraphQLError("DocumentPermissionService not available");
 				try {
-					return await operationPermissions(this.documentPermissionService, this.authorizationService, await this.withCanonicalDocumentId(args, ctx), ctx.user?.address);
+					return await operationPermissions(this.documentPermissionService, this.authorizationService, await this.#withCanonicalDocumentArgs(args, ctx), ctx.user?.address);
 				} catch (error) {
 					this.logger.error("Error in operationPermissions: @error", error);
 					throw error;
@@ -213,7 +236,7 @@ var AuthSubgraph = class extends BaseSubgraph {
 			canExecuteOperation: async (_parent, args, ctx) => {
 				this.logger.debug("canExecuteOperation(@args)", args);
 				try {
-					return await canExecuteOperation(this.authorizationService, await this.withCanonicalDocumentId(args, ctx), ctx.user?.address);
+					return await canExecuteOperation(this.authorizationService, await this.#withCanonicalDocumentArgs(args, ctx), ctx.user?.address);
 				} catch (error) {
 					this.logger.error("Error in canExecuteOperation: @error", error);
 					throw error;
@@ -223,7 +246,7 @@ var AuthSubgraph = class extends BaseSubgraph {
 				this.logger.debug("documentProtection(@args)", args);
 				if (!this.documentPermissionService) throw new GraphQLError("DocumentPermissionService not available");
 				try {
-					return await documentProtection(this.documentPermissionService, this.authorizationService, await this.withCanonicalDocumentId(args, ctx), ctx.user?.address);
+					return await documentProtection(this.documentPermissionService, this.authorizationService, await this.#withCanonicalDocumentArgs(args, ctx), ctx.user?.address);
 				} catch (error) {
 					this.logger.error("Error in documentProtection: @error", error);
 					throw error;
@@ -235,7 +258,7 @@ var AuthSubgraph = class extends BaseSubgraph {
 				this.logger.debug("setDocumentProtection(@args)", args);
 				if (!this.documentPermissionService) throw new GraphQLError("DocumentPermissionService not available");
 				try {
-					return await setDocumentProtection(this.documentPermissionService, this.authorizationService, await this.withCanonicalDocumentId(args, ctx), ctx.user?.address);
+					return await setDocumentProtection(this.documentPermissionService, this.authorizationService, await this.#withCanonicalDocumentArgs(args, ctx), ctx.user?.address);
 				} catch (error) {
 					this.logger.error("Error in setDocumentProtection: @error", error);
 					throw error;
@@ -245,7 +268,7 @@ var AuthSubgraph = class extends BaseSubgraph {
 				this.logger.debug("transferDocumentOwnership(@args)", args);
 				if (!this.documentPermissionService) throw new GraphQLError("DocumentPermissionService not available");
 				try {
-					return await transferDocumentOwnership(this.documentPermissionService, this.authorizationService, await this.withCanonicalDocumentId(args, ctx), ctx.user?.address);
+					return await transferDocumentOwnership(this.documentPermissionService, this.authorizationService, await this.#withCanonicalDocumentArgs(args, ctx), ctx.user?.address);
 				} catch (error) {
 					this.logger.error("Error in transferDocumentOwnership: @error", error);
 					throw error;
@@ -255,7 +278,7 @@ var AuthSubgraph = class extends BaseSubgraph {
 				this.logger.debug("grantDocumentPermission(@args)", args);
 				if (!this.documentPermissionService) throw new GraphQLError("DocumentPermissionService not available");
 				try {
-					const resolved = await this.withCanonicalDocumentId(args, ctx);
+					const resolved = await this.#withCanonicalDocumentArgs(args, ctx);
 					return await grantDocumentPermission(this.documentPermissionService, this.authorizationService, {
 						...resolved,
 						permission: resolved.permission
@@ -269,7 +292,7 @@ var AuthSubgraph = class extends BaseSubgraph {
 				this.logger.debug("revokeDocumentPermission(@args)", args);
 				if (!this.documentPermissionService) throw new GraphQLError("DocumentPermissionService not available");
 				try {
-					return await revokeDocumentPermission(this.documentPermissionService, this.authorizationService, await this.withCanonicalDocumentId(args, ctx), ctx.user?.address);
+					return await revokeDocumentPermission(this.documentPermissionService, this.authorizationService, await this.#withCanonicalDocumentArgs(args, ctx), ctx.user?.address);
 				} catch (error) {
 					this.logger.error("Error in revokeDocumentPermission: @error", error);
 					throw error;
@@ -279,7 +302,7 @@ var AuthSubgraph = class extends BaseSubgraph {
 				this.logger.debug("grantOperationPermission(@args)", args);
 				if (!this.documentPermissionService) throw new GraphQLError("DocumentPermissionService not available");
 				try {
-					return await grantOperationPermission(this.documentPermissionService, this.authorizationService, await this.withCanonicalDocumentId(args, ctx), ctx.user?.address);
+					return await grantOperationPermission(this.documentPermissionService, this.authorizationService, await this.#withCanonicalDocumentArgs(args, ctx), ctx.user?.address);
 				} catch (error) {
 					this.logger.error("Error in grantOperationPermission: @error", error);
 					throw error;
@@ -289,7 +312,7 @@ var AuthSubgraph = class extends BaseSubgraph {
 				this.logger.debug("revokeOperationPermission(@args)", args);
 				if (!this.documentPermissionService) throw new GraphQLError("DocumentPermissionService not available");
 				try {
-					return await revokeOperationPermission(this.documentPermissionService, this.authorizationService, await this.withCanonicalDocumentId(args, ctx), ctx.user?.address);
+					return await revokeOperationPermission(this.documentPermissionService, this.authorizationService, await this.#withCanonicalDocumentArgs(args, ctx), ctx.user?.address);
 				} catch (error) {
 					this.logger.error("Error in revokeOperationPermission: @error", error);
 					throw error;
@@ -297,6 +320,16 @@ var AuthSubgraph = class extends BaseSubgraph {
 			}
 		}
 	};
+	#withCanonicalDocumentArgs(args, ctx) {
+		const { documentIdOrSlug, documentId, ...rest } = args;
+		return this.withCanonicalDocumentId({
+			...rest,
+			documentId: requireOneOf({
+				documentIdOrSlug,
+				documentId
+			}, "documentIdOrSlug", "documentId")
+		}, ctx);
+	}
 	onSetup() {
 		this.logger.debug("Setting up AuthSubgraph");
 		return Promise.resolve();
@@ -1985,7 +2018,7 @@ function generateNewApiSchema(documentName, specification, prefixedStateInputTyp
 
     input ${documentName}_SearchFilterInput {
       parentId: String
-      identifiers: [String!]
+      identifiers: [String!] @deprecated(reason: "Ignored. Filter by parentId.")
     }
   `;
 	const revisionType = RevisionType;
@@ -2027,7 +2060,7 @@ function generateNewApiSchema(documentName, specification, prefixedStateInputTyp
 	const queries = `
     type ${documentName}Queries {
       """Get a specific ${documentName} document by identifier"""
-      document(identifier: String!, view: ${documentName}_ViewFilterInput): ${documentName}_DocumentWithChildren
+      document(idOrSlug: String, identifier: String @deprecated(reason: "Use idOrSlug."), view: ${documentName}_ViewFilterInput): ${documentName}_DocumentWithChildren
 
       """Get all ${documentName} documents (paged)"""
       documents(paging: ${documentName}_PagingInput): ${documentName}_DocumentResultPage!
@@ -2036,10 +2069,10 @@ function generateNewApiSchema(documentName, specification, prefixedStateInputTyp
       findDocuments(search: ${documentName}_SearchFilterInput, view: ${documentName}_ViewFilterInput, paging: ${documentName}_PagingInput): ${documentName}_DocumentResultPage!
 
       """Get outgoing relationships of a ${documentName} document"""
-      documentOutgoingRelationships(sourceIdentifier: String!, relationshipType: String!, view: ${documentName}_ViewFilterInput, paging: ${documentName}_PagingInput): ${documentName}_DocumentResultPage!
+      documentOutgoingRelationships(sourceIdOrSlug: String, sourceIdentifier: String @deprecated(reason: "Use sourceIdOrSlug."), relationshipType: String!, view: ${documentName}_ViewFilterInput, paging: ${documentName}_PagingInput): ${documentName}_DocumentResultPage!
 
       """Get incoming relationships to a ${documentName} document"""
-      documentIncomingRelationships(targetIdentifier: String!, relationshipType: String!, view: ${documentName}_ViewFilterInput, paging: ${documentName}_PagingInput): ${documentName}_DocumentResultPage!
+      documentIncomingRelationships(targetIdOrSlug: String, targetIdentifier: String @deprecated(reason: "Use targetIdOrSlug."), relationshipType: String!, view: ${documentName}_ViewFilterInput, paging: ${documentName}_PagingInput): ${documentName}_DocumentResultPage!
     }
   `;
 	let initialStateInputSchema = "";
@@ -2070,9 +2103,9 @@ function generateNewApiSchema(documentName, specification, prefixedStateInputTyp
 			initialStateInputSchema = inputTypeDefs ? `${inputTypeDefs}\n\n${wrapper}` : wrapper;
 		}
 	}
-	const createDocumentMutation = initialStateInputSchema ? `createDocument(name: String!, parentIdentifier: String, slug: String, preferredEditor: String, initialState: ${documentName}_InitialStateInput): ${documentName}MutationResult!` : `createDocument(name: String!, parentIdentifier: String, preferredEditor: String): ${documentName}MutationResult!`;
-	const createEmptyDocumentMutation = `createEmptyDocument(parentIdentifier: String): ${documentName}MutationResult!`;
-	const operationMutations = specification?.modules.flatMap((module) => module.operations.filter((op) => op.name && hasValidSchema(op.schema)).flatMap((op) => [`${camelCase(op.name)}(docId: PHID!, input: ${documentName}_${pascalCase(op.name)}Input!): ${documentName}MutationResult!`, `${camelCase(op.name)}Async(docId: PHID!, input: ${documentName}_${pascalCase(op.name)}Input!): String!`])).join("\n        ") ?? "";
+	const createDocumentMutation = initialStateInputSchema ? `createDocument(name: String!, parentIdOrSlug: String, parentIdentifier: String @deprecated(reason: "Use parentIdOrSlug."), slug: String, preferredEditor: String, initialState: ${documentName}_InitialStateInput): ${documentName}MutationResult!` : `createDocument(name: String!, parentIdOrSlug: String, parentIdentifier: String @deprecated(reason: "Use parentIdOrSlug."), preferredEditor: String): ${documentName}MutationResult!`;
+	const createEmptyDocumentMutation = `createEmptyDocument(parentIdOrSlug: String, parentIdentifier: String @deprecated(reason: "Use parentIdOrSlug.")): ${documentName}MutationResult!`;
+	const operationMutations = specification?.modules.flatMap((module) => module.operations.filter((op) => op.name && hasValidSchema(op.schema)).flatMap((op) => [`${camelCase(op.name)}(documentIdOrSlug: String, docId: PHID @deprecated(reason: "Use documentIdOrSlug."), input: ${documentName}_${pascalCase(op.name)}Input!): ${documentName}MutationResult!`, `${camelCase(op.name)}Async(documentIdOrSlug: String, docId: PHID @deprecated(reason: "Use documentIdOrSlug."), input: ${documentName}_${pascalCase(op.name)}Input!): String!`])).join("\n        ") ?? "";
 	const moduleSchemas = buildModuleSchemas(specification, documentName, allTypeNames, hasValidSchema);
 	return gql`
     scalar DateTime
@@ -2226,7 +2259,8 @@ function OperationsFilterInputSchema() {
 	return z$1.object({
 		actionTypes: z$1.array(z$1.string()).nullish(),
 		branch: z$1.string().nullish(),
-		documentId: z$1.string(),
+		documentId: z$1.string().nullish(),
+		documentIdOrSlug: z$1.string().nullish(),
 		scopes: z$1.array(z$1.string()).nullish(),
 		sinceRevision: z$1.number().nullish(),
 		timestampFrom: z$1.string().nullish(),
@@ -2294,7 +2328,8 @@ function SyncEnvelopeInputSchema() {
 function SyncRefusalInputSchema() {
 	return z$1.object({
 		branch: z$1.string(),
-		documentId: z$1.string()
+		documentId: z$1.string(),
+		kind: z$1.string().nullish()
 	});
 }
 function TouchChannelInputSchema() {
@@ -3457,13 +3492,13 @@ async function document(reactorClient, args, subject) {
 	};
 	let result;
 	try {
-		result = await reactorClient.get(args.identifier, view);
+		result = await reactorClient.get(args.idOrSlug, view);
 	} catch (error) {
 		throw new GraphQLError(`Failed to fetch document: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
 	let children;
 	try {
-		children = await reactorClient.getOutgoingRelationships(args.identifier, "child", view);
+		children = await reactorClient.getOutgoingRelationships(args.idOrSlug, "child", view);
 	} catch (error) {
 		throw new GraphQLError(`Failed to fetch children: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -3494,7 +3529,7 @@ async function documentOutgoingRelationships(reactorClient, args, subject) {
 	}
 	let result;
 	try {
-		result = await reactorClient.getOutgoingRelationships(args.sourceIdentifier, args.relationshipType, view, paging);
+		result = await reactorClient.getOutgoingRelationships(args.sourceIdOrSlug, args.relationshipType, view, paging);
 	} catch (error) {
 		throw new GraphQLError(`Failed to fetch outgoing relationships: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -3522,7 +3557,7 @@ async function documentIncomingRelationships(reactorClient, args, subject) {
 	}
 	let result;
 	try {
-		result = await reactorClient.getIncomingRelationships(args.targetIdentifier, args.relationshipType, view, paging);
+		result = await reactorClient.getIncomingRelationships(args.targetIdOrSlug, args.relationshipType, view, paging);
 	} catch (error) {
 		throw new GraphQLError(`Failed to fetch incoming relationships: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -3537,7 +3572,7 @@ async function documentOutgoingRelationshipEdges(reactorClient, args, subject) {
 	const paging = toRelationshipPagingOptions(args.paging);
 	let result;
 	try {
-		result = await reactorClient.getOutgoingRelationshipEdges(args.sourceIdentifier, fromInputMaybe(args.relationshipType), view, paging);
+		result = await reactorClient.getOutgoingRelationshipEdges(args.sourceIdOrSlug, fromInputMaybe(args.relationshipType), view, paging);
 	} catch (error) {
 		throw new GraphQLError(`Failed to fetch outgoing relationship edges: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -3552,7 +3587,7 @@ async function documentIncomingRelationshipEdges(reactorClient, args, subject) {
