@sanity/workflow-engine 0.30.0 → 0.32.0

package/dist/_chunks-es/invariants.js

@@ -1,6 +1,6 @@
 import * as v from "valibot";
 
-import { conditionOutcome, runGroq as runGroq$1, evaluateConditionOutcome as evaluateConditionOutcome$1 } from "@sanity/groq-condition-describe";
+import { conditionOutcome, runGroq as runGroq$1, evaluateConditionOutcome as evaluateConditionOutcome$1, _exhaustiveOptions } from "@sanity/groq-condition-describe";
 
 import { parse } from "groq-js";
 
@@ -26,6 +26,37 @@ function driverKind(actor) {
     return actor.kind === "person" || actor.kind === "agent" ? actor.kind : "service";
 }
 
+function isFilterScopedOut(entry) {
+    return entry.status === "skipped" && entry.startedAt === void 0;
+}
+
+function liveSubworkflows(host) {
+    return (host.subworkflows ?? []).filter(row => row.resolved === void 0);
+}
+
+function resolvedChildStatus(child) {
+    if (!(child.completedAt === void 0 || child.completedAt === null)) return child.abortedAt !== void 0 && child.abortedAt !== null ? "aborted" : "done";
+}
+
+function condemnedSubworkflows(host) {
+    return liveSubworkflows(host).filter(row => row.abortPending !== void 0);
+}
+
+function condemnSubworkflow(row, owed) {
+    row.abortPending !== void 0 || row.resolved !== void 0 || (row.abortPending = {
+        at: owed.at,
+        reason: owed.reason
+    });
+}
+
+function findOpenStageEntry(host) {
+    return host.stages.find(s => s.name === host.currentStage && s.exitedAt === void 0);
+}
+
+function findCurrentActivityEntry(host, activityName) {
+    return findOpenStageEntry(host)?.activities.find(a => a.name === activityName);
+}
+
 function errorMessage(err) {
     return (err instanceof Error ? err.message : String(err)).replace(/[^\P{Cc}\n\t]/gu, "");
 }
@@ -485,8 +516,6 @@ function desugarWorkflow(authoring) {
     checkReservedRoleAliasKeys(authoring.roleAliases, issues);
     const roleAliases = normalizeRoleAliases(authoring.roleAliases), ctx = {
         issues: issues,
-        claimFields: /* @__PURE__ */ new Map,
-        claimedFields: /* @__PURE__ */ new Set,
         roleAliases: roleAliases
     }, workflowFields2 = desugarFieldEntries({
         entries: authoring.fields,
@@ -545,7 +574,7 @@ function desugarWorkflow(authoring) {
             } : {}
         };
     });
-    return checkUnclaimedClaimFields(ctx), {
+    return {
         definition: {
             ...stripUndefined({
                 name: authoring.name,
@@ -626,11 +655,6 @@ function desugarFieldEntries({entries: entries, path: path, ctx: ctx}) {
 }
 
 function desugarFieldEntry({entry: entry, path: path, ctx: ctx}) {
-    if (entry.type === "claim") return desugarClaimField({
-        entry: entry,
-        path: path,
-        ctx: ctx
-    });
     if (entry.type === "todoList" || entry.type === "notes") return desugarListField({
         entry: entry,
         path: path,
@@ -661,22 +685,6 @@ function desugarFieldEntry({entry: entry, path: path, ctx: ctx}) {
     };
 }
 
-function desugarClaimField({entry: entry, path: path, ctx: ctx}) {
-    const desugared = {
-        ...stripUndefined({
-            name: entry.name,
-            title: entry.title,
-            description: entry.description,
-            group: normalizeGroup(entry.group)
-        }),
-        type: "actor"
-    };
-    return ctx.claimFields.set(desugared, {
-        name: entry.name,
-        path: path
-    }), desugared;
-}
-
 function desugarListField({entry: entry, path: path, ctx: ctx}) {
     const editable = normalizeEditable({
         editable: entry.editable,
@@ -841,12 +849,6 @@ function desugarActionOps(args) {
 }
 
 function desugarAction({action: action, path: path, env: env, activityName: activityName, ctx: ctx}) {
-    if ("type" in action) return desugarClaimAction({
-        action: action,
-        path: path,
-        env: env,
-        ctx: ctx
-    });
     reportEmptyActionRoles({
         action: action,
         path: path,
@@ -883,67 +885,6 @@ function desugarAction({action: action, path: path, env: env, activityName: acti
     };
 }
 
