@sanity/workflow-engine 0.22.0 → 0.24.0

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # @sanity/workflow-engine
 
+## 0.24.0
+
+### Minor Changes
+
+- 0bc4328: Render diagram tooltips in the Studio's own idiom, through one seam instead of six hand-assembled bodies:
+  - Pin the chrome once (padding 2, radius 3, shadow 2, 280px sentence cap / 400px for dev mode's label-value grids). Bodies no longer carry their own outer padding, which had stacked a `padding={3}` box inside the tooltip's own padding.
+  - A title with nothing under it renders in regular weight — it is the whole message, not a heading. Semibold is reserved for a title that actually heads content, one per tooltip: gate headings now separate from their checklist rows by full-strength versus muted text rather than a second bold.
+  - Checklists, the grouped-edge roster, the group vertex's stage list and an activity's causal waits render as real `<ul>`/`<li>` rows, so wrapping and nesting come from the browser. Previously these were flattened into padded strings with `white-space: pre-wrap`, which left a wrapped row's continuation aligned under its own marker. Each row leads with its glyph in a fixed-width column and hangs its wrapped lines back to the text: one column for a bullet and a verdict alike, where a `list-style-type` marker box is sized by its own content and put the two on different left edges within one tooltip. The glyph is inline content rather than a marker, so it is selected and copied with the row it belongs to.
+  - Space the body on one three-step rhythm, named by the role a gap plays: independent blocks (the activity roster, each gate) separate furthest, a lead-in sits closer to the list it introduces, and rows within a list sit closest. A stage tooltip nests several of these, and at one flat step the whole explanation read as a single mass.
+  - `MetaTable` renders rows only; the title and description come from the shared body, so dev-mode and end-user tooltips head identically.
+
+  `OUTCOME_MARKS` and `NEUTRAL_MARK` are now exported (from `@sanity/groq-condition-describe`, re-exported by `@sanity/workflow-engine`), so a structured checklist renderer and `checklistLines` draw their verdict glyphs from one vocabulary.
+
+- 41a3f02: Add `dueDate` and `dueDatetime` field kinds — elevated aliases of `date` / `datetime` (same stored value and validation) that mark THE due date of a level, so surfaces can identify a deadline by kind instead of guessing which date field means "due". Declarable at workflow, stage, and activity scope; optional (no field becomes required). The kind reserves a level's single due slot, so deploy enforces both halves of that: at most one due-\* (either kind, combined) per scope, and none below scope level — a due-\* nested in an `object`/`array` sub-field or an effect's `outputs` is rejected, naming `date` / `datetime` as the fix, because no deadline reader looks there. A `todoList` row's `dueDate` column is unaffected; it is a `date` named `dueDate`, not the kind. Choice lists (`options`) work on the due kinds exactly as on `date` / `datetime`. Persisted-model version 5 (additive, reader floor unchanged).
+
+  The Studio plugin edits and renders the new kinds exactly like the base kinds they elevate: the calendar picker in the start dialog, the Overview pills, the inline field editors and the activity row's date control, a locale-formatted face, and the Workflows tool's Date filter. Every date-family branch now routes through one shared kind predicate, so an elevated alias can't drift out of a site.
+
+### Patch Changes
+
+- Updated dependencies [0bc4328]
+  - @sanity/groq-condition-describe@0.4.0
+
+## 0.23.0
+
+### Minor Changes
+
+- 795b4bb: `set-stage` now makes `--to` optional: omit it on an interactive terminal and the command presents a picker of the instance's declared stages, with the current stage marked and the cursor opened on it. Because `set-stage` is an admin override, every declared stage is offered — not just reachable transitions. The candidates come from the instance's pinned definition snapshot (the same model the engine validates the move against), so the menu can never offer a stage the move would reject. Off a non-interactive terminal `--to` stays required, so scripted use is unaffected. The engine now exports `parseDefinitionSnapshotValue` for reading a definition snapshot from a minimal instance shape.
+
+### Patch Changes
+
+- 94d311e: Resolve account-global actor identities when a Studio client is explicitly bound to a project API host, and refuse project-scoped identities returned through custom or malformed API hosts.
+
 ## 0.22.0
 
 ### Patch Changes

package/DATAMODEL.md

@@ -666,6 +666,42 @@ from that snapshot. Definitions are create-only and instance persists retain
 unknown fields, so model-4 data survives round trips; the floor prevents an
 older engine from interpreting it in the first place.
 
+### Model 5 — the `dueDate` / `dueDatetime` field kinds (reader floor: 4)
+
+One additive growth ships as model 5 — model 4 was released before it landed,
+so it mints the next version rather than amending a shipped one. It does not
+raise the reader floor; the writer maximum stays 4.
+
+Two elevated scalar aliases mark THE due date for a level (workflow, stage, or
+activity): `dueDate` aliases `date` (same stored `YYYY-MM-DD` value and
+validation) and `dueDatetime` aliases `datetime` (same stored ISO-8601 value
+and validation). The kind lets surfaces identify a level's deadline instead of
+guessing which date field means "due". Both are optional; a deploy invariant
+allows at most one due-\* (either kind, combined) per scope, so "the due date"
+is never ambiguous. Both stamped trees grow the value:
+
+- **Definition tree** — `fields[].type` admits `'dueDate'` and `'dueDatetime'`
+  on a scope's own entries only. A due-\* nested in an `object`/`array`
+  sub-field, or in an effect's `outputs`, is rejected at deploy: the kind names
+  the deadline OF A LEVEL, and every deadline reader consults scope entries, so
+  a nested one is dead configuration. Nested dates stay `date` / `datetime`.
+  Existing `todoList` sugar is unaffected — its `dueDate` row column is a
+  `date` named `dueDate`, not the kind.
+- **Instance tree** — resolved `fields[]` entries admit `_type: 'dueDate'` and
+  `_type: 'dueDatetime'` (the same arm shapes as `date` / `datetime`).
+
+Manifest feature: `due-date-field-kinds` (definition + instance, additive,
+detectable, floor 0).
+
+Would an old reader misread the kinds (rule 5)? No — the same loud refusal as
+the `subject` and `progress` kinds: an older engine (model 4 and below) that
+loaded a due-date-carrying instance fails the strict `fields[]` variant with
+`PersistedDocShapeError` before interpreting anything, and cannot deploy or
+evaluate a due-date-declaring definition. The stored value is byte-identical to
+its base `date` / `datetime`, so no older code path can write it while skipping
+validation — there is no silent bypass to fence, and the kinds leave the floor
+at 0.
+
 ## Pending governed changes
 
 - **`temp.system.guard` → `system.guard`** — the guard doc type's `temp.`

package/dist/_chunks-cjs/invariants.cjs

@@ -150,7 +150,7 @@ function parentRef(instance) {
     return instance.ancestors.at(-1);
 }
 
-const DATA_MODEL_VERSION = 4, DATA_MODEL_MIN_READER = 4, READER_MODEL_ROLLOUT_URL = "https://www.sanity.io/docs/editorial-workflows/prerelease";
+const DATA_MODEL_VERSION = 5, DATA_MODEL_MIN_READER = 4, READER_MODEL_ROLLOUT_URL = "https://www.sanity.io/docs/editorial-workflows/prerelease";
 
 class ReaderModelAcknowledgementError extends WorkflowError {
     code="WORKFLOW_READER_MODEL_ACKNOWLEDGEMENT_MISMATCH";
@@ -241,6 +241,14 @@ const DATA_MODEL_CHANGES = Object.freeze([ Object.freeze({
     compatibility: "reader-floor",
     applicability: "detectable",
     summary: "Start and activity readiness use named polymorphic requirement arrays."
+}), Object.freeze({
+    id: "due-date-field-kinds",
+    introducedInModel: 5,
+    minReaderModel: 0,
+    documentTypes: Object.freeze([ "definition", "instance" ]),
+    compatibility: "additive",
+    applicability: "detectable",
+    summary: "Due-date field kinds (dueDate, dueDatetime) mark a level deadline, elevated aliases of date/datetime carrying the same stored value."
 }) ]);
 
 function recordOf(value) {
@@ -315,7 +323,8 @@ const featureDetectors = {
     "progress-field-kind": document => hasFieldKind(document, "progress"),
     "effect-claim-tokens": hasClaimTokens,
     "classified-principal-ids": () => !0,
-    "readiness-requirements": hasReadinessRequirements
+    "readiness-requirements": hasReadinessRequirements,
+    "due-date-field-kinds": document => hasFieldKind(document, "dueDate") || hasFieldKind(document, "dueDatetime")
 };
 
 function requiredModelFeatures(documentType, document) {
@@ -1879,7 +1888,7 @@ const GdrUriSchema = v__namespace.custom(s => typeof s == "string" && isGdrUri(s
 }), tolerantObject()({
     type: v__namespace.literal("role"),
     role: NonEmptyString
-}) ]), NullableString = v__namespace.union([ v__namespace.null(), v__namespace.string() ]), NullableNumber = v__namespace.union([ v__namespace.null(), v__namespace.number() ]), NullableBoolean = v__namespace.union([ v__namespace.null(), v__namespace.boolean() ]), NullableProgress = v__namespace.union([ v__namespace.null(), v__namespace.pipe(v__namespace.number(), v__namespace.finite("progress must be a finite number"), v__namespace.minValue(0, "progress must be at least 0"), v__namespace.maxValue(100, "progress must be at most 100")) ]), NullableDateTime = v__namespace.union([ v__namespace.null(), IsoTimestamp ]), NullableDate = v__namespace.union([ v__namespace.null(), v__namespace.pipe(v__namespace.string(), v__namespace.regex(/^\d{4}-\d{2}-\d{2}$/, "must be a `YYYY-MM-DD` date")) ]), NullableUrl = NullableString, CHOICE_KINDS = /* @__PURE__ */ new Set([ "string", "text", "number", "url", "date", "datetime", "dateTime" ]);
+}) ]), NullableString = v__namespace.union([ v__namespace.null(), v__namespace.string() ]), NullableNumber = v__namespace.union([ v__namespace.null(), v__namespace.number() ]), NullableBoolean = v__namespace.union([ v__namespace.null(), v__namespace.boolean() ]), NullableProgress = v__namespace.union([ v__namespace.null(), v__namespace.pipe(v__namespace.number(), v__namespace.finite("progress must be a finite number"), v__namespace.minValue(0, "progress must be at least 0"), v__namespace.maxValue(100, "progress must be at most 100")) ]), NullableDateTime = v__namespace.union([ v__namespace.null(), IsoTimestamp ]), NullableDate = v__namespace.union([ v__namespace.null(), v__namespace.pipe(v__namespace.string(), v__namespace.regex(/^\d{4}-\d{2}-\d{2}$/, "must be a `YYYY-MM-DD` date")) ]), NullableUrl = NullableString, CHOICE_KINDS = /* @__PURE__ */ new Set([ "string", "text", "number", "url", "date", "dueDate", "datetime", "dueDatetime", "dateTime" ]);
 
 function normalizedChoiceKind(kind) {
     return kind === "dateTime" ? "datetime" : kind;
@@ -1914,7 +1923,9 @@ const fieldValueSchemas = {
     progress: NullableProgress,
     boolean: NullableBoolean,
     date: NullableDate,
+    dueDate: NullableDate,
     datetime: NullableDateTime,
+    dueDatetime: NullableDateTime,
     url: NullableUrl,
     actor: v__namespace.union([ v__namespace.null(), ActorShape ]),
     assignee: v__namespace.union([ v__namespace.null(), AssigneeShape ]),
@@ -2279,7 +2290,7 @@ function groupMembershipNames(group) {
     return group === void 0 ? [] : typeof group == "string" ? [ group ] : [ ...group ];
 }
 