 	const paging = toRelationshipPagingOptions(args.paging);
 	let result;
 	try {
-		result = await reactorClient.getIncomingRelationshipEdges(args.targetIdentifier, fromInputMaybe(args.relationshipType), view, paging);
+		result = await reactorClient.getIncomingRelationshipEdges(args.targetIdOrSlug, fromInputMaybe(args.relationshipType), view, paging);
 	} catch (error) {
 		throw new GraphQLError(`Failed to fetch incoming relationship edges: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -3685,7 +3720,7 @@ async function documentOperations(reactorClient, args, subject) {
 	}
 	let result;
 	try {
-		result = await reactorClient.getOperations(args.filter.documentId, view, operationFilter, paging);
+		result = await reactorClient.getOperations(args.filter.documentIdOrSlug, view, operationFilter, paging);
 	} catch (error) {
 		throw new GraphQLError(`Failed to fetch document operations: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -3717,7 +3752,7 @@ async function evaluateActions(reactorClient, args, subject) {
 	}));
 	let result;
 	try {
-		result = await reactorClient.evaluateActions(args.documentIdentifier, branch, candidates, subject);
+		result = await reactorClient.evaluateActions(args.documentIdOrSlug, branch, candidates, subject);
 	} catch (error) {
 		if (AuthEnforcementDisabledError.isError(error)) throw new AuthEvaluationUnsupportedError();
 		throw new GraphQLError(`Failed to evaluate actions: ${error instanceof Error ? error.message : "Unknown error"}`);
@@ -3734,13 +3769,13 @@ async function createDocument(reactorClient, args, reactorDriveClient, subject)
 	if (!args.document || typeof args.document !== "object") throw new GraphQLError("Invalid document: must be an object");
 	const document = args.document;
 	if (!document.header || typeof document.header !== "object") throw new GraphQLError("Invalid document: missing or invalid header");
-	const parentIdentifier = fromInputMaybe(args.parentIdentifier);
+	const parentIdOrSlug = fromInputMaybe(args.parentIdOrSlug);
 	let result;
 	try {
-		if (parentIdentifier) {
-			const parent = await reactorClient.get(parentIdentifier, subject && { subject });
-			if (isDriveContainerType(parent.header.documentType)) result = await pickDriveClient(reactorClient, parent.header.documentType, reactorDriveClient).addFile(parentIdentifier, document);
-			else result = await reactorClient.create(document, parentIdentifier);
+		if (parentIdOrSlug) {
+			const parent = await reactorClient.get(parentIdOrSlug, subject && { subject });
+			if (isDriveContainerType(parent.header.documentType)) result = await pickDriveClient(reactorClient, parent.header.documentType, reactorDriveClient).addFile(parent.header.id, document);
+			else result = await reactorClient.create(document, parentIdOrSlug);
 		} else result = await reactorClient.create(document);
 	} catch (error) {
 		throw new GraphQLError(`Failed to create document: ${error instanceof Error ? error.message : "Unknown error"}`);
@@ -3753,18 +3788,18 @@ async function createDocument(reactorClient, args, reactorDriveClient, subject)
 	}
 }
 async function createEmptyDocument(reactorClient, args, reactorDriveClient, subject) {
-	const parentIdentifier = fromInputMaybe(args.parentIdentifier);
+	const parentIdOrSlug = fromInputMaybe(args.parentIdOrSlug);
 	const name = fromInputMaybe(args.name);
 	let result;
 	try {
-		if (parentIdentifier) {
-			const parent = await reactorClient.get(parentIdentifier, subject && { subject });
+		if (parentIdOrSlug) {
+			const parent = await reactorClient.get(parentIdOrSlug, subject && { subject });
 			if (isDriveContainerType(parent.header.documentType)) {
 				const module = await reactorClient.getDocumentModelModule(args.documentType);
 				const document = withSignaturePolicy(module.utils.createDocument(), await reactorClient.getCreateSignaturePolicy());
 				if (name) document.header.name = name;
-				result = await pickDriveClient(reactorClient, parent.header.documentType, reactorDriveClient).addFile(parentIdentifier, document);
-			} else result = await reactorClient.createEmpty(args.documentType, { parentIdentifier });
+				result = await pickDriveClient(reactorClient, parent.header.documentType, reactorDriveClient).addFile(parent.header.id, document);
+			} else result = await reactorClient.createEmpty(args.documentType, { parentIdentifier: parentIdOrSlug });
 		} else result = await reactorClient.createEmpty(args.documentType, {});
 	} catch (error) {
 		throw new GraphQLError(`Failed to create empty document: ${error instanceof Error ? error.message : "Unknown error"}`);
@@ -3777,7 +3812,7 @@ async function createEmptyDocument(reactorClient, args, reactorDriveClient, subj
 	}
 }
 async function createDocumentWithInitialState(reactorClient, args, reactorDriveClient, subject) {
-	const parentIdentifier = fromInputMaybe(args.parentIdentifier);
+	const parentIdOrSlug = fromInputMaybe(args.parentIdOrSlug);
 	const name = fromInputMaybe(args.name);
 	const slug = fromInputMaybe(args.slug);
 	const preferredEditor = fromInputMaybe(args.preferredEditor);
@@ -3801,22 +3836,22 @@ async function createDocumentWithInitialState(reactorClient, args, reactorDriveC
 		preferredEditor
 	};
 	let result;
-	if (parentIdentifier) {
+	if (parentIdOrSlug) {
 		let parent;
 		try {
-			parent = await reactorClient.get(parentIdentifier, subject && { subject });
+			parent = await reactorClient.get(parentIdOrSlug, subject && { subject });
 		} catch (error) {
 			throw new GraphQLError(`Parent document not found: ${error instanceof Error ? error.message : "Unknown error"}`);
 		}
 		if (isDriveContainerType(parent.header.documentType)) {
 			const driveClient = pickDriveClient(reactorClient, parent.header.documentType, reactorDriveClient);
 			try {
-				result = await driveClient.addFile(parentIdentifier, document);
+				result = await driveClient.addFile(parent.header.id, document);
 			} catch (error) {
 				throw new GraphQLError(`Failed to create document in drive: ${error instanceof Error ? error.message : "Unknown error"}`);
 			}
 		} else try {
-			result = await reactorClient.create(document, parentIdentifier);
+			result = await reactorClient.create(document, parentIdOrSlug);
 		} catch (error) {
 			throw new GraphQLError(`Failed to create document with parent: ${error instanceof Error ? error.message : "Unknown error"}`);
 		}
@@ -3847,7 +3882,7 @@ async function execute(reactorClient, args, subject) {
 	const branch = fromInputMaybe(args.branch) ?? DEFAULT_BRANCH;
 	let result;
 	try {
-		result = await reactorClient.execute(args.documentIdentifier, branch, actions, void 0, subject);
+		result = await reactorClient.execute(args.documentIdOrSlug, branch, actions, void 0, subject);
 	} catch (error) {
 		throw new GraphQLError(`Failed to execute actions: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -3869,7 +3904,7 @@ async function executeAsync(reactorClient, args) {
 	const branch = fromInputMaybe(args.branch) ?? DEFAULT_BRANCH;
 	let job;
 	try {
-		job = await reactorClient.executeAsync(args.documentIdentifier, branch, actions);
+		job = await reactorClient.executeAsync(args.documentIdOrSlug, branch, actions);
 	} catch (error) {
 		throw new GraphQLError(`Failed to submit actions: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -3917,7 +3952,7 @@ async function renameDocument(reactorClient, args, signal, subject) {
 	const branch = fromInputMaybe(args.branch);
 	let result;
 	try {
-		result = await reactorClient.rename(args.documentIdentifier, args.name, branch, signal);
+		result = await reactorClient.rename(args.documentIdOrSlug, args.name, branch, signal);
 	} catch (error) {
 		throw new GraphQLError(`Failed to rename document: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -3933,7 +3968,7 @@ async function setPreferredEditor(reactorClient, args, signal, subject) {
 	const preferredEditor = fromInputMaybe(args.preferredEditor) ?? null;
 	let result;
 	try {
-		result = await reactorClient.setPreferredEditor(args.documentIdentifier, preferredEditor, branch, signal);
+		result = await reactorClient.setPreferredEditor(args.documentIdOrSlug, preferredEditor, branch, signal);
 	} catch (error) {
 		throw new GraphQLError(`Failed to set preferred editor: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -3949,7 +3984,7 @@ async function addRelationship(reactorClient, args, subject) {
 	const metadata = fromInputMaybe(args.metadata);
 	let result;
 	try {
-		result = await reactorClient.addRelationship(args.sourceIdentifier, args.targetIdentifier, args.relationshipType, metadata, branch);
+		result = await reactorClient.addRelationship(args.sourceIdOrSlug, args.targetIdOrSlug, args.relationshipType, metadata, branch);
 	} catch (error) {
 		throw new GraphQLError(`Failed to add relationship: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -3965,7 +4000,7 @@ async function updateRelationship(reactorClient, args, subject) {
 	const metadata = fromInputMaybe(args.metadata) ?? null;
 	let result;
 	try {
-		result = await reactorClient.updateRelationship(args.sourceIdentifier, args.targetIdentifier, args.relationshipType, metadata, branch);
+		result = await reactorClient.updateRelationship(args.sourceIdOrSlug, args.targetIdOrSlug, args.relationshipType, metadata, branch);
 	} catch (error) {
 		throw new GraphQLError(`Failed to update relationship: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -3980,7 +4015,7 @@ async function removeRelationship(reactorClient, args, subject) {
 	const branch = fromInputMaybe(args.branch);
 	let result;
 	try {
-		result = await reactorClient.removeRelationship(args.sourceIdentifier, args.targetIdentifier, args.relationshipType, branch);
+		result = await reactorClient.removeRelationship(args.sourceIdOrSlug, args.targetIdOrSlug, args.relationshipType, branch);
 	} catch (error) {
 		throw new GraphQLError(`Failed to remove relationship: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -3995,7 +4030,7 @@ async function moveRelationship(reactorClient, args, subject) {
 	const branch = fromInputMaybe(args.branch);
 	let result;
 	try {
-		result = await reactorClient.moveRelationship(args.sourceParentIdentifier, args.targetParentIdentifier, args.targetIdentifier, args.relationshipType, branch);
+		result = await reactorClient.moveRelationship(args.sourceParentIdOrSlug, args.targetParentIdOrSlug, args.targetIdOrSlug, args.relationshipType, branch);
 	} catch (error) {
 		throw new GraphQLError(`Failed to move relationship: ${error instanceof Error ? error.message : "Unknown error"}`);
 	}
@@ -4015,9 +4050,12 @@ async function moveRelationship(reactorClient, args, subject) {
 async function deleteDocument(reactorClient, args, reactorDriveClient) {
 	const propagate = toReactorPropagationMode(args.propagate);
 	try {
-		const driveParent = (await reactorClient.getIncomingRelationships(args.identifier, "child")).results.find((p) => isDriveContainerType(p.header.documentType));
-		if (driveParent) await pickDriveClient(reactorClient, driveParent.header.documentType, reactorDriveClient).removeNode(driveParent.header.id, args.identifier);
-		else await reactorClient.deleteDocument(args.identifier, propagate);
+		const driveParent = (await reactorClient.getIncomingRelationships(args.idOrSlug, "child")).results.find((p) => isDriveContainerType(p.header.documentType));
+		if (driveParent) {
+			const driveClient = pickDriveClient(reactorClient, driveParent.header.documentType, reactorDriveClient);
+			const documentId = await reactorClient.resolveIdOrSlug(args.idOrSlug);
+			await driveClient.removeNode(driveParent.header.id, documentId);
+		} else await reactorClient.deleteDocument(args.idOrSlug, propagate);
 		return true;
 	} catch (error) {
 		throw new GraphQLError(`Failed to delete document: ${error instanceof Error ? error.message : "Unknown error"}`);
@@ -4025,9 +4063,9 @@ async function deleteDocument(reactorClient, args, reactorDriveClient) {
 }
 async function deleteDocuments(reactorClient, args) {
 	const propagate = toReactorPropagationMode(args.propagate);
-	const identifiers = [...args.identifiers];
+	const idsOrSlugs = [...args.idsOrSlugs];
 	try {
-		await reactorClient.deleteDocuments(identifiers, propagate);
+		await reactorClient.deleteDocuments(idsOrSlugs, propagate);
 		return true;
 	} catch (error) {
 		throw new GraphQLError(`Failed to delete documents: ${error instanceof Error ? error.message : "Unknown error"}`);
@@ -4226,6 +4264,7 @@ function pollSyncEnvelopes(syncManager, args, forbiddenIds = /* @__PURE__ */ new
 		if (isHeld(syncOp)) continue;
 		syncOp.deliveredCount ??= 0;
 		syncOp.emittedCount ??= 0;
+		if (!forbiddenIds.has(syncOp.documentId)) while (syncOp.deliveredCount > 0 && syncOp.operations[syncOp.deliveredCount - 1].context.ordinal > args.outboxLatest) syncOp.deliveredCount -= 1;
 		while (syncOp.deliveredCount < syncOp.emittedCount && syncOp.operations[syncOp.deliveredCount].context.ordinal <= args.outboxLatest) syncOp.deliveredCount += 1;
 		const remaining = syncOp.operations.slice(syncOp.deliveredCount);
 		if (remaining.length === 0) continue;
@@ -4281,11 +4320,15 @@ function pollSyncEnvelopes(syncManager, args, forbiddenIds = /* @__PURE__ */ new
 		...revisions
 	};
 }
+const MARKER_REFUSAL = "marker";
 /**
 * The client's UNSUPPORTED_PROTOCOL refusals of polled rows. Each becomes a hold
 * for that client, as a pushed refusal does, rather than counting as delivered.
+* A refused marker is not a hold: {@link recordPollMarkerRefusals} takes it.
+* A kind this server does not know is ignored.
 */
-function holdPollRefusals(syncManager, channelId, refusals) {
+function holdPollRefusals(syncManager, channelId, all) {
+	const refusals = all?.filter((refusal) => refusal.kind === void 0 || refusal.kind === null);
 	if (!refusals?.length) return;
 	let remote;
 	try {
@@ -4301,6 +4344,30 @@ function holdPollRefusals(syncManager, channelId, refusals) {
 	remote.channel.deadLetter.add(...refused);
 }
 /**
+* The client's refusals of purge markers it polled. Persisted before the poll is
+* served; a failure fails the poll, and the client reports them again. The sync
+* manager keeps only refusals of markers this remote was owed.
