@sanity/workflow-engine 0.31.0 → 0.33.0

package/dist/_chunks-es/invariants.js

@@ -1,6 +1,6 @@
 import * as v from "valibot";
 
-import { conditionOutcome, runGroq as runGroq$1, evaluateConditionOutcome as evaluateConditionOutcome$1 } from "@sanity/groq-condition-describe";
+import { _exhaustiveOptions, conditionOutcome, runGroq as runGroq$1, evaluateConditionOutcome as evaluateConditionOutcome$1 } from "@sanity/groq-condition-describe";
 
 import { parse } from "groq-js";
 
@@ -26,6 +26,37 @@ function driverKind(actor) {
     return actor.kind === "person" || actor.kind === "agent" ? actor.kind : "service";
 }
 
+function isFilterScopedOut(entry) {
+    return entry.status === "skipped" && entry.startedAt === void 0;
+}
+
+function liveSubworkflows(host) {
+    return (host.subworkflows ?? []).filter(row => row.resolved === void 0);
+}
+
+function resolvedChildStatus(child) {
+    if (!(child.completedAt === void 0 || child.completedAt === null)) return child.abortedAt !== void 0 && child.abortedAt !== null ? "aborted" : "done";
+}
+
+function condemnedSubworkflows(host) {
+    return liveSubworkflows(host).filter(row => row.abortPending !== void 0);
+}
+
+function condemnSubworkflow(row, owed) {
+    row.abortPending !== void 0 || row.resolved !== void 0 || (row.abortPending = {
+        at: owed.at,
+        reason: owed.reason
+    });
+}
+
+function findOpenStageEntry(host) {
+    return host.stages.find(s => s.name === host.currentStage && s.exitedAt === void 0);
+}
+
+function findCurrentActivityEntry(host, activityName) {
+    return findOpenStageEntry(host)?.activities.find(a => a.name === activityName);
+}
+
 function errorMessage(err) {
     return (err instanceof Error ? err.message : String(err)).replace(/[^\P{Cc}\n\t]/gu, "");
 }
@@ -339,107 +370,191 @@ function tagScopeFilter() {
     return "tag == $tag";
 }
 
-const NonEmptyString$1 = v.pipe(v.string(), v.nonEmpty("must not be empty"));
+const NonEmptyString$1 = v.pipe(v.string(), v.minLength(1, "must be a non-empty string"));
 
-function asPredicate(validate) {
-    return value => {
-        try {
-            return validate(value), !0;
-        } catch {
-            return !1;
-        }
-    };
+function isParseableInstant(value) {
+    return typeof value == "string" && !Number.isNaN(Date.parse(value));
 }
 
-const isValidTag = asPredicate(validateTag), isValidAliasName = asPredicate(validateResourceAliasName), isValidDatasetId = asPredicate(datasetResourceParts);
+const IsoTimestamp = v.pipe(v.string(), v.check(s => isParseableInstant(s), "must be an ISO-8601 datetime string"));
 
-function lakeSegment(label) {
-    return v.pipe(v.string(), v.nonEmpty(), v.check(isValidTag, `invalid ${label} — ${LAKE_ID_SEGMENT_GLOSS}`));
+function tolerantObject() {
+    return (entries, ..._exact) => v.looseObject(entries);
 }
 
-const WorkflowResourceSchema = v.variant("type", [ v.object({
-    type: v.literal("dataset"),
-    id: v.pipe(NonEmptyString$1, v.check(isValidDatasetId, 'invalid dataset resource id — expected "<projectId>.<dataset>"'))
-}), v.object({
-    type: v.literal("canvas"),
-    id: NonEmptyString$1
-}), v.object({
-    type: v.literal("media-library"),
-    id: NonEmptyString$1
-}), v.object({
-    type: v.literal("dashboard"),
-    id: NonEmptyString$1
-}) ]), ResourceBindingSchema = v.object({
-    name: v.pipe(NonEmptyString$1, v.check(isValidAliasName, "invalid resource handle name — lowercase letters, digits and dashes only, no leading dash")),
-    resource: WorkflowResourceSchema
-}), DefinitionSchema = v.custom(input => typeof input == "object" && input !== null && typeof input.name == "string", "expected a workflow definition (an object with a string `name`)"), DeploymentSchema = v.object({
-    name: lakeSegment("name"),
-    expectedMinReaderModel: v.optional(v.custom(() => !0), void 0),
-    tag: lakeSegment("tag"),
-    workflowResource: WorkflowResourceSchema,
-    resourceAliases: v.optional(v.pipe(v.array(ResourceBindingSchema), v.check(bindings => duplicateHandleMessage(bindings) === void 0, issue => duplicateHandleMessage(issue.input) ?? "duplicate resource handle name"))),
-    definitions: v.pipe(v.array(DefinitionSchema), v.minLength(1, "a deployment needs at least one definition"))
-});
+function tolerantEntries() {
+    return (entries, ..._exact) => entries;
+}
 
-function firstDuplicatePair(items, keyOf) {
-    const seen = /* @__PURE__ */ new Map;
-    for (const item of items) {
-        const key = keyOf(item), earlier = seen.get(key);
-        if (earlier !== void 0) return [ earlier, item ];
-        seen.set(key, item);
-    }
+function schemaTreeShape(schema) {
+    return walkSchemaShape(schema, /* @__PURE__ */ new Set);
 }
 
-function duplicateHandleMessage(bindings) {
-    const pair = firstDuplicatePair(bindings, binding => binding.name);
-    if (pair !== void 0) return `duplicate resource handle name "${pair[1].name}" — each binding name must be unique within a deployment`;
+function walkSchemaShape(node, path) {
+    if (typeof node != "object" || node === null) return "unknown";
+    if (path.has(node)) return "(circular)";
+    path.add(node);
+    try {
+        const schema = node;
+        return containerShape(schema, path) ?? leafShape(schema);
+    } finally {
+        path.delete(node);
+    }
 }
 
-function duplicateNameMessage(deployments) {
-    const pair = firstDuplicatePair(deployments, deployment => deployment.name);
-    if (pair !== void 0) return `duplicate deployment name "${pair[1].name}" — each deployment must use a unique name`;
+const objectWalker = (schema, path) => objectEntriesShape(schema.entries, path), unionWalker = (schema, path) => ({
+    union: schema.options.map(option => walkSchemaShape(option, path))
+}), unwrapWalker = (schema, path) => walkSchemaShape(schema.wrapped, path), CONTAINER_WALKERS = {
+    strict_object: objectWalker,
+    loose_object: objectWalker,
+    object: objectWalker,
+    array: (schema, path) => ({
+        array: walkSchemaShape(schema.item, path)
+    }),
+    record: (schema, path) => ({
+        record: walkSchemaShape(schema.value, path)
+    }),
+    union: unionWalker,
+    variant: unionWalker,
+    lazy: (schema, path) => walkSchemaShape(schema.getter(void 0), path),
+    exact_optional: unwrapWalker,
+    optional: unwrapWalker,
+    nullable: unwrapWalker
+};
+
+function containerShape(schema, path) {
+    return CONTAINER_WALKERS[String(schema.type)]?.(schema, path);
 }
 
-function partitionKey(deployment) {
-    return `${resourceGdr(deployment.workflowResource)} ${deployment.tag}`;
+function objectEntriesShape(entries, path) {
+    const out = {};
+    for (const [key, entry] of Object.entries(entries)) {
+        const optional = isOptionalEntry(entry), wrapped = optional ? entry.wrapped : entry;
+        out[optional ? `${key}?` : key] = walkSchemaShape(wrapped, path);
+    }
+    return Object.fromEntries(Object.entries(out).sort(([a], [b]) => a < b ? -1 : 1));
 }
 
-function partitionCollisionMessage(deployments) {
-    const pair = firstDuplicatePair(deployments, partitionKey);
-    if (pair === void 0) return;
-    const [first, second] = pair;
-    return `deployments "${first.name}" and "${second.name}" share workflow resource + tag "${second.tag}" — both would write into the same partition; change one deployment’s tag or resource`;
+function isOptionalEntry(entry) {
+    if (typeof entry != "object" || entry === null) return !1;
+    const kind = entry.type;
+    return kind === "exact_optional" || kind === "optional";
 }
 
-const TelemetryLoggerSchema = v.custom(input => typeof input == "object" && input !== null && typeof input.log == "function", "expected a telemetry logger (an object with a `log` function)"), WorkflowConfigSchema = v.object({
-    deployments: v.pipe(v.array(DeploymentSchema), v.minLength(1, "a config needs at least one deployment"), v.check(deployments => duplicateNameMessage(deployments) === void 0, issue => duplicateNameMessage(issue.input) ?? "duplicate deployment name"), v.check(deployments => partitionCollisionMessage(deployments) === void 0, issue => partitionCollisionMessage(issue.input) ?? "duplicate deployment partition")),
-    telemetry: v.optional(TelemetryLoggerSchema)
-});
+const LEAF_KINDS = /* @__PURE__ */ new Set([ "string", "number", "boolean", "null", "undefined", "unknown", "any" ]);
 
-function resourceAliasesToMap(resourceAliases) {
-    return Object.fromEntries((resourceAliases ?? []).map(binding => [ binding.name, binding.resource ]));
+function leafShape(schema) {
+    if (schema.type === "picklist") return schema.options.join(" | ");
+    if (schema.type === "literal") return `literal ${String(schema.literal)}`;
+    if (schema.type === "custom") return typeof schema.message == "string" ? `custom(${schema.message})` : "custom";
+    if (!LEAF_KINDS.has(String(schema.type))) throw new Error(`schemaTreeShape: unhandled schema kind "${String(schema.type)}" — extend the walker before regenerating the model ledger`);
+    return String(schema.type);
 }
 
-const FIELD_READ = /^\$fields\.(\w+)(?:\.(.+))?$/, EFFECTS_READ = /^\$effects\['([^']+)'\](?:\.(.+))?$/;
+function formatValidationError(label, issues) {
+    const lines = issues.map(issue => `  - ${issue.path.length === 0 ? "(root)" : formatIssuePath(issue.path)}: ${issue.message}`);
+    return `${label} failed validation (${issues.length} issue${issues.length === 1 ? "" : "s"}):\n${lines.join(`\n`)}`;
+}
 
-function isGuardReadExpr(expr) {
-    return expr === "$self" || expr === "$now" || FIELD_READ.test(expr) || EFFECTS_READ.test(expr);
+function issuesFromValibot(issues) {
+    return issues.map(issue => ({
+        path: issue.path ? issue.path.map(item => item.key) : [],
+        message: issue.message
+    }));
 }
 
-function printGuardRead(read) {
-    switch (read.type) {
-      case "self":
-        return "$self";
+function formatIssuePath(path) {
+    let out = "";
+    for (const seg of path) typeof seg == "number" ? out += `[${seg}]` : out += out.length === 0 ? String(seg) : `.${String(seg)}`;
+    return out;
+}
 
-      case "now":
-        return "$now";
+class PersistedDocShapeError extends WorkflowError {
+    documentId;
+    documentType;
+    issues;
+    constructor(args) {
+        super("persisted-doc-shape", formatValidationError(`Persisted ${args.documentType} document "${args.documentId}"`, args.issues)), 
+        this.name = "PersistedDocShapeError", this.documentId = args.documentId, this.documentType = args.documentType, 
+        this.issues = args.issues;
+    }
+}
 
-      case "fieldRead":
-        return read.path === void 0 ? `$fields.${read.field}` : `$fields.${read.field}.${read.path}`;
+function parsePersistedDoc(args) {
+    const result = v.safeParse(args.schema, args.doc);
+    if (!result.success) throw new PersistedDocShapeError({
+        documentId: documentIdOf(args.doc),
+        documentType: args.docType,
+        issues: issuesFromValibot(result.issues)
+    });
+    return result.output;
+}
 
-      case "effectsRead":
-        return read.path === void 0 ? `$effects['${read.effect}']` : `$effects['${read.effect}'].${read.path}`;
+function documentIdOf(doc) {
+    if (typeof doc == "object" && doc !== null) {
+        const id = doc._id;
+        if (typeof id == "string") return id;
     }
+    return "(unknown id)";
+}
+
+const ACTOR_KINDS = [ "person", "agent", "system" ];
+
+function releaseDocId(releaseName) {
+    return `_.releases.${releaseName}`;
+}
+
+function releaseRef({res: res, releaseName: releaseName}) {
+    if (releaseName.length === 0) throw new ContractViolationError("releaseRef: releaseName must be a non-empty release name");
+    return {
+        id: gdrFromResource(res, releaseDocId(releaseName)),
+        type: "system.release",
+        releaseName: releaseName
+    };
+}
+
+function isAlwaysArrayFieldKind(kind) {
+    return kind === "doc.refs" || kind === "assignee" || kind === "assignees" || kind === "array";
+}
+
+function isSingleDocRefKind(kind) {
+    return kind === "doc.ref" || kind === "subject";
+}
+
+function refKindAcceptsTypes(kind) {
+    return isSingleDocRefKind(kind) || kind === "doc.refs";
+}
+
+function assignmentKindAcceptsRoles(kind) {
+    return kind === "assignee" || kind === "assignees";
+}
+
+function isSingleDocRefEntry(entry) {
+    return isSingleDocRefKind(entry._type);
+}
+
+function isAssignmentFieldEntry(entry) {
+    return assignmentKindAcceptsRoles(entry._type);
+}
+
+function isTodoListItem(row) {
+    if (typeof row != "object" || row === null) return !1;
+    const candidate = row, status = candidate.status;
+    return typeof candidate._key == "string" && typeof candidate.label == "string" && (status == null || typeof status == "string");
+}
+
+function declaredRowColumns(entry) {
+    if (("_type" in entry ? entry._type : entry.type) === "array") return new Set((("of" in entry ? entry.of : void 0) ?? []).map(shape => shape.name));
+}
+
+function isTodoListEntry(entry) {
+    const columns = declaredRowColumns(entry);
+    return columns !== void 0 && columns.has("label") && columns.has("status");
+}
+
+function isNotesEntry(entry) {
+    const columns = declaredRowColumns(entry);
+    return columns !== void 0 && columns.has("body") && columns.has("actor") && columns.has("at");
 }
 
 const UNIVERSAL_ROLE_ALIAS_KEY = "$all";
@@ -470,2183 +585,2157 @@ function actorFulfillsRole({actorRoles: actorRoles, required: required, aliases:
     return actorRoles.some(role => accepted.has(role));
 }
 
-function groq(strings, ...values) {
-    return strings.reduce((out, part, i) => i === 0 ? part : `${out}${serializeGroqValue(values[i - 1])}${part}`, "");
+function normalizeAssignmentMembers(value) {
+    return value === null ? [] : Array.isArray(value) ? value : [ value ];
 }
 
-function serializeGroqValue(value) {
-    const serialized = JSON.stringify(value);
-    if (serialized === void 0) throw new Error(`groq tag cannot serialize ${typeof value} — interpolate JSON-representable values only`);
-    return serialized;
+function assignmentMembers(entries) {
+    return entries.flatMap(entry => isAssignmentFieldEntry(entry) ? normalizeAssignmentMembers(entry.value) : []);
 }
 
-function desugarWorkflow(authoring) {
-    const issues = [];
-    checkReservedRoleAliasKeys(authoring.roleAliases, issues);
-    const roleAliases = normalizeRoleAliases(authoring.roleAliases), ctx = {
-        issues: issues,
-        claimFields: /* @__PURE__ */ new Map,
-        claimedFields: /* @__PURE__ */ new Set,
-        roleAliases: roleAliases
-    }, workflowFields2 = desugarFieldEntries({
-        entries: authoring.fields,
-        path: [ "fields" ],
-        ctx: ctx
-    }), workflowLayer = layerOf(workflowFields2), stages = authoring.stages.map((stage, i) => {
-        const path = [ "stages", i ], stageFields2 = desugarFieldEntries({
-            entries: stage.fields,
-            path: [ ...path, "fields" ],
-            ctx: ctx
-        }), stageEnv = {
-            layers: [ {
-                scope: "stage",
-                entries: layerOf(stageFields2)
-            }, {
-                scope: "workflow",
-                entries: workflowLayer
-            } ]
-        }, activities = (stage.activities ?? []).map((activity, j) => desugarActivity({
-            activity: activity,
-            path: [ ...path, "activities", j ],
-            stageEnv: stageEnv,
-            ctx: ctx
-        })), transitions = (stage.transitions ?? []).map(transition => desugarTransition({
-            transition: transition
-        })), editable = desugarStageEditable({
-            overrides: stage.editable,
-            inScope: editableFieldNames({
-                workflowFields: workflowFields2,
-                stageFields: stageFields2,
-                activities: activities
-            }),
-            path: [ ...path, "editable" ],
-            ctx: ctx
-        });
-        return {
-            ...stripUndefined({
-                name: stage.name,
-                semantics: stage.semantics,
-                title: stage.title,
-                description: stage.description,
-                groups: stage.groups,
-                guards: stage.guards?.map(desugarGuard)
-            }),
-            ...stageFields2 ? {
-                fields: stageFields2
-            } : {},
-            ...activities.length > 0 ? {
-                activities: activities
-            } : {},
-            ...transitions.length > 0 ? {
-                transitions: transitions
-            } : {},
-            ...editable ? {
-                editable: editable
-            } : {}
-        };
-    });
-    return checkUnclaimedClaimFields(ctx), {
-        definition: {
-            ...stripUndefined({
-                name: authoring.name,
-                semantics: authoring.semantics,
-                title: authoring.title,
-                description: authoring.description,
-                groups: authoring.groups,
-                lifecycle: authoring.lifecycle,
-                start: desugarStart(authoring.start),
-                initialStage: authoring.initialStage,
-                predicates: authoring.predicates,
-                roleAliases: roleAliases
-            }),
-            ...workflowFields2 ? {
-                fields: workflowFields2
-            } : {},
-            stages: stages
-        },
-        issues: ctx.issues
-    };
+function assignmentState(members) {
+    return members.length === 0 ? "unrouted" : members.some(member => member.type === "user") ? "held" : "routed";
 }
 
-function desugarStart(start) {
-    if (start !== void 0) return {
-        kind: start.kind ?? "interactive",
-        ...start.filter !== void 0 ? {
-            filter: start.filter
-        } : {},
-        ...start.requirements !== void 0 ? {
-            requirements: start.requirements
-        } : {}
-    };
+function activeAssignmentMembers(members) {
+    const users = members.filter(member => member.type === "user");
+    return users.length > 0 ? users : members;
 }
 
-function checkReservedRoleAliasKeys(aliases, issues) {
-    for (const key of Object.keys(aliases ?? {})) key.startsWith("$") && issues.push({
-        path: [ "roleAliases", key ],
-        message: `role alias key "${key}" uses the reserved "$" prefix — that namespace is the engine's stored spelling for the universal fulfiller. Use "*" to mean "fulfills any gate", or rename the role.`
-    });
+function assignmentMatch(members, identity) {
+    const active = activeAssignmentMembers(members);
+    return active.some(member => member.type === "user" && member.id === identity.userId) ? "user" : active.some(member => member.type === "role" && identity.roles.includes(member.role)) ? "role" : void 0;
 }
 
-const TODOLIST_OF = [ {
-    type: "string",
-    name: "label",
-    title: "Label"
-}, {
-    type: "string",
-    name: "status",
-    title: "Status"
-}, {
-    type: "assignee",
-    name: "assignee",
-    title: "Assignee"
-}, {
-    type: "date",
-    name: "dueDate",
-    title: "Due date"
-} ], NOTES_OF = [ {
-    type: "text",
-    name: "body",
-    title: "Body"
-}, {
-    type: "actor",
-    name: "actor",
-    title: "Actor"
-}, {
-    type: "datetime",
-    name: "at",
-    title: "At"
-} ];
-
-function desugarFieldEntries({entries: entries, path: path, ctx: ctx}) {
-    return !entries || entries.length === 0 ? entries === void 0 ? void 0 : [] : entries.map((entry, i) => desugarFieldEntry({
-        entry: entry,
-        path: [ ...path, i ],
-        ctx: ctx
-    }));
+function identityMatchesAssignment(members, identity) {
+    return assignmentMatch(members, identity) !== void 0;
 }
 