-const FIELD_VALUE_KINDS = [ "doc.ref", "doc.refs", "subject", "release.ref", "string", "text", "number", "progress", "boolean", "date", "datetime", "url", "actor", "assignee", "assignees", "object", "array" ], FieldValueKindSchema = picklist(FIELD_VALUE_KINDS), FieldKindSchema = picklist(FIELD_VALUE_KINDS), AUTHORING_FIELD_SUGAR_KINDS = exhaustiveOptions()([ "claim", "todoList", "notes" ]), AUTHORING_FIELD_KINDS = [ ...FIELD_VALUE_KINDS, ...AUTHORING_FIELD_SUGAR_KINDS ], AuthoringRawFieldKindSchema = v__namespace.picklist(FIELD_VALUE_KINDS, issue => `${invalidOptionMessage(AUTHORING_FIELD_KINDS)} but received ${JSON.stringify(issue.input)}`), FieldEntryName = groqIdentifier("`$fields.<name>`"), FiniteNumber = v__namespace.pipe(v__namespace.number(), v__namespace.finite("must be finite")), ScalarValidationSchema = v__namespace.pipe(v__namespace.strictObject({
+const FIELD_VALUE_KINDS = [ "doc.ref", "doc.refs", "subject", "release.ref", "string", "text", "number", "progress", "boolean", "date", "dueDate", "datetime", "dueDatetime", "url", "actor", "assignee", "assignees", "object", "array" ], FieldValueKindSchema = picklist(FIELD_VALUE_KINDS), FieldKindSchema = picklist(FIELD_VALUE_KINDS), AUTHORING_FIELD_SUGAR_KINDS = exhaustiveOptions()([ "claim", "todoList", "notes" ]), AUTHORING_FIELD_KINDS = [ ...FIELD_VALUE_KINDS, ...AUTHORING_FIELD_SUGAR_KINDS ], AuthoringRawFieldKindSchema = v__namespace.picklist(FIELD_VALUE_KINDS, issue => `${invalidOptionMessage(AUTHORING_FIELD_KINDS)} but received ${JSON.stringify(issue.input)}`), FieldEntryName = groqIdentifier("`$fields.<name>`"), FiniteNumber = v__namespace.pipe(v__namespace.number(), v__namespace.finite("must be finite")), ScalarValidationSchema = v__namespace.pipe(v__namespace.strictObject({
     min: v__namespace.optional(FiniteNumber),
     max: v__namespace.optional(FiniteNumber)
 }), v__namespace.check(validation => validation.min !== void 0 || validation.max !== void 0, "declare at least one bound, or omit `validation`"), v__namespace.check(validation => validation.min === void 0 || validation.max === void 0 || validation.min <= validation.max, "`min` must be less than or equal to `max`")), ChoiceOptionsSchema = v__namespace.strictObject({
@@ -2669,6 +2680,10 @@ function isSubjectEntry(entry) {
     return entry.type === "subject";
 }
 
+function isDueDateEntry(entry) {
+    return entry.type === "dueDate" || entry.type === "dueDatetime";
+}
+
 function isInputSourced(entry) {
     return entry.initialValue?.type === "input";
 }
@@ -3175,25 +3190,79 @@ function checkAssigneesEntries(def, issues) {
     });
 }
 
-function nestedSubjectPaths(shapes, base) {
-    return (shapes ?? []).flatMap((shape, i) => isSubjectEntry(shape) ? [ [ ...base, i, "type" ] ] : [ ...nestedSubjectPaths(shape.fields, [ ...base, i, "fields" ]), ...nestedSubjectPaths(shape.of, [ ...base, i, "of" ]) ]);
+function checkDueDateEntries(def, issues) {
+    for (const {entries: entries, path: path, label: label} of fieldScopes(def)) {
+        (entries ?? []).filter(isDueDateEntry).length > 1 && issues.push({
+            path: path,
+            message: "at most one due-date field entry per scope (dueDate or dueDatetime combined) — surfaces identify the deadline by kind"
+        });
+        for (const site of belowScopeNestedSites({
+            entries: entries,
+            path: path,
+            isKind: isDueDateEntry
+        })) issues.push({
+            path: site.path,
+            message: `${label} entry "${site.entry.name}" declares a due-date sub-field — a due-* kind marks THE deadline of a level, so nothing reads one below scope level. Declare \`date\` or \`datetime\` for a nested date`
+        });
+    }
+}
+
+function nestedKindPaths(args) {
+    const {shapes: shapes, base: base, isKind: isKind} = args;
+    return (shapes ?? []).flatMap((shape, i) => isKind(shape) ? [ [ ...base, i, "type" ] ] : [ ...nestedKindPaths({
+        shapes: shape.fields,
+        base: [ ...base, i, "fields" ],
+        isKind: isKind
+    }), ...nestedKindPaths({
+        shapes: shape.of,
+        base: [ ...base, i, "of" ],
+        isKind: isKind
+    }) ]);
 }
 
-function checkSubjectEffectOutputs(def, issues) {
-    for (const [i, stage] of def.stages.entries()) for (const [j, activity] of (stage.activities ?? []).entries()) for (const [a, action] of (activity.actions ?? []).entries()) pushSubjectOutputIssues({
+function belowScopeNestedSites(args) {
+    const {entries: entries, path: path, isKind: isKind} = args;
+    return (entries ?? []).flatMap((entry, n) => [ ...nestedKindPaths({
+        shapes: entry.fields,
+        base: [ ...path, n, "fields" ],
+        isKind: isKind
+    }), ...nestedKindPaths({
+        shapes: entry.of,
+        base: [ ...path, n, "of" ],
+        isKind: isKind
+    }) ].map(nestedPath => ({
+        path: nestedPath,
+        entry: entry
+    })));
+}
+
+function checkLevelKindEffectOutputs(def, issues) {
+    for (const [i, stage] of def.stages.entries()) for (const [j, activity] of (stage.activities ?? []).entries()) for (const [a, action] of (activity.actions ?? []).entries()) pushOutputIssues({
         action: action,
         path: [ "stages", i, "activities", j, "actions", a ],
         issues: issues
     });
 }
 
-function pushSubjectOutputIssues(args) {
+const LEVEL_KIND_OUTPUT_RULES = [ {
+    isKind: isSubjectEntry,
+    message: name => `effect "${name}" declares a \`subject\` output shape — no subject reader ever looks at effect outputs. Declare \`doc.ref\` for a document-valued output`
+}, {
+    isKind: isDueDateEntry,
+    message: name => `effect "${name}" declares a due-date output shape — a due-* kind marks THE deadline of a level, and no deadline reader looks at effect outputs. Declare \`date\` or \`datetime\` for a dated output`
+} ];
+
+function pushOutputIssues(args) {
     const {action: action, path: path, issues: issues} = args;
     for (const [e, effect] of (action.effects ?? []).entries()) {
         const base = [ ...path, "effects", e, "outputs" ];
-        for (const nestedPath of nestedSubjectPaths(effect.outputs, base)) issues.push({
+        for (const {isKind: isKind, message: message} of LEVEL_KIND_OUTPUT_RULES) for (const nestedPath of nestedKindPaths({
+            shapes: effect.outputs,
+            base: base,
+            isKind: isKind
+        })) issues.push({
             path: nestedPath,
-            message: `effect "${effect.name}" declares a \`subject\` output shape — no subject reader ever looks at effect outputs. Declare \`doc.ref\` for a document-valued output`
+            message: message(effect.name)
         });
     }
 }
@@ -3211,13 +3280,14 @@ function checkSubjectEntries(def, issues) {
             path: [ ...path, n ],
             message: "at most one subject-kind field entry per workflow — the runtime identifies THE subject by kind, and a second one makes it ambiguous"
         });
-        for (const [n, entry] of (entries ?? []).entries()) {
-            const nested = [ ...nestedSubjectPaths(entry.fields, [ ...path, n, "fields" ]), ...nestedSubjectPaths(entry.of, [ ...path, n, "of" ]) ];
-            for (const nestedPath of nested) issues.push({
-                path: nestedPath,
-                message: `${label} entry "${entry.name}" declares a \`subject\` sub-field — a nested subject can never be read as the workflow's subject. Declare \`doc.ref\` for a nested reference`
-            });
-        }
+        for (const site of belowScopeNestedSites({
+            entries: entries,
+            path: path,
+            isKind: isSubjectEntry
+        })) issues.push({
+            path: site.path,
+            message: `${label} entry "${site.entry.name}" declares a \`subject\` sub-field — a nested subject can never be read as the workflow's subject. Declare \`doc.ref\` for a nested reference`
+        });
     }
 }
 
@@ -3853,7 +3923,9 @@ const SCALAR = {
     progress: () => SCALAR,
     boolean: () => SCALAR,
     date: () => SCALAR,
+    dueDate: () => SCALAR,
     datetime: () => SCALAR,
+    dueDatetime: () => SCALAR,
     url: () => SCALAR,
     actor: () => ACTOR_VALUE,
     assignee: () => ASSIGNEE_VALUE,
@@ -3944,10 +4016,10 @@ function checkWorkflowInvariants(def) {
     checkRequiredField(def, issues), checkStart(def, issues), checkPredicates(def, issues), 
     checkUnboundConditionVars(def, issues), checkConditionFieldReads(def, issues), checkFieldReadSeeds(def, issues), 
     checkFieldReadOpValues(def, issues), checkUpdateWhereOps(def, issues), checkGuardFieldReads(def, issues), 
-    checkAssigneesEntries(def, issues), checkSubjectEntries(def, issues), checkSubjectEffectOutputs(def, issues), 
-    checkActivityTerminalPaths(def, issues), checkTerminalStageActivities(def, issues), 
-    checkTriggeredActionParams(def, issues), checkStoredRolesPlacement(def, issues), 
-    checkGroups(def, issues), issues;
+    checkAssigneesEntries(def, issues), checkDueDateEntries(def, issues), checkSubjectEntries(def, issues), 
+    checkLevelKindEffectOutputs(def, issues), checkActivityTerminalPaths(def, issues), 
+    checkTerminalStageActivities(def, issues), checkTriggeredActionParams(def, issues), 
+    checkStoredRolesPlacement(def, issues), checkGroups(def, issues), issues;
 }
 
 exports.ACTION_SEMANTICS = ACTION_SEMANTICS;
@@ -4182,6 +4254,8 @@ exports.parentRef = parentRef;
 
 exports.parseDefinitionSnapshot = parseDefinitionSnapshot;
 
+exports.parseDefinitionSnapshotValue = parseDefinitionSnapshotValue;
+
 exports.parseFieldValue = parseFieldValue;
 
 exports.parseGdr = parseGdr;

package/dist/_chunks-es/invariants.js

@@ -136,7 +136,7 @@ function parentRef(instance) {
     return instance.ancestors.at(-1);
 }
 