+*/
+async function recordPollMarkerRefusals(syncManager, channelId, all) {
+	const refusals = all?.filter((refusal) => refusal.kind === MARKER_REFUSAL);
+	if (!refusals?.length) return;
+	if (!supportsPurgeRefusals(syncManager)) return;
+	let remote;
+	try {
+		remote = syncManager.getById(channelId);
+	} catch {
+		return;
+	}
+	try {
+		await syncManager.recordPolledMarkerRefusals(remote.meta.name, refusals.map(({ documentId, branch }) => ({
+			documentId,
+			branch
+		})));
+	} catch (error) {
+		throw new RefusalNotRecordedError(error);
+	}
+}
+/**
 * A poll naming no revision is from a client without peer agreement: it is
 * recorded silent, and what it can no longer run is held, before it is served.
 */
@@ -4322,7 +4389,7 @@ async function silenceUnversionedPoll(syncManager, channelId, manifestRevision)
 * It must be preserved because the inbox mailbox tracks applied ordinals
 * and returns the highest one as `ackOrdinal` in pollSyncEnvelopes.
 */
-function pushSyncEnvelopes(syncManager, args) {
+async function pushSyncEnvelopes(syncManager, args) {
 	const remoteSyncOps = /* @__PURE__ */ new Map();
 	for (const envelope of args.envelopes) {
 		let remote;
@@ -4343,7 +4410,12 @@ function pushSyncEnvelopes(syncManager, args) {
 		for (const syncOp of consolidated) syncOp.jobDependencies = syncOp.jobDependencies.filter((dep) => validKeys.has(dep));
 		remote.channel.inbox.add(...consolidated);
 	}
-	return Promise.resolve(true);
+	try {
+		await syncManager.receiptsStored?.([...remoteSyncOps.keys()].map((remote) => remote.meta.name));
+	} catch (error) {
+		throw new GraphQLError(`Failed to store received markers: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	return true;
 }
 //#endregion
 //#region src/graphql/document-model-subgraph.ts
@@ -4435,13 +4507,14 @@ var DocumentModelSubgraph = class extends BaseSubgraph {
 			Query: { [documentName]: () => ({}) },
 			[`${documentName}Queries`]: {
 				document: async (_, args, ctx) => {
-					const { identifier, view } = args;
-					if (!identifier) throw new GraphQLError("Document identifier is required");
+					const idOrSlug = requireOneOf(args, "idOrSlug", "identifier");
+					const { view } = args;
+					if (!idOrSlug) throw new GraphQLError("Document identifier is required");
 					const result = await document(this.reactorClient, {
-						identifier,
+						idOrSlug,
 						view
 					}, this.viewSubject(ctx));
-					if (result.document.documentType !== documentType) throw new GraphQLError(`Document with id ${identifier} is not of type ${documentType}`);
+					if (result.document.documentType !== documentType) throw new GraphQLError(`Document with id ${idOrSlug} is not of type ${documentType}`);
 					await this.assertCanReadCanonical(result.document.id, ctx);
 					return result;
 				},
@@ -4466,10 +4539,11 @@ var DocumentModelSubgraph = class extends BaseSubgraph {
 					return this.#readableItems(result, ctx);
 				},
 				documentOutgoingRelationships: async (_, args, ctx) => {
+					const sourceIdOrSlug = requireOneOf(args, "sourceIdOrSlug", "sourceIdentifier");
 					const { relationshipType, view, paging } = args;
-					const handle = await this.assertCanRead(args.sourceIdentifier, ctx);
+					const handle = await this.assertCanRead(sourceIdOrSlug, ctx);
 					const result = await documentOutgoingRelationships(this.reactorClient, {
-						sourceIdentifier: handle.fetchIdentifier,
+						sourceIdOrSlug: handle.fetchIdentifier,
 						relationshipType,
 						view,
 						paging
@@ -4482,10 +4556,11 @@ var DocumentModelSubgraph = class extends BaseSubgraph {
 					};
 				},
 				documentIncomingRelationships: async (_, args, ctx) => {
+					const targetIdOrSlug = requireOneOf(args, "targetIdOrSlug", "targetIdentifier");
 					const { relationshipType, view, paging } = args;
-					const handle = await this.assertCanRead(args.targetIdentifier, ctx);
+					const handle = await this.assertCanRead(targetIdOrSlug, ctx);
 					const result = await documentIncomingRelationships(this.reactorClient, {
-						targetIdentifier: handle.fetchIdentifier,
+						targetIdOrSlug: handle.fetchIdentifier,
 						relationshipType,
 						view,
 						paging
@@ -4497,13 +4572,13 @@ var DocumentModelSubgraph = class extends BaseSubgraph {
 			[`${documentName}Mutations`]: {
 				createDocument: async (_, args, ctx) => {
 					const { name, slug, preferredEditor, initialState } = args;
-					let parentIdentifier = args.parentIdentifier;
-					if (parentIdentifier) parentIdentifier = (await this.assertCanWrite(parentIdentifier, ctx)).fetchIdentifier;
+					let parentIdOrSlug = optionalOneOf(args, "parentIdOrSlug", "parentIdentifier");
+					if (parentIdOrSlug) parentIdOrSlug = (await this.assertCanWrite(parentIdOrSlug, ctx)).fetchIdentifier;
 					else this.assertCanCreate(ctx);
 					let createdDoc;
 					if (initialState || preferredEditor) createdDoc = await createDocumentWithInitialState(this.reactorClient, {
 						documentType,
-						parentIdentifier,
+						parentIdOrSlug,
 						name,
 						slug,
 						preferredEditor,
@@ -4511,7 +4586,7 @@ var DocumentModelSubgraph = class extends BaseSubgraph {
 					}, this.graphqlManager.reactorDriveClient, this.viewSubject(ctx));
 					else createdDoc = await createEmptyDocument(this.reactorClient, {
 						documentType,
-						parentIdentifier,
+						parentIdOrSlug,
 						name
 					}, this.graphqlManager.reactorDriveClient, this.viewSubject(ctx));
 					if (ctx.user?.address && createdDoc?.id) await this.documentPermissionService?.initializeDocumentProtection(createdDoc.id, ctx.user.address, this.authorizationService.config.defaultProtection);
@@ -4519,21 +4594,22 @@ var DocumentModelSubgraph = class extends BaseSubgraph {
 					return createdDoc;
 				},
 				createEmptyDocument: async (_, args, ctx) => {
-					let parentIdentifier = args.parentIdentifier;
-					if (parentIdentifier) parentIdentifier = (await this.assertCanWrite(parentIdentifier, ctx)).fetchIdentifier;
+					let parentIdOrSlug = optionalOneOf(args, "parentIdOrSlug", "parentIdentifier");
+					if (parentIdOrSlug) parentIdOrSlug = (await this.assertCanWrite(parentIdOrSlug, ctx)).fetchIdentifier;
 					else this.assertCanCreate(ctx);
 					const result = await createEmptyDocument(this.reactorClient, {
 						documentType,
-						parentIdentifier
+						parentIdOrSlug
 					}, this.graphqlManager.reactorDriveClient, this.viewSubject(ctx));
 					if (ctx.user?.address && result?.id) await this.documentPermissionService?.initializeDocumentProtection(result.id, ctx.user.address, this.authorizationService.config.defaultProtection);
 					return result;
 				},
 				...operations.reduce((mutations, op) => {
 					mutations[camelCase(op.name)] = async (_, args, ctx) => {
-						const { docId, input } = args;
-						const effectiveDocId = (await this.assertCanExecuteOperation(docId, op.name, ctx)).fetchIdentifier;
-						if ((await this.reactorClient.get(effectiveDocId, { subject: this.viewSubject(ctx) })).header.documentType !== documentType) throw new GraphQLError(`Document with id ${docId} is not of type ${documentType}`);
+						const documentIdOrSlug = requireOneOf(args, "documentIdOrSlug", "docId");
+						const { input } = args;
+						const effectiveDocId = (await this.assertCanExecuteOperation(documentIdOrSlug, op.name, ctx)).fetchIdentifier;
+						if ((await this.reactorClient.get(effectiveDocId, { subject: this.viewSubject(ctx) })).header.documentType !== documentType) throw new GraphQLError(`Document with id ${documentIdOrSlug} is not of type ${documentType}`);
 						const action = this.documentModel.actions[camelCase(op.name)];
 						if (!action) throw new GraphQLError(`Action ${op.name} not found`);
 						try {
@@ -4543,9 +4619,10 @@ var DocumentModelSubgraph = class extends BaseSubgraph {
 						}
 					};
 					mutations[`${camelCase(op.name)}Async`] = async (_, args, ctx) => {
-						const { docId, input } = args;
-						const effectiveDocId = (await this.assertCanExecuteOperation(docId, op.name, ctx)).fetchIdentifier;
-						if ((await this.reactorClient.get(effectiveDocId, { subject: this.viewSubject(ctx) })).header.documentType !== documentType) throw new GraphQLError(`Document with id ${docId} is not of type ${documentType}`);
+						const documentIdOrSlug = requireOneOf(args, "documentIdOrSlug", "docId");
+						const { input } = args;
+						const effectiveDocId = (await this.assertCanExecuteOperation(documentIdOrSlug, op.name, ctx)).fetchIdentifier;
+						if ((await this.reactorClient.get(effectiveDocId, { subject: this.viewSubject(ctx) })).header.documentType !== documentType) throw new GraphQLError(`Document with id ${documentIdOrSlug} is not of type ${documentType}`);
 						const action = this.documentModel.actions[camelCase(op.name)];
 						if (!action) throw new GraphQLError(`Action ${op.name} not found`);
 						try {
@@ -5870,7 +5947,7 @@ function createReactorGraphQLClient(url, fetchImpl = fetch, headers) {
 }
 //#endregion
 //#region src/graphql/reactor/schema.graphql
-var schema_default = "# Scalar types (for codegen - also defined in create-schema.ts)\nscalar JSONObject\nscalar DateTime\n\n# Input types\ninput PagingInput {\n  limit: Int\n  offset: Int\n  cursor: String\n}\n\ninput ViewFilterInput {\n  branch: String\n  scopes: [String!]\n}\n\ninput SearchFilterInput {\n  type: String\n  parentId: String\n  identifiers: [String!]\n}\n\ninput OperationsFilterInput {\n  documentId: String!\n  branch: String\n  scopes: [String!]\n  actionTypes: [String!]\n  sinceRevision: Int\n  timestampFrom: String\n  timestampTo: String\n}\n\ninput DocumentOperationsFilterInput {\n  branch: String\n  scopes: [String!]\n  actionTypes: [String!]\n  sinceRevision: Int\n  timestampFrom: String\n  timestampTo: String\n}\n\n# Enums\nenum PropagationMode {\n  CASCADE\n  ORPHAN\n}\n\nenum DocumentChangeType {\n  CREATED\n  DELETED\n  UPDATED\n  PARENT_ADDED\n  PARENT_REMOVED\n  CHILD_ADDED\n  CHILD_REMOVED\n}\n\n# Object types\ntype DocumentModelGlobalState {\n  id: String!\n  name: String!\n  namespace: String\n  version: String\n  specification: JSONObject!\n}\n\ntype DocumentModelResultPage {\n  items: [DocumentModelGlobalState!]!\n  hasNextPage: Boolean!\n  hasPreviousPage: Boolean!\n  cursor: String\n}\n\ntype Revision {\n  scope: String!\n  revision: Int!\n}\n\ntype PHDocument {\n  id: String!\n  slug: String\n  preferredEditor: String\n  name: String!\n  documentType: String!\n  state: JSONObject!\n  revisionsList: [Revision!]!\n  createdAtUtcIso: DateTime!\n  lastModifiedAtUtcIso: DateTime!\n  operations(\n    filter: DocumentOperationsFilterInput\n    paging: PagingInput\n  ): ReactorOperationResultPage\n}\n\ntype PHDocumentResultPage {\n  items: [PHDocument!]!\n  hasNextPage: Boolean!\n  hasPreviousPage: Boolean!\n  cursor: String\n}\n\n# A directed edge between two documents, with the metadata recorded against it.\ntype DocumentRelationship {\n  sourceId: String!\n  targetId: String!\n  relationshipType: String!\n  metadata: JSONObject\n  createdAt: DateTime!\n  updatedAt: DateTime!\n}\n\ntype DocumentRelationshipResultPage {\n  items: [DocumentRelationship!]!\n  hasNextPage: Boolean!\n  hasPreviousPage: Boolean!\n  cursor: String\n}\n\ntype ReactorOperationResultPage {\n  items: [ReactorOperation!]!\n  hasNextPage: Boolean!\n  hasPreviousPage: Boolean!\n  cursor: String\n}\n\ntype DeadLetterInfo {\n  documentId: String!\n  error: String!\n  \"\"\"\n  How the origin classified the failure. A peer needs this to mirror the origin's\n  quarantine decision; without it a held auth operation would freeze the document\n  on the peer side while the origin kept syncing.\n  \"\"\"\n  errorType: String\n  jobId: String!\n  branch: String!\n  scopes: [String!]!\n  operationCount: Int!\n}\n\ntype PollSyncEnvelopesResult {\n  envelopes: [SyncEnvelope!]!\n  ackOrdinal: Int!\n  deadLetters: [DeadLetterInfo!]!\n  hasMore: Boolean!\n  # The server's current manifest revision\n  manifestRevision: String\n  # The client's manifest revision as the server holds it\n  peerManifestRevision: String\n}\n\ntype SyncHoldReason {\n  protocol: String!\n  version: Int!\n  peerSupports: [Int!]!\n}\n\n# A document held back from a remote whose peer cannot run its versions\ntype SyncHold {\n  remoteName: String!\n  documentId: String!\n  branch: String!\n  reason: SyncHoldReason!\n  heldAtUtcMs: String!\n}\n\ntype PeerAgreementMember {\n  remoteName: String!\n  # False for a peer that announced nothing: it gets the baselines\n  announced: Boolean!\n  protocols: JSONObject!\n  features: JSONObject!\n}\n\ntype PeerAgreementLimit {\n  protocol: String!\n  # The remotes whose peers lack the version new documents would take\n  remoteNames: [String!]!\n}\n\ntype PeerAgreement {\n  collectionId: String!\n  local: JSONObject!\n  members: [PeerAgreementMember!]!\n  limitedBy: [PeerAgreementLimit!]!\n}\n\ntype DocumentWithChildren {\n  document: PHDocument!\n  childIds: [String!]!\n}\n\ntype MoveRelationshipResult {\n  source: PHDocument!\n  target: PHDocument!\n}\n\ntype JobInfo {\n  id: String!\n  status: String!\n\n  \"\"\"\n  What the job produced, once it has produced anything. Null until then, which\n  is the state every job is in when it is handed back from a submission.\n  \"\"\"\n  result: JSONObject\n\n  error: String\n  createdAt: DateTime!\n  completedAt: DateTime\n}\n\ntype DocumentChangeEvent {\n  type: DocumentChangeType!\n  documents: [PHDocument!]!\n  context: DocumentChangeContext\n}\n\ntype DocumentChangeContext {\n  parentId: String\n  childId: String\n}\n\ntype JobChangeEvent {\n  jobId: String!\n  status: String!\n\n  \"\"\"\n  What the job produced, once it has produced anything. Nullable for the same\n  reason as `JobInfo.result`: a job that has not written yet has produced\n  nothing, and an empty object would claim otherwise.\n  \"\"\"\n  result: JSONObject\n\n  error: String\n}\n\ntype ReactorSignerUser {\n  address: String!\n  networkId: String!\n  chainId: Int!\n}\n\ntype ReactorSignerApp {\n  name: String!\n  key: String!\n}\n\ntype ReactorSigner {\n  user: ReactorSignerUser\n  app: ReactorSignerApp\n  signatures: [String!]!\n}\n\ntype ActionContext {\n  signer: ReactorSigner\n}\n\ntype Action {\n  id: String!\n  type: String!\n  timestampUtcMs: String!\n  input: JSONObject!\n  scope: String!