-function desugarClaimAction({action: action, path: path, env: env, ctx: ctx}) {
-    const ref = typeof action.field == "string" ? {
-        field: action.field
-    } : action.field, resolved = resolveRef({
-        ref: ref,
-        env: env,
-        path: [ ...path, "field" ],
-        ctx: ctx
-    });
-    if (resolved) {
-        const entry = entryAt(env, resolved);
-        entry && entry.type !== "actor" && ctx.issues.push({
-            path: [ ...path, "field" ],
-            message: `claim action "${action.name}" references "${resolved.field}" of kind "${entry.type}" — a claim pair needs an actor-valued entry (a "claim" or "actor" field declaration)`
-        }), checkShadowedClaimTarget({
-            actionName: action.name,
-            field: ref.field,
-            resolved: resolved,
-            env: env,
-            path: [ ...path, "field" ],
-            ctx: ctx
-        }), entry && ctx.claimedFields.add(entry);
-    }
-    const noSteal = `!defined($fields.${ref.field})`, filter = andConditions([ noSteal, rolesCondition(action.roles, ctx.roleAliases), action.filter ]), ops = resolved ? [ {
-        type: "field.set",
-        target: resolved,
-        value: {
-            type: "actor"
-        }
-    } ] : [];
-    return {
-        ...stripUndefined({
-            name: action.name,
-            title: action.title,
-            description: action.description,
-            group: normalizeGroup(action.group),
-            params: action.params,
-            effects: action.effects
-        }),
-        filter: filter,
-        ...ops.length > 0 ? {
-            ops: ops
-        } : {}
-    };
-}
-
-function checkShadowedClaimTarget({actionName: actionName, field: field, resolved: resolved, env: env, path: path, ctx: ctx}) {
-    const nearest = env.layers.find(l => l.entries.has(field));
-    nearest === void 0 || nearest.scope === resolved.scope || ctx.issues.push({
-        path: path,
-        message: `claim action "${actionName}" targets "${field}" at scope "${resolved.scope}", but a nearer ${nearest.scope}-scope entry of the same name shadows it in $fields — the no-steal filter would read the shadowing entry while the claim writes the "${resolved.scope}" one. Rename one of the entries or claim the nearer one`
-    });
-}
-
-function checkUnclaimedClaimFields(ctx) {
-    for (const [entry, {name: name, path: path}] of ctx.claimFields) ctx.claimedFields.has(entry) || ctx.issues.push({
-        path: path,
-        message: `claim field "${name}" is never referenced by a claim action — you announced the pattern and wrote half of it. Declare a defineAction({ type: "claim", field: "${name}" }) or use a raw actor entry`
-    });
-}
-
 const DEFAULT_TRANSITION_WHEN = "$allActivitiesDone";
 
 function desugarTransition({transition: transition}) {
@@ -1243,13 +1184,23 @@ function walkAstNodes(node, visit) {
     }
 }
 
-const ACTIVITY_STATUSES = [ "active", "done", "skipped", "failed" ], TERMINAL_ACTIVITY_STATUSES = [ "done", "skipped", "failed" ];
+const ACTIVITY_STATUSES = _exhaustiveOptions()([ "active", "done", "skipped", "failed" ]), TERMINAL_ACTIVITY_STATUSES = _exhaustiveOptions()([ "done", "skipped", "failed" ]);
 
 function isTerminalActivityStatus(status) {
     return TERMINAL_ACTIVITY_STATUSES.includes(status);
 }
 
-const SIGNAL_SEMANTICS = [ "signal.positive", "signal.caution", "signal.critical" ], DECISION_SEMANTICS = [ "decision.accept", "decision.decline" ], ACTION_SEMANTICS = [ ...DECISION_SEMANTICS, ...SIGNAL_SEMANTICS ], FIELD_SCOPES = [ "workflow", "stage", "activity" ], DOCUMENT_VALUE_PERMISSIONS = [ "create", "read", "update" ], MUTATION_GUARD_ACTIONS = [ "create", "update", "delete", "publish", "unpublish" ], ACTIVITY_KINDS = [ "user", "service", "script", "manual", "receive" ], EXECUTOR_CLASSIFICATIONS = [ "autonomous", "interactive", "off-system", "hybrid" ], GROUP_KINDS = [ "core", "details" ], DRIVER_KINDS = [ "person", "agent", "service", "engine" ];
+const SIGNAL_SEMANTICS = [ "signal.positive", "signal.caution", "signal.critical" ], DECISION_SEMANTICS = [ "decision.accept", "decision.decline" ], ACTION_SEMANTICS = [ ...DECISION_SEMANTICS, ...SIGNAL_SEMANTICS ], FIELD_SCOPES = _exhaustiveOptions()([ "workflow", "stage", "activity" ]), DOCUMENT_VALUE_PERMISSIONS = [ "create", "manage", "read", "update" ], LAKE_MUTATION_GUARD_ACTIONS = _exhaustiveOptions()([ "create", "update", "delete" ]), MUTATION_GUARD_ACTIONS = _exhaustiveOptions()([ ...LAKE_MUTATION_GUARD_ACTIONS, "publish", "unpublish" ]), GUARD_ACTIONS_REQUIRED_MESSAGE = "a guard must match at least one action", MUTATION_GUARD_ID_SPACES = [ "authored", "edit", "published" ];
+
+function mutationGuardActionIdSpace(action) {
+    return action === "update" ? "edit" : action === "publish" || action === "unpublish" ? "published" : "authored";
+}
+
+function mutationGuardRequiresSplitEmission(actions) {
+    return new Set(actions.map(mutationGuardActionIdSpace)).size > 1;
+}
+
+const ACTIVITY_KINDS = [ "user", "service", "script", "manual", "receive" ], EXECUTOR_CLASSIFICATIONS = [ "autonomous", "interactive", "off-system", "hybrid" ], GROUP_KINDS = [ "core", "details" ], DRIVER_KINDS = [ "person", "agent", "service", "engine" ];
 
 function releaseDocId(releaseName) {
     return `_.releases.${releaseName}`;
@@ -1265,7 +1216,7 @@ function releaseRef({res: res, releaseName: releaseName}) {
 }
 
 function isAlwaysArrayFieldKind(kind) {
-    return kind === "doc.refs" || kind === "assignees" || kind === "array";
+    return kind === "doc.refs" || kind === "assignee" || kind === "assignees" || kind === "array";
 }
 
 function isSingleDocRefKind(kind) {
@@ -1420,6 +1371,9 @@ const CONDITION_VARS = [ {
     label: "the start's input fields",
     description: "The caller's input entries by name (`initialFields` — at `startInstance`, the values the start would seed; at a pre-flight, the values gathered so far, so a read of a not-yet-supplied entry is GROQ null). Document references bind as GDR envelopes — `$fields.<entry>.id` is the GDR URI, never a string authors assemble — a singular `doc.ref` or `subject` included (nothing hydrates at the gate or the pre-flight). Pathed reads are deploy-checked against these envelope shapes."
 } ], GUARD_PREDICATE_VARS = [ {
+    name: "document",
+    description: "The attempted mutation images, exposed as `document.before` and `document.after`."
+}, {
     name: "guard",
     description: "The guard document itself (its `metadata` carries deploy-time resolved values)."
 }, {
@@ -1553,7 +1507,65 @@ function documentIdOf(doc) {
     return "(unknown id)";
 }
 