-function desugarFieldEntry({entry: entry, path: path, ctx: ctx}) {
-    if (entry.type === "claim") return desugarClaimField({
-        entry: entry,
-        path: path,
-        ctx: ctx
-    });
-    if (entry.type === "todoList" || entry.type === "notes") return desugarListField({
-        entry: entry,
-        path: path,
-        ctx: ctx
-    });
-    const editable = normalizeEditable({
-        editable: entry.editable,
-        path: [ ...path, "editable" ],
-        ctx: ctx
-    });
-    return {
-        ...stripUndefined({
-            type: entry.type,
-            name: entry.name,
-            title: entry.title,
-            description: entry.description,
-            group: normalizeGroup(entry.group),
-            required: entry.required,
-            initialValue: entry.initialValue,
-            editable: editable,
-            options: entry.options,
-            validation: entry.validation,
-            types: entry.types,
-            roles: entry.roles,
-            fields: entry.fields,
-            of: entry.of
-        })
+function assignmentStateCounts(assignments, identity) {
+    const counts = {
+        unrouted: 0,
+        routed: 0,
+        held: 0
     };
+    for (const members of assignments) {
+        const state = assignmentState(members);
+        state === "unrouted" ? counts.unrouted += 1 : identityMatchesAssignment(members, identity) && (counts[state] += 1);
+    }
+    return counts;
 }
 
-function desugarClaimField({entry: entry, path: path, ctx: ctx}) {
-    const desugared = {
-        ...stripUndefined({
-            name: entry.name,
-            title: entry.title,
-            description: entry.description,
-            group: normalizeGroup(entry.group)
-        }),
-        type: "actor"
-    };
-    return ctx.claimFields.set(desugared, {
-        name: entry.name,
-        path: path
-    }), desugared;
+function openActivityAssignments(instance) {
+    return (findOpenStageEntry(instance)?.activities ?? []).filter(activity => activity.status === "active").map(activity => assignmentMembers(activity.fields ?? []));
 }
 
-function desugarListField({entry: entry, path: path, ctx: ctx}) {
-    const editable = normalizeEditable({
-        editable: entry.editable,
-        path: [ ...path, "editable" ],
-        ctx: ctx
-    });
-    return {
-        ...stripUndefined({
-            name: entry.name,
-            title: entry.title,
-            description: entry.description,
-            group: normalizeGroup(entry.group),
-            required: entry.required,
-            initialValue: entry.initialValue,
-            editable: editable
-        }),
-        type: "array",
-        of: entry.type === "todoList" ? TODOLIST_OF : NOTES_OF
-    };
+function instanceAssignmentStateCounts(instance, identity) {
+    return assignmentStateCounts(openActivityAssignments(instance), identity);
 }
 
-function normalizeEditable({editable: editable, path: path, ctx: ctx}) {
-    if (editable === void 0 || editable === !0) return editable;
-    if (Array.isArray(editable)) {
-        const condition = rolesCondition(editable, ctx.roleAliases);
-        if (condition === void 0) {
-            ctx.issues.push({
-                path: path,
-                message: "editable: [] names no roles — use `true` to open the field to anyone in its scope, or list at least one role"
-            });
-            return;
-        }
-        return condition;
-    }
-    return editable;
+function actorMatchesAssignment(args) {
+    const actor = args.actor;
+    return actor === void 0 ? !1 : activeAssignmentMembers(args.members).some(member => member.type === "user" ? member.id === actor.id : actorFulfillsRole({
+        actorRoles: actor.roles,
+        required: member.role,
+        aliases: args.roleAliases
+    }));
 }
 
-function editableFieldNames({workflowFields: workflowFields2, stageFields: stageFields2, activities: activities}) {
-    const names = /* @__PURE__ */ new Set, collect = entries => {
-        for (const entry of entries ?? []) entry.editable !== void 0 && names.add(entry.name);
+const ANONYMOUS_IDENTITY = "<anonymous>", SYSTEM_IDENTITY = "<system>", E_PREFIXED_PROJECT_ID = /^e-(.+)$/;
+
+function classifyPrincipalId(id) {
+    if (id === ANONYMOUS_IDENTITY || id === SYSTEM_IDENTITY) return {
+        namespace: "sentinel"
+    };
+    if (id.startsWith("g")) return {
+        namespace: "global",
+        globalId: id
+    };
+    if (id.startsWith("p-")) return {
+        namespace: "robot",
+        globalId: id
+    };
+    const embeddedGlobal = E_PREFIXED_PROJECT_ID.exec(id)?.[1];
+    return embeddedGlobal !== void 0 ? embeddedGlobal.startsWith("g") ? {
+        namespace: "project",
+        globalId: embeddedGlobal
+    } : {
+        namespace: "unknown"
+    } : id.startsWith("p") ? {
+        namespace: "project"
+    } : {
+        namespace: "unknown"
     };
-    collect(workflowFields2), collect(stageFields2);
-    for (const activity of activities) collect(activity.fields);
-    return names;
 }
 
-function desugarStageEditable({overrides: overrides, inScope: inScope, path: path, ctx: ctx}) {
-    if (overrides === void 0) return;
-    const out = {};
-    for (const [name, value] of Object.entries(overrides)) {
-        if (!inScope.has(name)) {
-            ctx.issues.push({
-                path: [ ...path, name ],
-                message: `stage editable override "${name}" does not narrow an editable field in scope — name a workflow/stage/activity field of this stage that declares \`editable\``
-            });
-            continue;
-        }
-        const normalized = normalizeEditable({
-            editable: value,
-            path: [ ...path, name ],
-            ctx: ctx
-        });
-        normalized !== void 0 && (out[name] = normalized);
+function directoryBridgeId(sanityUserId) {
+    if (typeof sanityUserId == "string") return classifyPrincipalId(sanityUserId).namespace === "global" ? sanityUserId : void 0;
+}
+
+function firstCarriedGlobalId(candidates) {
+    for (const candidate of candidates) {
+        if (candidate === void 0) continue;
+        const {globalId: globalId} = classifyPrincipalId(candidate);
+        if (globalId !== void 0) return globalId;
     }
-    return Object.keys(out).length > 0 ? out : void 0;
 }
 
-function layerOf(entries) {
-    return new Map((entries ?? []).map(entry => [ entry.name, entry ]));
+function lakePrincipalId(args) {
+    return args.localPrincipalId ?? args.actor.id;
 }
 
-function normalizeGroup(group) {
-    return group === void 0 || Array.isArray(group) ? group : [ group ];
+function isRecord(value) {
+    return typeof value == "object" && value !== null && !Array.isArray(value);
 }
 
-function desugarActivity({activity: activity, path: path, stageEnv: stageEnv, ctx: ctx}) {
-    const activityFields2 = desugarFieldEntries({
-        entries: activity.fields,
-        path: [ ...path, "fields" ],
-        ctx: ctx
-    }), env = {
-        layers: [ {
-            scope: "activity",
-            entries: layerOf(activityFields2)
-        }, ...stageEnv.layers ]
-    }, actions = (activity.actions ?? []).map((action, a) => desugarAction({
-        action: action,
-        path: [ ...path, "actions", a ],
-        env: env,
-        activityName: activity.name,
-        ctx: ctx
-    })), target = desugarTarget({
-        target: activity.target,
-        env: env,
-        path: [ ...path, "target" ],
-        ctx: ctx
-    });
-    return {
-        ...stripUndefined({
-            name: activity.name,
-            semantics: activity.semantics,
-            title: activity.title,
-            description: activity.description,
-            groups: activity.groups,
-            group: normalizeGroup(activity.group),
-            filter: activity.filter,
-            requirements: activity.requirements
-        }),
-        ...target ? {
-            target: target
-        } : {},
-        ...activityFields2 ? {
-            fields: activityFields2
-        } : {},
-        ...actions.length > 0 ? {
-            actions: actions
-        } : {}
-    };
+class FieldValueShapeError extends WorkflowError {
+    entryType;
+    entryName;
+    issues;
+    constructor(args) {
+        const issueText = args.issues.join("; ");
+        super("field-value-shape", `Field entry ${args.mode} shape invalid for "${args.entryName}" (${args.entryType}): ${issueText}`), 
+        this.name = "FieldValueShapeError", this.entryType = args.entryType, this.entryName = args.entryName, 
+        this.issues = args.issues;
+    }
 }
 
-const TARGET_DOC_KINDS = [ "doc.ref", "doc.refs", "subject", "release.ref" ];
+const GdrUriSchema = v.custom(s => typeof s == "string" && isGdrUri(s), "must be a GDR URI"), GdrShape = tolerantObject()({
+    id: GdrUriSchema,
+    type: NonEmptyString$1
+}), ReleaseRefShape = v.pipe(tolerantObject()({
+    id: GdrUriSchema,
+    type: v.literal("system.release"),
+    releaseName: NonEmptyString$1
+}), v.check(ref => !isGdrUri(ref.id) || extractDocumentId(ref.id) === releaseDocId(ref.releaseName), "id must point at the `_.releases.<releaseName>` doc named by releaseName")), ActorShape = tolerantObject()({
+    kind: v.picklist(ACTOR_KINDS),
+    id: NonEmptyString$1,
+    roles: v.exactOptional(v.array(v.string())),
+    onBehalfOf: v.exactOptional(v.string())
+}), AssigneeShape = v.union([ tolerantObject()({
+    type: v.literal("user"),
+    id: NonEmptyString$1
+}), tolerantObject()({
+    type: v.literal("role"),
+    role: NonEmptyString$1
+}) ]), AssigneeListShape = v.pipe(v.union([ v.null(), AssigneeShape, v.array(AssigneeShape) ]), v.transform(normalizeAssignmentMembers)), NullableString = v.union([ v.null(), v.string() ]), NullableNumber = v.union([ v.null(), v.number() ]), NullableBoolean = v.union([ v.null(), v.boolean() ]), NullableProgress = v.union([ v.null(), v.pipe(v.number(), v.finite("progress must be a finite number"), v.minValue(0, "progress must be at least 0"), v.maxValue(100, "progress must be at most 100")) ]), NullableDateTime = v.union([ v.null(), IsoTimestamp ]), NullableDate = v.union([ v.null(), v.pipe(v.string(), v.regex(/^\d{4}-\d{2}-\d{2}$/, "must be a `YYYY-MM-DD` date")) ]), NullableUrl = NullableString, CHOICE_KINDS = /* @__PURE__ */ new Set([ "string", "text", "number", "url", "date", "dueDate", "datetime", "dueDatetime", "dateTime" ]);
 
-function desugarTarget({target: target, env: env, path: path, ctx: ctx}) {
-    if (target === void 0 || target.type === "url") return target;
-    const ref = typeof target.field == "string" ? {
-        field: target.field
-    } : target.field, field = resolveRef({
-        ref: ref,
-        env: env,
-        path: [ ...path, "field" ],
-        ctx: ctx
-    }) ?? fallbackRef(ref), entry = entryAt(env, field);
-    return entry && !TARGET_DOC_KINDS.includes(entry.type) && ctx.issues.push({
-        path: [ ...path, "field" ],
-        message: `manual activity target references "${field.field}" of kind "${entry.type}" — a deep-link target needs a document-valued entry (${TARGET_DOC_KINDS.join(", ")})`
-    }), {
-        type: "field",
-        field: field
-    };
+function normalizedChoiceKind(kind) {
+    return kind === "dateTime" ? "datetime" : kind;
 }
 
-function reportEmptyActionRoles({action: action, path: path, ctx: ctx}) {
-    action.roles === void 0 || action.roles.length > 0 || ctx.issues.push({
-        path: [ ...path, "roles" ],
-        message: "roles: [] names no roles — omit it to allow any identity, or list at least one role"
-    });
+function checkChoiceList(args) {
+    const {entryType: entryType, options: options, validation: validation} = args;
+    if (options === void 0) return;
+    if (!CHOICE_KINDS.has(entryType)) return [ `\`options\` is not valid on "${entryType}" values` ];
+    const kind = normalizedChoiceKind(entryType), issues = options.list.flatMap((option, index) => issuesOf(checkValueAgainst({
+        entryType: kind,
+        value: option.value,
+        validation: validation
+    }, valueSchemas))?.map(issue => `at options.list.${index}.value: ${issue}`) ?? []), seen = /* @__PURE__ */ new Set;
+    for (const option of options.list) seen.has(option.value) && issues.push(`duplicate option value ${JSON.stringify(option.value)}`), 
+    seen.add(option.value);
+    return issues.length === 0 ? void 0 : issues;
 }
 
-function desugarActionOps(args) {
-    const {action: action, path: path, env: env, activityName: activityName, ctx: ctx} = args, ops = desugarOps({
-        ops: action.ops,
-        path: [ ...path, "ops" ],
-        env: env,
-        firingActivity: activityName,
-        ctx: ctx
-    }) ?? [];
-    return action.status !== void 0 && ops.push({
-        type: "status.set",
-        activity: activityName,
-        status: action.status
-    }), ops;
+function choiceValueIssues(options, value) {
+    if (!(options === void 0 || value === null || value === void 0)) return options.list.some(option => Object.is(option.value, value)) ? void 0 : [ `value ${JSON.stringify(value)} is not declared in \`options.list\`; expected one of ${options.list.map(option => JSON.stringify(option.value)).join(", ")}` ];
 }
 
-function desugarAction({action: action, path: path, env: env, activityName: activityName, ctx: ctx}) {
-    if ("type" in action) return desugarClaimAction({
-        action: action,
-        path: path,
-        env: env,
-        ctx: ctx
-    });
-    reportEmptyActionRoles({
-        action: action,
-        path: path,
-        ctx: ctx
-    });
-    const cascadeFired = isCascadeFired(action), filter = cascadeFired ? action.filter : andConditions([ rolesCondition(action.roles, ctx.roleAliases), action.filter ]), ops = desugarActionOps({
-        action: action,
-        path: path,
-        env: env,
-        activityName: activityName,
-        ctx: ctx
-    });
-    return {
-        ...stripUndefined({
-            name: action.name,
-            semantics: action.semantics,
-            title: action.title,
-            description: action.description,
-            group: normalizeGroup(action.group),
-            when: action.when,
-            params: action.params,
-            effects: action.effects,
-            spawn: action.spawn
-        }),
-        ...cascadeFired && action.roles !== void 0 && action.roles.length > 0 ? {
-            roles: action.roles
-        } : {},
-        ...filter ? {
-            filter: filter
-        } : {},
-        ...ops.length > 0 ? {
-            ops: ops
-        } : {}
-    };
-}
+const fieldValueSchemas = {
+    "doc.ref": v.union([ v.null(), GdrShape ]),
+    "doc.refs": v.array(GdrShape),
+    subject: v.union([ v.null(), GdrShape ]),
+    "release.ref": v.union([ v.null(), ReleaseRefShape ]),
+    string: NullableString,
+    text: NullableString,
+    number: NullableNumber,
+    progress: NullableProgress,
+    boolean: NullableBoolean,
+    date: NullableDate,
+    dueDate: NullableDate,
+    datetime: NullableDateTime,
+    dueDatetime: NullableDateTime,
+    url: NullableUrl,
+    actor: v.union([ v.null(), ActorShape ]),
+    assignee: AssigneeListShape,
+    assignees: v.array(AssigneeShape)
+}, WritePrincipalId = v.pipe(NonEmptyString$1, v.rawTransform(({dataset: dataset, addIssue: addIssue}) => {
+    const classified = classifyPrincipalId(dataset.value);
+    return classified.namespace === "global" || classified.namespace === "robot" ? dataset.value : classified.namespace === "project" && classified.globalId !== void 0 ? classified.globalId : (addIssue({
+        message: `principal id "${dataset.value}" is not an account-global user id. Workflow user ids are the global \`sanityUserId\` (or a robot token's id). Resolve project members through your surface's member hook, or /projects/<projectId>/users/<id> → sanityUserId.`
+    }), dataset.value);
+})), ActorWriteShape = tolerantObject()({
+    kind: v.picklist(ACTOR_KINDS),
+    id: WritePrincipalId,
+    roles: v.exactOptional(v.array(v.string())),
+    onBehalfOf: v.exactOptional(v.string())
+}), AssigneePrincipalId = v.pipe(WritePrincipalId, v.check(id => classifyPrincipalId(id).namespace !== "robot", "robot principals cannot be assignment members")), AssigneeWriteShape = v.union([ tolerantObject()({
+    type: v.literal("user"),
+    id: AssigneePrincipalId
+}), tolerantObject()({
+    type: v.literal("role"),
+    role: NonEmptyString$1
+}) ]), SingularAssigneeWriteShape = v.pipe(v.union([ AssigneeWriteShape, v.array(AssigneeWriteShape) ]), v.transform(normalizeAssignmentMembers), v.check(members => members.filter(member => member.type === "user").length <= 1, "must contain at most one user member")), valueSchemas = {
+    ...fieldValueSchemas,
+    actor: v.nullable(ActorWriteShape),
+    assignee: SingularAssigneeWriteShape,
+    assignees: v.array(AssigneeWriteShape),
+    query: v.any()
+};
 
-function desugarClaimAction({action: action, path: path, env: env, ctx: ctx}) {
-    const ref = typeof action.field == "string" ? {
-        field: action.field
-    } : action.field, resolved = resolveRef({
-        ref: ref,
-        env: env,
-        path: [ ...path, "field" ],
-        ctx: ctx
+function shapeValueSchema(args) {
+    const {shape: shape, leaf: leaf} = args;
+    if (shape.type === "object") return objectSchema({
+        fields: shape.fields ?? [],
+        leaf: leaf
     });
-    if (resolved) {
-        const entry = entryAt(env, resolved);
-        entry && entry.type !== "actor" && ctx.issues.push({
-            path: [ ...path, "field" ],
-            message: `claim action "${action.name}" references "${resolved.field}" of kind "${entry.type}" — a claim pair needs an actor-valued entry (a "claim" or "actor" field declaration)`
-        }), checkShadowedClaimTarget({
-            actionName: action.name,
-            field: ref.field,
-            resolved: resolved,
-            env: env,
-            path: [ ...path, "field" ],
-            ctx: ctx
-        }), entry && ctx.claimedFields.add(entry);
-    }
-    const noSteal = `!defined($fields.${ref.field})`, filter = andConditions([ noSteal, rolesCondition(action.roles, ctx.roleAliases), action.filter ]), ops = resolved ? [ {
-        type: "field.set",
-        target: resolved,
-        value: {
-            type: "actor"
-        }
-    } ] : [];
-    return {
-        ...stripUndefined({
-            name: action.name,
-            title: action.title,
-            description: action.description,
-            group: normalizeGroup(action.group),
-            params: action.params,
-            effects: action.effects
-        }),
-        filter: filter,
-        ...ops.length > 0 ? {
-            ops: ops
-        } : {}
-    };
-}
-
-function checkShadowedClaimTarget({actionName: actionName, field: field, resolved: resolved, env: env, path: path, ctx: ctx}) {
-    const nearest = env.layers.find(l => l.entries.has(field));
-    nearest === void 0 || nearest.scope === resolved.scope || ctx.issues.push({
-        path: path,
-        message: `claim action "${actionName}" targets "${field}" at scope "${resolved.scope}", but a nearer ${nearest.scope}-scope entry of the same name shadows it in $fields — the no-steal filter would read the shadowing entry while the claim writes the "${resolved.scope}" one. Rename one of the entries or claim the nearer one`
+    if (shape.type === "array") return v.array(objectSchema({
+        fields: shape.of ?? [],
+        leaf: leaf
+    }));
+    const schema = leaf[shape.type] ?? v.any();
+    return constrainedScalarSchema({
+        schema: schema,
+        entryType: shape.type,
+        ...shape
     });
 }
 
-function checkUnclaimedClaimFields(ctx) {
-    for (const [entry, {name: name, path: path}] of ctx.claimFields) ctx.claimedFields.has(entry) || ctx.issues.push({
-        path: path,
-        message: `claim field "${name}" is never referenced by a claim action — you announced the pattern and wrote half of it. Declare a defineAction({ type: "claim", field: "${name}" }) or use a raw actor entry`
-    });
+function scalarMeasurement(entryType, value) {
+    if ((entryType === "number" || entryType === "progress") && typeof value == "number") return value;
+    if ((entryType === "string" || entryType === "text") && typeof value == "string") return value.length;
 }
 
-const DEFAULT_TRANSITION_WHEN = "$allActivitiesDone";
+function scalarBoundIssue(args) {
+    const {entryType: entryType, measured: measured, bound: bound, limit: limit} = args;
+    return bound === void 0 || limit === "min" && measured >= bound || limit === "max" && measured <= bound ? void 0 : `${entryType === "number" || entryType === "progress" ? "" : "length "}must be ${limit === "min" ? "greater than or equal to" : "less than or equal to"} ${bound}`;
+}
 