\n  context: ActionContext\n}\n\n\"\"\"\nOne operation an authorization preflight predicts a verdict for.\n\n`input` is what a conditional grant reads, so a candidate standing for a\nfilled-in form carries that form's input. Omitting it predicts the verdict an\nempty input earns, not the verdict the filled-in form will get.\n\"\"\"\ninput ActionCandidateInput {\n  scope: String!\n  type: String!\n  input: JSONObject\n}\n\nenum AuthDecision {\n  ALLOW\n  DENY\n}\n\n\"\"\"\nOne candidate's predicted verdict. `reason` carries the refusal a DENY is\nrecorded with, and is null on an ALLOW.\n\"\"\"\ntype ActionEvaluation {\n  decision: AuthDecision!\n  reason: String\n}\n\n\"\"\"\nThe predicted verdicts for a set of candidates, in the order they were given,\nwith the aggregates a caller branches on.\n\nThe aggregates are redundant -- a verdict is binary -- and all four are returned\nso a caller reads the one its question is phrased in rather than negating\nanother. Over no candidates every aggregate is false: nothing is allowed and\nnothing is denied.\n\"\"\"\ntype ActionEvaluations {\n  evaluations: [ActionEvaluation!]!\n  allAllowed: Boolean!\n  anyAllowed: Boolean!\n  allDenied: Boolean!\n  anyDenied: Boolean!\n}\n\n# Input types for sync operations\n\"\"\"\nAn action's context, as a caller submits it.\n\nDeclares every field `ActionContext` carries, because an input object rejects a\nfield it does not declare: an action stamped with the head it applies to - which\nis what a signing client sends - is refused outright if these are missing, and\nthat refusal is a whole-request one, not a per-field one.\n\n`prevOpHash` and `prevOpIndex` are the scope head the action was composed\nagainst. They are recorded rather than enforced; a signature is verified from\nthe params carried in its own tuple, which do not include them.\n\"\"\"\ninput ActionContextInput {\n  \"\"\"\n  The index of the last operation in the scope the action applies to.\n  \"\"\"\n  prevOpIndex: Int\n\n  \"\"\"\n  The hash of the state the action applies to.\n  \"\"\"\n  prevOpHash: String\n\n  \"\"\"\n  Covers replay of an operation that would otherwise be a no-op.\n  \"\"\"\n  nonce: String\n\n  signer: ReactorSignerInput\n}\n\ninput ReactorSignerInput {\n  user: ReactorSignerUserInput\n  app: ReactorSignerAppInput\n  signatures: [String!]!\n}\n\ninput ReactorSignerUserInput {\n  address: String!\n  networkId: String!\n  chainId: Int!\n}\n\ninput ReactorSignerAppInput {\n  name: String!\n  key: String!\n}\n\ninput ActionInput {\n  id: String!\n  type: String!\n  timestampUtcMs: String!\n  input: JSONObject!\n  scope: String!\n  context: ActionContextInput\n}\n\n# Synchronization types\ntype ReactorOperation {\n  index: Int!\n  timestampUtcMs: String!\n  hash: String!\n  skip: Int!\n  error: String\n  deniedReason: String\n  id: String\n  action: Action!\n}\n\ninput OperationInput {\n  index: Int!\n  timestampUtcMs: String!\n  hash: String!\n  skip: Int!\n  error: String\n  deniedReason: String\n  id: String\n  action: ActionInput!\n}\n\ntype OperationContext {\n  documentId: String!\n  documentType: String!\n  scope: String!\n  branch: String!\n  ordinal: Int!\n}\n\ninput OperationContextInput {\n  documentId: String!\n  documentType: String!\n  scope: String!\n  branch: String!\n  ordinal: Int!\n}\n\ntype OperationWithContext {\n  operation: ReactorOperation!\n  context: OperationContext!\n}\n\ninput OperationWithContextInput {\n  operation: OperationInput!\n  context: OperationContextInput!\n}\n\ntype ChannelMeta {\n  id: String!\n}\n\ninput ChannelMetaInput {\n  id: String!\n}\n\ntype RemoteCursor {\n  remoteName: String!\n  cursorOrdinal: Int!\n  lastSyncedAtUtcMs: String\n}\n\ninput RemoteCursorInput {\n  remoteName: String!\n  cursorOrdinal: Int!\n  lastSyncedAtUtcMs: String\n}\n\nenum SyncEnvelopeType {\n  OPERATIONS\n  ACK\n}\n\ntype SyncEnvelope {\n  type: SyncEnvelopeType!\n  channelMeta: ChannelMeta!\n  operations: [OperationWithContext!]\n  cursor: RemoteCursor\n  key: String\n  dependsOn: [String!]\n}\n\ninput SyncEnvelopeInput {\n  type: SyncEnvelopeType!\n  channelMeta: ChannelMetaInput!\n  operations: [OperationWithContextInput!]\n  cursor: RemoteCursorInput\n  key: String\n  dependsOn: [String!]\n}\n\ninput RemoteFilterInput {\n  documentId: [String!]!\n  scope: [String!]!\n  branch: String!\n}\n\ninput SyncRefusalInput {\n  documentId: String!\n  branch: String!\n}\n\ninput TouchChannelInput {\n  id: String!\n  name: String!\n  collectionId: String!\n  filter: RemoteFilterInput!\n  sinceTimestampUtcMs: String!\n  # The client's peer manifest; absent from a client without peer agreement\n  manifest: JSONObject\n}\n\ntype TouchChannelResult {\n  success: Boolean!\n  ackOrdinal: Int!\n  # The server's peer manifest\n  manifest: JSONObject\n}\n\ntype Query {\n  # Get document models for a namespace\n  documentModels(\n    namespace: String\n    paging: PagingInput\n  ): DocumentModelResultPage!\n\n  # Get a specific document by ID or slug\n  document(identifier: String!, view: ViewFilterInput): DocumentWithChildren\n\n  # Get outgoing relationships of a given type from a source document\n  documentOutgoingRelationships(\n    sourceIdentifier: String!\n    relationshipType: String!\n    view: ViewFilterInput\n    paging: PagingInput\n  ): PHDocumentResultPage!\n\n  # Get incoming relationships of a given type to a target document\n  documentIncomingRelationships(\n    targetIdentifier: String!\n    relationshipType: String!\n    view: ViewFilterInput\n    paging: PagingInput\n  ): PHDocumentResultPage!\n\n  # Get the outgoing relationship edges of a source document. Unlike\n  # documentOutgoingRelationships, which returns the documents at the far end,\n  # this returns the edges themselves, carrying their metadata and timestamps.\n  # Omit relationshipType to return edges of every type.\n  documentOutgoingRelationshipEdges(\n    sourceIdentifier: String!\n    relationshipType: String\n    view: ViewFilterInput\n    paging: PagingInput\n  ): DocumentRelationshipResultPage!\n\n  # Get the incoming relationship edges of a target document. Unlike\n  # documentIncomingRelationships, which returns the documents at the far end,\n  # this returns the edges themselves, carrying their metadata and timestamps.\n  # Omit relationshipType to return edges of every type.\n  documentIncomingRelationshipEdges(\n    targetIdentifier: String!\n    relationshipType: String\n    view: ViewFilterInput\n    paging: PagingInput\n  ): DocumentRelationshipResultPage!\n\n  # Find documents by search criteria\n  findDocuments(\n    search: SearchFilterInput\n    view: ViewFilterInput\n    paging: PagingInput\n  ): PHDocumentResultPage!\n\n  # Get job status\n  jobStatus(jobId: String!): JobInfo\n\n  # Get operations for a document with filtering and pagination\n  documentOperations(\n    filter: OperationsFilterInput!\n    paging: PagingInput\n  ): ReactorOperationResultPage!\n\n  \"\"\"\n  Predicts whether the calling subject would be admitted to execute each of a\n  set of candidate operations, without submitting any of them. A UI asks this to\n  disable a control rather than offer an action that fails on submit.\n\n  The answer is a prediction, not a promise:\n\n  - Real admission compiles an append condition over everything it read and the\n    store enforces it at write time. A preflight reads no future, so a policy\n    change landing between this answer and the submit changes the verdict. The\n    submit path stays the only authority.\n  - The verdict is evaluated at the stream heads, so it is correct for a\n    candidate about to be submitted. A backdated submission is out of contract;\n    the reactor decides that one by position.\n  - A candidate whose verdict depends on its input has to carry that input, since\n    a conditional grant reads it.\n\n  The subject is the authenticated caller and cannot be named in the request:\n  answering for an arbitrary subject would disclose what a policy grants\n  somebody else. It carries both the caller's address and the did:key of the app\n  instance whose token authenticated the request, so a policy naming either\n  matches the same principal the write path presents.\n\n  Requires the reactor's authEnforcement feature flag. Without it the reactor\n  holds no decision model, so this fails with extensions.code\n  AUTH_EVALUATION_UNSUPPORTED rather than guessing.\n  \"\"\"\n  evaluateActions(\n    documentIdentifier: String!\n    branch: String\n    candidates: [ActionCandidateInput!]!\n  ): ActionEvaluations!\n\n  \"\"\"\n  Polls for sync envelopes from a channel.\n\n  An operation stored before the API required an action id cannot be\n  represented by this schema, and rather than serving a partial response beside\n  a bare non-null violation, this fails with extensions.code\n  MALFORMED_STORED_OPERATION naming the operation. That code means the failure\n  is worth polling through: the document holding the operation needs repairing,\n  but the channel serves every other document, and a peer that stopped polling\n  would stop receiving those too.\n  \"\"\"\n  pollSyncEnvelopes(\n    channelId: String!\n    outboxAck: Int!\n    outboxLatest: Int!\n    # The client's manifest revision; absent from a client without peer agreement\n    manifestRevision: String\n    # Documents the client refused as UNSUPPORTED_PROTOCOL from earlier polls\n    refusals: [SyncRefusalInput!]\n  ): PollSyncEnvelopesResult!\n\n  # Supreme admin, or the address the named remote's channel is bound to\n  syncHolds(remoteName: String, documentId: String): [SyncHold!]!\n\n  # Supreme admin, or an address bound to a channel in the collection\n  peerAgreement(collectionId: String!): PeerAgreement!\n}\n\ntype Mutation {\n  # Create a new document\n  createDocument(document: JSONObject!, parentIdentifier: String): PHDocument!\n\n  # Create an empty document of specified type\n  createEmptyDocument(\n    documentType: String!\n    parentIdentifier: String\n  ): PHDocument!\n\n  \"\"\"\n  Applies actions to a document and waits for the result.\n\n  Each action is coerced against `ActionInput`, so one missing a field the wire\n  declares is refused before any work starts. The id in particular: it is hashed\n  into the operation id and replay dedupes by it, so an action without one is\n  stored under an operation id shared by every id-less operation on the same\n  document, scope and branch.\n\n  Named for `IReactorClient.execute`, which this is the wire form of. `branch`\n  defaults to `main`.\n  \"\"\"\n  execute(\n    documentIdentifier: String!\n    actions: [ActionInput!]!\n    branch: String\n  ): PHDocument!\n\n  \"\"\"\n  Submits actions to a document and returns the job that will apply them.\n\n  Coerced exactly as `execute` is, so a malformed action is refused here rather\n  than surfacing later as a failed job. Returns the job rather than only its id,\n  so a caller has the status and the creation time it would otherwise have to\n  ask for; `result` is null until the job produces one.\n  \"\"\"\n  executeAsync(\n    documentIdentifier: String!\n    actions: [ActionInput!]!\n    branch: String\n  ): JobInfo!\n\n  # Apply actions to a document (synchronous)\n  mutateDocument(\n    documentIdentifier: String!\n    actions: [JSONObject!]!\n    view: ViewFilterInput\n  ): PHDocument!\n    @deprecated(\n      reason: \"Use execute. Actions here are untyped, so a malformed one is refused by a hand-written check rather than by the schema, and `view.scopes` is accepted but ignored.\"\n    )\n\n  # Submit actions to a document (asynchronous)\n  mutateDocumentAsync(\n    documentIdentifier: String!\n    actions: [JSONObject!]!\n    view: ViewFilterInput\n  ): String!\n    @deprecated(\n      reason: \"Use executeAsync, which is typed and returns the job rather than only its id.\"\n    )\n\n  # Rename a document\n  renameDocument(\n    documentIdentifier: String!\n    name: String!\n    branch: String\n  ): PHDocument!\n\n  # Update the preferred editor recorded in the document header meta.\n  # Pass null/omit to clear it.\n  setPreferredEditor(\n    documentIdentifier: String!\n    preferredEditor: String\n    branch: String\n  ): PHDocument!\n\n  # Add a relationship between two documents. Adding one that already exists is\n  # a no-op, metadata included -- use updateRelationship to change an edge.\n  addRelationship(\n    sourceIdentifier: String!\n    targetIdentifier: String!\n    relationshipType: String!\n    metadata: JSONObject\n    branch: String\n  ): PHDocument!\n\n  # Replace the metadata of an existing relationship, preserving its createdAt.\n  # Omitting metadata, or passing null, clears it.\n  updateRelationship(\n    sourceIdentifier: String!\n    targetIdentifier: String!\n    relationshipType: String!\n    metadata: JSONObject\n    branch: String\n  ): PHDocument!\n\n  # Remove a relationship between two documents\n  removeRelationship(\n    sourceIdentifier: String!\n    targetIdentifier: String!\n    relationshipType: String!\n    branch: String\n  ): PHDocument!\n\n  # Move a relationship from one source to another\n  moveRelationship(\n    sourceParentIdentifier: String!\n    targetParentIdentifier: String!\n    targetIdentifier: String!\n    relationshipType: String!\n    branch: String\n  ): MoveRelationshipResult!\n\n  # Delete a single document\n  deleteDocument(identifier: String!, propagate: PropagationMode): Boolean!\n\n  # Delete multiple documents\n  deleteDocuments(identifiers: [String!]!, propagate: PropagationMode): Boolean!\n\n  # Touch (create or update) a channel for sync\n  touchChannel(input: TouchChannelInput!): TouchChannelResult!\n\n  # Push sync envelopes to a channel\n  pushSyncEnvelopes(\n    envelopes: [SyncEnvelopeInput!]!\n    # The server's manifest revision the client gated these envelopes under\n    peerManifestRevision: String\n  ): Boolean!\n}\n\ntype Subscription {\n  # Subscribe to document changes\n  documentChanges(\n    search: SearchFilterInput\n    view: ViewFilterInput\n  ): DocumentChangeEvent!\n\n  # Subscribe to job changes\n  jobChanges(jobId: String!): JobChangeEvent!\n}\n";