-const ACTOR_KINDS = [ "person", "agent", "system" ], ANONYMOUS_IDENTITY = "<anonymous>", SYSTEM_IDENTITY = "<system>", E_PREFIXED_PROJECT_ID = /^e-(.+)$/;
+const ACTOR_KINDS = [ "person", "agent", "system" ];
+
+function normalizeAssignmentMembers(value) {
+    return value === null ? [] : Array.isArray(value) ? value : [ value ];
+}
+
+function assignmentMembers(entries) {
+    return entries.flatMap(entry => isAssignmentFieldEntry(entry) ? normalizeAssignmentMembers(entry.value) : []);
+}
+
+function assignmentState(members) {
+    return members.length === 0 ? "unrouted" : members.some(member => member.type === "user") ? "held" : "routed";
+}
+
+function activeAssignmentMembers(members) {
+    const users = members.filter(member => member.type === "user");
+    return users.length > 0 ? users : members;
+}
+
+function assignmentMatch(members, identity) {
+    const active = activeAssignmentMembers(members);
+    return active.some(member => member.type === "user" && member.id === identity.userId) ? "user" : active.some(member => member.type === "role" && identity.roles.includes(member.role)) ? "role" : void 0;
+}
+
+function identityMatchesAssignment(members, identity) {
+    return assignmentMatch(members, identity) !== void 0;
+}
+
+function assignmentStateCounts(assignments, identity) {
+    const counts = {
+        unrouted: 0,
+        routed: 0,
+        held: 0
+    };
+    for (const members of assignments) {
+        const state = assignmentState(members);
+        state === "unrouted" ? counts.unrouted += 1 : identityMatchesAssignment(members, identity) && (counts[state] += 1);
+    }
+    return counts;
+}
+
+function openActivityAssignments(instance) {
+    return (findOpenStageEntry(instance)?.activities ?? []).filter(activity => activity.status === "active").map(activity => assignmentMembers(activity.fields ?? []));
+}
+
+function instanceAssignmentStateCounts(instance, identity) {
+    return assignmentStateCounts(openActivityAssignments(instance), identity);
+}
+
+function actorMatchesAssignment(args) {
+    const actor = args.actor;
+    return actor === void 0 ? !1 : activeAssignmentMembers(args.members).some(member => member.type === "user" ? member.id === actor.id : actorFulfillsRole({
+        actorRoles: actor.roles,
+        required: member.role,
+        aliases: args.roleAliases
+    }));
+}
+
+const ANONYMOUS_IDENTITY = "<anonymous>", SYSTEM_IDENTITY = "<system>", E_PREFIXED_PROJECT_ID = /^e-(.+)$/;
 
 function classifyPrincipalId(id) {
     if (id === ANONYMOUS_IDENTITY || id === SYSTEM_IDENTITY) return {
@@ -1630,7 +1642,7 @@ const GdrUriSchema = v.custom(s => typeof s == "string" && isGdrUri(s), "must be
 }), tolerantObject()({
     type: v.literal("role"),
     role: NonEmptyString
-}) ]), NullableString = v.union([ v.null(), v.string() ]), NullableNumber = v.union([ v.null(), v.number() ]), NullableBoolean = v.union([ v.null(), v.boolean() ]), NullableProgress = v.union([ v.null(), v.pipe(v.number(), v.finite("progress must be a finite number"), v.minValue(0, "progress must be at least 0"), v.maxValue(100, "progress must be at most 100")) ]), NullableDateTime = v.union([ v.null(), IsoTimestamp ]), NullableDate = v.union([ v.null(), v.pipe(v.string(), v.regex(/^\d{4}-\d{2}-\d{2}$/, "must be a `YYYY-MM-DD` date")) ]), NullableUrl = NullableString, CHOICE_KINDS = /* @__PURE__ */ new Set([ "string", "text", "number", "url", "date", "dueDate", "datetime", "dueDatetime", "dateTime" ]);
+}) ]), AssigneeListShape = v.pipe(v.union([ v.null(), AssigneeShape, v.array(AssigneeShape) ]), v.transform(normalizeAssignmentMembers)), NullableString = v.union([ v.null(), v.string() ]), NullableNumber = v.union([ v.null(), v.number() ]), NullableBoolean = v.union([ v.null(), v.boolean() ]), NullableProgress = v.union([ v.null(), v.pipe(v.number(), v.finite("progress must be a finite number"), v.minValue(0, "progress must be at least 0"), v.maxValue(100, "progress must be at most 100")) ]), NullableDateTime = v.union([ v.null(), IsoTimestamp ]), NullableDate = v.union([ v.null(), v.pipe(v.string(), v.regex(/^\d{4}-\d{2}-\d{2}$/, "must be a `YYYY-MM-DD` date")) ]), NullableUrl = NullableString, CHOICE_KINDS = /* @__PURE__ */ new Set([ "string", "text", "number", "url", "date", "dueDate", "datetime", "dueDatetime", "dateTime" ]);
 