-const DATA_MODEL_VERSION = 4, DATA_MODEL_MIN_READER = 4, READER_MODEL_ROLLOUT_URL = "https://www.sanity.io/docs/editorial-workflows/prerelease";
+const DATA_MODEL_VERSION = 5, DATA_MODEL_MIN_READER = 4, READER_MODEL_ROLLOUT_URL = "https://www.sanity.io/docs/editorial-workflows/prerelease";
 
 class ReaderModelAcknowledgementError extends WorkflowError {
     code="WORKFLOW_READER_MODEL_ACKNOWLEDGEMENT_MISMATCH";
@@ -227,6 +227,14 @@ const DATA_MODEL_CHANGES = Object.freeze([ Object.freeze({
     compatibility: "reader-floor",
     applicability: "detectable",
     summary: "Start and activity readiness use named polymorphic requirement arrays."
+}), Object.freeze({
+    id: "due-date-field-kinds",
+    introducedInModel: 5,
+    minReaderModel: 0,
+    documentTypes: Object.freeze([ "definition", "instance" ]),
+    compatibility: "additive",
+    applicability: "detectable",
+    summary: "Due-date field kinds (dueDate, dueDatetime) mark a level deadline, elevated aliases of date/datetime carrying the same stored value."
 }) ]);
 
 function recordOf(value) {
@@ -301,7 +309,8 @@ const featureDetectors = {
     "progress-field-kind": document => hasFieldKind(document, "progress"),
     "effect-claim-tokens": hasClaimTokens,
     "classified-principal-ids": () => !0,
-    "readiness-requirements": hasReadinessRequirements
+    "readiness-requirements": hasReadinessRequirements,
+    "due-date-field-kinds": document => hasFieldKind(document, "dueDate") || hasFieldKind(document, "dueDatetime")
 };
 
 function requiredModelFeatures(documentType, document) {
@@ -1865,7 +1874,7 @@ const GdrUriSchema = v.custom(s => typeof s == "string" && isGdrUri(s), "must be
 }), tolerantObject()({
     type: v.literal("role"),
     role: NonEmptyString
-}) ]), NullableString = v.union([ v.null(), v.string() ]), NullableNumber = v.union([ v.null(), v.number() ]), NullableBoolean = v.union([ v.null(), v.boolean() ]), NullableProgress = v.union([ v.null(), v.pipe(v.number(), v.finite("progress must be a finite number"), v.minValue(0, "progress must be at least 0"), v.maxValue(100, "progress must be at most 100")) ]), NullableDateTime = v.union([ v.null(), IsoTimestamp ]), NullableDate = v.union([ v.null(), v.pipe(v.string(), v.regex(/^\d{4}-\d{2}-\d{2}$/, "must be a `YYYY-MM-DD` date")) ]), NullableUrl = NullableString, CHOICE_KINDS = /* @__PURE__ */ new Set([ "string", "text", "number", "url", "date", "datetime", "dateTime" ]);
+}) ]), NullableString = v.union([ v.null(), v.string() ]), NullableNumber = v.union([ v.null(), v.number() ]), NullableBoolean = v.union([ v.null(), v.boolean() ]), NullableProgress = v.union([ v.null(), v.pipe(v.number(), v.finite("progress must be a finite number"), v.minValue(0, "progress must be at least 0"), v.maxValue(100, "progress must be at most 100")) ]), NullableDateTime = v.union([ v.null(), IsoTimestamp ]), NullableDate = v.union([ v.null(), v.pipe(v.string(), v.regex(/^\d{4}-\d{2}-\d{2}$/, "must be a `YYYY-MM-DD` date")) ]), NullableUrl = NullableString, CHOICE_KINDS = /* @__PURE__ */ new Set([ "string", "text", "number", "url", "date", "dueDate", "datetime", "dueDatetime", "dateTime" ]);
 
 function normalizedChoiceKind(kind) {
     return kind === "dateTime" ? "datetime" : kind;
@@ -1900,7 +1909,9 @@ const fieldValueSchemas = {
     progress: NullableProgress,
     boolean: NullableBoolean,
     date: NullableDate,
+    dueDate: NullableDate,
     datetime: NullableDateTime,
+    dueDatetime: NullableDateTime,
     url: NullableUrl,
     actor: v.union([ v.null(), ActorShape ]),
     assignee: v.union([ v.null(), AssigneeShape ]),
@@ -2265,7 +2276,7 @@ function groupMembershipNames(group) {
     return group === void 0 ? [] : typeof group == "string" ? [ group ] : [ ...group ];
 }
 
-const FIELD_VALUE_KINDS = [ "doc.ref", "doc.refs", "subject", "release.ref", "string", "text", "number", "progress", "boolean", "date", "datetime", "url", "actor", "assignee", "assignees", "object", "array" ], FieldValueKindSchema = picklist(FIELD_VALUE_KINDS), FieldKindSchema = picklist(FIELD_VALUE_KINDS), AUTHORING_FIELD_SUGAR_KINDS = exhaustiveOptions()([ "claim", "todoList", "notes" ]), AUTHORING_FIELD_KINDS = [ ...FIELD_VALUE_KINDS, ...AUTHORING_FIELD_SUGAR_KINDS ], AuthoringRawFieldKindSchema = v.picklist(FIELD_VALUE_KINDS, issue => `${invalidOptionMessage(AUTHORING_FIELD_KINDS)} but received ${JSON.stringify(issue.input)}`), FieldEntryName = groqIdentifier("`$fields.<name>`"), FiniteNumber = v.pipe(v.number(), v.finite("must be finite")), ScalarValidationSchema = v.pipe(v.strictObject({
+const FIELD_VALUE_KINDS = [ "doc.ref", "doc.refs", "subject", "release.ref", "string", "text", "number", "progress", "boolean", "date", "dueDate", "datetime", "dueDatetime", "url", "actor", "assignee", "assignees", "object", "array" ], FieldValueKindSchema = picklist(FIELD_VALUE_KINDS), FieldKindSchema = picklist(FIELD_VALUE_KINDS), AUTHORING_FIELD_SUGAR_KINDS = exhaustiveOptions()([ "claim", "todoList", "notes" ]), AUTHORING_FIELD_KINDS = [ ...FIELD_VALUE_KINDS, ...AUTHORING_FIELD_SUGAR_KINDS ], AuthoringRawFieldKindSchema = v.picklist(FIELD_VALUE_KINDS, issue => `${invalidOptionMessage(AUTHORING_FIELD_KINDS)} but received ${JSON.stringify(issue.input)}`), FieldEntryName = groqIdentifier("`$fields.<name>`"), FiniteNumber = v.pipe(v.number(), v.finite("must be finite")), ScalarValidationSchema = v.pipe(v.strictObject({
     min: v.optional(FiniteNumber),
     max: v.optional(FiniteNumber)
 }), v.check(validation => validation.min !== void 0 || validation.max !== void 0, "declare at least one bound, or omit `validation`"), v.check(validation => validation.min === void 0 || validation.max === void 0 || validation.min <= validation.max, "`min` must be less than or equal to `max`")), ChoiceOptionsSchema = v.strictObject({
@@ -2655,6 +2666,10 @@ function isSubjectEntry(entry) {
     return entry.type === "subject";
 }
 
+function isDueDateEntry(entry) {
+    return entry.type === "dueDate" || entry.type === "dueDatetime";
+}
+
 function isInputSourced(entry) {
     return entry.initialValue?.type === "input";
 }
@@ -3161,25 +3176,79 @@ function checkAssigneesEntries(def, issues) {
     });
 }
 
-function nestedSubjectPaths(shapes, base) {
-    return (shapes ?? []).flatMap((shape, i) => isSubjectEntry(shape) ? [ [ ...base, i, "type" ] ] : [ ...nestedSubjectPaths(shape.fields, [ ...base, i, "fields" ]), ...nestedSubjectPaths(shape.of, [ ...base, i, "of" ]) ]);
+function checkDueDateEntries(def, issues) {
+    for (const {entries: entries, path: path, label: label} of fieldScopes(def)) {
+        (entries ?? []).filter(isDueDateEntry).length > 1 && issues.push({
+            path: path,
+            message: "at most one due-date field entry per scope (dueDate or dueDatetime combined) — surfaces identify the deadline by kind"
+        });
+        for (const site of belowScopeNestedSites({
+            entries: entries,
+            path: path,
+            isKind: isDueDateEntry
+        })) issues.push({
+            path: site.path,
+            message: `${label} entry "${site.entry.name}" declares a due-date sub-field — a due-* kind marks THE deadline of a level, so nothing reads one below scope level. Declare \`date\` or \`datetime\` for a nested date`
+        });
+    }
 }
 
-function checkSubjectEffectOutputs(def, issues) {
-    for (const [i, stage] of def.stages.entries()) for (const [j, activity] of (stage.activities ?? []).entries()) for (const [a, action] of (activity.actions ?? []).entries()) pushSubjectOutputIssues({
+function nestedKindPaths(args) {
+    const {shapes: shapes, base: base, isKind: isKind} = args;
+    return (shapes ?? []).flatMap((shape, i) => isKind(shape) ? [ [ ...base, i, "type" ] ] : [ ...nestedKindPaths({
+        shapes: shape.fields,
+        base: [ ...base, i, "fields" ],
+        isKind: isKind
+    }), ...nestedKindPaths({
+        shapes: shape.of,
+        base: [ ...base, i, "of" ],
+        isKind: isKind
+    }) ]);
+}
+
+function belowScopeNestedSites(args) {
+    const {entries: entries, path: path, isKind: isKind} = args;
+    return (entries ?? []).flatMap((entry, n) => [ ...nestedKindPaths({
+        shapes: entry.fields,
+        base: [ ...path, n, "fields" ],
+        isKind: isKind
+    }), ...nestedKindPaths({
+        shapes: entry.of,
+        base: [ ...path, n, "of" ],
+        isKind: isKind
+    }) ].map(nestedPath => ({
+        path: nestedPath,
+        entry: entry
+    })));
+}
+
+function checkLevelKindEffectOutputs(def, issues) {
+    for (const [i, stage] of def.stages.entries()) for (const [j, activity] of (stage.activities ?? []).entries()) for (const [a, action] of (activity.actions ?? []).entries()) pushOutputIssues({
         action: action,
         path: [ "stages", i, "activities", j, "actions", a ],
         issues: issues
     });
 }
 
-function pushSubjectOutputIssues(args) {
+const LEVEL_KIND_OUTPUT_RULES = [ {
+    isKind: isSubjectEntry,
+    message: name => `effect "${name}" declares a \`subject\` output shape — no subject reader ever looks at effect outputs. Declare \`doc.ref\` for a document-valued output`
+}, {
+    isKind: isDueDateEntry,
+    message: name => `effect "${name}" declares a due-date output shape — a due-* kind marks THE deadline of a level, and no deadline reader looks at effect outputs. Declare \`date\` or \`datetime\` for a dated output`
+} ];
+
+function pushOutputIssues(args) {
     const {action: action, path: path, issues: issues} = args;
     for (const [e, effect] of (action.effects ?? []).entries()) {
         const base = [ ...path, "effects", e, "outputs" ];
-        for (const nestedPath of nestedSubjectPaths(effect.outputs, base)) issues.push({
+        for (const {isKind: isKind, message: message} of LEVEL_KIND_OUTPUT_RULES) for (const nestedPath of nestedKindPaths({
+            shapes: effect.outputs,
+            base: base,
+            isKind: isKind
+        })) issues.push({
             path: nestedPath,
-            message: `effect "${effect.name}" declares a \`subject\` output shape — no subject reader ever looks at effect outputs. Declare \`doc.ref\` for a document-valued output`
+            message: message(effect.name)
         });
     }
 }
@@ -3197,13 +3266,14 @@ function checkSubjectEntries(def, issues) {
             path: [ ...path, n ],
             message: "at most one subject-kind field entry per workflow — the runtime identifies THE subject by kind, and a second one makes it ambiguous"
         });
-        for (const [n, entry] of (entries ?? []).entries()) {
-            const nested = [ ...nestedSubjectPaths(entry.fields, [ ...path, n, "fields" ]), ...nestedSubjectPaths(entry.of, [ ...path, n, "of" ]) ];
-            for (const nestedPath of nested) issues.push({
-                path: nestedPath,
-                message: `${label} entry "${entry.name}" declares a \`subject\` sub-field — a nested subject can never be read as the workflow's subject. Declare \`doc.ref\` for a nested reference`
-            });
-        }
+        for (const site of belowScopeNestedSites({
+            entries: entries,
+            path: path,
+            isKind: isSubjectEntry
+        })) issues.push({
+            path: site.path,
+            message: `${label} entry "${site.entry.name}" declares a \`subject\` sub-field — a nested subject can never be read as the workflow's subject. Declare \`doc.ref\` for a nested reference`
+        });
     }
 }
 