+var schema_default = "# Scalar types (for codegen - also defined in create-schema.ts)\nscalar JSONObject\nscalar DateTime\n\n# Input types\ninput PagingInput {\n  limit: Int\n  offset: Int\n  cursor: String\n}\n\ninput ViewFilterInput {\n  branch: String\n  scopes: [String!]\n}\n\ninput SearchFilterInput {\n  type: String\n  parentId: String\n  identifiers: [String!]\n    @deprecated(reason: \"Ignored. Filter by type or parentId.\")\n}\n\ninput OperationsFilterInput {\n  documentIdOrSlug: String\n  documentId: String @deprecated(reason: \"Use documentIdOrSlug.\")\n  branch: String\n  scopes: [String!]\n  actionTypes: [String!]\n  sinceRevision: Int\n  timestampFrom: String\n  timestampTo: String\n}\n\ninput DocumentOperationsFilterInput {\n  branch: String\n  scopes: [String!]\n  actionTypes: [String!]\n  sinceRevision: Int\n  timestampFrom: String\n  timestampTo: String\n}\n\n# Enums\nenum PropagationMode {\n  CASCADE\n  ORPHAN\n}\n\nenum DocumentChangeType {\n  CREATED\n  DELETED\n  UPDATED\n  PARENT_ADDED\n  PARENT_REMOVED\n  CHILD_ADDED\n  CHILD_REMOVED\n}\n\n# Object types\ntype DocumentModelGlobalState {\n  id: String!\n  name: String!\n  namespace: String\n  version: String\n  specification: JSONObject!\n}\n\ntype DocumentModelResultPage {\n  items: [DocumentModelGlobalState!]!\n  hasNextPage: Boolean!\n  hasPreviousPage: Boolean!\n  cursor: String\n}\n\ntype Revision {\n  scope: String!\n  revision: Int!\n}\n\ntype PHDocument {\n  id: String!\n  slug: String\n  preferredEditor: String\n  name: String!\n  documentType: String!\n  state: JSONObject!\n  revisionsList: [Revision!]!\n  createdAtUtcIso: DateTime!\n  lastModifiedAtUtcIso: DateTime!\n  operations(\n    filter: DocumentOperationsFilterInput\n    paging: PagingInput\n  ): ReactorOperationResultPage\n}\n\ntype PHDocumentResultPage {\n  items: [PHDocument!]!\n  hasNextPage: Boolean!\n  hasPreviousPage: Boolean!\n  cursor: String\n}\n\n# A directed edge between two documents, with the metadata recorded against it.\ntype DocumentRelationship {\n  sourceId: String!\n  targetId: String!\n  relationshipType: String!\n  metadata: JSONObject\n  createdAt: DateTime!\n  updatedAt: DateTime!\n}\n\ntype DocumentRelationshipResultPage {\n  items: [DocumentRelationship!]!\n  hasNextPage: Boolean!\n  hasPreviousPage: Boolean!\n  cursor: String\n}\n\ntype ReactorOperationResultPage {\n  items: [ReactorOperation!]!\n  hasNextPage: Boolean!\n  hasPreviousPage: Boolean!\n  cursor: String\n}\n\ntype DeadLetterInfo {\n  documentId: String!\n  error: String!\n  \"\"\"\n  How the origin classified the failure. A peer needs this to mirror the origin's\n  quarantine decision; without it a held auth operation would freeze the document\n  on the peer side while the origin kept syncing.\n  \"\"\"\n  errorType: String\n  jobId: String!\n  branch: String!\n  scopes: [String!]!\n  operationCount: Int!\n}\n\ntype PollSyncEnvelopesResult {\n  envelopes: [SyncEnvelope!]!\n  ackOrdinal: Int!\n  deadLetters: [DeadLetterInfo!]!\n  hasMore: Boolean!\n  # The server's current manifest revision\n  manifestRevision: String\n  # The client's manifest revision as the server holds it\n  peerManifestRevision: String\n}\n\ntype SyncHoldReason {\n  protocol: String!\n  version: Int!\n  peerSupports: [Int!]!\n}\n\n# A document held back from a remote whose peer cannot run its versions\ntype SyncHold {\n  remoteName: String!\n  documentId: String!\n  branch: String!\n  reason: SyncHoldReason!\n  heldAtUtcMs: String!\n}\n\ntype PeerAgreementMember {\n  remoteName: String!\n  # False for a peer that announced nothing: it gets the baselines\n  announced: Boolean!\n  protocols: JSONObject!\n  features: JSONObject!\n}\n\ntype PeerAgreementLimit {\n  protocol: String!\n  # The remotes whose peers lack the version new documents would take\n  remoteNames: [String!]!\n}\n\ntype PeerAgreement {\n  collectionId: String!\n  local: JSONObject!\n  members: [PeerAgreementMember!]!\n  limitedBy: [PeerAgreementLimit!]!\n}\n\ntype DocumentWithChildren {\n  document: PHDocument!\n  childIds: [String!]!\n}\n\ntype MoveRelationshipResult {\n  source: PHDocument!\n  target: PHDocument!\n}\n\ntype JobInfo {\n  id: String!\n  status: String!\n\n  \"\"\"\n  What the job produced, once it has produced anything. Null until then, which\n  is the state every job is in when it is handed back from a submission.\n  \"\"\"\n  result: JSONObject\n\n  error: String\n  createdAt: DateTime!\n  completedAt: DateTime\n}\n\ntype DocumentChangeEvent {\n  type: DocumentChangeType!\n  documents: [PHDocument!]!\n  context: DocumentChangeContext\n}\n\ntype DocumentChangeContext {\n  parentId: String\n  childId: String\n}\n\ntype JobChangeEvent {\n  jobId: String!\n  status: String!\n\n  \"\"\"\n  What the job produced, once it has produced anything. Nullable for the same\n  reason as `JobInfo.result`: a job that has not written yet has produced\n  nothing, and an empty object would claim otherwise.\n  \"\"\"\n  result: JSONObject\n\n  error: String\n}\n\ntype ReactorSignerUser {\n  address: String!\n  networkId: String!\n  chainId: Int!\n}\n\ntype ReactorSignerApp {\n  name: String!\n  key: String!\n}\n\ntype ReactorSigner {\n  user: ReactorSignerUser\n  app: ReactorSignerApp\n  signatures: [String!]!\n}\n\ntype ActionContext {\n  signer: ReactorSigner\n}\n\ntype Action {\n  id: String!\n  type: String!\n  timestampUtcMs: String!\n  input: JSONObject!\n  scope: String!\n  context: ActionContext\n}\n\n\"\"\"\nOne operation an authorization preflight predicts a verdict for.\n\n`input` is what a conditional grant reads, so a candidate standing for a\nfilled-in form carries that form's input. Omitting it predicts the verdict an\nempty input earns, not the verdict the filled-in form will get.\n\"\"\"\ninput ActionCandidateInput {\n  scope: String!\n  type: String!\n  input: JSONObject\n}\n\nenum AuthDecision {\n  ALLOW\n  DENY\n}\n\n\"\"\"\nOne candidate's predicted verdict. `reason` carries the refusal a DENY is\nrecorded with, and is null on an ALLOW.\n\"\"\"\ntype ActionEvaluation {\n  decision: AuthDecision!\n  reason: String\n}\n\n\"\"\"\nThe predicted verdicts for a set of candidates, in the order they were given,\nwith the aggregates a caller branches on.\n\nThe aggregates are redundant -- a verdict is binary -- and all four are returned\nso a caller reads the one its question is phrased in rather than negating\nanother. Over no candidates every aggregate is false: nothing is allowed and\nnothing is denied.\n\"\"\"\ntype ActionEvaluations {\n  evaluations: [ActionEvaluation!]!\n  allAllowed: Boolean!\n  anyAllowed: Boolean!\n  allDenied: Boolean!\n  anyDenied: Boolean!\n}\n\n# Input types for sync operations\n\"\"\"\nAn action's context, as a caller submits it.\n\nDeclares every field `ActionContext` carries, because an input object rejects a\nfield it does not declare: an action stamped with the head it applies to - which\nis what a signing client sends - is refused outright if these are missing, and\nthat refusal is a whole-request one, not a per-field one.\n\n`prevOpHash` and `prevOpIndex` are the scope head the action was composed\nagainst. They are recorded rather than enforced; a signature is verified from\nthe params carried in its own tuple, which do not include them.\n\"\"\"\ninput ActionContextInput {\n  \"\"\"\n  The index of the last operation in the scope the action applies to.\n  \"\"\"\n  prevOpIndex: Int\n\n  \"\"\"\n  The hash of the state the action applies to.\n  \"\"\"\n  prevOpHash: String\n\n  \"\"\"\n  Covers replay of an operation that would otherwise be a no-op.\n  \"\"\"\n  nonce: String\n\n  signer: ReactorSignerInput\n}\n\ninput ReactorSignerInput {\n  user: ReactorSignerUserInput\n  app: ReactorSignerAppInput\n  signatures: [String!]!\n}\n\ninput ReactorSignerUserInput {\n  address: String!\n  networkId: String!\n  chainId: Int!\n}\n\ninput ReactorSignerAppInput {\n  name: String!\n  key: String!\n}\n\ninput ActionInput {\n  id: String!\n  type: String!\n  timestampUtcMs: String!\n  input: JSONObject!\n  scope: String!\n  context: ActionContextInput\n}\n\n# Synchronization types\ntype ReactorOperation {\n  index: Int!\n  timestampUtcMs: String!\n  hash: String!\n  skip: Int!\n  error: String\n  deniedReason: String\n  id: String\n  action: Action!\n}\n\ninput OperationInput {\n  index: Int!\n  timestampUtcMs: String!\n  hash: String!\n  skip: Int!\n  error: String\n  deniedReason: String\n  id: String\n  action: ActionInput!\n}\n\ntype OperationContext {\n  documentId: String!\n  documentType: String!\n  scope: String!\n  branch: String!\n  ordinal: Int!\n}\n\ninput OperationContextInput {\n  documentId: String!\n  documentType: String!\n  scope: String!\n  branch: String!\n  ordinal: Int!\n}\n\ntype OperationWithContext {\n  operation: ReactorOperation!\n  context: OperationContext!\n}\n\ninput OperationWithContextInput {\n  operation: OperationInput!\n  context: OperationContextInput!\n}\n\ntype ChannelMeta {\n  id: String!\n}\n\ninput ChannelMetaInput {\n  id: String!\n}\n\ntype RemoteCursor {\n  remoteName: String!\n  cursorOrdinal: Int!\n  lastSyncedAtUtcMs: String\n}\n\ninput RemoteCursorInput {\n  remoteName: String!\n  cursorOrdinal: Int!\n  lastSyncedAtUtcMs: String\n}\n\nenum SyncEnvelopeType {\n  OPERATIONS\n  ACK\n}\n\ntype SyncEnvelope {\n  type: SyncEnvelopeType!\n  channelMeta: ChannelMeta!\n  operations: [OperationWithContext!]\n  cursor: RemoteCursor\n  key: String\n  dependsOn: [String!]\n}\n\ninput SyncEnvelopeInput {\n  type: SyncEnvelopeType!\n  channelMeta: ChannelMetaInput!\n  operations: [OperationWithContextInput!]\n  cursor: RemoteCursorInput\n  key: String\n  dependsOn: [String!]\n}\n\ninput RemoteFilterInput {\n  documentId: [String!]!\n  scope: [String!]!\n  branch: String!\n}\n\ninput SyncRefusalInput {\n  documentId: String!\n  branch: String!\n  # \"marker\" for a refused purge marker; absent for UNSUPPORTED_PROTOCOL\n  kind: String\n}\n\ninput TouchChannelInput {\n  id: String!\n  name: String!\n  collectionId: String!\n  filter: RemoteFilterInput!\n  sinceTimestampUtcMs: String!\n  # The client's peer manifest; absent from a client without peer agreement\n  manifest: JSONObject\n}\n\ntype TouchChannelResult {\n  success: Boolean!\n  ackOrdinal: Int!\n  # The server's peer manifest\n  manifest: JSONObject\n}\n\ntype Query {\n  # Get document models for a namespace\n  documentModels(\n    namespace: String\n    paging: PagingInput\n  ): DocumentModelResultPage!\n\n  # Get a specific document by ID or slug\n  document(\n    idOrSlug: String\n    identifier: String @deprecated(reason: \"Use idOrSlug.\")\n    view: ViewFilterInput\n  ): DocumentWithChildren\n\n  # Get outgoing relationships of a given type from a source document\n  documentOutgoingRelationships(\n    sourceIdOrSlug: String\n    sourceIdentifier: String @deprecated(reason: \"Use sourceIdOrSlug.\")\n    relationshipType: String!\n    view: ViewFilterInput\n    paging: PagingInput\n  ): PHDocumentResultPage!\n\n  # Get incoming relationships of a given type to a target document\n  documentIncomingRelationships(\n    targetIdOrSlug: String\n    targetIdentifier: String @deprecated(reason: \"Use targetIdOrSlug.\")\n    relationshipType: String!\n    view: ViewFilterInput\n    paging: PagingInput\n  ): PHDocumentResultPage!\n\n  # Get the outgoing relationship edges of a source document. Unlike\n  # documentOutgoingRelationships, which returns the documents at the far end,\n  # this returns the edges themselves, carrying their metadata and timestamps.\n  # Omit relationshipType to return edges of every type.\n  documentOutgoingRelationshipEdges(\n    sourceIdOrSlug: String\n    sourceIdentifier: String @deprecated(reason: \"Use sourceIdOrSlug.\")\n    relationshipType: String\n    view: ViewFilterInput\n    paging: PagingInput\n  ): DocumentRelationshipResultPage!\n\n  # Get the incoming relationship edges of a target document. Unlike\n  # documentIncomingRelationships, which returns the documents at the far end,\n  # this returns the edges themselves, carrying their metadata and timestamps.\n  # Omit relationshipType to return edges of every type.\n  documentIncomingRelationshipEdges(\n    targetIdOrSlug: String\n    targetIdentifier: String @deprecated(reason: \"Use targetIdOrSlug.\")\n    relationshipType: String\n    view: ViewFilterInput\n    paging: PagingInput\n  ): DocumentRelationshipResultPage!\n\n  # Find documents by search criteria\n  findDocuments(\n    search: SearchFilterInput\n    view: ViewFilterInput\n    paging: PagingInput\n  ): PHDocumentResultPage!\n\n  # Get job status\n  jobStatus(jobId: String!): JobInfo\n\n  # Get operations for a document with filtering and pagination\n  documentOperations(\n    filter: OperationsFilterInput!\n    paging: PagingInput\n  ): ReactorOperationResultPage!\n\n  \"\"\"\n  Predicts whether the calling subject would be admitted to execute each of a\n  set of candidate operations, without submitting any of them. A UI asks this to\n  disable a control rather than offer an action that fails on submit.\n\n  The answer is a prediction, not a promise:\n\n  - Real admission compiles an append condition over everything it read and the\n    store enforces it at write time. A preflight reads no future, so a policy\n    change landing between this answer and the submit changes the verdict. The\n    submit path stays the only authority.\n  - The verdict is evaluated at the stream heads, so it is correct for a\n    candidate about to be submitted. A backdated submission is out of contract;\n    the reactor decides that one by position.\n  - A candidate whose verdict depends on its input has to carry that input, since\n    a conditional grant reads it.\n\n  The subject is the authenticated caller and cannot be named in the request:\n  answering for an arbitrary subject would disclose what a policy grants\n  somebody else. It carries both the caller's address and the did:key of the app\n  instance whose token authenticated the request, so a policy naming either\n  matches the same principal the write path presents.\n\n  Requires the reactor's authEnforcement feature flag. Without it the reactor\n  holds no decision model, so this fails with extensions.code\n  AUTH_EVALUATION_UNSUPPORTED rather than guessing.\n  \"\"\"\n  evaluateActions(\n    documentIdOrSlug: String\n    documentIdentifier: String @deprecated(reason: \"Use documentIdOrSlug.\")\n    branch: String\n    candidates: [ActionCandidateInput!]!