 function normalizedChoiceKind(kind) {
     return kind === "dateTime" ? "datetime" : kind;
@@ -1670,7 +1682,7 @@ const fieldValueSchemas = {
     dueDatetime: NullableDateTime,
     url: NullableUrl,
     actor: v.union([ v.null(), ActorShape ]),
-    assignee: v.union([ v.null(), AssigneeShape ]),
+    assignee: AssigneeListShape,
     assignees: v.array(AssigneeShape)
 }, WritePrincipalId = v.pipe(NonEmptyString, v.rawTransform(({dataset: dataset, addIssue: addIssue}) => {
     const classified = classifyPrincipalId(dataset.value);
@@ -1682,16 +1694,16 @@ const fieldValueSchemas = {
     id: WritePrincipalId,
     roles: v.exactOptional(v.array(v.string())),
     onBehalfOf: v.exactOptional(v.string())
-}), AssigneeWriteShape = v.union([ tolerantObject()({
+}), AssigneePrincipalId = v.pipe(WritePrincipalId, v.check(id => classifyPrincipalId(id).namespace !== "robot", "robot principals cannot be assignment members")), AssigneeWriteShape = v.union([ tolerantObject()({
     type: v.literal("user"),
-    id: WritePrincipalId
+    id: AssigneePrincipalId
 }), tolerantObject()({
     type: v.literal("role"),
     role: NonEmptyString
-}) ]), valueSchemas = {
+}) ]), SingularAssigneeWriteShape = v.pipe(v.union([ AssigneeWriteShape, v.array(AssigneeWriteShape) ]), v.transform(normalizeAssignmentMembers), v.check(members => members.filter(member => member.type === "user").length <= 1, "must contain at most one user member")), valueSchemas = {
     ...fieldValueSchemas,
     actor: v.nullable(ActorWriteShape),
-    assignee: v.nullable(AssigneeWriteShape),
+    assignee: SingularAssigneeWriteShape,
     assignees: v.array(AssigneeWriteShape),
     query: v.any()
 };
@@ -1782,7 +1794,7 @@ function appendItemSchema(entryType, shape) {
         leaf: valueSchemas
     });
     if (entryType === "doc.refs") return GdrShape;
-    if (entryType === "assignees") return AssigneeWriteShape;
+    if (entryType === "assignee" || entryType === "assignees") return AssigneeWriteShape;
 }
 
 function rejectedRefTypes(args) {
@@ -1879,7 +1891,7 @@ function consumeRetainedAssignment(args) {
 
 function previousAssignmentIdentities(args) {
     const retained = /* @__PURE__ */ new Map;
-    if (args.previousValue === void 0 || args.entryType === "assignee") return retained;
+    if (args.previousValue === void 0) return retained;
     const schema = wholeValueSchema({
         entryType: args.entryType,
         shape: args,
@@ -1922,7 +1934,7 @@ function visitAssignmentEntries(args, visit) {
 
 function visitAssignmentCandidates(args, visit) {
     if (args.roles === void 0) return;
-    const indexedValues = args.entryType === "assignees" && Array.isArray(args.value) ? args.value.map(value => ({
+    const indexedValues = Array.isArray(args.value) ? args.value.map(value => ({
         value: value,
         path: args.path
     })) : [ {
@@ -1991,14 +2003,22 @@ function validateFieldValue(args) {
     return check.output;
 }
 
-const BARE_ID_SOURCE = "[A-Za-z0-9_][A-Za-z0-9._-]*", BARE_ID_RE = new RegExp(`^${BARE_ID_SOURCE}$`), ALIAS_REF_RE = new RegExp(`^@${RESOURCE_ALIAS_NAME_SOURCE}:${BARE_ID_SOURCE}$`);
+const BARE_ID_SOURCE = "[A-Za-z0-9_][A-Za-z0-9._-]{0,127}", BARE_ID_RE = new RegExp(`^${BARE_ID_SOURCE}$`), ALIAS_REF_RE = new RegExp(`^@${RESOURCE_ALIAS_NAME_SOURCE}:${BARE_ID_SOURCE}$`);
+
+function isBareDocumentId(id) {
+    return BARE_ID_RE.test(id) && !id.includes("..");
+}
 
 function isAuthoringRefId(id) {
-    return id.startsWith("@") ? ALIAS_REF_RE.test(id) : id.includes(":") ? isGdrUri(id) : BARE_ID_RE.test(id);
+    if (id.startsWith("@")) {
+        const separator = id.indexOf(":");
+        return ALIAS_REF_RE.test(id) && isBareDocumentId(id.slice(separator + 1));
+    }
+    return id.includes(":") ? isGdrUri(id) : isBareDocumentId(id);
 }
 
 function isBareSeedId(id) {
-    return BARE_ID_RE.test(id);
+    return isBareDocumentId(id);
 }
 
 const AuthoringRefId = v.pipe(v.string(), v.check(isAuthoringRefId, "must be a bare document id, a GDR URI, or a portable `@<alias>:<id>` reference")), AuthoringGdrShape = v.looseObject({
@@ -2064,7 +2084,7 @@ function validateFieldAppendItem(args) {
 }
 
 function appendAssignmentEntryType(entryType) {
-    return entryType === "assignees" ? "assignee" : entryType === "array" ? "object" : entryType;
+    return entryType === "assignee" || entryType === "assignees" ? "assignee" : entryType === "array" ? "object" : entryType;
 }
 
 function formatIssues(issues, formatMessage = issue => issue.message) {
@@ -2089,10 +2109,6 @@ function invalidOptionMessage(options) {
     return `Invalid option: expected one of ${options.map(option => `"${option}"`).join("|")}`;
 }
 