@@ -3839,7 +3909,9 @@ const SCALAR = {
     progress: () => SCALAR,
     boolean: () => SCALAR,
     date: () => SCALAR,
+    dueDate: () => SCALAR,
     datetime: () => SCALAR,
+    dueDatetime: () => SCALAR,
     url: () => SCALAR,
     actor: () => ACTOR_VALUE,
     assignee: () => ASSIGNEE_VALUE,
@@ -3930,10 +4002,10 @@ function checkWorkflowInvariants(def) {
     checkRequiredField(def, issues), checkStart(def, issues), checkPredicates(def, issues), 
     checkUnboundConditionVars(def, issues), checkConditionFieldReads(def, issues), checkFieldReadSeeds(def, issues), 
     checkFieldReadOpValues(def, issues), checkUpdateWhereOps(def, issues), checkGuardFieldReads(def, issues), 
-    checkAssigneesEntries(def, issues), checkSubjectEntries(def, issues), checkSubjectEffectOutputs(def, issues), 
-    checkActivityTerminalPaths(def, issues), checkTerminalStageActivities(def, issues), 
-    checkTriggeredActionParams(def, issues), checkStoredRolesPlacement(def, issues), 
-    checkGroups(def, issues), issues;
+    checkAssigneesEntries(def, issues), checkDueDateEntries(def, issues), checkSubjectEntries(def, issues), 
+    checkLevelKindEffectOutputs(def, issues), checkActivityTerminalPaths(def, issues), 
+    checkTerminalStageActivities(def, issues), checkTriggeredActionParams(def, issues), 
+    checkStoredRolesPlacement(def, issues), checkGroups(def, issues), issues;
 }
 
-export { ACTION_SEMANTICS, ACTIVITY_KINDS, ACTIVITY_STATUSES, ACTOR_KINDS, ANONYMOUS_IDENTITY, ActorShape, AuthoringActionSchema, AuthoringActivitySchema, AuthoringFieldEntrySchema, AuthoringGuardSchema, AuthoringOpSchema, AuthoringStageSchema, AuthoringTransitionSchema, AuthoringWorkflowSchema, CALLER_BOUND_VARS, CONDITION_VARS, ContractViolationError, DATA_MODEL_CHANGES, DATA_MODEL_MIN_READER, DATA_MODEL_VERSION, DEFAULT_TRANSITION_WHEN, DOCUMENT_VALUE_PERMISSIONS, DRIVER_KINDS, DefinitionInUseError, DefinitionNotFoundError, EFFECTS_READ, EXECUTOR_CLASSIFICATIONS, EffectNotFoundError, EffectSchema, FIELD_READ, FIELD_SCOPES, FIELD_VALUE_KINDS, FILTER_SCOPE_VARS, FieldValueShapeError, GROUP_KINDS, GUARD_PREDICATE_VARS, GdrShape, GroupSchema, InstanceNotFoundError, IsoTimestamp, MUTATION_GUARD_ACTIONS, ModelVersionAheadError, NonEmptyString, PersistedDocShapeError, READER_MODEL_ROLLOUT_URL, RESERVED_CONDITION_VARS, RESOURCE_ALIAS_NAME_SOURCE, ReaderModelAcknowledgementError, START_FILTER_VARS, START_REQUIREMENT_VARS, SYSTEM_IDENTITY, SpawnContractsInvalidError, StoredFieldOpSchema, VersionSpecificDatasetGdrError, WORKFLOW_DEFINITION_TYPE, WORKFLOW_INSTANCE_TYPE, WorkflowConfigSchema, WorkflowError, actorFulfillsRole, andConditions, assertReadableModel, assertReaderModelAcknowledgement, checkWorkflowInvariants, choiceValueIssues, classifyPrincipalId, clientConfigFromResource, conditionEffectReads, conditionFieldReadNames, conditionParameterNames, conditionSyntaxIssues, datasetResourceParts, definitionDocId, deriveActivityKind, deriveExecutorClassification, desugarWorkflow, driverKind, errorMessage, evaluateCondition, evaluateConditionOutcome, evaluatePredicates, extractDocumentId, fieldTreeShape, fieldValueSchemas, formatIssuePath, formatIssues, formatValidationError, gdrFromResource, gdrRef, gdrResourcePrefix, gdrUri, groq, groupMembershipNames, isBareSeedId, isCascadeFired, isGdr, isGdrUri, isGuardReadExpr, isInputSourced, isNotesEntry, isParseableInstant, isSingleDocRefEntry, isSingleDocRefKind, isStartableDefinition, isSubjectEntry, isTerminalActivityStatus, isTodoListEntry, isTodoListItem, isUnevaluable, isUnprimed, labelFor, lakePrincipalId, minReaderModelOf, modelStampFor, modelVersionOf, parentRef, parseDefinitionSnapshot, parseFieldValue, parseGdr, parseOrThrow, parsePersistedDoc, parseResourceGdr, parseStoredDefinition, readsRootDocument, refCanvas, refDashboard, refDataset, refKindAcceptsTypes, refMediaLibrary, refTypeIssues, rejectedRefTypes, releaseDocId, releaseRef, requiredModelFeatures, requiredReaderModel, resourceAliasesToMap, resourceFromGdrUri, resourceFromParsed, resourceGdr, rethrowWithContext, runGroq, sameResource, scalarValidationIssues, schemaTreeShape, selfGdr, startKindOf, tagScopeFilter, terminalState, toBareId, toPhysicalGdr, tolerantEntries, tolerantObject, tryParseGdr, validateFieldAppendItem, validateFieldValue, validateResourceAliasName, validateTag };
+export { ACTION_SEMANTICS, ACTIVITY_KINDS, ACTIVITY_STATUSES, ACTOR_KINDS, ANONYMOUS_IDENTITY, ActorShape, AuthoringActionSchema, AuthoringActivitySchema, AuthoringFieldEntrySchema, AuthoringGuardSchema, AuthoringOpSchema, AuthoringStageSchema, AuthoringTransitionSchema, AuthoringWorkflowSchema, CALLER_BOUND_VARS, CONDITION_VARS, ContractViolationError, DATA_MODEL_CHANGES, DATA_MODEL_MIN_READER, DATA_MODEL_VERSION, DEFAULT_TRANSITION_WHEN, DOCUMENT_VALUE_PERMISSIONS, DRIVER_KINDS, DefinitionInUseError, DefinitionNotFoundError, EFFECTS_READ, EXECUTOR_CLASSIFICATIONS, EffectNotFoundError, EffectSchema, FIELD_READ, FIELD_SCOPES, FIELD_VALUE_KINDS, FILTER_SCOPE_VARS, FieldValueShapeError, GROUP_KINDS, GUARD_PREDICATE_VARS, GdrShape, GroupSchema, InstanceNotFoundError, IsoTimestamp, MUTATION_GUARD_ACTIONS, ModelVersionAheadError, NonEmptyString, PersistedDocShapeError, READER_MODEL_ROLLOUT_URL, RESERVED_CONDITION_VARS, RESOURCE_ALIAS_NAME_SOURCE, ReaderModelAcknowledgementError, START_FILTER_VARS, START_REQUIREMENT_VARS, SYSTEM_IDENTITY, SpawnContractsInvalidError, StoredFieldOpSchema, VersionSpecificDatasetGdrError, WORKFLOW_DEFINITION_TYPE, WORKFLOW_INSTANCE_TYPE, WorkflowConfigSchema, WorkflowError, actorFulfillsRole, andConditions, assertReadableModel, assertReaderModelAcknowledgement, checkWorkflowInvariants, choiceValueIssues, classifyPrincipalId, clientConfigFromResource, conditionEffectReads, conditionFieldReadNames, conditionParameterNames, conditionSyntaxIssues, datasetResourceParts, definitionDocId, deriveActivityKind, deriveExecutorClassification, desugarWorkflow, driverKind, errorMessage, evaluateCondition, evaluateConditionOutcome, evaluatePredicates, extractDocumentId, fieldTreeShape, fieldValueSchemas, formatIssuePath, formatIssues, formatValidationError, gdrFromResource, gdrRef, gdrResourcePrefix, gdrUri, groq, groupMembershipNames, isBareSeedId, isCascadeFired, isGdr, isGdrUri, isGuardReadExpr, isInputSourced, isNotesEntry, isParseableInstant, isSingleDocRefEntry, isSingleDocRefKind, isStartableDefinition, isSubjectEntry, isTerminalActivityStatus, isTodoListEntry, isTodoListItem, isUnevaluable, isUnprimed, labelFor, lakePrincipalId, minReaderModelOf, modelStampFor, modelVersionOf, parentRef, parseDefinitionSnapshot, parseDefinitionSnapshotValue, parseFieldValue, parseGdr, parseOrThrow, parsePersistedDoc, parseResourceGdr, parseStoredDefinition, readsRootDocument, refCanvas, refDashboard, refDataset, refKindAcceptsTypes, refMediaLibrary, refTypeIssues, rejectedRefTypes, releaseDocId, releaseRef, requiredModelFeatures, requiredReaderModel, resourceAliasesToMap, resourceFromGdrUri, resourceFromParsed, resourceGdr, rethrowWithContext, runGroq, sameResource, scalarValidationIssues, schemaTreeShape, selfGdr, startKindOf, tagScopeFilter, terminalState, toBareId, toPhysicalGdr, tolerantEntries, tolerantObject, tryParseGdr, validateFieldAppendItem, validateFieldValue, validateResourceAliasName, validateTag };

package/dist/define.d.cts

@@ -1148,7 +1148,9 @@ declare const FIELD_VALUE_KINDS: readonly [
   "progress",
   "boolean",
   "date",
+  "dueDate",
   "datetime",
+  "dueDatetime",
   "url",
   "actor",
   "assignee",
@@ -1879,6 +1881,10 @@ declare type TerminalActivityStatus =
  * `todoList` — ad-hoc, status-tracked work items. Sugar over `array of object
  * { label, status, assignee?, dueDate? }`; a plain checklist is this used with
  * `{label, status}` only (open ↔ done). Never a stored kind.
+ *
+ * The `dueDate` column is a `date` NAMED `dueDate`, not the {@link
+ * FieldValueMap.dueDate} kind — that kind reserves one deadline slot per level,
+ * and a repeating row has nothing to reserve.
  */
 declare type TodoListField = FieldBase<AuthoringEditable, GroupMembership> & {
   type: "todoList";

package/dist/define.d.ts

@@ -1148,7 +1148,9 @@ declare const FIELD_VALUE_KINDS: readonly [
   "progress",
   "boolean",
   "date",
+  "dueDate",
   "datetime",
+  "dueDatetime",
   "url",
   "actor",
   "assignee",
@@ -1879,6 +1881,10 @@ declare type TerminalActivityStatus =
  * `todoList` — ad-hoc, status-tracked work items. Sugar over `array of object
  * { label, status, assignee?, dueDate? }`; a plain checklist is this used with
  * `{label, status}` only (open ↔ done). Never a stored kind.
+ *
+ * The `dueDate` column is a `date` NAMED `dueDate`, not the {@link
+ * FieldValueMap.dueDate} kind — that kind reserves one deadline slot per level,
+ * and a repeating row has nothing to reserve.
  */
 declare type TodoListField = FieldBase<AuthoringEditable, GroupMembership> & {
   type: "todoList";