\n  ): ActionEvaluations!\n\n  \"\"\"\n  Polls for sync envelopes from a channel.\n\n  An operation stored before the API required an action id cannot be\n  represented by this schema, and rather than serving a partial response beside\n  a bare non-null violation, this fails with extensions.code\n  MALFORMED_STORED_OPERATION naming the operation. That code means the failure\n  is worth polling through: the document holding the operation needs repairing,\n  but the channel serves every other document, and a peer that stopped polling\n  would stop receiving those too.\n  \"\"\"\n  pollSyncEnvelopes(\n    channelId: String!\n    outboxAck: Int!\n    outboxLatest: Int!\n    # The client's manifest revision; absent from a client without peer agreement\n    manifestRevision: String\n    # Documents the client refused from earlier polls: held, or a refused marker\n    refusals: [SyncRefusalInput!]\n  ): PollSyncEnvelopesResult!\n\n  # Supreme admin, or the address the named remote's channel is bound to\n  syncHolds(remoteName: String, documentId: String): [SyncHold!]!\n\n  # Supreme admin, or an address bound to a channel in the collection\n  peerAgreement(collectionId: String!): PeerAgreement!\n}\n\ntype Mutation {\n  # Create a new document\n  createDocument(\n    document: JSONObject!\n    parentIdOrSlug: String\n    parentIdentifier: String @deprecated(reason: \"Use parentIdOrSlug.\")\n  ): PHDocument!\n\n  # Create an empty document of specified type\n  createEmptyDocument(\n    documentType: String!\n    parentIdOrSlug: String\n    parentIdentifier: String @deprecated(reason: \"Use parentIdOrSlug.\")\n  ): PHDocument!\n\n  \"\"\"\n  Applies actions to a document and waits for the result.\n\n  Each action is coerced against `ActionInput`, so one missing a field the wire\n  declares is refused before any work starts. The id in particular: it is hashed\n  into the operation id and replay dedupes by it, so an action without one is\n  stored under an operation id shared by every id-less operation on the same\n  document, scope and branch.\n\n  Named for `IReactorClient.execute`, which this is the wire form of. `branch`\n  defaults to `main`.\n  \"\"\"\n  execute(\n    documentIdOrSlug: String\n    documentIdentifier: String @deprecated(reason: \"Use documentIdOrSlug.\")\n    actions: [ActionInput!]!\n    branch: String\n  ): PHDocument!\n\n  \"\"\"\n  Submits actions to a document and returns the job that will apply them.\n\n  Coerced exactly as `execute` is, so a malformed action is refused here rather\n  than surfacing later as a failed job. Returns the job rather than only its id,\n  so a caller has the status and the creation time it would otherwise have to\n  ask for; `result` is null until the job produces one.\n  \"\"\"\n  executeAsync(\n    documentIdOrSlug: String\n    documentIdentifier: String @deprecated(reason: \"Use documentIdOrSlug.\")\n    actions: [ActionInput!]!\n    branch: String\n  ): JobInfo!\n\n  # Apply actions to a document (synchronous)\n  mutateDocument(\n    documentIdentifier: String!\n    actions: [JSONObject!]!\n    view: ViewFilterInput\n  ): PHDocument!\n    @deprecated(\n      reason: \"Use execute. Actions here are untyped, so a malformed one is refused by a hand-written check rather than by the schema, and `view.scopes` is accepted but ignored.\"\n    )\n\n  # Submit actions to a document (asynchronous)\n  mutateDocumentAsync(\n    documentIdentifier: String!\n    actions: [JSONObject!]!\n    view: ViewFilterInput\n  ): String!\n    @deprecated(\n      reason: \"Use executeAsync, which is typed and returns the job rather than only its id.\"\n    )\n\n  # Rename a document\n  renameDocument(\n    documentIdOrSlug: String\n    documentIdentifier: String @deprecated(reason: \"Use documentIdOrSlug.\")\n    name: String!\n    branch: String\n  ): PHDocument!\n\n  # Update the preferred editor recorded in the document header meta.\n  # Pass null/omit to clear it.\n  setPreferredEditor(\n    documentIdOrSlug: String\n    documentIdentifier: String @deprecated(reason: \"Use documentIdOrSlug.\")\n    preferredEditor: String\n    branch: String\n  ): PHDocument!\n\n  # Add a relationship between two documents. Adding one that already exists is\n  # a no-op, metadata included -- use updateRelationship to change an edge.\n  addRelationship(\n    sourceIdOrSlug: String\n    sourceIdentifier: String @deprecated(reason: \"Use sourceIdOrSlug.\")\n    targetIdOrSlug: String\n    targetIdentifier: String @deprecated(reason: \"Use targetIdOrSlug.\")\n    relationshipType: String!\n    metadata: JSONObject\n    branch: String\n  ): PHDocument!\n\n  # Replace the metadata of an existing relationship, preserving its createdAt.\n  # Omitting metadata, or passing null, clears it.\n  updateRelationship(\n    sourceIdOrSlug: String\n    sourceIdentifier: String @deprecated(reason: \"Use sourceIdOrSlug.\")\n    targetIdOrSlug: String\n    targetIdentifier: String @deprecated(reason: \"Use targetIdOrSlug.\")\n    relationshipType: String!\n    metadata: JSONObject\n    branch: String\n  ): PHDocument!\n\n  # Remove a relationship between two documents\n  removeRelationship(\n    sourceIdOrSlug: String\n    sourceIdentifier: String @deprecated(reason: \"Use sourceIdOrSlug.\")\n    targetIdOrSlug: String\n    targetIdentifier: String @deprecated(reason: \"Use targetIdOrSlug.\")\n    relationshipType: String!\n    branch: String\n  ): PHDocument!\n\n  # Move a relationship from one source to another\n  moveRelationship(\n    sourceParentIdOrSlug: String\n    sourceParentIdentifier: String\n      @deprecated(reason: \"Use sourceParentIdOrSlug.\")\n    targetParentIdOrSlug: String\n    targetParentIdentifier: String\n      @deprecated(reason: \"Use targetParentIdOrSlug.\")\n    targetIdOrSlug: String\n    targetIdentifier: String @deprecated(reason: \"Use targetIdOrSlug.\")\n    relationshipType: String!\n    branch: String\n  ): MoveRelationshipResult!\n\n  # Delete a single document\n  deleteDocument(\n    idOrSlug: String\n    identifier: String @deprecated(reason: \"Use idOrSlug.\")\n    propagate: PropagationMode\n  ): Boolean!\n\n  # Delete multiple documents\n  deleteDocuments(\n    idsOrSlugs: [String!]\n    identifiers: [String!] @deprecated(reason: \"Use idsOrSlugs.\")\n    propagate: PropagationMode\n  ): Boolean!\n\n  # Touch (create or update) a channel for sync\n  touchChannel(input: TouchChannelInput!): TouchChannelResult!\n\n  # Push sync envelopes to a channel\n  pushSyncEnvelopes(\n    envelopes: [SyncEnvelopeInput!]!\n    # The server's manifest revision the client gated these envelopes under\n    peerManifestRevision: String\n  ): Boolean!\n}\n\ntype Subscription {\n  # Subscribe to document changes\n  documentChanges(\n    search: SearchFilterInput\n    view: ViewFilterInput\n  ): DocumentChangeEvent!\n\n  # Subscribe to job changes\n  jobChanges(jobId: String!): JobChangeEvent!\n}\n";
 //#endregion
 //#region src/graphql/reactor/pubsub.ts
 const pubSub = new PubSub();
@@ -6149,7 +6226,7 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			await this.assertCanReadCanonical(parent.id, ctx);
 			try {
 				const filter = {
-					documentId: parent.id,
+					documentIdOrSlug: parent.id,
 					branch: args.filter?.branch,
 					scopes: args.filter?.scopes,
 					actionTypes: args.filter?.actionTypes,
@@ -6179,10 +6256,11 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			document: async (_parent, args, ctx) => {
 				this.logger.debug("document(@args)", args);
 				try {
-					const handle = await this.assertCanRead(args.identifier, ctx);
+					const idOrSlug = requireOneOf(args, "idOrSlug", "identifier");
+					const handle = await this.assertCanRead(idOrSlug, ctx);
 					return await document(this.reactorClient, {
-						...args,
-						identifier: handle.fetchIdentifier
+						idOrSlug: handle.fetchIdentifier,
+						view: args.view
 					}, this.viewSubject(ctx));
 				} catch (error) {
 					this.logger.error("Error in document: @Error", error);
@@ -6192,10 +6270,13 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			documentOutgoingRelationships: async (_parent, args, ctx) => {
 				this.logger.debug("documentOutgoingRelationships(@args)", args);
 				try {
-					const handle = await this.assertCanRead(args.sourceIdentifier, ctx);
+					const sourceIdOrSlug = requireOneOf(args, "sourceIdOrSlug", "sourceIdentifier");
+					const handle = await this.assertCanRead(sourceIdOrSlug, ctx);
 					return await documentOutgoingRelationships(this.reactorClient, {
-						...args,
-						sourceIdentifier: handle.fetchIdentifier
+						sourceIdOrSlug: handle.fetchIdentifier,
+						relationshipType: args.relationshipType,
+						view: args.view,
+						paging: args.paging
 					}, this.viewSubject(ctx));
 				} catch (error) {
 					this.logger.error("Error in documentOutgoingRelationships: @Error", error);
@@ -6205,10 +6286,13 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			documentIncomingRelationships: async (_parent, args, ctx) => {
 				this.logger.debug("documentIncomingRelationships(@args)", args);
 				try {
-					const handle = await this.assertCanRead(args.targetIdentifier, ctx);
+					const targetIdOrSlug = requireOneOf(args, "targetIdOrSlug", "targetIdentifier");
+					const handle = await this.assertCanRead(targetIdOrSlug, ctx);
 					const result = await documentIncomingRelationships(this.reactorClient, {
-						...args,
-						targetIdentifier: handle.fetchIdentifier
+						targetIdOrSlug: handle.fetchIdentifier,
+						relationshipType: args.relationshipType,
+						view: args.view,
+						paging: args.paging
 					}, this.viewSubject(ctx));
 					if (!this.authorizationService.isSupremeAdmin(ctx.user?.address)) {
 						const filteredItems = [];
@@ -6227,10 +6311,13 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			documentOutgoingRelationshipEdges: async (_parent, args, ctx) => {
 				this.logger.debug("documentOutgoingRelationshipEdges(@args)", args);
 				try {
-					const handle = await this.assertCanRead(args.sourceIdentifier, ctx);
+					const sourceIdOrSlug = requireOneOf(args, "sourceIdOrSlug", "sourceIdentifier");
+					const handle = await this.assertCanRead(sourceIdOrSlug, ctx);
 					const result = await documentOutgoingRelationshipEdges(this.reactorClient, {
-						...args,
-						sourceIdentifier: handle.fetchIdentifier
+						sourceIdOrSlug: handle.fetchIdentifier,
+						relationshipType: args.relationshipType,
+						view: args.view,
+						paging: args.paging
 					}, this.viewSubject(ctx));
 					return await this.filterRelationshipEdges(result, "targetId", ctx);
 				} catch (error) {
@@ -6241,10 +6328,13 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			documentIncomingRelationshipEdges: async (_parent, args, ctx) => {
 				this.logger.debug("documentIncomingRelationshipEdges(@args)", args);
 				try {
-					const handle = await this.assertCanRead(args.targetIdentifier, ctx);
+					const targetIdOrSlug = requireOneOf(args, "targetIdOrSlug", "targetIdentifier");
+					const handle = await this.assertCanRead(targetIdOrSlug, ctx);
 					const result = await documentIncomingRelationshipEdges(this.reactorClient, {
-						...args,
-						targetIdentifier: handle.fetchIdentifier
+						targetIdOrSlug: handle.fetchIdentifier,
+						relationshipType: args.relationshipType,
+						view: args.view,
+						paging: args.paging
 					}, this.viewSubject(ctx));
 					return await this.filterRelationshipEdges(result, "sourceId", ctx);
 				} catch (error) {
@@ -6285,13 +6375,17 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			documentOperations: async (_parent, args, ctx) => {
 				this.logger.debug("documentOperations(@args)", args);
 				try {
-					const handle = await this.assertCanRead(args.filter.documentId, ctx);
+					const { documentIdOrSlug, documentId, ...filter } = args.filter;
+					const handle = await this.assertCanRead(requireOneOf({
+						documentIdOrSlug,
+						documentId
+					}, "documentIdOrSlug", "documentId"), ctx);
 					return await documentOperations(this.reactorClient, {
-						...args,
 						filter: {
-							...args.filter,
-							documentId: handle.fetchIdentifier
-						}
+							...filter,
+							documentIdOrSlug: handle.fetchIdentifier
+						},
+						paging: args.paging
 					}, this.viewSubject(ctx));
 				} catch (error) {
 					this.logger.error("Error in documentOperations: @Error", error);
@@ -6308,10 +6402,12 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			evaluateActions: async (_parent, args, ctx) => {
 				this.logger.debug("evaluateActions(@args)", args);
 				try {
-					const handle = await this.assertCanRead(args.documentIdentifier, ctx);
+					const documentIdOrSlug = requireOneOf(args, "documentIdOrSlug", "documentIdentifier");
+					const handle = await this.assertCanRead(documentIdOrSlug, ctx);
 					return await evaluateActions(this.reactorClient, {
-						...args,
-						documentIdentifier: handle.fetchIdentifier
+						documentIdOrSlug: handle.fetchIdentifier,
+						branch: args.branch,
+						candidates: args.candidates
 					}, this.viewSubject(ctx));
 				} catch (error) {
 					this.logger.error("Error in evaluateActions: @Error", error);
@@ -6350,6 +6446,7 @@ var ReactorSubgraph = class extends BaseSubgraph {
 					if (!isAdmin) await this.assertCanReadCanonical(driveId, ctx);
 					await this.#bindOrRefuseChannel(args.channelId, ctx);
 					holdPollRefusals(this.syncManager, args.channelId, args.refusals);
+					await recordPollMarkerRefusals(this.syncManager, args.channelId, args.refusals);
 					await silenceUnversionedPoll(this.syncManager, args.channelId, args.manifestRevision);
 					const forbiddenIds = /* @__PURE__ */ new Set();
 					if (!isAdmin) {
@@ -6370,11 +6467,15 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			createDocument: async (_parent, args, ctx) => {
 				this.logger.debug("createDocument(@args)", args);
 				try {
-					if (args.parentIdentifier) {
-						const parent = await document(this.reactorClient, { identifier: args.parentIdentifier });
+					const parentIdOrSlug = optionalOneOf(args, "parentIdOrSlug", "parentIdentifier");
+					if (parentIdOrSlug) {
+						const parent = await document(this.reactorClient, { idOrSlug: parentIdOrSlug });
 						await this.assertCanWriteCanonical(parent.document.id, ctx);