-function exhaustiveOptions() {
-    return options => options;
-}
-
 function pinned() {
     return (schema, ..._exact) => schema;
 }
@@ -2152,7 +2168,7 @@ function manualTargetSchema(ref) {
     }) ]);
 }
 
-const StoredManualTargetSchema = manualTargetSchema(StoredFieldRefSchema), AuthoringManualTargetSchema = manualTargetSchema(v.union([ NonEmpty, AuthoringFieldRefSchema ])), ConditionSchema = NonEmpty;
+const StoredManualTargetSchema = pinned()(manualTargetSchema(StoredFieldRefSchema)), AuthoringManualTargetSchema = pinned()(manualTargetSchema(v.union([ NonEmpty, AuthoringFieldRefSchema ]))), ConditionSchema = NonEmpty;
 
 function opSchemas(targetSchema) {
     return [ v.strictObject({
@@ -2190,11 +2206,11 @@ function opSchemas(targetSchema) {
     }) ];
 }
 
-const StoredFieldOpSchema = v.variant("type", [ ...opSchemas(StoredFieldRefSchema) ]), StoredOpSchema = v.variant("type", [ ...opSchemas(StoredFieldRefSchema), v.strictObject({
+const StoredFieldOpSchema = pinned()(v.variant("type", [ ...opSchemas(StoredFieldRefSchema) ])), StoredOpSchema = pinned()(v.variant("type", [ ...opSchemas(StoredFieldRefSchema), v.strictObject({
     type: v.literal("status.set"),
     activity: NonEmpty,
     status: picklist(ACTIVITY_STATUSES)
-}) ]), AuditOpSchema = v.strictObject({
+}) ])), AuditOpSchema = v.strictObject({
     type: v.literal("audit"),
     target: AuthoringFieldRefSchema,
     value: ValueExprSchema,
@@ -2202,11 +2218,11 @@ const StoredFieldOpSchema = v.variant("type", [ ...opSchemas(StoredFieldRefSchem
         actor: v.optional(NonEmpty),
         at: v.optional(NonEmpty)
     }))
-}), AuthoringOpSchema = v.variant("type", [ ...opSchemas(AuthoringFieldRefSchema), v.strictObject({
+}), AuthoringOpSchema = pinned()(v.variant("type", [ ...opSchemas(AuthoringFieldRefSchema), v.strictObject({
     type: v.literal("status.set"),
     activity: v.optional(NonEmpty),
     status: picklist(ACTIVITY_STATUSES)
-}), AuditOpSchema ]), GroupName = v.pipe(v.string(), v.regex(GROQ_IDENTIFIER, "must be an identifier (letters, digits, underscore; not starting with a digit)")), GroupSchema = pinned()(v.strictObject({
+}), AuditOpSchema ])), GroupName = v.pipe(v.string(), v.regex(GROQ_IDENTIFIER, "must be an identifier (letters, digits, underscore; not starting with a digit)")), GroupSchema = pinned()(v.strictObject({
     name: GroupName,
     title: v.optional(v.string()),
     description: v.optional(v.string()),
@@ -2217,7 +2233,7 @@ function groupMembershipNames(group) {
     return group === void 0 ? [] : typeof group == "string" ? [ group ] : [ ...group ];
 }
 
-const FIELD_VALUE_KINDS = [ "doc.ref", "doc.refs", "subject", "release.ref", "string", "text", "number", "progress", "boolean", "date", "dueDate", "datetime", "dueDatetime", "url", "actor", "assignee", "assignees", "object", "array" ], FieldValueKindSchema = picklist(FIELD_VALUE_KINDS), FieldKindSchema = picklist(FIELD_VALUE_KINDS), AUTHORING_FIELD_SUGAR_KINDS = exhaustiveOptions()([ "claim", "todoList", "notes" ]), AUTHORING_FIELD_KINDS = [ ...FIELD_VALUE_KINDS, ...AUTHORING_FIELD_SUGAR_KINDS ], AuthoringRawFieldKindSchema = v.picklist(FIELD_VALUE_KINDS, issue => `${invalidOptionMessage(AUTHORING_FIELD_KINDS)} but received ${JSON.stringify(issue.input)}`), FieldEntryName = groqIdentifier("`$fields.<name>`"), FiniteNumber = v.pipe(v.number(), v.finite("must be finite")), ScalarValidationSchema = v.pipe(v.strictObject({
+const FIELD_VALUE_KINDS = [ "doc.ref", "doc.refs", "subject", "release.ref", "string", "text", "number", "progress", "boolean", "date", "dueDate", "datetime", "dueDatetime", "url", "actor", "assignee", "assignees", "object", "array" ], FieldValueKindSchema = picklist(FIELD_VALUE_KINDS), FieldKindSchema = picklist(FIELD_VALUE_KINDS), AUTHORING_FIELD_SUGAR_KINDS = _exhaustiveOptions()([ "todoList", "notes" ]), AUTHORING_FIELD_KINDS = [ ...FIELD_VALUE_KINDS, ...AUTHORING_FIELD_SUGAR_KINDS ], AuthoringRawFieldKindSchema = v.picklist(FIELD_VALUE_KINDS, issue => `${invalidOptionMessage(AUTHORING_FIELD_KINDS)} but received ${JSON.stringify(issue.input)}`), FieldEntryName = groqIdentifier("`$fields.<name>`"), FiniteNumber = v.pipe(v.number(), v.finite("must be finite")), ScalarValidationSchema = v.pipe(v.strictObject({
     min: v.optional(FiniteNumber),
     max: v.optional(FiniteNumber)
 }), v.check(validation => validation.min !== void 0 || validation.max !== void 0, "declare at least one bound, or omit `validation`"), v.check(validation => validation.min === void 0 || validation.max === void 0 || validation.min <= validation.max, "`min` must be less than or equal to `max`")), ChoiceOptionsSchema = v.strictObject({
@@ -2269,7 +2285,7 @@ const AssignmentRolesSchema = v.pipe(v.array(NonEmpty), v.minLength(1, "declare
     roles: v.optional(AssignmentRolesSchema),
     fields: v.optional(v.array(FieldShapeSchema)),
     of: v.optional(v.array(FieldShapeSchema))
-}), choiceOptionsCheck(), scalarValidationCheck(), assignmentRolesCheck())), StoredEditableSchema = v.union([ v.literal(!0), NonEmpty ]), AuthoringEditableSchema = v.union([ v.literal(!0), v.array(NonEmpty), NonEmpty ]);
+}), choiceOptionsCheck(), scalarValidationCheck(), assignmentRolesCheck())), StoredEditableSchema = pinned()(v.union([ v.literal(!0), NonEmpty ])), AuthoringEditableSchema = pinned()(v.union([ v.literal(!0), v.array(NonEmpty), NonEmpty ]));
 