-function desugarTransition({transition: transition}) {
-    return {
-        ...stripUndefined({
-            name: transition.name,
-            title: transition.title,
-            description: transition.description,
-            to: transition.to
-        }),
-        when: transition.when ?? DEFAULT_TRANSITION_WHEN
-    };
+function scalarValidationIssues(args) {
+    const {entryType: entryType, validation: validation, value: value} = args;
+    if (validation === void 0 || value === null || value === void 0) return;
+    const measured = scalarMeasurement(entryType, value);
+    if (measured === void 0) return;
+    const issues = [ scalarBoundIssue({
+        entryType: entryType,
+        measured: measured,
+        bound: validation.min,
+        limit: "min"
+    }), scalarBoundIssue({
+        entryType: entryType,
+        measured: measured,
+        bound: validation.max,
+        limit: "max"
+    }) ].filter(issue => issue !== void 0);
+    return issues.length === 0 ? void 0 : issues;
 }
 
-function desugarGuard(guard) {
-    const {match: match, metadata: metadata, ...rest} = guard, {idRefs: idRefs, ...matchRest} = match;
-    return {
-        ...rest,
-        match: {
-            ...matchRest,
-            ...idRefs !== void 0 ? {
-                idRefs: idRefs.map(printGuardRead)
-            } : {}
-        },
-        ...metadata !== void 0 ? {
-            metadata: Object.fromEntries(Object.entries(metadata).map(([key, read]) => [ key, printGuardRead(read) ]))
-        } : {}
-    };
+function constrainedScalarSchema(args) {
+    const {schema: schema, entryType: entryType, options: options, validation: validation} = args;
+    return options === void 0 && validation === void 0 ? schema : v.pipe(schema, v.check(value => choiceValueIssues(options, value) === void 0 && scalarValidationIssues({
+        entryType: entryType,
+        validation: validation,
+        value: value
+    }) === void 0, issue => [ ...choiceValueIssues(options, issue.input) ?? [], ...scalarValidationIssues({
+        entryType: entryType,
+        validation: validation,
+        value: issue.input
+    }) ?? [] ].join("; ")));
 }
 
-function desugarOps({ops: ops, path: path, env: env, firingActivity: firingActivity, ctx: ctx}) {
-    if (ops) return ops.map((op, i) => desugarOp({
-        op: op,
-        path: [ ...path, i ],
-        env: env,
-        firingActivity: firingActivity,
-        ctx: ctx
+function objectSchema(args) {
+    const {fields: fields, leaf: leaf} = args, entries = /* @__PURE__ */ Object.create(null);
+    for (const f of fields) entries[f.name] = v.optional(shapeValueSchema({
+        shape: f,
+        leaf: leaf
     }));
+    return v.looseObject(entries);
 }
 
-function desugarOp({op: op, path: path, env: env, firingActivity: firingActivity, ctx: ctx}) {
-    if (op.type === "status.set") return {
-        type: "status.set",
-        activity: op.activity ?? firingActivity,
-        status: op.status
-    };
-    if (op.type === "audit") return desugarAuditOp({
-        op: op,
-        path: path,
-        env: env,
-        ctx: ctx
-    });
-    const target = resolveRef({
-        ref: op.target,
-        env: env,
-        path: [ ...path, "target" ],
-        ctx: ctx
-    }) ?? fallbackRef(op.target);
-    return {
-        ...op,
-        target: target
-    };
-}
-
-const AUDIT_STAMPS = {
-    actor: {
-        type: "actor"
-    },
-    at: {
-        type: "now"
-    }
-};
-
-function desugarAuditOp({op: op, path: path, env: env, ctx: ctx}) {
-    const target = resolveRef({
-        ref: op.target,
-        env: env,
-        path: [ ...path, "target" ],
-        ctx: ctx
-    }) ?? fallbackRef(op.target);
-    if (op.value.type !== "object") return ctx.issues.push({
-        path: [ ...path, "value" ],
-        message: `audit value must be an object source carrying the domain fields (got "${op.value.type}")`
-    }), {
-        type: "field.append",
-        target: target,
-        value: op.value
-    };
-    const actorField = op.stampFields?.actor ?? "actor", atField = op.stampFields?.at ?? "at", fields = {
-        ...op.value.fields
-    };
-    for (const [stamp, source] of [ [ actorField, AUDIT_STAMPS.actor ], [ atField, AUDIT_STAMPS.at ] ]) {
-        if (stamp in fields) {
-            ctx.issues.push({
-                path: [ ...path, "value", "fields", stamp ],
-                message: `audit stamp field "${stamp}" collides with an authored domain field — rename yours or remap the stamp via stampFields`
-            });
-            continue;
-        }
-        fields[stamp] = source;
-    }
-    return {
-        type: "field.append",
-        target: target,
-        value: {
-            type: "object",
-            fields: fields
-        }
-    };
+function wholeValueSchema(args) {
+    const {entryType: entryType, shape: shape, leaf: leaf} = args;
+    return entryType === "object" ? v.union([ v.null(), objectSchema({
+        fields: shape.fields ?? [],
+        leaf: leaf
+    }) ]) : entryType === "array" ? v.array(objectSchema({
+        fields: shape.of ?? [],
+        leaf: leaf
+    })) : leaf[entryType];
 }
 
-function resolveRef({ref: ref, env: env, path: path, ctx: ctx}) {
-    const layers = ref.scope === void 0 ? env.layers : env.layers.filter(l => l.scope === ref.scope);
-    for (const layer of layers) if (layer.entries.has(ref.field)) return {
-        scope: layer.scope,
-        field: ref.field
-    };
-    const reachable = env.layers.flatMap(l => [ ...l.entries.keys() ].map(n => `${l.scope}:${n}`));
-    ctx.issues.push({
-        path: path,
-        message: `field reference "${ref.field}"${ref.scope ? ` (scope "${ref.scope}")` : ""} does not resolve to a declared entry. Reachable: ${reachable.join(", ") || "(none)"}`
+function appendItemSchema(entryType, shape) {
+    if (entryType === "array") return objectSchema({
+        fields: shape.of ?? [],
+        leaf: valueSchemas
     });
+    if (entryType === "doc.refs") return GdrShape;
+    if (entryType === "assignee" || entryType === "assignees") return AssigneeWriteShape;
 }
 
-function entryAt(env, ref) {
-    return env.layers.find(l => l.scope === ref.scope)?.entries.get(ref.field);
+function rejectedRefTypes(args) {
+    const {entryType: entryType, types: types, value: value} = args;
+    if (types === void 0 || value === null || value === void 0) return [];
+    if (!refKindAcceptsTypes(entryType)) return [];
+    let items = [ value ];
+    return entryType === "doc.refs" && (items = Array.isArray(value) ? value : []), 
+    [ ...new Set(items.map(gdrTypeOf).filter(t => t !== void 0 && !types.includes(t))) ];
 }
 
-function fallbackRef(ref) {
-    return {
-        scope: ref.scope ?? "workflow",
-        field: ref.field
-    };
+function refTypeIssues(args) {
+    const rejected = rejectedRefTypes(args);
+    if (rejected.length === 0) return;
+    const accepts = (args.types ?? []).map(t => `"${t}"`).join(", ");
+    return rejected.map(t => `document type "${t}" is not accepted — this entry accepts ${accepts} (a GDR's \`type\` names the target document's schema type)`);
 }
 
-function rolesCondition(roles, aliases) {
-    if (!(!roles || roles.length === 0)) return groq`count($actor.roles[@ in ${expandRequiredRoles(roles, aliases)}]) > 0`;
+function gdrTypeOf(item) {
+    if (typeof item != "object" || item === null) return;
+    const t = item.type;
+    return typeof t == "string" ? t : void 0;
 }
 
-function stripUndefined(obj) {
-    const out = {};
-    for (const [k, value] of Object.entries(obj)) value !== void 0 && (out[k] = value);
-    return out;
+function parseFieldValue(args) {
+    return checkValueAgainst(args, valueSchemas);
 }
 
-function isUnevaluable(result) {
-    return result == null;
+function checkValueAgainst(args, leaf) {
+    const schema = wholeValueSchema({
+        entryType: args.entryType,
+        shape: args,
+        leaf: leaf
+    });
+    if (schema === void 0) return {
+        issues: [ `unknown field entry type ${args.entryType}` ]
+    };
+    const result = v.safeParse(schema, args.value);
+    if (!result.success) return {
+        issues: formatIssues(result.issues)
+    };
+    const postIssues = refTypeIssues({
+        entryType: args.entryType,
+        types: args.types,
+        value: args.value
+    }) ?? choiceValueIssues(args.options, args.value) ?? scalarValidationIssues({
+        entryType: args.entryType,
+        validation: args.validation,
+        value: args.value
+    }) ?? assignmentValueIssues(args, result.output);
+    return postIssues !== void 0 ? {
+        issues: postIssues
+    } : {
+        output: result.output
+    };
 }
 
-async function evaluateConditionOutcome(args) {
-    const {condition: condition, snapshot: snapshot, params: params} = args;
-    return evaluateConditionOutcome$1({
-        condition: condition,
-        params: params,
-        dataset: snapshot.docs
-    });
+function assignmentIdentity(assignee) {
+    return assignee.type === "user" ? `user:${assignee.id}` : `role:${assignee.role}`;
 }
 
-async function evaluateCondition(args) {
-    return await evaluateConditionOutcome(args) === "satisfied";
+function assignmentCandidate(value) {
+    const parsed = v.safeParse(AssigneeShape, value);
+    return parsed.success ? parsed.output : void 0;
 }
 
-async function evaluatePredicates(args) {
-    const out = {};
-    for (const [name, groq2] of Object.entries(args.predicates ?? {})) {
-        const result = await runGroq({
-            groq: groq2,
-            params: args.params,
-            snapshot: args.snapshot
-        }), outcome = conditionOutcome(result);
-        out[name] = outcome === "unevaluable" ? null : outcome === "satisfied";
-    }
-    return out;
+function assignmentValueIssues(args, value) {
+    const retained = previousAssignmentIdentities(args), issues = [];
+    return visitAssignmentEntries({
+        entryType: args.entryType,
+        value: value,
+        roles: args.roles,
+        fields: args.fields,
+        of: args.of,
+        path: "$"
+    }, ({assignee: assignee, roles: roles, path: path}) => {
+        consumeRetainedAssignment({
+            retained: retained,
+            path: path,
+            identity: assignmentIdentity(assignee)
+        }) || issues.push(...assignmentCandidateIssues({
+            roles: roles,
+            memberRoles: args.memberRoles,
+            roleAliases: args.roleAliases
+        }, assignee));
+    }), issues.length === 0 ? void 0 : issues;
 }
 
-async function runGroq({groq: groq2, params: params, snapshot: snapshot}) {
-    return runGroq$1({
-        groq: groq2,
-        params: params,
-        dataset: snapshot.docs
-    });
-}
-
-function conditionSyntaxIssues(groq2, boundVars) {
-    const issues = [];
-    let tree;
-    try {
-        tree = parse(groq2);
-    } catch (err) {
-        issues.push(errorMessage(err));
-    }
-    if (/\*\s*\[\s*_type\b/.test(groq2) && issues.push("condition scans by `_type` — that's a discovery query, not a predicate. Conditions evaluate against the in-memory snapshot (instance + ancestors + field-declared docs). To bring extra docs in scope, declare a `doc.ref` (or `doc.refs`) field entry on the workflow or this stage. For lake scans like \"all articles in this release\", use a spawn action's `forEach` instead."), 
-    boundVars !== void 0 && tree !== void 0) for (const name of conditionParameterNames(groq2)) boundVars.includes(name) || issues.push(`reads $${name}, which this scope does not bind — an unbound variable evaluates to GROQ null, so the condition silently never matches. Bound here: ` + boundVars.map(n => `$${n}`).join(", "));
-    return issues;
-}
-
-function conditionParameterNames(groq2) {
-    const read = /* @__PURE__ */ new Set;
-    return walkAstNodes(tryParseGroq(groq2), node => {
-        node.type === "Parameter" && typeof node.name == "string" && read.add(node.name);
-    }), read;
-}
-
-function conditionFieldReadNames(groq2) {
-    return new Set(conditionFieldReads(groq2).map(read => read.name));
+function consumeRetainedAssignment(args) {
+    const identities = args.retained.get(args.path), remaining = identities?.get(args.identity) ?? 0;
+    return remaining === 0 || identities === void 0 ? !1 : (remaining === 1 ? identities.delete(args.identity) : identities.set(args.identity, remaining - 1), 
+    !0);
 }
 
-function conditionFieldReads(groq2) {
-    const reads = /* @__PURE__ */ new Map;
-    return collectFieldReads(tryParseGroq(groq2), reads), [ ...reads.values() ];
+function previousAssignmentIdentities(args) {
+    const retained = /* @__PURE__ */ new Map;
+    if (args.previousValue === void 0) return retained;
+    const schema = wholeValueSchema({
+        entryType: args.entryType,
+        shape: args,
+        leaf: valueSchemas
+    });
+    if (schema === void 0) return retained;
+    const previous = v.safeParse(schema, args.previousValue);
+    return previous.success && visitAssignmentEntries({
+        entryType: args.entryType,
+        value: previous.output,
+        roles: args.roles,
+        fields: args.fields,
+        of: args.of,
+        path: "$"
+    }, ({assignee: assignee, path: path}) => {
+        const identities = retained.get(path) ?? /* @__PURE__ */ new Map, identity = assignmentIdentity(assignee);
+        identities.set(identity, (identities.get(identity) ?? 0) + 1), retained.set(path, identities);
+    }), retained;
 }
 
-function collectFieldReads(node, reads) {
-    if (Array.isArray(node)) {
-        for (const item of node) collectFieldReads(item, reads);
+function visitAssignmentEntries(args, visit) {
+    if (assignmentKindAcceptsRoles(args.entryType)) {
+        visitAssignmentCandidates(args, visit);
         return;
     }
-    if (typeof node != "object" || node === null) return;
-    const chain = fieldsAttributeChain(node);
-    if (chain !== void 0) {
-        const [name, ...tail] = chain, path = tail.length > 0 ? tail.join(".") : void 0;
-        reads.set(`${name}.${path ?? ""}`, {
-            name: name,
-            path: path
-        });
+    if (args.entryType === "object") {
+        visitAssignmentFields({
+            fields: args.fields,
+            value: args.value,
+            path: args.path
+        }, visit);
         return;
     }
-    for (const value of Object.values(node)) collectFieldReads(value, reads);
-}
-
-function fieldsAttributeChain(node) {
-    const names = [];
-    let current = node;
-    for (;typeof current == "object" && current !== null; ) {
-        const typed = current;
-        if (typed.type !== "AccessAttribute" || typeof typed.name != "string") return;
-        names.unshift(typed.name);
-        const base = typed.base;
-        if (base?.type === "Parameter" && base.name === "fields") return names;
-        current = base;
-    }
+    if (!(args.entryType !== "array" || !Array.isArray(args.value))) for (const row of args.value) visitAssignmentFields({
+        fields: args.of,
+        value: row,
+        path: `${args.path}[]`
+    }, visit);
 }
 
-function conditionEffectReads(groq2) {
-    const reads = [];
-    return walkAstNodes(tryParseGroq(groq2), node => {
-        if (node.type !== "AccessAttribute" || typeof node.name != "string") return;
-        const base = node.base;
-        base?.type !== "AccessAttribute" || typeof base.name != "string" || base.base?.type === "Parameter" && base.base.name === "effects" && reads.push({
-            effect: base.name,
-            key: node.name
+function visitAssignmentCandidates(args, visit) {
+    if (args.roles === void 0) return;
+    const indexedValues = Array.isArray(args.value) ? args.value.map(value => ({
+        value: value,
+        path: args.path
+    })) : [ {
+        value: args.value,
+        path: args.path
+    } ];
+    for (const {value: value, path: path} of indexedValues) {
+        const assignee = assignmentCandidate(value);
+        assignee !== void 0 && visit({
+            assignee: assignee,
+            roles: args.roles,
+            path: path
         });
-    }), reads;
-}
-
-function readsRootDocument(groq2) {
-    return nodeReadsRoot(tryParseGroq(groq2), 0);
-}
-
-const SCOPED_CHILD = {
-    Filter: "expr",
-    Projection: "expr",
-    Map: "expr",
-    FlatMap: "expr",
-    PipeFuncCall: "args"
-};
-
-function nodeReadsRoot(node, depth) {
-    if (Array.isArray(node)) return node.some(item => nodeReadsRoot(item, depth));
-    if (typeof node != "object" || node === null) return !1;
-    const typed = node;
-    if (depth === 0 && typed.type === "This" || depth === 0 && typed.type === "AccessAttribute" && typed.base === void 0) return !0;
-    if (typed.type === "Parent") {
-        const climb = typeof typed.n == "number" ? typed.n : 1;
-        return depth - climb <= 0;
-    }
-    const scopedChild = typeof typed.type == "string" ? SCOPED_CHILD[typed.type] : void 0;
-    return scopedChild !== void 0 ? Object.entries(node).some(([key, value]) => nodeReadsRoot(value, key === scopedChild ? depth + 1 : depth)) : Object.values(node).some(value => nodeReadsRoot(value, depth));
-}
-
-function tryParseGroq(groq2) {
-    try {
-        return parse(groq2);
-    } catch {
-        return;
-    }
-}
-
-function walkAstNodes(node, visit) {
-    if (Array.isArray(node)) {
-        for (const item of node) walkAstNodes(item, visit);
-        return;
-    }
-    if (!(typeof node != "object" || node === null)) {
-        visit(node);
-        for (const value of Object.values(node)) walkAstNodes(value, visit);
     }
 }
 
-const ACTIVITY_STATUSES = [ "active", "done", "skipped", "failed" ], TERMINAL_ACTIVITY_STATUSES = [ "done", "skipped", "failed" ];
-
-function isTerminalActivityStatus(status) {
-    return TERMINAL_ACTIVITY_STATUSES.includes(status);
+function visitAssignmentFields(args, visit) {
+    if (!(args.fields === void 0 || !isRecord(args.value))) for (const field of args.fields) visitAssignmentShape({
+        shape: field,
+        value: args.value[field.name],
+        path: `${args.path}.${field.name}`
+    }, visit);
 }
 
-const SIGNAL_SEMANTICS = [ "signal.positive", "signal.caution", "signal.critical" ], DECISION_SEMANTICS = [ "decision.accept", "decision.decline" ], ACTION_SEMANTICS = [ ...DECISION_SEMANTICS, ...SIGNAL_SEMANTICS ], FIELD_SCOPES = [ "workflow", "stage", "activity" ], DOCUMENT_VALUE_PERMISSIONS = [ "create", "read", "update" ], MUTATION_GUARD_ACTIONS = [ "create", "update", "delete", "publish", "unpublish" ], ACTIVITY_KINDS = [ "user", "service", "script", "manual", "receive" ], EXECUTOR_CLASSIFICATIONS = [ "autonomous", "interactive", "off-system", "hybrid" ], GROUP_KINDS = [ "core", "details" ], DRIVER_KINDS = [ "person", "agent", "service", "engine" ];
-
-function releaseDocId(releaseName) {
-    return `_.releases.${releaseName}`;
+function visitAssignmentShape(args, visit) {
+    visitAssignmentEntries({
+        entryType: args.shape.type,
+        value: args.value,
+        roles: args.shape.roles,
+        fields: args.shape.fields,
+        of: args.shape.of,
+        path: args.path
+    }, visit);
 }
 
-function releaseRef({res: res, releaseName: releaseName}) {
-    if (releaseName.length === 0) throw new ContractViolationError("releaseRef: releaseName must be a non-empty release name");
-    return {
-        id: gdrFromResource(res, releaseDocId(releaseName)),
-        type: "system.release",
-        releaseName: releaseName
-    };
+function assignmentCandidateIssues(args, assignee) {
+    if (assignee.type === "role") return collectiveRoleIssues(args, assignee.role);
+    const held = args.memberRoles?.[assignee.id];
+    return held === void 0 ? args.memberRoles === void 0 ? [] : [ `user "${assignee.id}" has no available project membership for role eligibility` ] : args.roles.some(required => actorFulfillsRole({
+        actorRoles: held,
+        required: required,
+        aliases: args.roleAliases
+    })) ? [] : [ `user "${assignee.id}" does not fulfill any eligible role: ${formatEligibleRoles(args.roles)}` ];
 }
 