package/dist/index.cjs

@@ -4128,7 +4128,7 @@ const OptionalRefTypes = v__namespace.exactOptional(v__namespace.array(v__namesp
 })), v__namespace.looseObject(invariants.tolerantEntries()({
     ...fieldArm("subject", invariants.fieldValueSchemas.subject),
     types: OptionalRefTypes
-})), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("release.ref", invariants.fieldValueSchemas["release.ref"]))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("string", invariants.fieldValueSchemas.string))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("text", invariants.fieldValueSchemas.text))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("number", invariants.fieldValueSchemas.number))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("progress", invariants.fieldValueSchemas.progress))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("boolean", invariants.fieldValueSchemas.boolean))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("date", invariants.fieldValueSchemas.date))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("datetime", invariants.fieldValueSchemas.datetime))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("url", invariants.fieldValueSchemas.url))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("actor", invariants.fieldValueSchemas.actor))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("assignee", invariants.fieldValueSchemas.assignee))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("assignees", invariants.fieldValueSchemas.assignees))), v__namespace.looseObject(invariants.tolerantEntries()({
+})), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("release.ref", invariants.fieldValueSchemas["release.ref"]))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("string", invariants.fieldValueSchemas.string))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("text", invariants.fieldValueSchemas.text))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("number", invariants.fieldValueSchemas.number))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("progress", invariants.fieldValueSchemas.progress))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("boolean", invariants.fieldValueSchemas.boolean))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("date", invariants.fieldValueSchemas.date))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("dueDate", invariants.fieldValueSchemas.dueDate))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("datetime", invariants.fieldValueSchemas.datetime))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("dueDatetime", invariants.fieldValueSchemas.dueDatetime))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("url", invariants.fieldValueSchemas.url))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("actor", invariants.fieldValueSchemas.actor))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("assignee", invariants.fieldValueSchemas.assignee))), v__namespace.looseObject(invariants.tolerantEntries()(fieldArm("assignees", invariants.fieldValueSchemas.assignees))), v__namespace.looseObject(invariants.tolerantEntries()({
     ...fieldArm("object", v__namespace.union([ v__namespace.null(), UnknownRecord ])),
     fields: v__namespace.array(PersistedFieldShapeSchema)
 })), v__namespace.looseObject(invariants.tolerantEntries()({
@@ -8493,9 +8493,13 @@ async function fetchGlobalUser(client) {
         reason: "the client cannot reach the global API host (no withConfig)"
     };
     let globalRequest, globalClient;
+    const hostResolution = resolveGlobalApiHost(client);
     try {
         globalClient = client.withConfig({
-            useProjectHostname: !1
+            useProjectHostname: !1,
+            ...hostResolution.apiHost === void 0 ? {} : {
+                apiHost: hostResolution.apiHost
+            }
         }), globalRequest = lazyRequest(globalClient);
     } catch (err) {
         return {
@@ -8509,11 +8513,15 @@ async function fetchGlobalUser(client) {
         reason: "the global-host sibling client cannot issue requests"
     };
     try {
-        return {
-            user: await globalRequest({
-                uri: "/users/me",
-                tag: REQUEST_TAG.accessResolveActor
-            })
+        const user = await globalRequest({
+            uri: "/users/me",
+            tag: REQUEST_TAG.accessResolveActor
+        }), id = usableId(user);
+        return hostResolution.requireGlobalPrincipal && id !== void 0 && invariants.classifyPrincipalId(id).namespace === "project" ? {
+            user: void 0,
+            reason: `global-host /users/me returned project-scoped principal "${id}"; the sibling client is still bound to a project API host`
+        } : {
+            user: user
         };
     } catch (err) {
         return {
@@ -8524,6 +8532,34 @@ async function fetchGlobalUser(client) {
     }
 }
 
+function resolveGlobalApiHost(client) {
+    if (typeof client.config != "function") return {
+        requireGlobalPrincipal: !1
+    };
+    const apiHost = client.config().apiHost;
+    if (apiHost === void 0) return {
+        requireGlobalPrincipal: !1
+    };
+    let parsed;
+    try {
+        parsed = new URL(apiHost);
+    } catch {
+        return {
+            requireGlobalPrincipal: !0
+        };
+    }
+    if (/^api\.sanity\.(io|work)$/.test(parsed.hostname)) return {
+        requireGlobalPrincipal: !1
+    };
+    const match = /^[^.]+\.api\.sanity\.(io|work)$/.exec(parsed.hostname);
+    return match === null ? {
+        requireGlobalPrincipal: !0
+    } : (parsed.hostname = `api.sanity.${match[1]}`, {
+        apiHost: parsed.origin,
+        requireGlobalPrincipal: !0
+    });
+}
+
 async function fetchGrantsCached(requestFn, resourcePath) {
     try {
         return await fetchGrants({
@@ -12739,10 +12775,18 @@ const HISTORY_DISPLAY = {
         title: "Date value",
         description: "Date-only (YYYY-MM-DD) entry, no time component."
     },
+    dueDate: {
+        title: "Due date",
+        description: "THE due date for a level — same value as a date, elevated so surfaces identify the deadline by kind."
+    },
     datetime: {
         title: "Date / time value",
         description: "ISO-8601 timestamp entry."
     },
+    dueDatetime: {
+        title: "Due date / time",
+        description: "THE due datetime for a level — same value as a date/time, the timestamp counterpart of a due date."
+    },
     url: {
         title: "URL value",
         description: "Validated URL entry."
@@ -13023,6 +13067,8 @@ exports.parentRef = invariants.parentRef;
 
 exports.parseDefinitionSnapshot = invariants.parseDefinitionSnapshot;
 
+exports.parseDefinitionSnapshotValue = invariants.parseDefinitionSnapshotValue;
+
 exports.parseGdr = invariants.parseGdr;
 
 exports.parseResourceGdr = invariants.parseResourceGdr;
@@ -13080,6 +13126,20 @@ Object.defineProperty(exports, "MAX_COUNTERFACTUAL_INDEX", {
     }
 });
 
+Object.defineProperty(exports, "NEUTRAL_MARK", {
+    enumerable: !0,
+    get: function() {
+        return groqConditionDescribe.NEUTRAL_MARK;
+    }
+});
+
+Object.defineProperty(exports, "OUTCOME_MARKS", {
+    enumerable: !0,
+    get: function() {
+        return groqConditionDescribe.OUTCOME_MARKS;
+    }
+});
+
 Object.defineProperty(exports, "analyzeCondition", {
     enumerable: !0,
     get: function() {

package/dist/index.d.cts

@@ -20,6 +20,8 @@ import { humanize } from "@sanity/groq-condition-describe";
 import { InsightPhrase } from "@sanity/groq-condition-describe";
 import { isComparisonOp } from "@sanity/groq-condition-describe";
 import { MAX_COUNTERFACTUAL_INDEX } from "@sanity/groq-condition-describe";
+import { NEUTRAL_MARK } from "@sanity/groq-condition-describe";
+import { OUTCOME_MARKS } from "@sanity/groq-condition-describe";
 import { quoted } from "@sanity/groq-condition-describe";
 import type { SanityDocument } from "@sanity/types";
 import { ScopeAssignment } from "@sanity/groq-condition-describe";
@@ -2357,6 +2359,15 @@ export declare const DATA_MODEL_CHANGES: readonly [
     applicability: "detectable";
     summary: "Start and activity readiness use named polymorphic requirement arrays.";
   }>,
+  Readonly<{
+    id: "due-date-field-kinds";
+    introducedInModel: 5;
+    minReaderModel: 0;
+    documentTypes: readonly ["definition", "instance"];
+    compatibility: "additive";
+    applicability: "detectable";
+    summary: string;
+  }>,
 ];
 
 /**
@@ -2381,7 +2392,7 @@ export declare const DATA_MODEL_MIN_READER = 4;
  * job. Declare every bump in `DATAMODEL.md`; the model-surface snapshot test
  * keeps undeclared drift red.
  */
-export declare const DATA_MODEL_VERSION = 4;
+export declare const DATA_MODEL_VERSION = 5;
 
 export declare interface DataModelChange {
   readonly id: string;
@@ -4337,10 +4348,18 @@ export declare const FIELD_KIND_DISPLAY: {
     title: string;
     description: string;
   };
+  dueDate: {
+    title: string;
+    description: string;
+  };
   datetime: {
     title: string;
     description: string;
   };
+  dueDatetime: {
+    title: string;
+    description: string;
+  };
   url: {
     title: string;
     description: string;
@@ -4389,7 +4408,9 @@ declare const FIELD_VALUE_KINDS: readonly [
   "progress",
   "boolean",
   "date",
+  "dueDate",
   "datetime",
+  "dueDatetime",
   "url",
   "actor",
   "assignee",
@@ -4534,8 +4555,12 @@ export declare interface FieldValueMap {
   boolean: boolean | null;
   /** Date-only (`YYYY-MM-DD`), no time component. */
   date: string | null;
+  /** THE due date of a level — same value as {@link FieldValueMap.date}. */
+  dueDate: string | null;
   /** ISO-8601 timestamp. */
   datetime: string | null;
+  /** THE due datetime of a level — same value as {@link FieldValueMap.datetime}. */
+  dueDatetime: string | null;
   url: string | null;
   actor: Actor | null;
   /** A single {@link Assignee} — the singular of {@link FieldValueMap.assignees}. */
@@ -6368,6 +6393,8 @@ export declare function narrateAutonomyWaits(
   ctx: DescribeContext,
 ): string[];
 
+export { NEUTRAL_MARK };
+
 /** The default logger: emit nothing. The engine's twin of `@sanity/telemetry`'s `noopLogger`. */
 export declare const noopTelemetry: WorkflowTelemetryLogger;
 
@@ -6470,6 +6497,8 @@ export declare interface OperationResult {
   ranOps?: OpAppliedSummary[];
 }
 
+export { OUTCOME_MARKS };
+
 /**
  * The instance's direct parent — the last entry of the root-first
  * {@link WorkflowInstance.ancestors} chain; `undefined` for a root instance.
@@ -6496,6 +6525,16 @@ export declare function parseDefinitionSnapshot(
   instance: WorkflowInstance,
 ): WorkflowDefinition;
 