 function fieldBase(editable, group) {
     return {
@@ -2359,13 +2375,7 @@ const FieldEntrySchema = pinned()(v.pipe(compositeChecked(fieldEntryFields({
     editable: AuthoringEditableSchema,
     group: AuthoringGroupMembershipSchema,
     kind: AuthoringRawFieldKindSchema
-})), refTypesCheck(), assignmentRolesCheck(), choiceOptionsCheck(), scalarValidationCheck(), literalSeedCheck())), ClaimFieldSchema = pinned()(v.strictObject({
-    type: v.literal("claim"),
-    name: FieldEntryName,
-    title: v.optional(v.string()),
-    description: v.optional(v.string()),
-    group: v.optional(AuthoringGroupMembershipSchema)
-}));
+})), refTypesCheck(), assignmentRolesCheck(), choiceOptionsCheck(), scalarValidationCheck(), literalSeedCheck()));
 
 function listSugarFields(type) {
     return {
@@ -2376,7 +2386,7 @@ function listSugarFields(type) {
 
 const TodoListFieldSchema = pinned()(v.strictObject(listSugarFields("todoList"))), NotesFieldSchema = pinned()(v.strictObject(listSugarFields("notes"))), AuthoringFieldEntrySchema = pinned()(v.lazy(input => {
     const type = asShape(input).type;
-    return type === "claim" ? ClaimFieldSchema : type === "todoList" ? TodoListFieldSchema : type === "notes" ? NotesFieldSchema : RawAuthoringFieldEntrySchema;
+    return type === "todoList" ? TodoListFieldSchema : type === "notes" ? NotesFieldSchema : RawAuthoringFieldEntrySchema;
 })), EffectSchema = v.strictObject({
     name: NonEmpty,
     title: v.optional(v.string()),
@@ -2441,18 +2451,7 @@ const StoredActionSchema = pinned()(v.strictObject({
     ...actionFields(AuthoringOpSchema, AuthoringGroupMembershipSchema),
     roles: v.optional(v.array(NonEmpty)),
     status: v.optional(TerminalActivityStatus)
-})), ClaimActionSchema = pinned()(v.strictObject({
-    type: v.literal("claim"),
-    name: NonEmpty,
-    title: v.optional(v.string()),
-    description: v.optional(v.string()),
-    group: v.optional(AuthoringGroupMembershipSchema),
-    field: v.union([ NonEmpty, AuthoringFieldRefSchema ]),
-    roles: v.optional(v.array(NonEmpty)),
-    filter: v.optional(ConditionSchema),
-    params: v.optional(v.array(ActionParamSchema)),
-    effects: v.optional(v.array(EffectSchema))
-})), AuthoringActionSchema = pinned()(v.lazy(input => typeof input == "object" && input !== null && "type" in input ? ClaimActionSchema : RawAuthoringActionSchema)), requirementBase = {
+})), AuthoringActionSchema = pinned()(RawAuthoringActionSchema), requirementBase = {
     name: NonEmpty,
     title: v.optional(v.string()),
     description: v.optional(v.string())
@@ -2503,7 +2502,7 @@ function transitionFields(when) {
     };
 }
 
-const StoredTransitionSchema = pinned()(v.strictObject(transitionFields(ConditionSchema))), AuthoringTransitionSchema = pinned()(v.strictObject(transitionFields(v.optional(ConditionSchema)))), GuardActionSchema = picklist(MUTATION_GUARD_ACTIONS), GuardReadPath = v.pipe(NonEmpty, v.check(path => !/[\r\n\u2028\u2029]/.test(path), "a guard read path cannot contain a line break")), GuardReadSchema = v.variant("type", [ v.strictObject({
+const StoredTransitionSchema = pinned()(v.strictObject(transitionFields(ConditionSchema))), AuthoringTransitionSchema = pinned()(v.strictObject(transitionFields(v.optional(ConditionSchema)))), GuardActionSchema = picklist(MUTATION_GUARD_ACTIONS), GuardActionsSchema = v.array(GuardActionSchema), NonEmptyGuardActionsSchema = v.pipe(GuardActionsSchema, v.minLength(1, GUARD_ACTIONS_REQUIRED_MESSAGE)), GuardReadPath = v.pipe(NonEmpty, v.check(path => !/[\r\n\u2028\u2029]/.test(path), "a guard read path cannot contain a line break")), GuardReadSchema = pinned()(v.variant("type", [ v.strictObject({
     type: v.literal("self")
 }), v.strictObject({
     type: v.literal("now")
@@ -2515,29 +2514,29 @@ const StoredTransitionSchema = pinned()(v.strictObject(transitionFields(Conditio
     type: v.literal("effectsRead"),
     effect: v.pipe(NonEmpty, v.check(name => !name.includes("'"), "an effect name cannot contain `'`")),
     path: v.optional(GuardReadPath)
-}) ]);
+}) ]));
 