-function isAlwaysArrayFieldKind(kind) {
-    return kind === "doc.refs" || kind === "assignees" || kind === "array";
+function collectiveRoleIssues(args, role) {
+    return args.roles.includes(role) ? [] : [ `collective role "${role}" is not eligible — this entry accepts ${formatEligibleRoles(args.roles)}` ];
 }
 
-function isSingleDocRefKind(kind) {
-    return kind === "doc.ref" || kind === "subject";
+function formatEligibleRoles(roles) {
+    return roles.map(role => `"${role}"`).join(", ");
 }
 
-function refKindAcceptsTypes(kind) {
-    return isSingleDocRefKind(kind) || kind === "doc.refs";
+function issuesOf(check) {
+    return "issues" in check ? check.issues : void 0;
 }
 
-function assignmentKindAcceptsRoles(kind) {
-    return kind === "assignee" || kind === "assignees";
+function validateFieldValue(args) {
+    const check = checkValueAgainst(args, valueSchemas);
+    if ("issues" in check) throw new FieldValueShapeError({
+        entryType: args.entryType,
+        entryName: args.entryName,
+        issues: check.issues,
+        mode: "value"
+    });
+    return check.output;
 }
 
-function isSingleDocRefEntry(entry) {
-    return isSingleDocRefKind(entry._type);
-}
+const BARE_ID_SOURCE = "[A-Za-z0-9_][A-Za-z0-9._-]{0,127}", BARE_ID_RE = new RegExp(`^${BARE_ID_SOURCE}$`), ALIAS_REF_RE = new RegExp(`^@${RESOURCE_ALIAS_NAME_SOURCE}:${BARE_ID_SOURCE}$`);
 
-function isAssignmentFieldEntry(entry) {
-    return assignmentKindAcceptsRoles(entry._type);
+function isBareDocumentId(id) {
+    return BARE_ID_RE.test(id) && !id.includes("..");
 }
 
-function isTodoListItem(row) {
-    if (typeof row != "object" || row === null) return !1;
-    const candidate = row, status = candidate.status;
-    return typeof candidate._key == "string" && typeof candidate.label == "string" && (status == null || typeof status == "string");
+function isAuthoringRefId(id) {
+    if (id.startsWith("@")) {
+        const separator = id.indexOf(":");
+        return ALIAS_REF_RE.test(id) && isBareDocumentId(id.slice(separator + 1));
+    }
+    return id.includes(":") ? isGdrUri(id) : isBareDocumentId(id);
 }
 
-function declaredRowColumns(entry) {
-    if (("_type" in entry ? entry._type : entry.type) === "array") return new Set((("of" in entry ? entry.of : void 0) ?? []).map(shape => shape.name));
+function isBareSeedId(id) {
+    return isBareDocumentId(id);
 }
 
-function isTodoListEntry(entry) {
-    const columns = declaredRowColumns(entry);
-    return columns !== void 0 && columns.has("label") && columns.has("status");
-}
+const AuthoringRefId = v.pipe(v.string(), v.check(isAuthoringRefId, "must be a bare document id, a GDR URI, or a portable `@<alias>:<id>` reference")), AuthoringGdrShape = v.looseObject({
+    id: AuthoringRefId,
+    type: NonEmptyString$1
+}), seedValueSchemas = {
+    ...valueSchemas,
+    "doc.ref": v.union([ v.null(), AuthoringGdrShape ]),
+    "doc.refs": v.array(AuthoringGdrShape),
+    subject: v.union([ v.null(), AuthoringGdrShape ]),
+    "release.ref": v.union([ v.null(), v.looseObject({
+        id: AuthoringRefId,
+        type: v.literal("system.release"),
+        releaseName: NonEmptyString$1
+    }) ])
+};
 
-function isNotesEntry(entry) {
-    const columns = declaredRowColumns(entry);
-    return columns !== void 0 && columns.has("body") && columns.has("actor") && columns.has("at");
+function checkLiteralSeed(args) {
+    return args.value === null ? [ "a literal seed cannot be null — omit `initialValue` to start the field empty" ] : issuesOf(checkValueAgainst(args, seedValueSchemas));
 }
 
-const CONDITION_VARS = [ {
-    name: "self",
-    binding: "always",
-    label: "this workflow instance",
-    description: "GDR URI of the instance document itself — `*[_id == $self][0]` reads the instance in the snapshot."
-}, {
-    name: "fields",
-    binding: "always",
-    label: "the workflow's fields",
-    description: "Declared field entries rendered by name (`$fields.<name>` is the value, no wrapper). Stage/activity scopes overlay lexically. What a read puts in your hand follows the declared kind: a singular `doc.ref` (or `subject`) DEREFERENCES into the hydrated document (lake `_id`/`_type` plus content fields — which may themselves be named `id`/`type`), while `doc.refs` elements and `release.ref` stay REFERENCES — `{id, type[, releaseName]}` with `id` a GDR URI — because identity reads (membership, counting, joins) must stay total without hydrating every target, and targets may live in resources the evaluation cannot fetch from. Conditions evaluate against the in-memory snapshot only, so a dereferencing plural kind would silently hole wherever hydration lagged."
-}, {
-    name: "parent",
-    binding: "always",
-    label: "the parent workflow",
-    description: "The parent instance's GDR URI, `null` on a root instance."
-}, {
-    name: "ancestors",
-    binding: "always",
-    label: "the workflow's ancestors",
-    description: "GDR URIs of the ancestor chain, root first."
-}, {
-    name: "stage",
-    binding: "always",
-    label: "the current stage",
-    description: "The current stage's name."
-}, {
-    name: "now",
-    binding: "always",
-    label: "the current time",
-    description: "The ISO clock reading shared by every condition in one evaluation pass, so they agree on the time."
-}, {
-    name: "context",
-    binding: "always",
-    label: "start-time context",
-    description: "The instance's `context` bag: values seeded at `startInstance` plus a parent's `spawn.context` handoff, by entry name. Written only at start — never mutated afterwards."
-}, {
-    name: "effects",
-    binding: "always",
-    label: "automation outputs",
-    description: "Completed effects' outputs, namespaced by effect name (`$effects['<effect>'].<output>`) — each effect's latest completed run wins. Handler fuel — transition triggers should read instance/lake state (or $effectStatus) instead."
-}, {
-    name: "effectStatus",
-    binding: "always",
-    label: "automation status",
-    description: "Effect name → `'done'` | `'failed'` of the latest completed run queued during the current stage entry; absent until the effect drains for this entry. Re-entry-safe: runs queued under a prior entry never count, so `$effectStatus['<effect>'] == 'done'` (or `defined($effectStatus['<effect>'])` for settled-either-way) waits for the fresh run."
-}, {
-    name: "activities",
-    binding: "always",
-    label: "this stage's activities",
-    description: "The current stage's activity rows, statuses included."
-}, {
-    name: "allActivitiesDone",
-    binding: "always",
-    label: "all activities in this stage are finished",
-    description: "Every current-stage activity is `done` or `skipped` — the default transition gate."
-}, {
-    name: "anyActivityFailed",
-    binding: "always",
-    label: "an activity in this stage has failed",
-    description: "Some current-stage activity is `failed`."
-}, {
-    name: "actor",
-    binding: "caller",
-    label: "you",
-    description: "The acting identity (id + roles); `undefined` when no caller rides the evaluation. Never holds a value in the cascade gates (deploy-rejected there)."
-}, {
-    name: "assigned",
-    binding: "caller",
-    label: "you are assigned to this activity",
-    description: "Whether the caller matches the activity's assignees-kind field entry (by user id, or by a role under the definition's `roleAliases`); `false` outside an activity context. Constant `false` in the cascade gates (deploy-rejected there)."
-}, {
-    name: "can",
-    binding: "caller",
-    label: "your permissions",
-    description: "Advisory per-permission booleans computed from the caller's grants; `undefined` without grants. Bound wherever grants ride the evaluation: the projection's rendered scope (fireAction-action filters, activity requirements, editability predicates) and the fireAction/editField commit gates. Deploy rejects it at every site that evaluates without grants: transition `when`s, activity filters, cascade-fired actions' `when`/`filter`, effect bindings, where-op `where`s, and the spawn `forEach`/`with`/`context` sites."
-}, {
-    name: "attributes",
-    binding: "caller",
-    label: "your attributes",
-    description: "Advisory org-level User Attributes for the caller (Enterprise — same values as lake `user::attributes()`), keyed by attribute name with each active scalar or array value. `undefined` on expected HTTP absence; unexpected fetch failures throw; empty page binds `{}`. Bound wherever grants ride the evaluation (same sites as `$can`). Soft-gate paths fetch at most 100 attributes (no further pages) and warn when the envelope reports `hasMore: true` (partial bag still binds). Not a security boundary — the Content Lake remains the only enforcement point."
-}, {
-    name: "row",
-    binding: "spawn",
-    label: "the spawned row",
-    description: "One `spawn.forEach` result row, bound while its `with` map evaluates — and the row under test while a where-op `where` evaluates (per row). Deploy rejects a read at every other site (including `spawn.forEach` itself and `spawn.context`), where it is GROQ null."
-}, {
-    name: "params",
-    binding: "caller",
-    label: "the action's arguments",
-    description: "The firing action's args — they hold values only while a fireAction-fired action's effect bindings and where-op `where`s evaluate (spawn sites don't bind it at all, and a cascade-fired action has no caller to supply args). Deploy rejects a read in the cascade gates, in a cascade-fired action's payload, and in the caller-bound projection (action filters, requirements, editable predicates): args exist only once the caller fires the action, after those sites have evaluated."
-}, {
-    name: "subworkflows",
-    binding: "always",
-    label: "the spawned subworkflows",
-    description: "Every row of the instance's subworkflow registry, faceted by `activity`/`action`/`definition`/`rowKey`/`status` (`'active'|'done'|'aborted'`) with `current` marking the open stage entry's cohort and `stage` the child's current stage. Usable anywhere — transition `when`s, requirements, any stage's gates; the settled gate is `count($subworkflows[activity == <name> && current && status == 'active']) == 0`."
-} ], RESERVED_CONDITION_VARS = CONDITION_VARS.map(v2 => v2.name), FILTER_SCOPE_VARS = CONDITION_VARS.filter(v2 => v2.binding === "always").map(v2 => v2.name), CALLER_BOUND_VARS = CONDITION_VARS.filter(v2 => v2.binding === "caller").map(v2 => v2.name), START_FILTER_VARS = [ {
-    name: "tag",
-    label: "this engine tag",
-    description: "The engine's tag partition — scope `*[...]` instance scans with `tag == $tag`."
-}, {
-    name: "definition",
-    label: "this workflow definition",
-    description: "The `name` of the definition under evaluation (its own start block binds it)."
-}, {
-    name: "now",
-    label: "the current time",
-    description: "The ISO clock reading of the evaluating engine."
-} ], START_REQUIREMENT_VARS = [ ...START_FILTER_VARS, {
-    name: "fields",
-    label: "the start's input fields",
-    description: "The caller's input entries by name (`initialFields` — at `startInstance`, the values the start would seed; at a pre-flight, the values gathered so far, so a read of a not-yet-supplied entry is GROQ null). Document references bind as GDR envelopes — `$fields.<entry>.id` is the GDR URI, never a string authors assemble — a singular `doc.ref` or `subject` included (nothing hydrates at the gate or the pre-flight). Pathed reads are deploy-checked against these envelope shapes."
-} ], GUARD_PREDICATE_VARS = [ {
-    name: "guard",
-    description: "The guard document itself (its `metadata` carries deploy-time resolved values)."
-}, {
-    name: "mutation",
-    description: "The attempted mutation — `mutation.action` is the write kind being gated."
-} ], NonEmptyString = v.pipe(v.string(), v.minLength(1, "must be a non-empty string"));
-
-function isParseableInstant(value) {
-    return typeof value == "string" && !Number.isNaN(Date.parse(value));
+function validateFieldAppendItem(args) {
+    const schema = appendItemSchema(args.entryType, args);
+    if (schema === void 0) throw new FieldValueShapeError({
+        entryType: args.entryType,
+        entryName: args.entryName,
+        issues: [ `field entry type ${args.entryType} does not support append` ],
+        mode: "item"
+    });
+    const result = v.safeParse(schema, args.item);
+    if (!result.success) throw new FieldValueShapeError({
+        entryType: args.entryType,
+        entryName: args.entryName,
+        issues: formatIssues(result.issues),
+        mode: "item"
+    });
+    const assignmentArgs = {
+        entryType: appendAssignmentEntryType(args.entryType),
+        value: result.output,
+        roles: args.roles,
+        fields: args.entryType === "array" ? args.of : void 0,
+        memberRoles: args.memberRoles,
+        roleAliases: args.roleAliases
+    }, assignmentIssues = assignmentValueIssues(assignmentArgs, result.output);
+    if (assignmentIssues !== void 0) throw new FieldValueShapeError({
+        entryType: args.entryType,
+        entryName: args.entryName,
+        issues: assignmentIssues,
+        mode: "item"
+    });
+    const typeIssues = refTypeIssues({
+        entryType: args.entryType,
+        types: args.types,
+        value: [ args.item ]
+    });
+    if (typeIssues !== void 0) throw new FieldValueShapeError({
+        entryType: args.entryType,
+        entryName: args.entryName,
+        issues: typeIssues,
+        mode: "item"
+    });
+    return result.output;
 }
 
-const IsoTimestamp = v.pipe(v.string(), v.check(s => isParseableInstant(s), "must be an ISO-8601 datetime string"));
-
-function tolerantObject() {
-    return (entries, ..._exact) => v.looseObject(entries);
+function appendAssignmentEntryType(entryType) {
+    return entryType === "assignee" || entryType === "assignees" ? "assignee" : entryType === "array" ? "object" : entryType;
 }
 
-function tolerantEntries() {
-    return (entries, ..._exact) => entries;
+function formatIssues(issues, formatMessage = issue => issue.message) {
+    const formatOne = (issue, prefix) => {
+        const keys = [ ...prefix, ...issue.path?.map(p => p.key) ?? [] ], sub = issue.issues?.filter(candidate => candidate.expected !== "null");
+        return sub !== void 0 && sub.length > 0 ? sub.flatMap(candidate => formatOne(candidate, keys)) : [ `${keys.length > 0 ? `at ${keys.join(".")}: ` : ""}${formatMessage(issue)}` ];
+    };
+    return issues.flatMap(issue => formatOne(issue, []));
 }
 
-function schemaTreeShape(schema) {
-    return walkSchemaShape(schema, /* @__PURE__ */ new Set);
-}
+const ACTIVITY_STATUSES = _exhaustiveOptions()([ "active", "done", "skipped", "failed" ]), TERMINAL_ACTIVITY_STATUSES = _exhaustiveOptions()([ "done", "skipped", "failed" ]);
 
-function walkSchemaShape(node, path) {
-    if (typeof node != "object" || node === null) return "unknown";
-    if (path.has(node)) return "(circular)";
-    path.add(node);
-    try {
-        const schema = node;
-        return containerShape(schema, path) ?? leafShape(schema);
-    } finally {
-        path.delete(node);
-    }
+function isTerminalActivityStatus(status) {
+    return TERMINAL_ACTIVITY_STATUSES.includes(status);
 }
 
-const objectWalker = (schema, path) => objectEntriesShape(schema.entries, path), unionWalker = (schema, path) => ({
-    union: schema.options.map(option => walkSchemaShape(option, path))
-}), unwrapWalker = (schema, path) => walkSchemaShape(schema.wrapped, path), CONTAINER_WALKERS = {
-    strict_object: objectWalker,
-    loose_object: objectWalker,
-    object: objectWalker,
-    array: (schema, path) => ({
-        array: walkSchemaShape(schema.item, path)
-    }),
-    record: (schema, path) => ({
-        record: walkSchemaShape(schema.value, path)
-    }),
-    union: unionWalker,
-    variant: unionWalker,
-    lazy: (schema, path) => walkSchemaShape(schema.getter(void 0), path),
-    exact_optional: unwrapWalker,
-    optional: unwrapWalker,
-    nullable: unwrapWalker
-};
-
-function containerShape(schema, path) {
-    return CONTAINER_WALKERS[String(schema.type)]?.(schema, path);
-}
+const SIGNAL_SEMANTICS = [ "signal.positive", "signal.caution", "signal.critical" ], DECISION_SEMANTICS = [ "decision.accept", "decision.decline" ], ACTION_SEMANTICS = [ ...DECISION_SEMANTICS, ...SIGNAL_SEMANTICS ], FIELD_SCOPES = _exhaustiveOptions()([ "workflow", "stage", "activity" ]), DOCUMENT_VALUE_PERMISSIONS = [ "create", "manage", "read", "update" ], LAKE_MUTATION_GUARD_ACTIONS = _exhaustiveOptions()([ "create", "update", "delete" ]), MUTATION_GUARD_ACTIONS = _exhaustiveOptions()([ ...LAKE_MUTATION_GUARD_ACTIONS, "publish", "unpublish" ]), GUARD_ACTIONS_REQUIRED_MESSAGE = "a guard must match at least one action", MUTATION_GUARD_ID_SPACES = [ "authored", "edit", "published" ];
 
-function objectEntriesShape(entries, path) {
-    const out = {};
-    for (const [key, entry] of Object.entries(entries)) {
-        const optional = isOptionalEntry(entry), wrapped = optional ? entry.wrapped : entry;
-        out[optional ? `${key}?` : key] = walkSchemaShape(wrapped, path);
-    }
-    return Object.fromEntries(Object.entries(out).sort(([a], [b]) => a < b ? -1 : 1));
+function mutationGuardActionIdSpace(action) {
+    return action === "update" ? "edit" : action === "publish" || action === "unpublish" ? "published" : "authored";
 }
 
-function isOptionalEntry(entry) {
-    if (typeof entry != "object" || entry === null) return !1;
-    const kind = entry.type;
-    return kind === "exact_optional" || kind === "optional";
+function mutationGuardRequiresSplitEmission(actions) {
+    return new Set(actions.map(mutationGuardActionIdSpace)).size > 1;
 }
 
-const LEAF_KINDS = /* @__PURE__ */ new Set([ "string", "number", "boolean", "null", "undefined", "unknown", "any" ]);
+const ACTIVITY_KINDS = [ "user", "service", "script", "manual", "receive" ], EXECUTOR_CLASSIFICATIONS = [ "autonomous", "interactive", "off-system", "hybrid" ], GROUP_KINDS = [ "core", "details" ], DRIVER_KINDS = [ "person", "agent", "service", "engine" ], NonEmpty = NonEmptyString$1, PositiveInt = v.pipe(v.number(), v.integer(), v.minValue(1)), GROQ_IDENTIFIER = /^[A-Za-z_][A-Za-z0-9_]*$/;
 
-function leafShape(schema) {
-    if (schema.type === "picklist") return schema.options.join(" | ");
-    if (schema.type === "literal") return `literal ${String(schema.literal)}`;
-    if (schema.type === "custom") return typeof schema.message == "string" ? `custom(${schema.message})` : "custom";
-    if (!LEAF_KINDS.has(String(schema.type))) throw new Error(`schemaTreeShape: unhandled schema kind "${String(schema.type)}" — extend the walker before regenerating the model ledger`);
-    return String(schema.type);
+function groqIdentifier(referencedAs) {
+    return v.pipe(v.string(), v.regex(GROQ_IDENTIFIER, `must be a GROQ-safe identifier (letters, digits, underscore; not starting with a digit) because it is referenced as ${referencedAs} in GROQ conditions`));
 }
 
-function formatValidationError(label, issues) {
-    const lines = issues.map(issue => `  - ${issue.path.length === 0 ? "(root)" : formatIssuePath(issue.path)}: ${issue.message}`);
-    return `${label} failed validation (${issues.length} issue${issues.length === 1 ? "" : "s"}):\n${lines.join(`\n`)}`;
+function picklist(options) {
+    return v.picklist(options, invalidOptionMessage(options));
 }
 
-function issuesFromValibot(issues) {
-    return issues.map(issue => ({
-        path: issue.path ? issue.path.map(item => item.key) : [],
-        message: issue.message
-    }));
+function invalidOptionMessage(options) {
+    return `Invalid option: expected one of ${options.map(option => `"${option}"`).join("|")}`;
 }
 