+/**
+ * The canonical parser for an instance's frozen
+ * {@link WorkflowInstance.definitionSnapshot}. Accepting the persisted pair
+ * keeps compatibility scanners and full instance consumers on the same
+ * contextual failure path.
+ */
+export declare function parseDefinitionSnapshotValue(
+  instance: Pick<WorkflowInstance, "_id" | "definitionSnapshot">,
+): WorkflowDefinition;
+
 export declare interface ParsedGdr {
   scheme: GdrScheme;
   /** For `dataset`: `<projectId>` */
@@ -6786,7 +6825,7 @@ export declare class ReaderModelAcknowledgementError extends WorkflowError<"read
   readonly code = "WORKFLOW_READER_MODEL_ACKNOWLEDGEMENT_MISMATCH";
   readonly expectedMinReaderModel: unknown;
   readonly engineMinReaderModel = 4;
-  readonly engineModelVersion = 4;
+  readonly engineModelVersion = 5;
   readonly documentationUrl =
     "https://www.sanity.io/docs/editorial-workflows/prerelease";
   constructor(expectedMinReaderModel: unknown, context?: string);
@@ -8629,6 +8668,10 @@ export declare function toBareId(id: string): string;
  * `todoList` — ad-hoc, status-tracked work items. Sugar over `array of object
  * { label, status, assignee?, dueDate? }`; a plain checklist is this used with
  * `{label, status}` only (open ↔ done). Never a stored kind.
+ *
+ * The `dueDate` column is a `date` NAMED `dueDate`, not the {@link
+ * FieldValueMap.dueDate} kind — that kind reserves one deadline slot per level,
+ * and a repeating row has nothing to reserve.
  */
 declare type TodoListField = FieldBase<AuthoringEditable, GroupMembership> & {
   type: "todoList";
@@ -9321,6 +9364,13 @@ export declare interface WorkflowAutonomy extends AutonomyAnswer {
 }
 
 export declare interface WorkflowClient {
+  /**
+   * Read the effective client configuration. The engine probes `apiHost`
+   * before deriving the global `/users/me` sibling because `@sanity/client`
+   * shallow-merges `withConfig` overrides and otherwise preserves an explicit
+   * project host even when `useProjectHostname` is set to `false`.
+   */
+  config?: () => WorkflowClientConfig;
   fetch: <T = unknown>(
     query: string,
     params?: Record<string, unknown>,
@@ -9448,6 +9498,8 @@ export declare interface WorkflowClientConfig {
   resource?: WorkflowResource;
   projectId?: string;
   dataset?: string;
+  /** Explicit API origin, mirroring `@sanity/client`'s `apiHost`. */
+  apiHost?: string;
   apiVersion?: string;
   requestTagPrefix?: string;
   /**

package/dist/index.d.ts

@@ -20,6 +20,8 @@ import { humanize } from "@sanity/groq-condition-describe";
 import { InsightPhrase } from "@sanity/groq-condition-describe";
 import { isComparisonOp } from "@sanity/groq-condition-describe";
 import { MAX_COUNTERFACTUAL_INDEX } from "@sanity/groq-condition-describe";
+import { NEUTRAL_MARK } from "@sanity/groq-condition-describe";
+import { OUTCOME_MARKS } from "@sanity/groq-condition-describe";
 import { quoted } from "@sanity/groq-condition-describe";
 import type { SanityDocument } from "@sanity/types";
 import { ScopeAssignment } from "@sanity/groq-condition-describe";
@@ -2357,6 +2359,15 @@ export declare const DATA_MODEL_CHANGES: readonly [
     applicability: "detectable";
     summary: "Start and activity readiness use named polymorphic requirement arrays.";
   }>,
+  Readonly<{
+    id: "due-date-field-kinds";
+    introducedInModel: 5;
+    minReaderModel: 0;
+    documentTypes: readonly ["definition", "instance"];
+    compatibility: "additive";
+    applicability: "detectable";
+    summary: string;
+  }>,
 ];
 
 /**
@@ -2381,7 +2392,7 @@ export declare const DATA_MODEL_MIN_READER = 4;
  * job. Declare every bump in `DATAMODEL.md`; the model-surface snapshot test
  * keeps undeclared drift red.
  */
-export declare const DATA_MODEL_VERSION = 4;
+export declare const DATA_MODEL_VERSION = 5;
 
 export declare interface DataModelChange {
   readonly id: string;
@@ -4337,10 +4348,18 @@ export declare const FIELD_KIND_DISPLAY: {
     title: string;
     description: string;
   };
+  dueDate: {
+    title: string;
+    description: string;
+  };
   datetime: {
     title: string;
     description: string;
   };
+  dueDatetime: {
+    title: string;
+    description: string;
+  };
   url: {
     title: string;
     description: string;
@@ -4389,7 +4408,9 @@ declare const FIELD_VALUE_KINDS: readonly [
   "progress",
   "boolean",
   "date",
+  "dueDate",
   "datetime",
+  "dueDatetime",
   "url",
   "actor",
   "assignee",
@@ -4534,8 +4555,12 @@ export declare interface FieldValueMap {
   boolean: boolean | null;
   /** Date-only (`YYYY-MM-DD`), no time component. */
   date: string | null;
+  /** THE due date of a level — same value as {@link FieldValueMap.date}. */
+  dueDate: string | null;
   /** ISO-8601 timestamp. */
   datetime: string | null;
+  /** THE due datetime of a level — same value as {@link FieldValueMap.datetime}. */
+  dueDatetime: string | null;
   url: string | null;
   actor: Actor | null;
   /** A single {@link Assignee} — the singular of {@link FieldValueMap.assignees}. */
@@ -6368,6 +6393,8 @@ export declare function narrateAutonomyWaits(
   ctx: DescribeContext,
 ): string[];
 
+export { NEUTRAL_MARK };
+
 /** The default logger: emit nothing. The engine's twin of `@sanity/telemetry`'s `noopLogger`. */
 export declare const noopTelemetry: WorkflowTelemetryLogger;
 
@@ -6470,6 +6497,8 @@ export declare interface OperationResult {
   ranOps?: OpAppliedSummary[];
 }
 
+export { OUTCOME_MARKS };
+
 /**
  * The instance's direct parent — the last entry of the root-first
  * {@link WorkflowInstance.ancestors} chain; `undefined` for a root instance.
@@ -6496,6 +6525,16 @@ export declare function parseDefinitionSnapshot(
   instance: WorkflowInstance,
 ): WorkflowDefinition;
 
+/**
+ * The canonical parser for an instance's frozen
+ * {@link WorkflowInstance.definitionSnapshot}. Accepting the persisted pair
+ * keeps compatibility scanners and full instance consumers on the same
+ * contextual failure path.
+ */
+export declare function parseDefinitionSnapshotValue(
+  instance: Pick<WorkflowInstance, "_id" | "definitionSnapshot">,
+): WorkflowDefinition;
+
 export declare interface ParsedGdr {
   scheme: GdrScheme;
   /** For `dataset`: `<projectId>` */
@@ -6786,7 +6825,7 @@ export declare class ReaderModelAcknowledgementError extends WorkflowError<"read
   readonly code = "WORKFLOW_READER_MODEL_ACKNOWLEDGEMENT_MISMATCH";
   readonly expectedMinReaderModel: unknown;
   readonly engineMinReaderModel = 4;
-  readonly engineModelVersion = 4;
+  readonly engineModelVersion = 5;
   readonly documentationUrl =
     "https://www.sanity.io/docs/editorial-workflows/prerelease";
   constructor(expectedMinReaderModel: unknown, context?: string);
@@ -8629,6 +8668,10 @@ export declare function toBareId(id: string): string;
  * `todoList` — ad-hoc, status-tracked work items. Sugar over `array of object
  * { label, status, assignee?, dueDate? }`; a plain checklist is this used with
  * `{label, status}` only (open ↔ done). Never a stored kind.
+ *
+ * The `dueDate` column is a `date` NAMED `dueDate`, not the {@link
+ * FieldValueMap.dueDate} kind — that kind reserves one deadline slot per level,
+ * and a repeating row has nothing to reserve.
  */
 declare type TodoListField = FieldBase<AuthoringEditable, GroupMembership> & {
   type: "todoList";
@@ -9321,6 +9364,13 @@ export declare interface WorkflowAutonomy extends AutonomyAnswer {
 }
 
 export declare interface WorkflowClient {
+  /**
+   * Read the effective client configuration. The engine probes `apiHost`
+   * before deriving the global `/users/me` sibling because `@sanity/client`
+   * shallow-merges `withConfig` overrides and otherwise preserves an explicit
+   * project host even when `useProjectHostname` is set to `false`.
+   */
+  config?: () => WorkflowClientConfig;
   fetch: <T = unknown>(
     query: string,
     params?: Record<string, unknown>,
@@ -9448,6 +9498,8 @@ export declare interface WorkflowClientConfig {
   resource?: WorkflowResource;
   projectId?: string;
   dataset?: string;
+  /** Explicit API origin, mirroring `@sanity/client`'s `apiHost`. */
+  apiHost?: string;
   apiVersion?: string;
   requestTagPrefix?: string;
   /**

package/dist/index.js

@@ -1,10 +1,10 @@
 import { terminalState, andConditions, deriveActivityKind, parseDefinitionSnapshot, CALLER_BOUND_VARS, START_REQUIREMENT_VARS, CONDITION_VARS, isSubjectEntry, isUnevaluable, ContractViolationError, isStartableDefinition, conditionFieldReadNames, rethrowWithContext, isGdr, errorMessage, conditionParameterNames, START_FILTER_VARS, gdrFromResource, selfGdr, isSingleDocRefKind, parentRef, actorFulfillsRole, toBareId, WorkflowError, sameResource, resourceFromParsed, tryParseGdr, isTerminalActivityStatus, FieldValueShapeError, validateFieldValue, validateFieldAppendItem, evaluateCondition, isSingleDocRefEntry, choiceValueIssues, scalarValidationIssues, StoredFieldOpSchema, formatIssues, conditionSyntaxIssues, checkWorkflowInvariants, formatIssuePath, isGuardReadExpr, conditionEffectReads, EFFECTS_READ, datasetResourceParts, evaluatePredicates, WORKFLOW_DEFINITION_TYPE, tagScopeFilter, isCascadeFired, WORKFLOW_INSTANCE_TYPE, parseGdr, isGdrUri, gdrRef, isInputSourced, parseFieldValue, VersionSpecificDatasetGdrError, toPhysicalGdr, isBareSeedId, tolerantEntries, NonEmptyString, FIELD_VALUE_KINDS, tolerantObject, ActorShape, IsoTimestamp, ACTIVITY_STATUSES, GdrShape, DRIVER_KINDS, FIELD_SCOPES, fieldValueSchemas, parsePersistedDoc, ACTOR_KINDS, classifyPrincipalId, assertReadableModel, InstanceNotFoundError, modelStampFor, evaluateConditionOutcome, runGroq, FIELD_READ, MUTATION_GUARD_ACTIONS, resourceGdr, minReaderModelOf, resourceFromGdrUri, refTypeIssues, rejectedRefTypes, DOCUMENT_VALUE_PERMISSIONS, lakePrincipalId, driverKind, EffectNotFoundError, deriveExecutorClassification, validateTag, extractDocumentId, parseStoredDefinition, validateResourceAliasName, labelFor, DefinitionNotFoundError, definitionDocId, SpawnContractsInvalidError, gdrResourcePrefix, RESOURCE_ALIAS_NAME_SOURCE, isUnprimed, DefinitionInUseError, assertReaderModelAcknowledgement, isParseableInstant, groupMembershipNames } from "./_chunks-es/invariants.js";
 
-import { ACTION_SEMANTICS, ACTIVITY_KINDS, ANONYMOUS_IDENTITY, DATA_MODEL_CHANGES, DATA_MODEL_MIN_READER, DATA_MODEL_VERSION, DEFAULT_TRANSITION_WHEN, EXECUTOR_CLASSIFICATIONS, FILTER_SCOPE_VARS, GROUP_KINDS, GUARD_PREDICATE_VARS, ModelVersionAheadError, PersistedDocShapeError, READER_MODEL_ROLLOUT_URL, RESERVED_CONDITION_VARS, ReaderModelAcknowledgementError, SYSTEM_IDENTITY, clientConfigFromResource, fieldTreeShape, gdrUri, isNotesEntry, isTodoListEntry, isTodoListItem, modelVersionOf, parseResourceGdr, readsRootDocument, refCanvas, refDashboard, refDataset, refKindAcceptsTypes, refMediaLibrary, releaseDocId, releaseRef, requiredModelFeatures, requiredReaderModel, resourceAliasesToMap, schemaTreeShape, startKindOf } from "./_chunks-es/invariants.js";
+import { ACTION_SEMANTICS, ACTIVITY_KINDS, ANONYMOUS_IDENTITY, DATA_MODEL_CHANGES, DATA_MODEL_MIN_READER, DATA_MODEL_VERSION, DEFAULT_TRANSITION_WHEN, EXECUTOR_CLASSIFICATIONS, FILTER_SCOPE_VARS, GROUP_KINDS, GUARD_PREDICATE_VARS, ModelVersionAheadError, PersistedDocShapeError, READER_MODEL_ROLLOUT_URL, RESERVED_CONDITION_VARS, ReaderModelAcknowledgementError, SYSTEM_IDENTITY, clientConfigFromResource, fieldTreeShape, gdrUri, isNotesEntry, isTodoListEntry, isTodoListItem, modelVersionOf, parseDefinitionSnapshotValue, parseResourceGdr, readsRootDocument, refCanvas, refDashboard, refDataset, refKindAcceptsTypes, refMediaLibrary, releaseDocId, releaseRef, requiredModelFeatures, requiredReaderModel, resourceAliasesToMap, schemaTreeShape, startKindOf } from "./_chunks-es/invariants.js";
 
 import { atomNode, dedupeBy, analyzeCondition, atomReadsDataset, checklistLines as checklistLines$1, phrase, quoted, listAnd, describeAtom as describeAtom$1, describeCondition as describeCondition$1, guillemets, formatValue, humanize, listOr, scopeReadOf, describeRead, explainCondition, dedupeReads, whatIfCondition, MAX_COUNTERFACTUAL_INDEX } from "@sanity/groq-condition-describe";
 