 					} else this.assertCanCreate(ctx);
-					const result = await createDocument(this.reactorClient, args, this.graphqlManager.reactorDriveClient, this.viewSubject(ctx));
+					const result = await createDocument(this.reactorClient, {
+						document: args.document,
+						parentIdOrSlug
+					}, this.graphqlManager.reactorDriveClient, this.viewSubject(ctx));
 					if (result?.id && isDriveContainerType(result.documentType)) this.graphqlManager.driveOwnershipCache.add(result.id);
 					if (ctx.user?.address && result?.id) await this.documentPermissionService?.initializeDocumentProtection(result.id, ctx.user.address, this.authorizationService.config.defaultProtection);
 					return result;
@@ -6386,11 +6487,15 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			createEmptyDocument: async (_parent, args, ctx) => {
 				this.logger.debug("createEmptyDocument(@args)", args);
 				try {
-					if (args.parentIdentifier) {
-						const parent = await document(this.reactorClient, { identifier: args.parentIdentifier });
+					const parentIdOrSlug = optionalOneOf(args, "parentIdOrSlug", "parentIdentifier");
+					if (parentIdOrSlug) {
+						const parent = await document(this.reactorClient, { idOrSlug: parentIdOrSlug });
 						await this.assertCanWriteCanonical(parent.document.id, ctx);
 					} else this.assertCanCreate(ctx);
-					const result = await createEmptyDocument(this.reactorClient, args, this.graphqlManager.reactorDriveClient, this.viewSubject(ctx));
+					const result = await createEmptyDocument(this.reactorClient, {
+						documentType: args.documentType,
+						parentIdOrSlug
+					}, this.graphqlManager.reactorDriveClient, this.viewSubject(ctx));
 					if (result?.id && isDriveContainerType(result.documentType)) this.graphqlManager.driveOwnershipCache.add(result.id);
 					if (ctx.user?.address && result?.id) await this.documentPermissionService?.initializeDocumentProtection(result.id, ctx.user.address, this.authorizationService.config.defaultProtection);
 					return result;
@@ -6402,10 +6507,12 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			execute: async (_parent, args, ctx) => {
 				this.logger.debug("execute(@args)", args);
 				try {
-					const handle = await this.assertCanExecuteOperations(args.documentIdentifier, args.actions, ctx);
+					const documentIdOrSlug = requireOneOf(args, "documentIdOrSlug", "documentIdentifier");
+					const handle = await this.assertCanExecuteOperations(documentIdOrSlug, args.actions, ctx);
 					return await execute(this.reactorClient, {
-						...args,
-						documentIdentifier: handle.fetchIdentifier
+						documentIdOrSlug: handle.fetchIdentifier,
+						actions: args.actions,
+						branch: args.branch
 					}, this.viewSubject(ctx));
 				} catch (error) {
 					this.logger.error("Error in execute(@args): @Error", args, error);
@@ -6415,10 +6522,12 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			executeAsync: async (_parent, args, ctx) => {
 				this.logger.debug("executeAsync(@args)", args);
 				try {
-					const handle = await this.assertCanExecuteOperations(args.documentIdentifier, args.actions, ctx);
+					const documentIdOrSlug = requireOneOf(args, "documentIdOrSlug", "documentIdentifier");
+					const handle = await this.assertCanExecuteOperations(documentIdOrSlug, args.actions, ctx);
 					return await executeAsync(this.reactorClient, {
-						...args,
-						documentIdentifier: handle.fetchIdentifier
+						documentIdOrSlug: handle.fetchIdentifier,
+						actions: args.actions,
+						branch: args.branch
 					});
 				} catch (error) {
 					this.logger.error("Error in executeAsync(@args): @Error", args, error);
@@ -6454,10 +6563,12 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			renameDocument: async (_parent, args, ctx) => {
 				this.logger.debug("renameDocument(@args)", args);
 				try {
-					const handle = await this.assertCanWrite(args.documentIdentifier, ctx);
+					const documentIdOrSlug = requireOneOf(args, "documentIdOrSlug", "documentIdentifier");
+					const handle = await this.assertCanWrite(documentIdOrSlug, ctx);
 					return await renameDocument(this.reactorClient, {
-						...args,
-						documentIdentifier: handle.fetchIdentifier
+						documentIdOrSlug: handle.fetchIdentifier,
+						name: args.name,
+						branch: args.branch
 					}, void 0, this.viewSubject(ctx));
 				} catch (error) {
 					this.logger.error("Error in renameDocument(@args): @Error", args, error);
@@ -6467,10 +6578,12 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			setPreferredEditor: async (_parent, args, ctx) => {
 				this.logger.debug("setPreferredEditor(@args)", args);
 				try {
-					const handle = await this.assertCanWrite(args.documentIdentifier, ctx);
+					const documentIdOrSlug = requireOneOf(args, "documentIdOrSlug", "documentIdentifier");
+					const handle = await this.assertCanWrite(documentIdOrSlug, ctx);
 					return await setPreferredEditor(this.reactorClient, {
-						...args,
-						documentIdentifier: handle.fetchIdentifier
+						documentIdOrSlug: handle.fetchIdentifier,
+						preferredEditor: args.preferredEditor,
+						branch: args.branch
 					}, void 0, this.viewSubject(ctx));
 				} catch (error) {
 					this.logger.error("Error in setPreferredEditor(@args): @Error", args, error);
@@ -6480,10 +6593,15 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			addRelationship: async (_parent, args, ctx) => {
 				this.logger.debug("addRelationship(@args)", args);
 				try {
-					const handle = await this.assertCanWrite(args.sourceIdentifier, ctx);
+					const sourceIdOrSlug = requireOneOf(args, "sourceIdOrSlug", "sourceIdentifier");
+					const targetIdOrSlug = requireOneOf(args, "targetIdOrSlug", "targetIdentifier");
+					const handle = await this.assertCanWrite(sourceIdOrSlug, ctx);
 					return await addRelationship(this.reactorClient, {
-						...args,
-						sourceIdentifier: handle.fetchIdentifier
+						sourceIdOrSlug: handle.fetchIdentifier,
+						targetIdOrSlug,
+						relationshipType: args.relationshipType,
+						metadata: args.metadata,
+						branch: args.branch
 					}, this.viewSubject(ctx));
 				} catch (error) {
 					this.logger.error("Error in addRelationship(@args): @Error", args, error);
@@ -6493,10 +6611,15 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			updateRelationship: async (_parent, args, ctx) => {
 				this.logger.debug("updateRelationship(@args)", args);
 				try {
-					const handle = await this.assertCanWrite(args.sourceIdentifier, ctx);
+					const sourceIdOrSlug = requireOneOf(args, "sourceIdOrSlug", "sourceIdentifier");
+					const targetIdOrSlug = requireOneOf(args, "targetIdOrSlug", "targetIdentifier");
+					const handle = await this.assertCanWrite(sourceIdOrSlug, ctx);
 					return await updateRelationship(this.reactorClient, {
-						...args,
-						sourceIdentifier: handle.fetchIdentifier
+						sourceIdOrSlug: handle.fetchIdentifier,
+						targetIdOrSlug,
+						relationshipType: args.relationshipType,
+						metadata: args.metadata,
+						branch: args.branch
 					}, this.viewSubject(ctx));
 				} catch (error) {
 					this.logger.error("Error in updateRelationship(@args): @Error", args, error);
@@ -6506,10 +6629,14 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			removeRelationship: async (_parent, args, ctx) => {
 				this.logger.debug("removeRelationship(@args)", args);
 				try {
-					const handle = await this.assertCanWrite(args.sourceIdentifier, ctx);
+					const sourceIdOrSlug = requireOneOf(args, "sourceIdOrSlug", "sourceIdentifier");
+					const targetIdOrSlug = requireOneOf(args, "targetIdOrSlug", "targetIdentifier");
+					const handle = await this.assertCanWrite(sourceIdOrSlug, ctx);
 					return await removeRelationship(this.reactorClient, {
-						...args,
-						sourceIdentifier: handle.fetchIdentifier
+						sourceIdOrSlug: handle.fetchIdentifier,
+						targetIdOrSlug,
+						relationshipType: args.relationshipType,
+						branch: args.branch
 					}, this.viewSubject(ctx));
 				} catch (error) {
 					this.logger.error("Error in removeRelationship(@args): @Error", args, error);
@@ -6519,12 +6646,17 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			moveRelationship: async (_parent, args, ctx) => {
 				this.logger.debug("moveRelationship(@args)", args);
 				try {
-					const sourceHandle = await this.assertCanWrite(args.sourceParentIdentifier, ctx);
-					const targetHandle = await this.assertCanWrite(args.targetParentIdentifier, ctx);
+					const sourceParentIdOrSlug = requireOneOf(args, "sourceParentIdOrSlug", "sourceParentIdentifier");
+					const targetParentIdOrSlug = requireOneOf(args, "targetParentIdOrSlug", "targetParentIdentifier");
+					const targetIdOrSlug = requireOneOf(args, "targetIdOrSlug", "targetIdentifier");
+					const sourceHandle = await this.assertCanWrite(sourceParentIdOrSlug, ctx);
+					const targetHandle = await this.assertCanWrite(targetParentIdOrSlug, ctx);
 					return await moveRelationship(this.reactorClient, {
-						...args,
-						sourceParentIdentifier: sourceHandle.fetchIdentifier,
-						targetParentIdentifier: targetHandle.fetchIdentifier
+						sourceParentIdOrSlug: sourceHandle.fetchIdentifier,
+						targetParentIdOrSlug: targetHandle.fetchIdentifier,
+						targetIdOrSlug,
+						relationshipType: args.relationshipType,
+						branch: args.branch
 					}, this.viewSubject(ctx));
 				} catch (error) {
 					this.logger.error("Error in moveRelationship(@args): @Error @args", error, args);
@@ -6534,11 +6666,11 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			deleteDocument: async (_parent, args, ctx) => {
 				this.logger.debug("deleteDocument(@args)", args);
 				try {
-					const identifier = (await this.assertCanWrite(args.identifier, ctx)).fetchIdentifier;
-					const driveIdToInvalidate = await this.#resolveDriveId(identifier);
+					const idOrSlug = (await this.assertCanWrite(requireOneOf(args, "idOrSlug", "identifier"), ctx)).fetchIdentifier;
+					const driveIdToInvalidate = await this.#resolveDriveId(idOrSlug);
 					const result = await deleteDocument(this.reactorClient, {
-						...args,
-						identifier
+						idOrSlug,
+						propagate: args.propagate
 					}, this.graphqlManager.reactorDriveClient);
 					if (result && driveIdToInvalidate) this.graphqlManager.driveOwnershipCache.remove(driveIdToInvalidate);
 					return result;
@@ -6550,14 +6682,14 @@ var ReactorSubgraph = class extends BaseSubgraph {
 			deleteDocuments: async (_parent, args, ctx) => {
 				this.logger.debug("deleteDocuments(@args)", args);
 				try {
-					const identifiers = [];
-					for (const identifier of args.identifiers) {
-						const handle = await this.assertCanWrite(identifier, ctx);
-						identifiers.push(handle.fetchIdentifier);
+					const idsOrSlugs = [];
+					for (const idOrSlug of requireOneOf(args, "idsOrSlugs", "identifiers")) {
+						const handle = await this.assertCanWrite(idOrSlug, ctx);
+						idsOrSlugs.push(handle.fetchIdentifier);
 					}
 					return await deleteDocuments(this.reactorClient, {
-						...args,
-						identifiers
+						idsOrSlugs,
+						propagate: args.propagate
 					});
 				} catch (error) {
 					this.logger.error("Error in deleteDocuments(@args): @Error", args, error);
@@ -6692,10 +6824,10 @@ const ADMIN_USERS = getAdminUsers();
 //#endregion
 //#region src/graphql/system/version.ts
 function getVersion() {
-	return "6.2.3-dev.33";
+	return "6.2.3-dev.35";
 }
 function getGitHash() {
-	return "5109cc576fc0044e3fbc4771fe99f26a4dda8a59";
+	return "bc7439e3ee5e24332c3684b0d19bc98d8640fa83";
 }
 function getGitUrl() {
 	return buildTreeUrl(getGitHash());
@@ -8078,8 +8210,38 @@ var DocumentPermissionService = class {
 	* Delete all permissions for a document (used when deleting a document)
 	*/
 	async deleteAllDocumentPermissions(documentId) {
-		await this.db.deleteFrom("DocumentPermission").where("documentId", "=", documentId).execute();
-		await this.db.deleteFrom("OperationUserPermission").where("documentId", "=", documentId).execute();
+		const permissions = await this.db.deleteFrom("DocumentPermission").where("documentId", "=", documentId).returning("id").execute();
+		const operations = await this.db.deleteFrom("OperationUserPermission").where("documentId", "=", documentId).returning("id").execute();
+		return {
+			DocumentPermission: permissions.length,
+			OperationUserPermission: operations.length
+		};
+	}
+	/** Delete a document's protection row, which names its owner. */
+	async deleteDocumentProtection(documentId) {
+		return (await this.db.deleteFrom("DocumentProtection").where("documentId", "=", documentId).returning("documentId").execute()).length;
+	}
+	/** Every row that names the address, for a subject access request. */
+	async rowsForAddress(address) {
+		const lower = address.toLowerCase();
+		return {
+			permissions: await this.db.selectFrom("DocumentPermission").select([
+				"documentId",
+				"userAddress",
+				"permission",
+				"grantedBy",
+				"createdAt",
+				"updatedAt"
+			]).where((eb) => eb.or([eb("userAddress", "=", lower), eb("grantedBy", "=", lower)])).orderBy("documentId").execute(),
+			operationPermissions: await this.db.selectFrom("OperationUserPermission").select([
+				"documentId",
+				"operationType",
+				"userAddress",
+				"grantedBy",
+				"createdAt"
+			]).where((eb) => eb.or([eb("userAddress", "=", lower), eb("grantedBy", "=", lower)])).orderBy("documentId").execute(),
+			ownedDocumentIds: (await this.db.selectFrom("DocumentProtection").select("documentId").where("ownerAddress", "=", lower).orderBy("documentId").execute()).map((row) => row.documentId)
+		};
 	}
 	/**
 	* Grant a user permission to execute an operation on a document
@@ -9068,7 +9230,8 @@ async function initializeAndStartAPI(clientInitializer, options, processorApp) {
 		documentModelRegistry,
 		readiness,
 		attachmentReferenceProjection,
-		packageManager: packages
+		packageManager: packages,
+		documentPermissionService
 	};
 }
 /**
@@ -9092,6 +9255,55 @@ function withScheme(origin) {
 	return /^https?:\/\//.test(trimmed) ? trimmed : `https://${trimmed}`;
 }
 //#endregion
+//#region src/services/privacy-permissions.ts
+/**
+* reactor-privacy's permission lookup and eraser, over this host's
+* DocumentPermissionService. Typed structurally on the privacy side.