-function guardMatchFields(read) {
+function guardMatchFields(read, actions) {
     return {
         types: v.optional(v.array(NonEmpty)),
         idRefs: v.optional(v.array(read)),
         idPatterns: v.optional(v.array(NonEmpty)),
-        actions: v.pipe(v.array(GuardActionSchema), v.minLength(1, "a guard must match at least one action"))
+        actions: actions
     };
 }
 
-function guardFields(read) {
+function guardFields(read, actions) {
     return {
         name: NonEmpty,
         title: v.optional(v.string()),
         description: v.optional(v.string()),
-        match: v.strictObject(guardMatchFields(read)),
+        match: v.strictObject(guardMatchFields(read, actions)),
         predicate: v.optional(v.string()),
         metadata: v.optional(v.record(NonEmpty, read))
     };
 }
 
-const GuardSchema = v.strictObject(guardFields(NonEmpty)), AuthoringGuardSchema = v.strictObject(guardFields(GuardReadSchema));
+const GuardSchema = v.strictObject(guardFields(NonEmpty, GuardActionsSchema)), AuthoringGuardSchema = v.strictObject(guardFields(GuardReadSchema, NonEmptyGuardActionsSchema));
 
 function stageFields({field: field, activity: activity, transition: transition, guard: guard, editable: editable}) {
     return {
@@ -2566,7 +2565,7 @@ const StoredStageSchema = pinned()(v.strictObject(stageFields({
     transition: AuthoringTransitionSchema,
     guard: AuthoringGuardSchema,
     editable: AuthoringEditableSchema
-}))), RoleAliasesSchema = v.record(NonEmpty, v.pipe(v.array(NonEmpty), v.minLength(1, "a role alias must list at least one fulfilling role"))), WORKFLOW_LIFECYCLES = [ "standalone", "child" ], START_KINDS = [ "interactive", "autonomous" ];
+}))), RoleAliasesSchema = pinned()(v.record(NonEmpty, v.pipe(v.array(NonEmpty), v.minLength(1, "a role alias must list at least one fulfilling role")))), WORKFLOW_LIFECYCLES = _exhaustiveOptions()([ "standalone", "child" ]), START_KINDS = _exhaustiveOptions()([ "interactive", "autonomous" ]);
 
 function startFields(kind) {
     return {
@@ -4017,4 +4016,4 @@ function checkWorkflowInvariants(def) {
     checkStoredRolesPlacement(def, issues), checkGroups(def, issues), issues;
 }
 