-import { MAX_COUNTERFACTUAL_INDEX as MAX_COUNTERFACTUAL_INDEX2, analyzeCondition as analyzeCondition2, atomReadsDataset as atomReadsDataset2, explainCondition as explainCondition2, formatRead, guillemets as guillemets2, humanize as humanize2, isComparisonOp, quoted as quoted2, sentenceCase, whatIfCondition as whatIfCondition2, withAssignment } from "@sanity/groq-condition-describe";
+import { MAX_COUNTERFACTUAL_INDEX as MAX_COUNTERFACTUAL_INDEX2, NEUTRAL_MARK, OUTCOME_MARKS, analyzeCondition as analyzeCondition2, atomReadsDataset as atomReadsDataset2, explainCondition as explainCondition2, formatRead, guillemets as guillemets2, humanize as humanize2, isComparisonOp, quoted as quoted2, sentenceCase, whatIfCondition as whatIfCondition2, withAssignment } from "@sanity/groq-condition-describe";
 
 import { evaluate, parse } from "groq-js";
 
@@ -4113,7 +4113,7 @@ const OptionalRefTypes = v.exactOptional(v.array(v.string())), ResolvedFieldEntr
 })), v.looseObject(tolerantEntries()({
     ...fieldArm("subject", fieldValueSchemas.subject),
     types: OptionalRefTypes
-})), v.looseObject(tolerantEntries()(fieldArm("release.ref", fieldValueSchemas["release.ref"]))), v.looseObject(tolerantEntries()(fieldArm("string", fieldValueSchemas.string))), v.looseObject(tolerantEntries()(fieldArm("text", fieldValueSchemas.text))), v.looseObject(tolerantEntries()(fieldArm("number", fieldValueSchemas.number))), v.looseObject(tolerantEntries()(fieldArm("progress", fieldValueSchemas.progress))), v.looseObject(tolerantEntries()(fieldArm("boolean", fieldValueSchemas.boolean))), v.looseObject(tolerantEntries()(fieldArm("date", fieldValueSchemas.date))), v.looseObject(tolerantEntries()(fieldArm("datetime", fieldValueSchemas.datetime))), v.looseObject(tolerantEntries()(fieldArm("url", fieldValueSchemas.url))), v.looseObject(tolerantEntries()(fieldArm("actor", fieldValueSchemas.actor))), v.looseObject(tolerantEntries()(fieldArm("assignee", fieldValueSchemas.assignee))), v.looseObject(tolerantEntries()(fieldArm("assignees", fieldValueSchemas.assignees))), v.looseObject(tolerantEntries()({
+})), v.looseObject(tolerantEntries()(fieldArm("release.ref", fieldValueSchemas["release.ref"]))), v.looseObject(tolerantEntries()(fieldArm("string", fieldValueSchemas.string))), v.looseObject(tolerantEntries()(fieldArm("text", fieldValueSchemas.text))), v.looseObject(tolerantEntries()(fieldArm("number", fieldValueSchemas.number))), v.looseObject(tolerantEntries()(fieldArm("progress", fieldValueSchemas.progress))), v.looseObject(tolerantEntries()(fieldArm("boolean", fieldValueSchemas.boolean))), v.looseObject(tolerantEntries()(fieldArm("date", fieldValueSchemas.date))), v.looseObject(tolerantEntries()(fieldArm("dueDate", fieldValueSchemas.dueDate))), v.looseObject(tolerantEntries()(fieldArm("datetime", fieldValueSchemas.datetime))), v.looseObject(tolerantEntries()(fieldArm("dueDatetime", fieldValueSchemas.dueDatetime))), v.looseObject(tolerantEntries()(fieldArm("url", fieldValueSchemas.url))), v.looseObject(tolerantEntries()(fieldArm("actor", fieldValueSchemas.actor))), v.looseObject(tolerantEntries()(fieldArm("assignee", fieldValueSchemas.assignee))), v.looseObject(tolerantEntries()(fieldArm("assignees", fieldValueSchemas.assignees))), v.looseObject(tolerantEntries()({
     ...fieldArm("object", v.union([ v.null(), UnknownRecord ])),
     fields: v.array(PersistedFieldShapeSchema)
 })), v.looseObject(tolerantEntries()({
@@ -8477,9 +8477,13 @@ async function fetchGlobalUser(client) {
         reason: "the client cannot reach the global API host (no withConfig)"
     };
     let globalRequest, globalClient;
+    const hostResolution = resolveGlobalApiHost(client);
     try {
         globalClient = client.withConfig({
-            useProjectHostname: !1
+            useProjectHostname: !1,
+            ...hostResolution.apiHost === void 0 ? {} : {
+                apiHost: hostResolution.apiHost
+            }
         }), globalRequest = lazyRequest(globalClient);
     } catch (err) {
         return {
@@ -8493,11 +8497,15 @@ async function fetchGlobalUser(client) {
         reason: "the global-host sibling client cannot issue requests"
     };
     try {
-        return {
-            user: await globalRequest({
-                uri: "/users/me",
-                tag: REQUEST_TAG.accessResolveActor
-            })
+        const user = await globalRequest({
+            uri: "/users/me",
+            tag: REQUEST_TAG.accessResolveActor
+        }), id = usableId(user);
+        return hostResolution.requireGlobalPrincipal && id !== void 0 && classifyPrincipalId(id).namespace === "project" ? {
+            user: void 0,
+            reason: `global-host /users/me returned project-scoped principal "${id}"; the sibling client is still bound to a project API host`
+        } : {
+            user: user
         };
     } catch (err) {
         return {
@@ -8508,6 +8516,34 @@ async function fetchGlobalUser(client) {
     }
 }
 
+function resolveGlobalApiHost(client) {
+    if (typeof client.config != "function") return {
+        requireGlobalPrincipal: !1
+    };
+    const apiHost = client.config().apiHost;
+    if (apiHost === void 0) return {
+        requireGlobalPrincipal: !1
+    };
+    let parsed;
+    try {
+        parsed = new URL(apiHost);
+    } catch {
+        return {
+            requireGlobalPrincipal: !0
+        };
+    }
+    if (/^api\.sanity\.(io|work)$/.test(parsed.hostname)) return {
+        requireGlobalPrincipal: !1
+    };
+    const match = /^[^.]+\.api\.sanity\.(io|work)$/.exec(parsed.hostname);
+    return match === null ? {
+        requireGlobalPrincipal: !0
+    } : (parsed.hostname = `api.sanity.${match[1]}`, {
+        apiHost: parsed.origin,
+        requireGlobalPrincipal: !0
+    });
+}
+
 async function fetchGrantsCached(requestFn, resourcePath) {
     try {
         return await fetchGrants({
@@ -12723,10 +12759,18 @@ const HISTORY_DISPLAY = {
         title: "Date value",
         description: "Date-only (YYYY-MM-DD) entry, no time component."
     },
+    dueDate: {
+        title: "Due date",
+        description: "THE due date for a level — same value as a date, elevated so surfaces identify the deadline by kind."
+    },
     datetime: {
         title: "Date / time value",
         description: "ISO-8601 timestamp entry."
     },
+    dueDatetime: {
+        title: "Due date / time",
+        description: "THE due datetime for a level — same value as a date/time, the timestamp counterpart of a due date."
+    },
     url: {
         title: "URL value",
         description: "Validated URL entry."
@@ -12877,4 +12921,4 @@ function displayDescription(typeKey) {
     if (typeKey) return DISPLAY[typeKey]?.description;
 }
 