-function formatIssuePath(path) {
-    let out = "";
-    for (const seg of path) typeof seg == "number" ? out += `[${seg}]` : out += out.length === 0 ? String(seg) : `.${String(seg)}`;
-    return out;
+function pinned() {
+    return (schema, ..._exact) => schema;
 }
 
-class PersistedDocShapeError extends WorkflowError {
-    documentId;
-    documentType;
-    issues;
-    constructor(args) {
-        super("persisted-doc-shape", formatValidationError(`Persisted ${args.documentType} document "${args.documentId}"`, args.issues)), 
-        this.name = "PersistedDocShapeError", this.documentId = args.documentId, this.documentType = args.documentType, 
-        this.issues = args.issues;
+const LiteralSchema = v.strictObject({
+    type: v.literal("literal"),
+    value: v.unknown()
+}), FieldReadSchema = v.strictObject({
+    type: v.literal("fieldRead"),
+    scope: v.optional(v.union([ v.literal("workflow"), v.literal("stage") ])),
+    field: NonEmpty,
+    path: v.optional(v.string())
+}), FieldSourceSchema = v.variant("type", [ v.strictObject({
+    type: v.literal("input")
+}), v.strictObject({
+    type: v.literal("query"),
+    query: NonEmpty
+}), LiteralSchema, FieldReadSchema ]), ValueExprSchema = v.lazy(() => v.variant("type", [ LiteralSchema, FieldReadSchema, v.strictObject({
+    type: v.literal("param"),
+    param: NonEmpty
+}), v.strictObject({
+    type: v.literal("actor")
+}), v.strictObject({
+    type: v.literal("now")
+}), v.strictObject({
+    type: v.literal("self")
+}), v.strictObject({
+    type: v.literal("stage")
+}), v.strictObject({
+    type: v.literal("object"),
+    fields: v.record(NonEmpty, ValueExprSchema)
+}) ])), StoredFieldRefSchema = v.strictObject({
+    scope: picklist(FIELD_SCOPES),
+    field: NonEmpty
+}), AuthoringFieldRefSchema = v.strictObject({
+    scope: v.optional(picklist(FIELD_SCOPES)),
+    field: NonEmpty
+}), HREF_SCHEMES = [ "http:", "https:" ];
+
+function isHttpUrl(value) {
+    try {
+        return HREF_SCHEMES.includes(new URL(value).protocol);
+    } catch {
+        return !1;
     }
 }
 
-function parsePersistedDoc(args) {
-    const result = v.safeParse(args.schema, args.doc);
-    if (!result.success) throw new PersistedDocShapeError({
-        documentId: documentIdOf(args.doc),
-        documentType: args.docType,
-        issues: issuesFromValibot(result.issues)
-    });
-    return result.output;
-}
+const UrlString = v.pipe(v.string(), v.url("must be a valid URL"), v.check(isHttpUrl, "must be an http(s) URL"));
 
-function documentIdOf(doc) {
-    if (typeof doc == "object" && doc !== null) {
-        const id = doc._id;
-        if (typeof id == "string") return id;
-    }
-    return "(unknown id)";
+function manualTargetSchema(ref) {
+    return v.variant("type", [ v.strictObject({
+        type: v.literal("url"),
+        url: UrlString
+    }), v.strictObject({
+        type: v.literal("field"),
+        field: ref
+    }) ]);
 }
 
-const ACTOR_KINDS = [ "person", "agent", "system" ], ANONYMOUS_IDENTITY = "<anonymous>", SYSTEM_IDENTITY = "<system>", E_PREFIXED_PROJECT_ID = /^e-(.+)$/;
+const StoredManualTargetSchema = pinned()(manualTargetSchema(StoredFieldRefSchema)), AuthoringManualTargetSchema = pinned()(manualTargetSchema(v.union([ NonEmpty, AuthoringFieldRefSchema ]))), ConditionSchema = NonEmpty;
 
-function classifyPrincipalId(id) {
-    if (id === ANONYMOUS_IDENTITY || id === SYSTEM_IDENTITY) return {
-        namespace: "sentinel"
-    };
-    if (id.startsWith("g")) return {
-        namespace: "global",
-        globalId: id
-    };
-    if (id.startsWith("p-")) return {
-        namespace: "robot",
-        globalId: id
-    };
-    const embeddedGlobal = E_PREFIXED_PROJECT_ID.exec(id)?.[1];
-    return embeddedGlobal !== void 0 ? embeddedGlobal.startsWith("g") ? {
-        namespace: "project",
-        globalId: embeddedGlobal
-    } : {
-        namespace: "unknown"
-    } : id.startsWith("p") ? {
-        namespace: "project"
-    } : {
-        namespace: "unknown"
-    };
+function opSchemas(targetSchema) {
+    return [ v.strictObject({
+        type: v.literal("field.set"),
+        target: targetSchema,
+        value: ValueExprSchema
+    }), v.strictObject({
+        type: v.literal("field.setIfMissing"),
+        target: targetSchema,
+        value: ValueExprSchema
+    }), v.strictObject({
+        type: v.literal("field.unset"),
+        target: targetSchema
+    }), v.strictObject({
+        type: v.literal("field.append"),
+        target: targetSchema,
+        value: ValueExprSchema
+    }), v.strictObject({
+        type: v.literal("field.inc"),
+        target: targetSchema,
+        value: v.optional(ValueExprSchema)
+    }), v.strictObject({
+        type: v.literal("field.dec"),
+        target: targetSchema,
+        value: v.optional(ValueExprSchema)
+    }), v.strictObject({
+        type: v.literal("field.updateWhere"),
+        target: targetSchema,
+        where: ConditionSchema,
+        value: ValueExprSchema
+    }), v.strictObject({
+        type: v.literal("field.removeWhere"),
+        target: targetSchema,
+        where: ConditionSchema
+    }) ];
 }
 
-function directoryBridgeId(sanityUserId) {
-    if (typeof sanityUserId == "string") return classifyPrincipalId(sanityUserId).namespace === "global" ? sanityUserId : void 0;
+const StoredFieldOpSchema = pinned()(v.variant("type", [ ...opSchemas(StoredFieldRefSchema) ])), StoredOpSchema = pinned()(v.variant("type", [ ...opSchemas(StoredFieldRefSchema), v.strictObject({
+    type: v.literal("status.set"),
+    activity: NonEmpty,
+    status: picklist(ACTIVITY_STATUSES)
+}) ])), AuditOpSchema = v.strictObject({
+    type: v.literal("audit"),
+    target: AuthoringFieldRefSchema,
+    value: ValueExprSchema,
+    stampFields: v.optional(v.strictObject({
+        actor: v.optional(NonEmpty),
+        at: v.optional(NonEmpty)
+    }))
+}), AuthoringOpSchema = pinned()(v.variant("type", [ ...opSchemas(AuthoringFieldRefSchema), v.strictObject({
+    type: v.literal("status.set"),
+    activity: v.optional(NonEmpty),
+    status: picklist(ACTIVITY_STATUSES)
+}), AuditOpSchema ])), GroupName = v.pipe(v.string(), v.regex(GROQ_IDENTIFIER, "must be an identifier (letters, digits, underscore; not starting with a digit)")), GroupSchema = pinned()(v.strictObject({
+    name: GroupName,
+    title: v.optional(v.string()),
+    description: v.optional(v.string()),
+    kind: v.optional(picklist(GROUP_KINDS))
+})), GroupNameList = v.pipe(v.array(GroupName), v.minLength(1, "name at least one group, or omit `group`"), v.check(names => new Set(names).size === names.length, "a group is listed more than once — list each group once")), StoredGroupMembershipSchema = GroupNameList, AuthoringGroupMembershipSchema = v.union([ GroupName, GroupNameList ]);
+
+function groupMembershipNames(group) {
+    return group === void 0 ? [] : typeof group == "string" ? [ group ] : [ ...group ];
 }
 
-function firstCarriedGlobalId(candidates) {
-    for (const candidate of candidates) {
-        if (candidate === void 0) continue;
-        const {globalId: globalId} = classifyPrincipalId(candidate);
-        if (globalId !== void 0) return globalId;
-    }
+const FIELD_VALUE_KINDS = [ "doc.ref", "doc.refs", "subject", "release.ref", "string", "text", "number", "progress", "boolean", "date", "dueDate", "datetime", "dueDatetime", "url", "actor", "assignee", "assignees", "object", "array" ], FieldValueKindSchema = picklist(FIELD_VALUE_KINDS), FieldKindSchema = picklist(FIELD_VALUE_KINDS), AUTHORING_FIELD_SUGAR_KINDS = _exhaustiveOptions()([ "todoList", "notes" ]), AUTHORING_FIELD_KINDS = [ ...FIELD_VALUE_KINDS, ...AUTHORING_FIELD_SUGAR_KINDS ], AuthoringRawFieldKindSchema = v.picklist(FIELD_VALUE_KINDS, issue => `${invalidOptionMessage(AUTHORING_FIELD_KINDS)} but received ${JSON.stringify(issue.input)}`), FieldEntryName = groqIdentifier("`$fields.<name>`"), FiniteNumber = v.pipe(v.number(), v.finite("must be finite")), ScalarValidationSchema = v.pipe(v.strictObject({
+    min: v.optional(FiniteNumber),
+    max: v.optional(FiniteNumber)
+}), v.check(validation => validation.min !== void 0 || validation.max !== void 0, "declare at least one bound, or omit `validation`"), v.check(validation => validation.min === void 0 || validation.max === void 0 || validation.min <= validation.max, "`min` must be less than or equal to `max`")), ChoiceOptionsSchema = v.strictObject({
+    list: v.pipe(v.array(v.strictObject({
+        title: NonEmpty,
+        value: v.union([ v.string(), v.number() ])
+    })), v.minLength(1, "declare at least one choice, or omit `options`"))
+});
+
+function asShape(input) {
+    return typeof input == "object" && input !== null ? input : {};
 }
 
-function lakePrincipalId(args) {
-    return args.localPrincipalId ?? args.actor.id;
+function compositeShapeOk(input) {
+    const shape = asShape(input);
+    return shape.type === "object" ? Array.isArray(shape.fields) && shape.fields.length > 0 && shape.of === void 0 : shape.type === "array" ? Array.isArray(shape.of) && shape.of.length > 0 && shape.fields === void 0 : shape.fields === void 0 && shape.of === void 0;
 }
 
-function isRecord(value) {
-    return typeof value == "object" && value !== null && !Array.isArray(value);
+function compositeShapeMessage(input) {
+    const shape = asShape(input);
+    return shape.type === "object" ? shape.of !== void 0 ? "an `object` kind declares its sub-fields with `fields`, not `of`" : "an `object` kind needs a non-empty `fields` list of sub-field shapes" : shape.type === "array" ? shape.fields !== void 0 ? "an `array` kind declares its item shape with `of`, not `fields`" : "an `array` kind needs a non-empty `of` list of sub-field shapes" : `\`fields\` / \`of\` are only valid on the \`object\` / \`array\` kinds, not "${String(shape.type)}"`;
 }
 
-class FieldValueShapeError extends WorkflowError {
-    entryType;
-    entryName;
-    issues;
-    constructor(args) {
-        const issueText = args.issues.join("; ");
-        super("field-value-shape", `Field entry ${args.mode} shape invalid for "${args.entryName}" (${args.entryType}): ${issueText}`), 
-        this.name = "FieldValueShapeError", this.entryType = args.entryType, this.entryName = args.entryName, 
-        this.issues = args.issues;
+function duplicateSubfieldName(input) {
+    const shape = asShape(input);
+    let list = [];
+    Array.isArray(shape.fields) ? list = shape.fields : Array.isArray(shape.of) && (list = shape.of);
+    const seen = /* @__PURE__ */ new Set;
+    for (const item of list) {
+        const name = asShape(item).name;
+        if (typeof name == "string") {
+            if (seen.has(name)) return name;
+            seen.add(name);
+        }
     }
 }
 
-const GdrUriSchema = v.custom(s => typeof s == "string" && isGdrUri(s), "must be a GDR URI"), GdrShape = tolerantObject()({
-    id: GdrUriSchema,
-    type: NonEmptyString
-}), ReleaseRefShape = v.pipe(tolerantObject()({
-    id: GdrUriSchema,
-    type: v.literal("system.release"),
-    releaseName: NonEmptyString
-}), v.check(ref => !isGdrUri(ref.id) || extractDocumentId(ref.id) === releaseDocId(ref.releaseName), "id must point at the `_.releases.<releaseName>` doc named by releaseName")), ActorShape = tolerantObject()({
-    kind: v.picklist(ACTOR_KINDS),
-    id: NonEmptyString,
-    roles: v.exactOptional(v.array(v.string())),
-    onBehalfOf: v.exactOptional(v.string())
-}), AssigneeShape = v.union([ tolerantObject()({
-    type: v.literal("user"),
-    id: NonEmptyString
-}), tolerantObject()({
-    type: v.literal("role"),
-    role: NonEmptyString
-}) ]), NullableString = v.union([ v.null(), v.string() ]), NullableNumber = v.union([ v.null(), v.number() ]), NullableBoolean = v.union([ v.null(), v.boolean() ]), NullableProgress = v.union([ v.null(), v.pipe(v.number(), v.finite("progress must be a finite number"), v.minValue(0, "progress must be at least 0"), v.maxValue(100, "progress must be at most 100")) ]), NullableDateTime = v.union([ v.null(), IsoTimestamp ]), NullableDate = v.union([ v.null(), v.pipe(v.string(), v.regex(/^\d{4}-\d{2}-\d{2}$/, "must be a `YYYY-MM-DD` date")) ]), NullableUrl = NullableString, CHOICE_KINDS = /* @__PURE__ */ new Set([ "string", "text", "number", "url", "date", "dueDate", "datetime", "dueDatetime", "dateTime" ]);
-
-function normalizedChoiceKind(kind) {
-    return kind === "dateTime" ? "datetime" : kind;
+function compositeChecked(entries) {
+    return v.pipe(v.strictObject(entries), v.check(input => compositeShapeOk(input), issue => compositeShapeMessage(issue.input)), v.check(input => duplicateSubfieldName(input) === void 0, issue => `duplicate sub-field name "${duplicateSubfieldName(issue.input)}" — sub-field names must be unique within \`fields\` / \`of\``));
 }
 
-function checkChoiceList(args) {
-    const {entryType: entryType, options: options, validation: validation} = args;
-    if (options === void 0) return;
-    if (!CHOICE_KINDS.has(entryType)) return [ `\`options\` is not valid on "${entryType}" values` ];
-    const kind = normalizedChoiceKind(entryType), issues = options.list.flatMap((option, index) => issuesOf(checkValueAgainst({
-        entryType: kind,
-        value: option.value,
-        validation: validation
-    }, valueSchemas))?.map(issue => `at options.list.${index}.value: ${issue}`) ?? []), seen = /* @__PURE__ */ new Set;
-    for (const option of options.list) seen.has(option.value) && issues.push(`duplicate option value ${JSON.stringify(option.value)}`), 
-    seen.add(option.value);
-    return issues.length === 0 ? void 0 : issues;
+const AssignmentRolesSchema = v.pipe(v.array(NonEmpty), v.minLength(1, "declare at least one eligible role, or omit `roles`")), FieldShapeSchema = v.lazy(() => v.pipe(compositeChecked({
+    type: FieldValueKindSchema,
+    name: FieldEntryName,
+    title: v.optional(v.string()),
+    description: v.optional(v.string()),
+    options: v.optional(ChoiceOptionsSchema),
+    validation: v.optional(ScalarValidationSchema),
+    roles: v.optional(AssignmentRolesSchema),
+    fields: v.optional(v.array(FieldShapeSchema)),
+    of: v.optional(v.array(FieldShapeSchema))
+}), choiceOptionsCheck(), scalarValidationCheck(), assignmentRolesCheck())), StoredEditableSchema = pinned()(v.union([ v.literal(!0), NonEmpty ])), AuthoringEditableSchema = pinned()(v.union([ v.literal(!0), v.array(NonEmpty), NonEmpty ]));
+
+function fieldBase(editable, group) {
+    return {
+        name: FieldEntryName,
+        title: v.optional(v.string()),
+        description: v.optional(v.string()),
+        group: v.optional(group),
+        required: v.optional(v.boolean()),
+        initialValue: v.optional(FieldSourceSchema),
+        editable: v.optional(editable)
+    };
 }
 
-function choiceValueIssues(options, value) {
-    if (!(options === void 0 || value === null || value === void 0)) return options.list.some(option => Object.is(option.value, value)) ? void 0 : [ `value ${JSON.stringify(value)} is not declared in \`options.list\`; expected one of ${options.list.map(option => JSON.stringify(option.value)).join(", ")}` ];
+function fieldEntryFields({editable: editable, group: group, kind: kind = FieldKindSchema}) {
+    return {
+        type: kind,
+        ...fieldBase(editable, group),
+        options: v.optional(ChoiceOptionsSchema),
+        validation: v.optional(ScalarValidationSchema),
+        types: v.optional(v.pipe(v.array(NonEmpty), v.minLength(1, "declare at least one accepted type, or omit `types` to accept any"))),
+        roles: v.optional(AssignmentRolesSchema),
+        fields: v.optional(v.array(FieldShapeSchema)),
+        of: v.optional(v.array(FieldShapeSchema))
+    };
 }
 
-const fieldValueSchemas = {
-    "doc.ref": v.union([ v.null(), GdrShape ]),
-    "doc.refs": v.array(GdrShape),
-    subject: v.union([ v.null(), GdrShape ]),
-    "release.ref": v.union([ v.null(), ReleaseRefShape ]),
-    string: NullableString,
-    text: NullableString,
-    number: NullableNumber,
-    progress: NullableProgress,
-    boolean: NullableBoolean,
-    date: NullableDate,
-    dueDate: NullableDate,
-    datetime: NullableDateTime,
-    dueDatetime: NullableDateTime,
-    url: NullableUrl,
-    actor: v.union([ v.null(), ActorShape ]),
-    assignee: v.union([ v.null(), AssigneeShape ]),
-    assignees: v.array(AssigneeShape)
-}, WritePrincipalId = v.pipe(NonEmptyString, v.rawTransform(({dataset: dataset, addIssue: addIssue}) => {
-    const classified = classifyPrincipalId(dataset.value);
-    return classified.namespace === "global" || classified.namespace === "robot" ? dataset.value : classified.namespace === "project" && classified.globalId !== void 0 ? classified.globalId : (addIssue({
-        message: `principal id "${dataset.value}" is not an account-global user id. Workflow user ids are the global \`sanityUserId\` (or a robot token's id). Resolve project members through your surface's member hook, or /projects/<projectId>/users/<id> → sanityUserId.`
-    }), dataset.value);
-})), ActorWriteShape = tolerantObject()({
-    kind: v.picklist(ACTOR_KINDS),
-    id: WritePrincipalId,
-    roles: v.exactOptional(v.array(v.string())),
-    onBehalfOf: v.exactOptional(v.string())
-}), AssigneeWriteShape = v.union([ tolerantObject()({
-    type: v.literal("user"),
-    id: WritePrincipalId
-}), tolerantObject()({
-    type: v.literal("role"),
-    role: NonEmptyString
-}) ]), valueSchemas = {
-    ...fieldValueSchemas,
-    actor: v.nullable(ActorWriteShape),
-    assignee: v.nullable(AssigneeWriteShape),
-    assignees: v.array(AssigneeWriteShape),
-    query: v.any()
-};
-
-function shapeValueSchema(args) {
-    const {shape: shape, leaf: leaf} = args;
-    if (shape.type === "object") return objectSchema({
-        fields: shape.fields ?? [],
-        leaf: leaf
-    });
-    if (shape.type === "array") return v.array(objectSchema({
-        fields: shape.of ?? [],
-        leaf: leaf
-    }));
-    const schema = leaf[shape.type] ?? v.any();
-    return constrainedScalarSchema({
-        schema: schema,
-        entryType: shape.type,
-        ...shape
+function literalSeedIssues(entry) {
+    if (entry.initialValue?.type === "literal") return checkLiteralSeed({
+        entryType: entry.type,
+        value: entry.initialValue.value,
+        types: entry.types,
+        fields: entry.fields,
+        of: entry.of,
+        options: entry.options,
+        validation: entry.validation,
+        roles: entry.roles
     });
 }
 