+*/
+var PrivacyPermissionAdapter = class {
+	service;
+	constructor(service) {
+		this.service = service;
+	}
+	async rowsForAddress(address) {
+		const lower = address.toLowerCase();
+		const found = await this.service.rowsForAddress(address);
+		const rows = [];
+		for (const row of found.permissions) for (const column of ["userAddress", "grantedBy"]) {
+			if (row[column] !== lower) continue;
+			rows.push({
+				table: "DocumentPermission",
+				column,
+				documentId: row.documentId,
+				detail: { permission: row.permission }
+			});
+		}
+		for (const row of found.operationPermissions) for (const column of ["userAddress", "grantedBy"]) {
+			if (row[column] !== lower) continue;
+			rows.push({
+				table: "OperationUserPermission",
+				column,
+				documentId: row.documentId,
+				detail: { operationType: row.operationType }
+			});
+		}
+		for (const documentId of found.ownedDocumentIds) rows.push({
+			table: "DocumentProtection",
+			column: "ownerAddress",
+			documentId
+		});
+		return rows;
+	}
+	async erasePermissions(documentId) {
+		const permissions = await this.service.deleteAllDocumentPermissions(documentId);
+		const protection = await this.service.deleteDocumentProtection(documentId);
+		return {
+			...permissions,
+			DocumentProtection: protection
+		};
+	}
+};
+//#endregion
 //#region src/services/package-storage.ts
 var InMemoryPackageStorage = class {
 	packages = /* @__PURE__ */ new Map();
@@ -9195,7 +9407,7 @@ var PackageManagementService = class {
 	}
 };
 //#endregion
-export { ADMIN_USERS, ActionCandidateInputSchema, ActionContextInputSchema, ActionInputSchema, AddRelationshipDocument, AnalyticsSubgraph, AttachmentAccessService, AuthDecision, AuthDecisionSchema, AuthEvaluationUnsupportedError, AuthService, AuthSubgraph, AuthenticationRequiredError, AuthorizationPolicy, AuthorizedDocumentHandle, BaseSubgraph, CORE_PACKAGE_NAME, CanonicalDocumentIdResolutionError, ChannelMetaInputSchema, CreateDocumentDocument, CreateEmptyDocumentDocument, DeleteDocumentDocument, DeleteDocumentsDocument, DocumentChangeType, DocumentChangeTypeSchema, DocumentChangesDocument, DocumentOperationsFilterInputSchema, DocumentPermissionService, DocumentRelationshipFieldsFragmentDoc, EvaluateActionsDocument, FindDocumentsDocument, ForbiddenError, GetDocumentDocument, GetDocumentIncomingRelationshipEdgesDocument, GetDocumentIncomingRelationshipsDocument, GetDocumentModelsDocument, GetDocumentOperationsDocument, GetDocumentOutgoingRelationshipEdgesDocument, GetDocumentOutgoingRelationshipsDocument, GetDocumentWithOperationsDocument, GetJobStatusDocument, GraphQLManager, HttpDocumentModelLoader, HttpPackageLoader, HttpRouteService, ImportPackageLoader, InMemoryPackageStorage, InvalidNamespaceError, JobChangesDocument, MalformedStoredOperationError, MemoryWebhookStore, MoveRelationshipDocument, MutateDocumentAsyncDocument, MutateDocumentDocument, OperationContextInputSchema, OperationInputSchema, OperationWithContextInputSchema, OperationsFilterInputSchema, PACKAGE_ROUTE_SEGMENT, PGLITE_UTC_PARSERS, PackageManagementService, PackageManager, PackagesSubgraph, PagingInputSchema, PhDocumentFieldsFragmentDoc, PollSyncEnvelopesDocument, PropagationMode, PropagationModeSchema, PushSyncEnvelopesDocument, ReactorSignerAppInputSchema, ReactorSignerInputSchema, ReactorSignerUserInputSchema, ReactorSubgraph, RelationalWebhookStore, RemoteCursorInputSchema, RemoteFilterInputSchema, RemoveRelationshipDocument, RenameDocumentDocument, SearchFilterInputSchema, SetPreferredEditorDocument, SyncEnvelopeInputSchema, SyncEnvelopeType, SyncEnvelopeTypeSchema, SyncRefusalInputSchema, SystemSubgraph, TouchChannelDocument, TouchChannelInputSchema, UpdateRelationshipDocument, ViewFilterInputSchema, WEBHOOK_SEGMENT, WS_AUTH_CLOSE_REASONS, WS_CLOSE_REASON_AUTHENTICATION_REQUIRED, WS_CLOSE_REASON_BEARER_REJECTED, WebhookService, assertAttachmentPolicyReadsAllowed, assertAuthRequiredForDocumentPermissions, assertCredentialVerifierForSource, assertHostMountPath, assertRequireAuthenticatedCallerAllowed, assertSkipCredentialVerificationAllowed, buildGraphQlDocument, buildGraphQlDriveDocument, buildGraphqlOperation, buildGraphqlOperations, buildSubgraphSchemaModule, callerSubject, createAuthFetchMiddleware, createCanonicalDocumentIdResolver, createGatewayAdapter, createHttpAdapter, createMergedSchema, createReactorGraphQLClient, createRenownCredentialVerifier, createSchema, createWsAuthHandlers, decodeExplorerUrlState, definedNonNullAnySchema, driveIdFromUrl, extractSubgraphsFromModule, generateDocumentModelSchema, getAuthContext, getDbClient, getDocumentModelSchemaName, getDocumentModelTypeDefs, getExplorerPrefix, getGitHash, getGitUrl, getSdk, getUniqueDocumentModels, getUniqueUpgradeManifests, getVersion, initAnalyticsStoreSql, initializeAndStartAPI, isDefinedNonNullAny, isExpectedLoaderMiss, isSubgraphClass, namespacePath, namespaceSegments, newWebhookToken, parseDriveUrl, parseWebhookBody, piecesBaseUrl, redactHeaders, renderGraphqlPlayground, resolvePackageName, resolveRenownConfig, verifyWebhook };
+export { ADMIN_USERS, ActionCandidateInputSchema, ActionContextInputSchema, ActionInputSchema, AddRelationshipDocument, AnalyticsSubgraph, AttachmentAccessService, AuthDecision, AuthDecisionSchema, AuthEvaluationUnsupportedError, AuthService, AuthSubgraph, AuthenticationRequiredError, AuthorizationPolicy, AuthorizedDocumentHandle, BaseSubgraph, CORE_PACKAGE_NAME, CanonicalDocumentIdResolutionError, ChannelMetaInputSchema, CreateDocumentDocument, CreateEmptyDocumentDocument, DeleteDocumentDocument, DeleteDocumentsDocument, DocumentChangeType, DocumentChangeTypeSchema, DocumentChangesDocument, DocumentOperationsFilterInputSchema, DocumentPermissionService, DocumentRelationshipFieldsFragmentDoc, EvaluateActionsDocument, FindDocumentsDocument, ForbiddenError, GetDocumentDocument, GetDocumentIncomingRelationshipEdgesDocument, GetDocumentIncomingRelationshipsDocument, GetDocumentModelsDocument, GetDocumentOperationsDocument, GetDocumentOutgoingRelationshipEdgesDocument, GetDocumentOutgoingRelationshipsDocument, GetDocumentWithOperationsDocument, GetJobStatusDocument, GraphQLManager, HttpDocumentModelLoader, HttpPackageLoader, HttpRouteService, ImportPackageLoader, InMemoryPackageStorage, InvalidNamespaceError, JobChangesDocument, MalformedStoredOperationError, MemoryWebhookStore, MoveRelationshipDocument, MutateDocumentAsyncDocument, MutateDocumentDocument, OperationContextInputSchema, OperationInputSchema, OperationWithContextInputSchema, OperationsFilterInputSchema, PACKAGE_ROUTE_SEGMENT, PGLITE_UTC_PARSERS, PackageManagementService, PackageManager, PackagesSubgraph, PagingInputSchema, PhDocumentFieldsFragmentDoc, PollSyncEnvelopesDocument, PrivacyPermissionAdapter, PropagationMode, PropagationModeSchema, PushSyncEnvelopesDocument, ReactorSignerAppInputSchema, ReactorSignerInputSchema, ReactorSignerUserInputSchema, ReactorSubgraph, RefusalNotRecordedError, RelationalWebhookStore, RemoteCursorInputSchema, RemoteFilterInputSchema, RemoveRelationshipDocument, RenameDocumentDocument, SearchFilterInputSchema, SetPreferredEditorDocument, SyncEnvelopeInputSchema, SyncEnvelopeType, SyncEnvelopeTypeSchema, SyncRefusalInputSchema, SystemSubgraph, TouchChannelDocument, TouchChannelInputSchema, UpdateRelationshipDocument, ViewFilterInputSchema, WEBHOOK_SEGMENT, WS_AUTH_CLOSE_REASONS, WS_CLOSE_REASON_AUTHENTICATION_REQUIRED, WS_CLOSE_REASON_BEARER_REJECTED, WebhookService, assertAttachmentPolicyReadsAllowed, assertAuthRequiredForDocumentPermissions, assertCredentialVerifierForSource, assertHostMountPath, assertRequireAuthenticatedCallerAllowed, assertSkipCredentialVerificationAllowed, buildGraphQlDocument, buildGraphQlDriveDocument, buildGraphqlOperation, buildGraphqlOperations, buildSubgraphSchemaModule, callerSubject, createAuthFetchMiddleware, createCanonicalDocumentIdResolver, createGatewayAdapter, createHttpAdapter, createMergedSchema, createReactorGraphQLClient, createRenownCredentialVerifier, createSchema, createWsAuthHandlers, decodeExplorerUrlState, definedNonNullAnySchema, driveIdFromUrl, extractSubgraphsFromModule, generateDocumentModelSchema, getAuthContext, getDbClient, getDocumentModelSchemaName, getDocumentModelTypeDefs, getExplorerPrefix, getGitHash, getGitUrl, getSdk, getUniqueDocumentModels, getUniqueUpgradeManifests, getVersion, initAnalyticsStoreSql, initializeAndStartAPI, isDefinedNonNullAny, isExpectedLoaderMiss, isSubgraphClass, namespacePath, namespaceSegments, newWebhookToken, parseDriveUrl, parseWebhookBody, piecesBaseUrl, redactHeaders, renderGraphqlPlayground, resolvePackageName, resolveRenownConfig, verifyWebhook };
 
 //# sourceMappingURL=index.mjs.map
-//# debugId=66ae2db7-0d74-5986-a811-364313026902
+//# debugId=9e720347-46a5-5d4d-a73c-901d11fe454f