-export { ACTION_SEMANTICS, ACTIVITY_KINDS, ACTIVITY_KIND_DISPLAY, ACTOR_KINDS, ANONYMOUS_IDENTITY, AUTHORING_DISPLAY, ActionDisabledError, ActionParamsInvalidError, CONDITION_VARS, CONTEXT_ENTRY_DISPLAY, CascadeLimitError, ConcurrentCommitEffectOpsError, ConcurrentCompleteEffectError, ConcurrentEditFieldError, ConcurrentFireActionError, ContractViolationError, DATA_MODEL_CHANGES, DATA_MODEL_MIN_READER, DATA_MODEL_VERSION, DEFAULT_CONTENT_PERSPECTIVE, DEFAULT_EFFECT_LEASE_MS, DEFAULT_IDEMPOTENCY_TTL_MS, DEFAULT_TRANSITION_WHEN, DISPLAY, DRIVER_KINDS, DRIVER_KIND_DISPLAY, DefinitionInUseError, DefinitionNotFoundError, EFFECT_COMMIT_DISPATCH_CAP, EFFECT_COMMIT_QUEUE_DEPTH, ENGINE_API_VERSION, EXECUTION_KINDS, EXECUTOR_CLASSIFICATIONS, EXECUTOR_CLASSIFICATION_DISPLAY, EditFieldDeniedError, EffectCommitQueueOverflowError, EffectNotFoundError, EffectOpsInvalidError, EffectOutputsInvalidError, FIELD_KIND_DISPLAY, FILTER_SCOPE_VARS, FieldValueShapeError, GROUP_KINDS, GROUP_KIND_DISPLAY, GUARD_DOC_TYPE, GUARD_OWNER, GUARD_PREDICATE_VARS, HISTORY_DISPLAY, InitialFieldsInvalidError, InstanceNotFoundError, MAX_COUNTERFACTUAL_INDEX2 as MAX_COUNTERFACTUAL_INDEX, MissingHandlerError, ModelVersionAheadError, MutationGuardDeniedError, MutationGuardDocSchema, OP_DISPLAY, PartialGuardDeployError, PersistedDocShapeError, READER_MODEL_ROLLOUT_URL, RESERVED_CONDITION_VARS, ReaderModelAcknowledgementError, RefResourceUndeclaredError, RequiredFieldNotProvidedError, START_FILTER_VARS, START_REQUIREMENT_VARS, SYSTEM_IDENTITY, SpawnContractsInvalidError, StaleEffectClaimError, StartNotAllowedError, StartNotPrimedError, StartNotSettledError, WORKFLOW_DEFINITION_TYPE, WORKFLOW_INSTANCE_TYPE, WorkflowActionFired, WorkflowActivityReset, WorkflowDefinitionDeleted, WorkflowDefinitionDeployed, WorkflowEffectCompleted, WorkflowEffectStateReported, WorkflowEffectsDrained, WorkflowError, WorkflowFieldEdited, WorkflowInstanceAborted, WorkflowInstanceSchema, WorkflowInstanceStarted, WorkflowInstanceTicked, WorkflowStageSet, WorkflowStageTransitioned, WorkflowStateDivergedError, abortReason, acceptsDocumentType, aclPathForResource, actionDisabledDetail, actionRendering, actionVerdict, activityAutonomyOf, analyzeCondition2 as analyzeCondition, applicableDefinitions, assertReadableModel, assertReaderModelAcknowledgement, atomReadsDataset2 as atomReadsDataset, autonomySummary, availableActions, buildInitialFields, buildSnapshot, checklistLines, classifyPrincipalId, clientConfigFromResource, clientProjectUserDirectory, compileGuard, computeDiffEntries, conditionFieldReadNames, conditionSitesOf, contentDocQuery, contentDraftFallback, contentReleaseName, contextMap, createEngine, createTelemetryIntake, datasetResourceParts, defaultLoggerFactory, definitionDeployedData, definitionLookupGroq, definitionsListGroq, deniedGuardLabels, deniedGuardRefs, denyingGuards, deployStageGuards, deriveActivityKind, deriveExecutorClassification, deriveWorkflowAutonomy, describeAtom, describeAutonomyWait, describeCondition, describeDefinition, describeFieldInsight, describeNode, describeSite, describeSiteHeading, diagnoseInputFromEvaluation, diagnoseInstance, diffEntry, displayDescription, displayTitle, documentActionDenials, documentPrefilter, driverKind, effectOutputsMap, entryDocRefs, errorMessage, evaluateFromSnapshot, evaluateMutationGuard, evaluateStartFilter, expandResourceAliases, explainCondition2 as explainCondition, explainStartRequirement, extractDocumentId, fieldTreeShape, findCurrentActivityEntry, findOpenStageEntry, formatRead, gdrFromResource, gdrRef, gdrUri, groupMembershipNames, groupSitesOf, guardMatches, guardsForDefinition, guardsForInstance, guardsForResource, guillemets2 as guillemets, hasSingleSubjectRequirement, hashDefinitionContent, humanize2 as humanize, inFlightFilter, initialFieldIssues, instanceDocId, instanceGuardQuery, instanceWatchesDocument, instancesGuardQuery, instancesQuery, isCascadeFired, isClaimExpired, isClientProjectUser, isComparisonOp, isDefinitionApplicable, isFilterScopedOut, isGdr, isInputSourced, isNotesEntry, isProjectUserNotFoundError, isSingleDocRefEntry, isSingleDocRefKind, isStartableDefinition, isSubjectEntry, isTelemetryEnvDenied, isTerminalActivityStatus, isTerminalStage, isTodoListEntry, isTodoListItem, isUnprimed, lakeGuardId, lakePrincipalId, latestDefinitionsGroq, latestDeployedDefinitions, lintEffectOutputs, minReaderModelOf, missingRequiredInputs, modelVersionOf, narrateAutonomyWaits, noopTelemetry, parentRef, parseDefinitionInput, parseDefinitionSnapshot, parseGdr, parseGuardDocument, parseInstanceDocument, parseResourceGdr, processShellUserProperties, projectStartSliceRow, projectToWatchRef, quoted2 as quoted, readInstanceDoc, readsRaw, readsRootDocument, refCanvas, refDashboard, refDataset, refKindAcceptsTypes, refMediaLibrary, refsOf, rejectedRefTypes, releaseDocId, releaseRef, remediationsFor, requiredModelFeatures, requiredReaderModel, resolveAccess, resolveActor, resolveClientActor, resolveFieldEntry$1 as resolveFieldEntry, resourceAliasesToMap, resourceFromParsed, resourceGdr, retractStageGuards, sameResource, scalarValidationIssues, schemaTreeShape, sentenceCase, silentLogger, singleSubjectRequirementRefused, stageAutonomyOf, startFieldsParam, startKindOf, startRefusal, stripSystemFields, subjectDenialLabels, subscriptionDocument, subscriptionDocumentsForInstance, sweepStaleClaims, tagScopeFilter, terminalState, toBareId, tryParseGdr, unboundRequirementReads, unsatisfiedTransitionSummaries, validateDefinition, validateTag, verdictGuardsForInstance, wallClock, whatIfCondition2 as whatIfCondition, withAssignment, workflow };
+export { ACTION_SEMANTICS, ACTIVITY_KINDS, ACTIVITY_KIND_DISPLAY, ACTOR_KINDS, ANONYMOUS_IDENTITY, AUTHORING_DISPLAY, ActionDisabledError, ActionParamsInvalidError, CONDITION_VARS, CONTEXT_ENTRY_DISPLAY, CascadeLimitError, ConcurrentCommitEffectOpsError, ConcurrentCompleteEffectError, ConcurrentEditFieldError, ConcurrentFireActionError, ContractViolationError, DATA_MODEL_CHANGES, DATA_MODEL_MIN_READER, DATA_MODEL_VERSION, DEFAULT_CONTENT_PERSPECTIVE, DEFAULT_EFFECT_LEASE_MS, DEFAULT_IDEMPOTENCY_TTL_MS, DEFAULT_TRANSITION_WHEN, DISPLAY, DRIVER_KINDS, DRIVER_KIND_DISPLAY, DefinitionInUseError, DefinitionNotFoundError, EFFECT_COMMIT_DISPATCH_CAP, EFFECT_COMMIT_QUEUE_DEPTH, ENGINE_API_VERSION, EXECUTION_KINDS, EXECUTOR_CLASSIFICATIONS, EXECUTOR_CLASSIFICATION_DISPLAY, EditFieldDeniedError, EffectCommitQueueOverflowError, EffectNotFoundError, EffectOpsInvalidError, EffectOutputsInvalidError, FIELD_KIND_DISPLAY, FILTER_SCOPE_VARS, FieldValueShapeError, GROUP_KINDS, GROUP_KIND_DISPLAY, GUARD_DOC_TYPE, GUARD_OWNER, GUARD_PREDICATE_VARS, HISTORY_DISPLAY, InitialFieldsInvalidError, InstanceNotFoundError, MAX_COUNTERFACTUAL_INDEX2 as MAX_COUNTERFACTUAL_INDEX, MissingHandlerError, ModelVersionAheadError, MutationGuardDeniedError, MutationGuardDocSchema, NEUTRAL_MARK, OP_DISPLAY, OUTCOME_MARKS, PartialGuardDeployError, PersistedDocShapeError, READER_MODEL_ROLLOUT_URL, RESERVED_CONDITION_VARS, ReaderModelAcknowledgementError, RefResourceUndeclaredError, RequiredFieldNotProvidedError, START_FILTER_VARS, START_REQUIREMENT_VARS, SYSTEM_IDENTITY, SpawnContractsInvalidError, StaleEffectClaimError, StartNotAllowedError, StartNotPrimedError, StartNotSettledError, WORKFLOW_DEFINITION_TYPE, WORKFLOW_INSTANCE_TYPE, WorkflowActionFired, WorkflowActivityReset, WorkflowDefinitionDeleted, WorkflowDefinitionDeployed, WorkflowEffectCompleted, WorkflowEffectStateReported, WorkflowEffectsDrained, WorkflowError, WorkflowFieldEdited, WorkflowInstanceAborted, WorkflowInstanceSchema, WorkflowInstanceStarted, WorkflowInstanceTicked, WorkflowStageSet, WorkflowStageTransitioned, WorkflowStateDivergedError, abortReason, acceptsDocumentType, aclPathForResource, actionDisabledDetail, actionRendering, actionVerdict, activityAutonomyOf, analyzeCondition2 as analyzeCondition, applicableDefinitions, assertReadableModel, assertReaderModelAcknowledgement, atomReadsDataset2 as atomReadsDataset, autonomySummary, availableActions, buildInitialFields, buildSnapshot, checklistLines, classifyPrincipalId, clientConfigFromResource, clientProjectUserDirectory, compileGuard, computeDiffEntries, conditionFieldReadNames, conditionSitesOf, contentDocQuery, contentDraftFallback, contentReleaseName, contextMap, createEngine, createTelemetryIntake, datasetResourceParts, defaultLoggerFactory, definitionDeployedData, definitionLookupGroq, definitionsListGroq, deniedGuardLabels, deniedGuardRefs, denyingGuards, deployStageGuards, deriveActivityKind, deriveExecutorClassification, deriveWorkflowAutonomy, describeAtom, describeAutonomyWait, describeCondition, describeDefinition, describeFieldInsight, describeNode, describeSite, describeSiteHeading, diagnoseInputFromEvaluation, diagnoseInstance, diffEntry, displayDescription, displayTitle, documentActionDenials, documentPrefilter, driverKind, effectOutputsMap, entryDocRefs, errorMessage, evaluateFromSnapshot, evaluateMutationGuard, evaluateStartFilter, expandResourceAliases, explainCondition2 as explainCondition, explainStartRequirement, extractDocumentId, fieldTreeShape, findCurrentActivityEntry, findOpenStageEntry, formatRead, gdrFromResource, gdrRef, gdrUri, groupMembershipNames, groupSitesOf, guardMatches, guardsForDefinition, guardsForInstance, guardsForResource, guillemets2 as guillemets, hasSingleSubjectRequirement, hashDefinitionContent, humanize2 as humanize, inFlightFilter, initialFieldIssues, instanceDocId, instanceGuardQuery, instanceWatchesDocument, instancesGuardQuery, instancesQuery, isCascadeFired, isClaimExpired, isClientProjectUser, isComparisonOp, isDefinitionApplicable, isFilterScopedOut, isGdr, isInputSourced, isNotesEntry, isProjectUserNotFoundError, isSingleDocRefEntry, isSingleDocRefKind, isStartableDefinition, isSubjectEntry, isTelemetryEnvDenied, isTerminalActivityStatus, isTerminalStage, isTodoListEntry, isTodoListItem, isUnprimed, lakeGuardId, lakePrincipalId, latestDefinitionsGroq, latestDeployedDefinitions, lintEffectOutputs, minReaderModelOf, missingRequiredInputs, modelVersionOf, narrateAutonomyWaits, noopTelemetry, parentRef, parseDefinitionInput, parseDefinitionSnapshot, parseDefinitionSnapshotValue, parseGdr, parseGuardDocument, parseInstanceDocument, parseResourceGdr, processShellUserProperties, projectStartSliceRow, projectToWatchRef, quoted2 as quoted, readInstanceDoc, readsRaw, readsRootDocument, refCanvas, refDashboard, refDataset, refKindAcceptsTypes, refMediaLibrary, refsOf, rejectedRefTypes, releaseDocId, releaseRef, remediationsFor, requiredModelFeatures, requiredReaderModel, resolveAccess, resolveActor, resolveClientActor, resolveFieldEntry$1 as resolveFieldEntry, resourceAliasesToMap, resourceFromParsed, resourceGdr, retractStageGuards, sameResource, scalarValidationIssues, schemaTreeShape, sentenceCase, silentLogger, singleSubjectRequirementRefused, stageAutonomyOf, startFieldsParam, startKindOf, startRefusal, stripSystemFields, subjectDenialLabels, subscriptionDocument, subscriptionDocumentsForInstance, sweepStaleClaims, tagScopeFilter, terminalState, toBareId, tryParseGdr, unboundRequirementReads, unsatisfiedTransitionSummaries, validateDefinition, validateTag, verdictGuardsForInstance, wallClock, whatIfCondition2 as whatIfCondition, withAssignment, workflow };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanity/workflow-engine",
-  "version": "0.22.0",
+  "version": "0.24.0",
   "description": "Workflow / BPM engine for Sanity content — define workflows as data, run them as instances against a Sanity client.",
   "keywords": [
     "bpm",
@@ -53,7 +53,7 @@
     "@sanity/types": "^5.28.0",
     "groq-js": "^1.30.2",
     "valibot": "^1.4.1",
-    "@sanity/groq-condition-describe": "0.3.0"
+    "@sanity/groq-condition-describe": "0.4.0"
   },
   "devDependencies": {
     "@sanity-labs/client-fake-for-test": "^0.10.0",