-function scalarMeasurement(entryType, value) {
-    if ((entryType === "number" || entryType === "progress") && typeof value == "number") return value;
-    if ((entryType === "string" || entryType === "text") && typeof value == "string") return value.length;
+function literalSeedCheck() {
+    return v.check(entry => literalSeedIssues(entry) === void 0, issue => `initialValue literal does not fit the declared kind: ${(literalSeedIssues(issue.input) ?? []).join("; ")}`);
 }
 
-function scalarBoundIssue(args) {
-    const {entryType: entryType, measured: measured, bound: bound, limit: limit} = args;
-    return bound === void 0 || limit === "min" && measured >= bound || limit === "max" && measured <= bound ? void 0 : `${entryType === "number" || entryType === "progress" ? "" : "length "}must be ${limit === "min" ? "greater than or equal to" : "less than or equal to"} ${bound}`;
+function refTypesCheck() {
+    return v.check(entry => entry.types === void 0 || refKindAcceptsTypes(entry.type), issue => `\`types\` is only valid on \`doc.ref\` / \`doc.refs\` / \`subject\` entries, not "${issue.input.type}"`);
 }
 
-function scalarValidationIssues(args) {
-    const {entryType: entryType, validation: validation, value: value} = args;
-    if (validation === void 0 || value === null || value === void 0) return;
-    const measured = scalarMeasurement(entryType, value);
-    if (measured === void 0) return;
-    const issues = [ scalarBoundIssue({
-        entryType: entryType,
-        measured: measured,
-        bound: validation.min,
-        limit: "min"
-    }), scalarBoundIssue({
-        entryType: entryType,
-        measured: measured,
-        bound: validation.max,
-        limit: "max"
-    }) ].filter(issue => issue !== void 0);
-    return issues.length === 0 ? void 0 : issues;
+function assignmentRolesCheck() {
+    return v.check(entry => entry.roles === void 0 || assignmentKindAcceptsRoles(entry.type), issue => `\`roles\` is only valid on \`assignee\` / \`assignees\` entries, not "${issue.input.type}"`);
 }
 
-function constrainedScalarSchema(args) {
-    const {schema: schema, entryType: entryType, options: options, validation: validation} = args;
-    return options === void 0 && validation === void 0 ? schema : v.pipe(schema, v.check(value => choiceValueIssues(options, value) === void 0 && scalarValidationIssues({
-        entryType: entryType,
-        validation: validation,
-        value: value
-    }) === void 0, issue => [ ...choiceValueIssues(options, issue.input) ?? [], ...scalarValidationIssues({
-        entryType: entryType,
-        validation: validation,
-        value: issue.input
-    }) ?? [] ].join("; ")));
+function choiceOptionsCheck() {
+    return v.check(entry => checkChoiceList({
+        entryType: entry.type,
+        options: entry.options,
+        validation: entry.validation
+    }) === void 0, issue => (checkChoiceList({
+        entryType: issue.input.type,
+        options: issue.input.options,
+        validation: issue.input.validation
+    }) ?? []).join("; "));
 }
 
-function objectSchema(args) {
-    const {fields: fields, leaf: leaf} = args, entries = /* @__PURE__ */ Object.create(null);
-    for (const f of fields) entries[f.name] = v.optional(shapeValueSchema({
-        shape: f,
-        leaf: leaf
-    }));
-    return v.looseObject(entries);
-}
+const SCALAR_VALIDATION_KINDS = /* @__PURE__ */ new Set([ "string", "text", "number", "progress" ]);
 
-function wholeValueSchema(args) {
-    const {entryType: entryType, shape: shape, leaf: leaf} = args;
-    return entryType === "object" ? v.union([ v.null(), objectSchema({
-        fields: shape.fields ?? [],
-        leaf: leaf
-    }) ]) : entryType === "array" ? v.array(objectSchema({
-        fields: shape.of ?? [],
-        leaf: leaf
-    })) : leaf[entryType];
+function scalarValidationCheck() {
+    return v.check(entry => scalarValidationDeclarationIssues(entry) === void 0, issue => (scalarValidationDeclarationIssues(issue.input) ?? []).join("; "));
 }
 
-function appendItemSchema(entryType, shape) {
-    if (entryType === "array") return objectSchema({
-        fields: shape.of ?? [],
-        leaf: valueSchemas
-    });
-    if (entryType === "doc.refs") return GdrShape;
-    if (entryType === "assignees") return AssigneeWriteShape;
+function scalarValidationDeclarationIssues(entry) {
+    const {type: type, validation: validation} = entry;
+    if (validation === void 0) return;
+    if (!SCALAR_VALIDATION_KINDS.has(type)) return [ `\`validation\` is only valid on \`string\` / \`text\` / \`number\` / \`progress\` values, not "${type}"` ];
+    if (type === "progress") {
+        const issues2 = Object.entries(validation).flatMap(([bound, value]) => typeof value == "number" && value >= 0 && value <= 100 ? [] : [ `\`validation.${bound}\` must stay within the progress kind's 0–100 contract` ]);
+        return issues2.length === 0 ? void 0 : issues2;
+    }
+    if (type === "number") return;
+    const issues = Object.entries(validation).flatMap(([bound, value]) => Number.isInteger(value) && value >= 0 ? [] : [ `\`validation.${bound}\` must be a non-negative integer for ${type} length` ]);
+    return issues.length === 0 ? void 0 : issues;
 }
 
-function rejectedRefTypes(args) {
-    const {entryType: entryType, types: types, value: value} = args;
-    if (types === void 0 || value === null || value === void 0) return [];
-    if (!refKindAcceptsTypes(entryType)) return [];
-    let items = [ value ];
-    return entryType === "doc.refs" && (items = Array.isArray(value) ? value : []), 
-    [ ...new Set(items.map(gdrTypeOf).filter(t => t !== void 0 && !types.includes(t))) ];
-}
+const FieldEntrySchema = pinned()(v.pipe(compositeChecked(fieldEntryFields({
+    editable: StoredEditableSchema,
+    group: StoredGroupMembershipSchema
+})), refTypesCheck(), assignmentRolesCheck(), choiceOptionsCheck(), scalarValidationCheck(), literalSeedCheck())), RawAuthoringFieldEntrySchema = pinned()(v.pipe(compositeChecked(fieldEntryFields({
+    editable: AuthoringEditableSchema,
+    group: AuthoringGroupMembershipSchema,
+    kind: AuthoringRawFieldKindSchema
+})), refTypesCheck(), assignmentRolesCheck(), choiceOptionsCheck(), scalarValidationCheck(), literalSeedCheck()));
 
-function refTypeIssues(args) {
-    const rejected = rejectedRefTypes(args);
-    if (rejected.length === 0) return;
-    const accepts = (args.types ?? []).map(t => `"${t}"`).join(", ");
-    return rejected.map(t => `document type "${t}" is not accepted — this entry accepts ${accepts} (a GDR's \`type\` names the target document's schema type)`);
+function listSugarFields(type) {
+    return {
+        type: v.literal(type),
+        ...fieldBase(AuthoringEditableSchema, AuthoringGroupMembershipSchema)
+    };
 }
 
-function gdrTypeOf(item) {
-    if (typeof item != "object" || item === null) return;
-    const t = item.type;
-    return typeof t == "string" ? t : void 0;
-}
+const TodoListFieldSchema = pinned()(v.strictObject(listSugarFields("todoList"))), NotesFieldSchema = pinned()(v.strictObject(listSugarFields("notes"))), AuthoringFieldEntrySchema = pinned()(v.lazy(input => {
+    const type = asShape(input).type;
+    return type === "todoList" ? TodoListFieldSchema : type === "notes" ? NotesFieldSchema : RawAuthoringFieldEntrySchema;
+})), RUNTIME_KINDS = _exhaustiveOptions()([ "function", "durableFunction", "selfHosted" ]), RuntimeBlockSchema = pinned()(v.strictObject({
+    kind: picklist(RUNTIME_KINDS)
+})), EffectRuntimeBlockSchema = pinned()(v.variant("kind", [ v.strictObject({
+    kind: v.literal("function"),
+    timeout: v.optional(PositiveInt),
+    memory: v.optional(PositiveInt)
+}), v.strictObject({
+    kind: v.literal("durableFunction")
+}), v.strictObject({
+    kind: v.literal("selfHosted")
+}) ], invalidOptionMessage(RUNTIME_KINDS))), EFFECT_RETRY_KINDS = _exhaustiveOptions()([ "engine" ]), EffectRetryBackoffSchema = pinned()(v.strictObject({
+    kind: picklist([ "fixed", "exponential" ]),
+    delayMs: PositiveInt
+}));
 
-function parseFieldValue(args) {
-    return checkValueAgainst(args, valueSchemas);
+function effectRetryFields(kind) {
+    return {
+        kind: kind,
+        attempts: PositiveInt,
+        backoff: v.optional(EffectRetryBackoffSchema),
+        expiryMs: v.optional(PositiveInt)
+    };
 }
 
-function checkValueAgainst(args, leaf) {
-    const schema = wholeValueSchema({
-        entryType: args.entryType,
-        shape: args,
-        leaf: leaf
-    });
-    if (schema === void 0) return {
-        issues: [ `unknown field entry type ${args.entryType}` ]
-    };
-    const result = v.safeParse(schema, args.value);
-    if (!result.success) return {
-        issues: formatIssues(result.issues)
-    };
-    const postIssues = refTypeIssues({
-        entryType: args.entryType,
-        types: args.types,
-        value: args.value
-    }) ?? choiceValueIssues(args.options, args.value) ?? scalarValidationIssues({
-        entryType: args.entryType,
-        validation: args.validation,
-        value: args.value
-    }) ?? assignmentValueIssues(args, result.output);
-    return postIssues !== void 0 ? {
-        issues: postIssues
-    } : {
-        output: result.output
+const StoredEffectRetrySchema = pinned()(v.strictObject(effectRetryFields(picklist(EFFECT_RETRY_KINDS)))), AuthoringEffectRetrySchema = pinned()(v.strictObject(effectRetryFields(v.optional(picklist(EFFECT_RETRY_KINDS)))));
+
+function effectFields(retry) {
+    return {
+        name: NonEmpty,
+        title: v.optional(v.string()),
+        description: v.optional(v.string()),
+        bindings: v.optional(v.record(v.string(), ConditionSchema)),
+        input: v.optional(v.record(v.string(), v.unknown())),
+        outputs: v.optional(v.array(FieldShapeSchema)),
+        retry: v.optional(retry)
     };
 }
 
-function assignmentIdentity(assignee) {
-    return assignee.type === "user" ? `user:${assignee.id}` : `role:${assignee.role}`;
+const EffectSchema = pinned()(v.strictObject(effectFields(StoredEffectRetrySchema))), AuthoringEffectSchema = pinned()(v.strictObject({
+    ...effectFields(AuthoringEffectRetrySchema),
+    runtime: v.optional(EffectRuntimeBlockSchema)
+})), DefinitionRefSchema = v.strictObject({
+    name: NonEmpty,
+    version: v.optional(v.union([ PositiveInt, v.literal("latest") ]))
+}), SubworkflowsSchema = v.strictObject({
+    forEach: NonEmpty,
+    definition: DefinitionRefSchema,
+    with: v.optional(v.record(NonEmpty, ConditionSchema)),
+    context: v.optional(v.record(NonEmpty, ConditionSchema)),
+    onExit: v.optional(picklist([ "detach", "abort" ]))
+}), ActionParamSchema = v.pipe(v.strictObject({
+    type: picklist([ "string", "number", "boolean", "url", "dateTime", "actor", "doc.ref", "doc.refs", "json" ]),
+    name: NonEmpty,
+    title: v.optional(v.string()),
+    description: v.optional(v.string()),
+    required: v.optional(v.boolean()),
+    options: v.optional(ChoiceOptionsSchema),
+    validation: v.optional(ScalarValidationSchema)
+}), choiceOptionsCheck(), scalarValidationCheck()), CUSTOM_SEMANTIC_HINT = "`custom.<camelCaseMeaning>`", CustomSemanticSchema = v.custom(input => typeof input == "string" && /^custom\.[a-z][a-zA-Z0-9]*$/.test(input)), SemanticSchema = v.union([ picklist(SIGNAL_SEMANTICS), CustomSemanticSchema ], `expected ${SIGNAL_SEMANTICS.join(", ")}, or ${CUSTOM_SEMANTIC_HINT}`), ActionSemanticSchema = v.union([ picklist(ACTION_SEMANTICS), CustomSemanticSchema ], `expected ${ACTION_SEMANTICS.join(", ")}, or ${CUSTOM_SEMANTIC_HINT}`);
+
+function semanticNamespace(semantic) {
+    return semantic.startsWith("custom.") ? semantic : semantic.split(".", 1)[0] ?? semantic;
 }
 
-function assignmentCandidate(value) {
-    const parsed = v.safeParse(AssigneeShape, value);
-    return parsed.success ? parsed.output : void 0;
+function hasUniqueSemanticNamespaces(semantics) {
+    const namespaces = semantics.map(semanticNamespace);
+    return new Set(namespaces).size === namespaces.length;
 }
 
-function assignmentValueIssues(args, value) {
-    const retained = previousAssignmentIdentities(args), issues = [];
-    return visitAssignmentEntries({
-        entryType: args.entryType,
-        value: value,
-        roles: args.roles,
-        fields: args.fields,
-        of: args.of,
-        path: "$"
-    }, ({assignee: assignee, roles: roles, path: path}) => {
-        consumeRetainedAssignment({
-            retained: retained,
-            path: path,
-            identity: assignmentIdentity(assignee)
-        }) || issues.push(...assignmentCandidateIssues({
-            roles: roles,
-            memberRoles: args.memberRoles,
-            roleAliases: args.roleAliases
-        }, assignee));
-    }), issues.length === 0 ? void 0 : issues;
+function semanticsFieldSchema(semantic) {
+    return v.optional(v.pipe(v.array(semantic), v.minLength(1, "declare at least one semantic, or omit `semantics`"), v.check(hasUniqueSemanticNamespaces, "declare at most one semantic from each namespace")));
 }
 
-function consumeRetainedAssignment(args) {
-    const identities = args.retained.get(args.path), remaining = identities?.get(args.identity) ?? 0;
-    return remaining === 0 || identities === void 0 ? !1 : (remaining === 1 ? identities.delete(args.identity) : identities.set(args.identity, remaining - 1), 
-    !0);
-}
+const SemanticsFieldSchema = semanticsFieldSchema(SemanticSchema), ActionSemanticsFieldSchema = semanticsFieldSchema(ActionSemanticSchema);
 
-function previousAssignmentIdentities(args) {
-    const retained = /* @__PURE__ */ new Map;
-    if (args.previousValue === void 0 || args.entryType === "assignee") return retained;
-    const schema = wholeValueSchema({
-        entryType: args.entryType,
-        shape: args,
-        leaf: valueSchemas
-    });
-    if (schema === void 0) return retained;
-    const previous = v.safeParse(schema, args.previousValue);
-    return previous.success && visitAssignmentEntries({
-        entryType: args.entryType,
-        value: previous.output,
-        roles: args.roles,
-        fields: args.fields,
-        of: args.of,
-        path: "$"
-    }, ({assignee: assignee, path: path}) => {
-        const identities = retained.get(path) ?? /* @__PURE__ */ new Map, identity = assignmentIdentity(assignee);
-        identities.set(identity, (identities.get(identity) ?? 0) + 1), retained.set(path, identities);
-    }), retained;
+function actionFields(schemas) {
+    const {op: op, group: group, effect: effect} = schemas;
+    return {
+        name: NonEmpty,
+        semantics: ActionSemanticsFieldSchema,
+        title: v.optional(v.string()),
+        description: v.optional(v.string()),
+        group: v.optional(group),
+        when: v.optional(ConditionSchema),
+        filter: v.optional(ConditionSchema),
+        params: v.optional(v.array(ActionParamSchema)),
+        ops: v.optional(v.array(op)),
+        effects: v.optional(v.array(effect)),
+        spawn: v.optional(SubworkflowsSchema)
+    };
 }
 
-function visitAssignmentEntries(args, visit) {
-    if (assignmentKindAcceptsRoles(args.entryType)) {
-        visitAssignmentCandidates(args, visit);
-        return;
-    }
-    if (args.entryType === "object") {
-        visitAssignmentFields({
-            fields: args.fields,
-            value: args.value,
-            path: args.path
-        }, visit);
-        return;
-    }
-    if (!(args.entryType !== "array" || !Array.isArray(args.value))) for (const row of args.value) visitAssignmentFields({
-        fields: args.of,
-        value: row,
-        path: `${args.path}[]`
-    }, visit);
-}
+const StoredActionSchema = pinned()(v.strictObject({
+    ...actionFields({
+        op: StoredOpSchema,
+        group: StoredGroupMembershipSchema,
+        effect: EffectSchema
+    }),
+    roles: v.optional(v.array(NonEmpty))
+})), TerminalActivityStatus = picklist(TERMINAL_ACTIVITY_STATUSES), RawAuthoringActionSchema = pinned()(v.strictObject({
+    ...actionFields({
+        op: AuthoringOpSchema,
+        group: AuthoringGroupMembershipSchema,
+        effect: AuthoringEffectSchema
+    }),
+    roles: v.optional(v.array(NonEmpty)),
+    status: v.optional(TerminalActivityStatus)
+})), AuthoringActionSchema = pinned()(RawAuthoringActionSchema), requirementBase = {
+    name: NonEmpty,
+    title: v.optional(v.string()),
+    description: v.optional(v.string())
+}, GroqRequirementSchemaRaw = v.strictObject({
+    ...requirementBase,
+    type: v.literal("groq"),
+    query: ConditionSchema
+}), SingleSubjectRequirementSchemaRaw = v.strictObject({
+    ...requirementBase,
+    type: v.literal("singleSubject")
+}), GroqRequirementSchema = pinned()(GroqRequirementSchemaRaw), StartRequirementSchema = pinned()(v.variant("type", [ GroqRequirementSchemaRaw, SingleSubjectRequirementSchemaRaw ]));
 
-function visitAssignmentCandidates(args, visit) {
-    if (args.roles === void 0) return;
-    const indexedValues = args.entryType === "assignees" && Array.isArray(args.value) ? args.value.map(value => ({
-        value: value,
-        path: args.path
-    })) : [ {
-        value: args.value,
-        path: args.path
-    } ];
-    for (const {value: value, path: path} of indexedValues) {
-        const assignee = assignmentCandidate(value);
-        assignee !== void 0 && visit({
-            assignee: assignee,
-            roles: args.roles,
-            path: path
-        });
-    }
+function activityFields({field: field, action: action, target: target, group: group}) {
+    return {
+        name: NonEmpty,
+        semantics: SemanticsFieldSchema,
+        title: v.optional(v.string()),
+        description: v.optional(v.string()),
+        groups: v.optional(v.array(GroupSchema)),
+        group: v.optional(group),
+        target: v.optional(target),
+        filter: v.optional(ConditionSchema),
+        requirements: v.optional(v.array(GroqRequirementSchema)),
+        actions: v.optional(v.array(action)),
+        fields: v.optional(v.array(field))
+    };
 }
 
-function visitAssignmentFields(args, visit) {
-    if (!(args.fields === void 0 || !isRecord(args.value))) for (const field of args.fields) visitAssignmentShape({
-        shape: field,
-        value: args.value[field.name],
-        path: `${args.path}.${field.name}`
-    }, visit);
-}
+const StoredActivitySchema = pinned()(v.strictObject(activityFields({
+    field: FieldEntrySchema,
+    action: StoredActionSchema,
+    target: StoredManualTargetSchema,
+    group: StoredGroupMembershipSchema
+}))), AuthoringActivitySchema = pinned()(v.strictObject(activityFields({
+    field: AuthoringFieldEntrySchema,
+    action: AuthoringActionSchema,
+    target: AuthoringManualTargetSchema,
+    group: AuthoringGroupMembershipSchema
+})));
 
-function visitAssignmentShape(args, visit) {
-    visitAssignmentEntries({
-        entryType: args.shape.type,
-        value: args.value,
-        roles: args.shape.roles,
-        fields: args.shape.fields,
-        of: args.shape.of,
-        path: args.path
-    }, visit);
+function transitionFields(when) {
+    return {
+        name: NonEmpty,
+        title: v.optional(v.string()),
+        description: v.optional(v.string()),
+        to: NonEmpty,
+        when: when
+    };
 }
 