-export { ACTION_SEMANTICS, ACTIVITY_KINDS, ACTIVITY_STATUSES, ACTOR_KINDS, ANONYMOUS_IDENTITY, ActorShape, AuthoringActionSchema, AuthoringActivitySchema, AuthoringFieldEntrySchema, AuthoringGuardSchema, AuthoringOpSchema, AuthoringStageSchema, AuthoringTransitionSchema, AuthoringWorkflowSchema, CALLER_BOUND_VARS, CONDITION_VARS, ContractViolationError, DECISION_SEMANTICS, DEFAULT_TRANSITION_WHEN, DOCUMENT_VALUE_PERMISSIONS, DRIVER_KINDS, DefinitionInUseError, DefinitionNotFoundError, EFFECTS_READ, EXECUTOR_CLASSIFICATIONS, EffectNotFoundError, EffectSchema, FIELD_READ, FIELD_SCOPES, FIELD_VALUE_KINDS, FILTER_SCOPE_VARS, FieldValueShapeError, GROUP_KINDS, GUARD_PREDICATE_VARS, GdrShape, GroupSchema, InstanceNotFoundError, IsoTimestamp, MUTATION_GUARD_ACTIONS, NonEmptyString, PersistedDocShapeError, RESERVED_CONDITION_VARS, RESOURCE_ALIAS_NAME_SOURCE, SIGNAL_SEMANTICS, START_FILTER_VARS, START_REQUIREMENT_VARS, SYSTEM_IDENTITY, SpawnContractsInvalidError, StoredFieldOpSchema, VersionSpecificDatasetGdrError, WORKFLOW_DEFINITION_TYPE, WorkflowConfigSchema, WorkflowError, actorFulfillsRole, andConditions, assignmentKindAcceptsRoles, checkWorkflowInvariants, choiceValueIssues, classifyPrincipalId, clientConfigFromResource, conditionEffectReads, conditionFieldReadNames, conditionParameterNames, conditionSyntaxIssues, datasetResourceParts, definitionDocId, deriveActivityKind, deriveExecutorClassification, desugarWorkflow, directoryBridgeId, driverKind, errorMessage, evaluateCondition, evaluateConditionOutcome, evaluatePredicates, extractDocumentId, fieldValueSchemas, firstCarriedGlobalId, formatIssuePath, formatIssues, formatValidationError, gdrFromResource, gdrRef, gdrResourcePrefix, gdrUri, groq, groupMembershipNames, isAlwaysArrayFieldKind, isAssignmentFieldEntry, isBareSeedId, isCascadeFired, isGdr, isGdrUri, isGuardReadExpr, isInputSourced, isNotesEntry, isParseableInstant, isRecord, isSingleDocRefEntry, isSingleDocRefKind, isStartableDefinition, isSubjectEntry, isTerminalActivityStatus, isTodoListEntry, isTodoListItem, isUnevaluable, labelFor, lakePrincipalId, parseFieldValue, parseGdr, parseOrThrow, parsePersistedDoc, parseResourceGdr, parseStoredDefinition, readsRootDocument, refCanvas, refDashboard, refDataset, refKindAcceptsTypes, refMediaLibrary, refTypeIssues, rejectedRefTypes, releaseDocId, releaseRef, resourceAliasesToMap, resourceFromGdrUri, resourceFromParsed, resourceGdr, rethrowWithContext, runGroq, sameResource, scalarValidationIssues, schemaTreeShape, selfGdr, startKindOf, tagScopeFilter, toBareId, toPhysicalGdr, tolerantEntries, tolerantObject, tryParseGdr, validateFieldAppendItem, validateFieldValue, validateResourceAliasName, validateTag };
+export { ACTION_SEMANTICS, ACTIVITY_KINDS, ACTIVITY_STATUSES, ACTOR_KINDS, ANONYMOUS_IDENTITY, ActorShape, AuthoringActionSchema, AuthoringActivitySchema, AuthoringFieldEntrySchema, AuthoringGuardSchema, AuthoringOpSchema, AuthoringStageSchema, AuthoringTransitionSchema, AuthoringWorkflowSchema, CALLER_BOUND_VARS, CONDITION_VARS, ContractViolationError, DECISION_SEMANTICS, DEFAULT_TRANSITION_WHEN, DOCUMENT_VALUE_PERMISSIONS, DRIVER_KINDS, DefinitionInUseError, DefinitionNotFoundError, EFFECTS_READ, EXECUTOR_CLASSIFICATIONS, EffectNotFoundError, EffectSchema, FIELD_READ, FIELD_SCOPES, FIELD_VALUE_KINDS, FILTER_SCOPE_VARS, FieldValueShapeError, GROUP_KINDS, GUARD_ACTIONS_REQUIRED_MESSAGE, GUARD_PREDICATE_VARS, GdrShape, GroupSchema, InstanceNotFoundError, IsoTimestamp, LAKE_MUTATION_GUARD_ACTIONS, MUTATION_GUARD_ACTIONS, MUTATION_GUARD_ID_SPACES, NonEmptyString, PersistedDocShapeError, RESERVED_CONDITION_VARS, RESOURCE_ALIAS_NAME_SOURCE, SIGNAL_SEMANTICS, START_FILTER_VARS, START_REQUIREMENT_VARS, SYSTEM_IDENTITY, SpawnContractsInvalidError, StoredFieldOpSchema, UNIVERSAL_ROLE_ALIAS_KEY, VersionSpecificDatasetGdrError, WORKFLOW_DEFINITION_TYPE, WorkflowConfigSchema, WorkflowError, activeAssignmentMembers, actorFulfillsRole, actorMatchesAssignment, andConditions, assignmentKindAcceptsRoles, assignmentMatch, assignmentMembers, assignmentState, assignmentStateCounts, checkWorkflowInvariants, choiceValueIssues, classifyPrincipalId, clientConfigFromResource, condemnSubworkflow, condemnedSubworkflows, conditionEffectReads, conditionFieldReadNames, conditionParameterNames, conditionSyntaxIssues, datasetResourceParts, definitionDocId, deriveActivityKind, deriveExecutorClassification, desugarWorkflow, directoryBridgeId, driverKind, errorMessage, evaluateCondition, evaluateConditionOutcome, evaluatePredicates, extractDocumentId, fieldValueSchemas, findCurrentActivityEntry, findOpenStageEntry, firstCarriedGlobalId, formatIssuePath, formatIssues, formatValidationError, gdrFromResource, gdrRef, gdrResourcePrefix, gdrUri, groq, groupMembershipNames, identityMatchesAssignment, instanceAssignmentStateCounts, isAlwaysArrayFieldKind, isAssignmentFieldEntry, isBareDocumentId, isBareSeedId, isCascadeFired, isFilterScopedOut, isGdr, isGdrUri, isGuardReadExpr, isInputSourced, isNotesEntry, isParseableInstant, isRecord, isSingleDocRefEntry, isSingleDocRefKind, isStartableDefinition, isSubjectEntry, isTerminalActivityStatus, isTodoListEntry, isTodoListItem, isUnevaluable, labelFor, lakePrincipalId, liveSubworkflows, mutationGuardActionIdSpace, mutationGuardRequiresSplitEmission, normalizeAssignmentMembers, openActivityAssignments, parseFieldValue, parseGdr, parseOrThrow, parsePersistedDoc, parseResourceGdr, parseStoredDefinition, readsRootDocument, refCanvas, refDashboard, refDataset, refKindAcceptsTypes, refMediaLibrary, refTypeIssues, rejectedRefTypes, releaseDocId, releaseRef, resolvedChildStatus, resourceAliasesToMap, resourceFromGdrUri, resourceFromParsed, resourceGdr, rethrowWithContext, runGroq, sameResource, scalarValidationIssues, schemaTreeShape, selfGdr, startKindOf, tagScopeFilter, toBareId, toPhysicalGdr, tolerantEntries, tolerantObject, tryParseGdr, validateFieldAppendItem, validateFieldValue, validateResourceAliasName, validateTag };