-function assignmentCandidateIssues(args, assignee) {
-    if (assignee.type === "role") return collectiveRoleIssues(args, assignee.role);
-    const held = args.memberRoles?.[assignee.id];
-    return held === void 0 ? args.memberRoles === void 0 ? [] : [ `user "${assignee.id}" has no available project membership for role eligibility` ] : args.roles.some(required => actorFulfillsRole({
-        actorRoles: held,
-        required: required,
-        aliases: args.roleAliases
-    })) ? [] : [ `user "${assignee.id}" does not fulfill any eligible role: ${formatEligibleRoles(args.roles)}` ];
-}
+const StoredTransitionSchema = pinned()(v.strictObject(transitionFields(ConditionSchema))), AuthoringTransitionSchema = pinned()(v.strictObject(transitionFields(v.optional(ConditionSchema)))), GuardActionSchema = picklist(MUTATION_GUARD_ACTIONS), GuardActionsSchema = v.array(GuardActionSchema), NonEmptyGuardActionsSchema = v.pipe(GuardActionsSchema, v.minLength(1, GUARD_ACTIONS_REQUIRED_MESSAGE)), GuardReadPath = v.pipe(NonEmpty, v.check(path => !/[\r\n\u2028\u2029]/.test(path), "a guard read path cannot contain a line break")), GuardReadSchema = pinned()(v.variant("type", [ v.strictObject({
+    type: v.literal("self")
+}), v.strictObject({
+    type: v.literal("now")
+}), v.strictObject({
+    type: v.literal("fieldRead"),
+    field: FieldEntryName,
+    path: v.optional(GuardReadPath)
+}), v.strictObject({
+    type: v.literal("effectsRead"),
+    effect: v.pipe(NonEmpty, v.check(name => !name.includes("'"), "an effect name cannot contain `'`")),
+    path: v.optional(GuardReadPath)
+}) ]));
 
-function collectiveRoleIssues(args, role) {
-    return args.roles.includes(role) ? [] : [ `collective role "${role}" is not eligible — this entry accepts ${formatEligibleRoles(args.roles)}` ];
+function guardMatchFields(read, actions) {
+    return {
+        types: v.optional(v.array(NonEmpty)),
+        idRefs: v.optional(v.array(read)),
+        idPatterns: v.optional(v.array(NonEmpty)),
+        actions: actions
+    };
 }
 
-function formatEligibleRoles(roles) {
-    return roles.map(role => `"${role}"`).join(", ");
+function guardFields(read, actions) {
+    return {
+        name: NonEmpty,
+        title: v.optional(v.string()),
+        description: v.optional(v.string()),
+        match: v.strictObject(guardMatchFields(read, actions)),
+        predicate: v.optional(v.string()),
+        metadata: v.optional(v.record(NonEmpty, read))
+    };
 }
 
-function issuesOf(check) {
-    return "issues" in check ? check.issues : void 0;
-}
+const GuardSchema = v.strictObject(guardFields(NonEmpty, GuardActionsSchema)), AuthoringGuardSchema = v.strictObject(guardFields(GuardReadSchema, NonEmptyGuardActionsSchema));
 
-function validateFieldValue(args) {
-    const check = checkValueAgainst(args, valueSchemas);
-    if ("issues" in check) throw new FieldValueShapeError({
-        entryType: args.entryType,
-        entryName: args.entryName,
-        issues: check.issues,
-        mode: "value"
-    });
-    return check.output;
+function stageFields({field: field, activity: activity, transition: transition, guard: guard, editable: editable}) {
+    return {
+        name: NonEmpty,
+        semantics: SemanticsFieldSchema,
+        title: v.optional(v.string()),
+        description: v.optional(v.string()),
+        groups: v.optional(v.array(GroupSchema)),
+        activities: v.optional(v.array(activity)),
+        transitions: v.optional(v.array(transition)),
+        guards: v.optional(v.array(guard)),
+        fields: v.optional(v.array(field)),
+        editable: v.optional(v.record(FieldEntryName, editable))
+    };
 }
 
-const BARE_ID_SOURCE = "[A-Za-z0-9_][A-Za-z0-9._-]*", BARE_ID_RE = new RegExp(`^${BARE_ID_SOURCE}$`), ALIAS_REF_RE = new RegExp(`^@${RESOURCE_ALIAS_NAME_SOURCE}:${BARE_ID_SOURCE}$`);
+const StoredStageSchema = pinned()(v.strictObject(stageFields({
+    field: FieldEntrySchema,
+    activity: StoredActivitySchema,
+    transition: StoredTransitionSchema,
+    guard: GuardSchema,
+    editable: StoredEditableSchema
+}))), AuthoringStageSchema = pinned()(v.strictObject(stageFields({
+    field: AuthoringFieldEntrySchema,
+    activity: AuthoringActivitySchema,
+    transition: AuthoringTransitionSchema,
+    guard: AuthoringGuardSchema,
+    editable: AuthoringEditableSchema
+}))), RoleAliasesSchema = pinned()(v.record(NonEmpty, v.pipe(v.array(NonEmpty), v.minLength(1, "a role alias must list at least one fulfilling role")))), WORKFLOW_LIFECYCLES = _exhaustiveOptions()([ "standalone", "child" ]), START_KINDS = _exhaustiveOptions()([ "interactive", "autonomous" ]);
 
-function isAuthoringRefId(id) {
-    return id.startsWith("@") ? ALIAS_REF_RE.test(id) : id.includes(":") ? isGdrUri(id) : BARE_ID_RE.test(id);
+function startFields(kind) {
+    return {
+        kind: kind,
+        filter: v.optional(ConditionSchema),
+        requirements: v.optional(v.array(StartRequirementSchema))
+    };
 }
 
-function isBareSeedId(id) {
-    return BARE_ID_RE.test(id);
+const StoredStartSchema = pinned()(v.strictObject(startFields(picklist(START_KINDS)))), AuthoringStartSchema = pinned()(v.strictObject(startFields(v.optional(picklist(START_KINDS)))));
+
+function workflowFields({field: field, stage: stage, start: start}) {
+    return {
+        name: NonEmpty,
+        semantics: SemanticsFieldSchema,
+        title: NonEmpty,
+        description: v.optional(v.string()),
+        groups: v.optional(v.array(GroupSchema)),
+        lifecycle: v.optional(picklist(WORKFLOW_LIFECYCLES)),
+        start: v.optional(start),
+        initialStage: NonEmpty,
+        fields: v.optional(v.array(field)),
+        stages: v.pipe(v.array(stage), v.minLength(1, "must declare at least one stage")),
+        predicates: v.optional(v.record(groqIdentifier("`$<name>`"), ConditionSchema)),
+        roleAliases: v.optional(RoleAliasesSchema)
+    };
 }
 
-const AuthoringRefId = v.pipe(v.string(), v.check(isAuthoringRefId, "must be a bare document id, a GDR URI, or a portable `@<alias>:<id>` reference")), AuthoringGdrShape = v.looseObject({
-    id: AuthoringRefId,
-    type: NonEmptyString
-}), seedValueSchemas = {
-    ...valueSchemas,
-    "doc.ref": v.union([ v.null(), AuthoringGdrShape ]),
-    "doc.refs": v.array(AuthoringGdrShape),
-    subject: v.union([ v.null(), AuthoringGdrShape ]),
-    "release.ref": v.union([ v.null(), v.looseObject({
-        id: AuthoringRefId,
-        type: v.literal("system.release"),
-        releaseName: NonEmptyString
-    }) ])
-};
-
-function checkLiteralSeed(args) {
-    return args.value === null ? [ "a literal seed cannot be null — omit `initialValue` to start the field empty" ] : issuesOf(checkValueAgainst(args, seedValueSchemas));
-}
+const WorkflowDefinitionSchema = pinned()(v.strictObject(workflowFields({
+    field: FieldEntrySchema,
+    stage: StoredStageSchema,
+    start: StoredStartSchema
+})));
 
-function validateFieldAppendItem(args) {
-    const schema = appendItemSchema(args.entryType, args);
-    if (schema === void 0) throw new FieldValueShapeError({
-        entryType: args.entryType,
-        entryName: args.entryName,
-        issues: [ `field entry type ${args.entryType} does not support append` ],
-        mode: "item"
-    });
-    const result = v.safeParse(schema, args.item);
-    if (!result.success) throw new FieldValueShapeError({
-        entryType: args.entryType,
-        entryName: args.entryName,
-        issues: formatIssues(result.issues),
-        mode: "item"
-    });
-    const assignmentArgs = {
-        entryType: appendAssignmentEntryType(args.entryType),
-        value: result.output,
-        roles: args.roles,
-        fields: args.entryType === "array" ? args.of : void 0,
-        memberRoles: args.memberRoles,
-        roleAliases: args.roleAliases
-    }, assignmentIssues = assignmentValueIssues(assignmentArgs, result.output);
-    if (assignmentIssues !== void 0) throw new FieldValueShapeError({
-        entryType: args.entryType,
-        entryName: args.entryName,
-        issues: assignmentIssues,
-        mode: "item"
-    });
-    const typeIssues = refTypeIssues({
-        entryType: args.entryType,
-        types: args.types,
-        value: [ args.item ]
-    });
-    if (typeIssues !== void 0) throw new FieldValueShapeError({
-        entryType: args.entryType,
-        entryName: args.entryName,
-        issues: typeIssues,
-        mode: "item"
+function parseStoredDefinition(input, label) {
+    return parseOrThrow({
+        schema: WorkflowDefinitionSchema,
+        input: input,
+        label: label
     });
-    return result.output;
 }
 
-function appendAssignmentEntryType(entryType) {
-    return entryType === "assignees" ? "assignee" : entryType === "array" ? "object" : entryType;
-}
+const AuthoringWorkflowSchema = pinned()(v.strictObject({
+    ...workflowFields({
+        field: AuthoringFieldEntrySchema,
+        stage: AuthoringStageSchema,
+        start: AuthoringStartSchema
+    }),
+    runtime: v.optional(RuntimeBlockSchema)
+})), WORKFLOW_DEFINITION_TYPE = "sanity.workflow.definition";
 
-function formatIssues(issues, formatMessage = issue => issue.message) {
-    const formatOne = (issue, prefix) => {
-        const keys = [ ...prefix, ...issue.path?.map(p => p.key) ?? [] ], sub = issue.issues?.filter(candidate => candidate.expected !== "null");
-        return sub !== void 0 && sub.length > 0 ? sub.flatMap(candidate => formatOne(candidate, keys)) : [ `${keys.length > 0 ? `at ${keys.join(".")}: ` : ""}${formatMessage(issue)}` ];
-    };
-    return issues.flatMap(issue => formatOne(issue, []));
+function isStartableDefinition(definition) {
+    return definition.lifecycle !== "child";
 }
 
-const NonEmpty = NonEmptyString, PositiveInt = v.pipe(v.number(), v.integer(), v.minValue(1)), GROQ_IDENTIFIER = /^[A-Za-z_][A-Za-z0-9_]*$/;
-
-function groqIdentifier(referencedAs) {
-    return v.pipe(v.string(), v.regex(GROQ_IDENTIFIER, `must be a GROQ-safe identifier (letters, digits, underscore; not starting with a digit) because it is referenced as ${referencedAs} in GROQ conditions`));
+function startKindOf(definition) {
+    return definition.start?.kind ?? "interactive";
 }
 
-function picklist(options) {
-    return v.picklist(options, invalidOptionMessage(options));
+function isSubjectEntry(entry) {
+    return entry.type === "subject";
 }
 
-function invalidOptionMessage(options) {
-    return `Invalid option: expected one of ${options.map(option => `"${option}"`).join("|")}`;
+function isDueDateEntry(entry) {
+    return entry.type === "dueDate" || entry.type === "dueDatetime";
 }
 
-function exhaustiveOptions() {
-    return options => options;
+function isInputSourced(entry) {
+    return entry.initialValue?.type === "input";
 }
 
-function pinned() {
-    return (schema, ..._exact) => schema;
+function parseOrThrow({schema: schema, input: input, label: label}) {
+    const result = v.safeParse(schema, input);
+    if (!result.success) throw new Error(formatValidationError(label, issuesFromValibot(result.issues)));
+    return result.output;
 }
 
-const LiteralSchema = v.strictObject({
-    type: v.literal("literal"),
-    value: v.unknown()
-}), FieldReadSchema = v.strictObject({
-    type: v.literal("fieldRead"),
-    scope: v.optional(v.union([ v.literal("workflow"), v.literal("stage") ])),
-    field: NonEmpty,
-    path: v.optional(v.string())
-}), FieldSourceSchema = v.variant("type", [ v.strictObject({
-    type: v.literal("input")
-}), v.strictObject({
-    type: v.literal("query"),
-    query: NonEmpty
-}), LiteralSchema, FieldReadSchema ]), ValueExprSchema = v.lazy(() => v.variant("type", [ LiteralSchema, FieldReadSchema, v.strictObject({
-    type: v.literal("param"),
-    param: NonEmpty
-}), v.strictObject({
-    type: v.literal("actor")
-}), v.strictObject({
-    type: v.literal("now")
-}), v.strictObject({
-    type: v.literal("self")
-}), v.strictObject({
-    type: v.literal("stage")
-}), v.strictObject({
-    type: v.literal("object"),
-    fields: v.record(NonEmpty, ValueExprSchema)
-}) ])), StoredFieldRefSchema = v.strictObject({
-    scope: picklist(FIELD_SCOPES),
-    field: NonEmpty
-}), AuthoringFieldRefSchema = v.strictObject({
-    scope: v.optional(picklist(FIELD_SCOPES)),
-    field: NonEmpty
-}), HREF_SCHEMES = [ "http:", "https:" ];
-
-function isHttpUrl(value) {
-    try {
-        return HREF_SCHEMES.includes(new URL(value).protocol);
-    } catch {
-        return !1;
+function labelFor(fn, value) {
+    if (value && typeof value == "object" && "name" in value) {
+        const raw = value.name;
+        if (typeof raw == "string") return `${fn}("${raw}")`;
     }
+    return fn;
 }
 
-const UrlString = v.pipe(v.string(), v.url("must be a valid URL"), v.check(isHttpUrl, "must be an http(s) URL"));
-
-function manualTargetSchema(ref) {
-    return v.variant("type", [ v.strictObject({
-        type: v.literal("url"),
-        url: UrlString
-    }), v.strictObject({
-        type: v.literal("field"),
-        field: ref
-    }) ]);
-}
-
-const StoredManualTargetSchema = manualTargetSchema(StoredFieldRefSchema), AuthoringManualTargetSchema = manualTargetSchema(v.union([ NonEmpty, AuthoringFieldRefSchema ])), ConditionSchema = NonEmpty;
+const NonEmptyString = v.pipe(v.string(), v.nonEmpty("must not be empty"));
 
-function opSchemas(targetSchema) {
-    return [ v.strictObject({
-        type: v.literal("field.set"),
-        target: targetSchema,
-        value: ValueExprSchema
-    }), v.strictObject({
-        type: v.literal("field.setIfMissing"),
-        target: targetSchema,
-        value: ValueExprSchema
-    }), v.strictObject({
-        type: v.literal("field.unset"),
-        target: targetSchema
-    }), v.strictObject({
-        type: v.literal("field.append"),
-        target: targetSchema,
-        value: ValueExprSchema
-    }), v.strictObject({
-        type: v.literal("field.inc"),
-        target: targetSchema,
-        value: v.optional(ValueExprSchema)
-    }), v.strictObject({
-        type: v.literal("field.dec"),
-        target: targetSchema,
-        value: v.optional(ValueExprSchema)
-    }), v.strictObject({
-        type: v.literal("field.updateWhere"),
-        target: targetSchema,
-        where: ConditionSchema,
-        value: ValueExprSchema
-    }), v.strictObject({
-        type: v.literal("field.removeWhere"),
-        target: targetSchema,
-        where: ConditionSchema
-    }) ];
+function asPredicate(validate) {
+    return value => {
+        try {
+            return validate(value), !0;
+        } catch {
+            return !1;
+        }
+    };
 }
 
-const StoredFieldOpSchema = v.variant("type", [ ...opSchemas(StoredFieldRefSchema) ]), StoredOpSchema = v.variant("type", [ ...opSchemas(StoredFieldRefSchema), v.strictObject({
-    type: v.literal("status.set"),
-    activity: NonEmpty,
-    status: picklist(ACTIVITY_STATUSES)
-}) ]), AuditOpSchema = v.strictObject({
-    type: v.literal("audit"),
-    target: AuthoringFieldRefSchema,
-    value: ValueExprSchema,
-    stampFields: v.optional(v.strictObject({
-        actor: v.optional(NonEmpty),
-        at: v.optional(NonEmpty)
-    }))
-}), AuthoringOpSchema = v.variant("type", [ ...opSchemas(AuthoringFieldRefSchema), v.strictObject({
-    type: v.literal("status.set"),
-    activity: v.optional(NonEmpty),
-    status: picklist(ACTIVITY_STATUSES)
-}), AuditOpSchema ]), GroupName = v.pipe(v.string(), v.regex(GROQ_IDENTIFIER, "must be an identifier (letters, digits, underscore; not starting with a digit)")), GroupSchema = pinned()(v.strictObject({
-    name: GroupName,
-    title: v.optional(v.string()),
-    description: v.optional(v.string()),
-    kind: v.optional(picklist(GROUP_KINDS))
-})), GroupNameList = v.pipe(v.array(GroupName), v.minLength(1, "name at least one group, or omit `group`"), v.check(names => new Set(names).size === names.length, "a group is listed more than once — list each group once")), StoredGroupMembershipSchema = GroupNameList, AuthoringGroupMembershipSchema = v.union([ GroupName, GroupNameList ]);
+const isValidTag = asPredicate(validateTag), isValidAliasName = asPredicate(validateResourceAliasName), isValidDatasetId = asPredicate(datasetResourceParts);
 
-function groupMembershipNames(group) {
-    return group === void 0 ? [] : typeof group == "string" ? [ group ] : [ ...group ];
+function lakeSegment(label) {
+    return v.pipe(v.string(), v.nonEmpty(), v.check(isValidTag, `invalid ${label} — ${LAKE_ID_SEGMENT_GLOSS}`));
 }
 
-const FIELD_VALUE_KINDS = [ "doc.ref", "doc.refs", "subject", "release.ref", "string", "text", "number", "progress", "boolean", "date", "dueDate", "datetime", "dueDatetime", "url", "actor", "assignee", "assignees", "object", "array" ], FieldValueKindSchema = picklist(FIELD_VALUE_KINDS), FieldKindSchema = picklist(FIELD_VALUE_KINDS), AUTHORING_FIELD_SUGAR_KINDS = exhaustiveOptions()([ "claim", "todoList", "notes" ]), AUTHORING_FIELD_KINDS = [ ...FIELD_VALUE_KINDS, ...AUTHORING_FIELD_SUGAR_KINDS ], AuthoringRawFieldKindSchema = v.picklist(FIELD_VALUE_KINDS, issue => `${invalidOptionMessage(AUTHORING_FIELD_KINDS)} but received ${JSON.stringify(issue.input)}`), FieldEntryName = groqIdentifier("`$fields.<name>`"), FiniteNumber = v.pipe(v.number(), v.finite("must be finite")), ScalarValidationSchema = v.pipe(v.strictObject({
-    min: v.optional(FiniteNumber),
-    max: v.optional(FiniteNumber)
-}), v.check(validation => validation.min !== void 0 || validation.max !== void 0, "declare at least one bound, or omit `validation`"), v.check(validation => validation.min === void 0 || validation.max === void 0 || validation.min <= validation.max, "`min` must be less than or equal to `max`")), ChoiceOptionsSchema = v.strictObject({
-    list: v.pipe(v.array(v.strictObject({
-        title: NonEmpty,
-        value: v.union([ v.string(), v.number() ])
-    })), v.minLength(1, "declare at least one choice, or omit `options`"))
+const WorkflowResourceSchema = v.variant("type", [ v.object({
+    type: v.literal("dataset"),
+    id: v.pipe(NonEmptyString, v.check(isValidDatasetId, 'invalid dataset resource id — expected "<projectId>.<dataset>"'))
+}), v.object({
+    type: v.literal("canvas"),
+    id: NonEmptyString
+}), v.object({
+    type: v.literal("media-library"),
+    id: NonEmptyString
+}), v.object({
+    type: v.literal("dashboard"),
+    id: NonEmptyString
+}) ]), ResourceBindingSchema = v.object({
+    name: v.pipe(NonEmptyString, v.check(isValidAliasName, "invalid resource handle name — lowercase letters, digits and dashes only, no leading dash")),
+    resource: WorkflowResourceSchema
+}), DefinitionSchema = v.custom(input => typeof input == "object" && input !== null && typeof input.name == "string", "expected a workflow definition (an object with a string `name`)"), DeploymentSchema = v.object({
+    name: lakeSegment("name"),
+    expectedMinReaderModel: v.optional(v.custom(() => !0), void 0),
+    tag: lakeSegment("tag"),
+    workflowResource: WorkflowResourceSchema,
+    resourceAliases: v.optional(v.pipe(v.array(ResourceBindingSchema), v.check(bindings => duplicateHandleMessage(bindings) === void 0, issue => duplicateHandleMessage(issue.input) ?? "duplicate resource handle name"))),
+    definitions: v.pipe(v.array(DefinitionSchema), v.minLength(1, "a deployment needs at least one definition")),
+    runtime: v.optional(RuntimeBlockSchema)
 });
 
-function asShape(input) {
-    return typeof input == "object" && input !== null ? input : {};
+function firstDuplicatePair(items, keyOf) {
+    const seen = /* @__PURE__ */ new Map;
+    for (const item of items) {
+        const key = keyOf(item), earlier = seen.get(key);
+        if (earlier !== void 0) return [ earlier, item ];
+        seen.set(key, item);
+    }
 }
 
-function compositeShapeOk(input) {
-    const shape = asShape(input);
-    return shape.type === "object" ? Array.isArray(shape.fields) && shape.fields.length > 0 && shape.of === void 0 : shape.type === "array" ? Array.isArray(shape.of) && shape.of.length > 0 && shape.fields === void 0 : shape.fields === void 0 && shape.of === void 0;
+function duplicateHandleMessage(bindings) {
+    const pair = firstDuplicatePair(bindings, binding => binding.name);
+    if (pair !== void 0) return `duplicate resource handle name "${pair[1].name}" — each binding name must be unique within a deployment`;
 }
 
-function compositeShapeMessage(input) {
-    const shape = asShape(input);
-    return shape.type === "object" ? shape.of !== void 0 ? "an `object` kind declares its sub-fields with `fields`, not `of`" : "an `object` kind needs a non-empty `fields` list of sub-field shapes" : shape.type === "array" ? shape.fields !== void 0 ? "an `array` kind declares its item shape with `of`, not `fields`" : "an `array` kind needs a non-empty `of` list of sub-field shapes" : `\`fields\` / \`of\` are only valid on the \`object\` / \`array\` kinds, not "${String(shape.type)}"`;
+function duplicateNameMessage(deployments) {
+    const pair = firstDuplicatePair(deployments, deployment => deployment.name);
+    if (pair !== void 0) return `duplicate deployment name "${pair[1].name}" — each deployment must use a unique name`;
 }
 
-function duplicateSubfieldName(input) {
-    const shape = asShape(input);
-    let list = [];
-    Array.isArray(shape.fields) ? list = shape.fields : Array.isArray(shape.of) && (list = shape.of);
-    const seen = /* @__PURE__ */ new Set;
-    for (const item of list) {
-        const name = asShape(item).name;
-        if (typeof name == "string") {
-            if (seen.has(name)) return name;
-            seen.add(name);
-        }
+function partitionKey(deployment) {
+    return `${resourceGdr(deployment.workflowResource)} ${deployment.tag}`;
+}
+
+function partitionCollisionMessage(deployments) {
+    const pair = firstDuplicatePair(deployments, partitionKey);
+    if (pair === void 0) return;
+    const [first, second] = pair;
+    return `deployments "${first.name}" and "${second.name}" share workflow resource + tag "${second.tag}" — both would write into the same partition; change one deployment’s tag or resource`;
+}
+
+const TelemetryLoggerSchema = v.custom(input => typeof input == "object" && input !== null && typeof input.log == "function", "expected a telemetry logger (an object with a `log` function)"), WorkflowConfigSchema = v.object({
+    deployments: v.pipe(v.array(DeploymentSchema), v.minLength(1, "a config needs at least one deployment"), v.check(deployments => duplicateNameMessage(deployments) === void 0, issue => duplicateNameMessage(issue.input) ?? "duplicate deployment name"), v.check(deployments => partitionCollisionMessage(deployments) === void 0, issue => partitionCollisionMessage(issue.input) ?? "duplicate deployment partition")),
+    telemetry: v.optional(TelemetryLoggerSchema)
+});
+
+function resourceAliasesToMap(resourceAliases) {
+    return Object.fromEntries((resourceAliases ?? []).map(binding => [ binding.name, binding.resource ]));
+}
+
+const FIELD_READ = /^\$fields\.(\w+)(?:\.(.+))?$/, EFFECTS_READ = /^\$effects\['([^']+)'\](?:\.(.+))?$/;
+
+function isGuardReadExpr(expr) {
+    return expr === "$self" || expr === "$now" || FIELD_READ.test(expr) || EFFECTS_READ.test(expr);
+}
+
+function printGuardRead(read) {
+    switch (read.type) {
+      case "self":
+        return "$self";
+
+      case "now":
+        return "$now";
+
+      case "fieldRead":
+        return read.path === void 0 ? `$fields.${read.field}` : `$fields.${read.field}.${read.path}`;
+
+      case "effectsRead":
+        return read.path === void 0 ? `$effects['${read.effect}']` : `$effects['${read.effect}'].${read.path}`;
     }
 }
 
-function compositeChecked(entries) {
-    return v.pipe(v.strictObject(entries), v.check(input => compositeShapeOk(input), issue => compositeShapeMessage(issue.input)), v.check(input => duplicateSubfieldName(input) === void 0, issue => `duplicate sub-field name "${duplicateSubfieldName(issue.input)}" — sub-field names must be unique within \`fields\` / \`of\``));
+function groq(strings, ...values) {
+    return strings.reduce((out, part, i) => i === 0 ? part : `${out}${serializeGroqValue(values[i - 1])}${part}`, "");
 }
 
-const AssignmentRolesSchema = v.pipe(v.array(NonEmpty), v.minLength(1, "declare at least one eligible role, or omit `roles`")), FieldShapeSchema = v.lazy(() => v.pipe(compositeChecked({
-    type: FieldValueKindSchema,
-    name: FieldEntryName,
-    title: v.optional(v.string()),
-    description: v.optional(v.string()),
-    options: v.optional(ChoiceOptionsSchema),
-    validation: v.optional(ScalarValidationSchema),
-    roles: v.optional(AssignmentRolesSchema),
-    fields: v.optional(v.array(FieldShapeSchema)),
-    of: v.optional(v.array(FieldShapeSchema))
-}), choiceOptionsCheck(), scalarValidationCheck(), assignmentRolesCheck())), StoredEditableSchema = v.union([ v.literal(!0), NonEmpty ]), AuthoringEditableSchema = v.union([ v.literal(!0), v.array(NonEmpty), NonEmpty ]);
+function serializeGroqValue(value) {
+    const serialized = JSON.stringify(value);
+    if (serialized === void 0) throw new Error(`groq tag cannot serialize ${typeof value} — interpolate JSON-representable values only`);
+    return serialized;
+}
 
-function fieldBase(editable, group) {
+function desugarWorkflow(authoring) {
+    const issues = [];
+    checkReservedRoleAliasKeys(authoring.roleAliases, issues);
+    const roleAliases = normalizeRoleAliases(authoring.roleAliases), ctx = {
+        issues: issues,
+        roleAliases: roleAliases,
+        effectRuntime: /* @__PURE__ */ new Map
+    }, workflowFields2 = desugarFieldEntries({
+        entries: authoring.fields,
+        path: [ "fields" ],
+        ctx: ctx
+    }), workflowLayer = layerOf(workflowFields2), stages = authoring.stages.map((stage, i) => {
+        const path = [ "stages", i ], stageFields2 = desugarFieldEntries({
+            entries: stage.fields,
+            path: [ ...path, "fields" ],
+            ctx: ctx
+        }), stageEnv = {
+            layers: [ {
+                scope: "stage",
+                entries: layerOf(stageFields2)
+            }, {
+                scope: "workflow",
+                entries: workflowLayer
+            } ]
+        }, activities = (stage.activities ?? []).map((activity, j) => desugarActivity({
+            activity: activity,
+            path: [ ...path, "activities", j ],
+            stageEnv: stageEnv,
+            ctx: ctx
+        })), transitions = (stage.transitions ?? []).map(transition => desugarTransition({
+            transition: transition
+        })), editable = desugarStageEditable({
+            overrides: stage.editable,
+            inScope: editableFieldNames({
+                workflowFields: workflowFields2,
+                stageFields: stageFields2,
+                activities: activities
+            }),
+            path: [ ...path, "editable" ],
+            ctx: ctx
+        });
+        return {
+            ...stripUndefined({
+                name: stage.name,
+                semantics: stage.semantics,
+                title: stage.title,
+                description: stage.description,
+                groups: stage.groups,
+                guards: stage.guards?.map(desugarGuard)
+            }),
+            ...stageFields2 ? {
+                fields: stageFields2
+            } : {},
+            ...activities.length > 0 ? {
+                activities: activities
+            } : {},
+            ...transitions.length > 0 ? {
+                transitions: transitions
+            } : {},
+            ...editable ? {
+                editable: editable
+            } : {}
+        };
+    });
     return {
-        name: FieldEntryName,
-        title: v.optional(v.string()),
-        description: v.optional(v.string()),
-        group: v.optional(group),
-        required: v.optional(v.boolean()),
-        initialValue: v.optional(FieldSourceSchema),
-        editable: v.optional(editable)
+        definition: {
+            ...stripUndefined({
+                name: authoring.name,
+                semantics: authoring.semantics,
+                title: authoring.title,
+                description: authoring.description,
+                groups: authoring.groups,
+                lifecycle: authoring.lifecycle,
+                start: desugarStart(authoring.start),
+                initialStage: authoring.initialStage,
+                predicates: authoring.predicates,
+                roleAliases: roleAliases
+            }),
+            ...workflowFields2 ? {
+                fields: workflowFields2
+            } : {},
+            stages: stages
+        },
+        runtime: collectRuntime({
+            authoring: authoring,
+            ctx: ctx
+        }),
+        issues: ctx.issues
     };
 }
 
-function fieldEntryFields({editable: editable, group: group, kind: kind = FieldKindSchema}) {
-    return {
-        type: kind,
-        ...fieldBase(editable, group),
-        options: v.optional(ChoiceOptionsSchema),
-        validation: v.optional(ScalarValidationSchema),
-        types: v.optional(v.pipe(v.array(NonEmpty), v.minLength(1, "declare at least one accepted type, or omit `types` to accept any"))),
-        roles: v.optional(AssignmentRolesSchema),
-        fields: v.optional(v.array(FieldShapeSchema)),
-        of: v.optional(v.array(FieldShapeSchema))
+function collectRuntime(args) {
+    const {kind: kind} = args.authoring.runtime ?? {}, effects = Object.fromEntries(args.ctx.effectRuntime), declared = {
+        ...kind === void 0 ? {} : {
+            kind: kind
+        },
+        ...Object.keys(effects).length === 0 ? {} : {
+            effects: effects
+        }
+    };
+    return Object.keys(declared).length === 0 ? void 0 : declared;
+}
+
+function desugarEffect(args) {
+    const {runtime: runtime, ...effect} = args.effect;
+    runtime !== void 0 && args.ctx.effectRuntime.set(effect.name, runtime);
+    const {retry: retry} = effect;
+    return retry === void 0 ? effect : {
+        ...effect,
+        retry: {
+            ...retry,
+            kind: retry.kind ?? "engine"
+        }
     };
 }
 
-function literalSeedIssues(entry) {
-    if (entry.initialValue?.type === "literal") return checkLiteralSeed({
-        entryType: entry.type,
-        value: entry.initialValue.value,
-        types: entry.types,
-        fields: entry.fields,
-        of: entry.of,
-        options: entry.options,
-        validation: entry.validation,
-        roles: entry.roles
+function desugarStart(start) {
+    if (start !== void 0) return {
+        kind: start.kind ?? "interactive",
+        ...start.filter !== void 0 ? {
+            filter: start.filter
+        } : {},
+        ...start.requirements !== void 0 ? {
+            requirements: start.requirements
+        } : {}
+    };
+}
+
+function checkReservedRoleAliasKeys(aliases, issues) {
+    for (const key of Object.keys(aliases ?? {})) key.startsWith("$") && issues.push({
+        path: [ "roleAliases", key ],
+        message: `role alias key "${key}" uses the reserved "$" prefix — that namespace is the engine's stored spelling for the universal fulfiller. Use "*" to mean "fulfills any gate", or rename the role.`
     });
 }
 
-function literalSeedCheck() {
-    return v.check(entry => literalSeedIssues(entry) === void 0, issue => `initialValue literal does not fit the declared kind: ${(literalSeedIssues(issue.input) ?? []).join("; ")}`);
+const TODOLIST_OF = [ {
+    type: "string",
+    name: "label",
+    title: "Label"
+}, {
+    type: "string",
+    name: "status",
+    title: "Status"
+}, {
+    type: "assignee",
+    name: "assignee",
+    title: "Assignee"
+}, {
+    type: "date",
+    name: "dueDate",
+    title: "Due date"
+} ], NOTES_OF = [ {
+    type: "text",
+    name: "body",
+    title: "Body"
+}, {
+    type: "actor",
+    name: "actor",
+    title: "Actor"
+}, {
+    type: "datetime",
+    name: "at",
+    title: "At"
+} ];
+
+function desugarFieldEntries({entries: entries, path: path, ctx: ctx}) {
+    return !entries || entries.length === 0 ? entries === void 0 ? void 0 : [] : entries.map((entry, i) => desugarFieldEntry({
+        entry: entry,
+        path: [ ...path, i ],
+        ctx: ctx
+    }));
 }
 
-function refTypesCheck() {
-    return v.check(entry => entry.types === void 0 || refKindAcceptsTypes(entry.type), issue => `\`types\` is only valid on \`doc.ref\` / \`doc.refs\` / \`subject\` entries, not "${issue.input.type}"`);
+function desugarFieldEntry({entry: entry, path: path, ctx: ctx}) {
+    if (entry.type === "todoList" || entry.type === "notes") return desugarListField({
+        entry: entry,
+        path: path,
+        ctx: ctx
+    });
+    const editable = normalizeEditable({
+        editable: entry.editable,
+        path: [ ...path, "editable" ],
+        ctx: ctx
+    });
+    return {
+        ...stripUndefined({
+            type: entry.type,
+            name: entry.name,
+            title: entry.title,
+            description: entry.description,
+            group: normalizeGroup(entry.group),
+            required: entry.required,
+            initialValue: entry.initialValue,
+            editable: editable,
+            options: entry.options,
+            validation: entry.validation,
+            types: entry.types,
+            roles: entry.roles,
+            fields: entry.fields,
+            of: entry.of
+        })
+    };
+}
+
+function desugarListField({entry: entry, path: path, ctx: ctx}) {
+    const editable = normalizeEditable({
+        editable: entry.editable,
+        path: [ ...path, "editable" ],
+        ctx: ctx
+    });
+    return {
+        ...stripUndefined({
+            name: entry.name,
+            title: entry.title,
+            description: entry.description,
+            group: normalizeGroup(entry.group),
+            required: entry.required,
+            initialValue: entry.initialValue,
+            editable: editable
+        }),
+        type: "array",
+        of: entry.type === "todoList" ? TODOLIST_OF : NOTES_OF
+    };
+}
+
+function normalizeEditable({editable: editable, path: path, ctx: ctx}) {
+    if (editable === void 0 || editable === !0) return editable;
+    if (Array.isArray(editable)) {
+        const condition = rolesCondition(editable, ctx.roleAliases);
+        if (condition === void 0) {
+            ctx.issues.push({
+                path: path,
+                message: "editable: [] names no roles — use `true` to open the field to anyone in its scope, or list at least one role"
+            });
+            return;
+        }
+        return condition;
+    }
+    return editable;
 }
 
-function assignmentRolesCheck() {
-    return v.check(entry => entry.roles === void 0 || assignmentKindAcceptsRoles(entry.type), issue => `\`roles\` is only valid on \`assignee\` / \`assignees\` entries, not "${issue.input.type}"`);
+function editableFieldNames({workflowFields: workflowFields2, stageFields: stageFields2, activities: activities}) {
+    const names = /* @__PURE__ */ new Set, collect = entries => {
+        for (const entry of entries ?? []) entry.editable !== void 0 && names.add(entry.name);
+    };
+    collect(workflowFields2), collect(stageFields2);
+    for (const activity of activities) collect(activity.fields);
+    return names;
 }
 
-function choiceOptionsCheck() {
-    return v.check(entry => checkChoiceList({
-        entryType: entry.type,
-        options: entry.options,
-        validation: entry.validation
-    }) === void 0, issue => (checkChoiceList({
-        entryType: issue.input.type,
-        options: issue.input.options,
-        validation: issue.input.validation
-    }) ?? []).join("; "));
+function desugarStageEditable({overrides: overrides, inScope: inScope, path: path, ctx: ctx}) {
+    if (overrides === void 0) return;
+    const out = {};
+    for (const [name, value] of Object.entries(overrides)) {
+        if (!inScope.has(name)) {
+            ctx.issues.push({
+                path: [ ...path, name ],
+                message: `stage editable override "${name}" does not narrow an editable field in scope — name a workflow/stage/activity field of this stage that declares \`editable\``
+            });
+            continue;
+        }
+        const normalized = normalizeEditable({
+            editable: value,
+            path: [ ...path, name ],
+            ctx: ctx
+        });
+        normalized !== void 0 && (out[name] = normalized);
+    }
+    return Object.keys(out).length > 0 ? out : void 0;
 }
 
-const SCALAR_VALIDATION_KINDS = /* @__PURE__ */ new Set([ "string", "text", "number", "progress" ]);
-
-function scalarValidationCheck() {
-    return v.check(entry => scalarValidationDeclarationIssues(entry) === void 0, issue => (scalarValidationDeclarationIssues(issue.input) ?? []).join("; "));
+function layerOf(entries) {
+    return new Map((entries ?? []).map(entry => [ entry.name, entry ]));
 }
 
-function scalarValidationDeclarationIssues(entry) {
-    const {type: type, validation: validation} = entry;
-    if (validation === void 0) return;
-    if (!SCALAR_VALIDATION_KINDS.has(type)) return [ `\`validation\` is only valid on \`string\` / \`text\` / \`number\` / \`progress\` values, not "${type}"` ];
-    if (type === "progress") {
-        const issues2 = Object.entries(validation).flatMap(([bound, value]) => typeof value == "number" && value >= 0 && value <= 100 ? [] : [ `\`validation.${bound}\` must stay within the progress kind's 0–100 contract` ]);
-        return issues2.length === 0 ? void 0 : issues2;
-    }
-    if (type === "number") return;
-    const issues = Object.entries(validation).flatMap(([bound, value]) => Number.isInteger(value) && value >= 0 ? [] : [ `\`validation.${bound}\` must be a non-negative integer for ${type} length` ]);
-    return issues.length === 0 ? void 0 : issues;
+function normalizeGroup(group) {
+    return group === void 0 || Array.isArray(group) ? group : [ group ];
 }
 
-const FieldEntrySchema = pinned()(v.pipe(compositeChecked(fieldEntryFields({
-    editable: StoredEditableSchema,
-    group: StoredGroupMembershipSchema
-})), refTypesCheck(), assignmentRolesCheck(), choiceOptionsCheck(), scalarValidationCheck(), literalSeedCheck())), RawAuthoringFieldEntrySchema = pinned()(v.pipe(compositeChecked(fieldEntryFields({
-    editable: AuthoringEditableSchema,
-    group: AuthoringGroupMembershipSchema,
-    kind: AuthoringRawFieldKindSchema
-})), refTypesCheck(), assignmentRolesCheck(), choiceOptionsCheck(), scalarValidationCheck(), literalSeedCheck())), ClaimFieldSchema = pinned()(v.strictObject({
-    type: v.literal("claim"),
-    name: FieldEntryName,
-    title: v.optional(v.string()),
-    description: v.optional(v.string()),
-    group: v.optional(AuthoringGroupMembershipSchema)
-}));
-
-function listSugarFields(type) {
+function desugarActivity({activity: activity, path: path, stageEnv: stageEnv, ctx: ctx}) {
+    const activityFields2 = desugarFieldEntries({
+        entries: activity.fields,
+        path: [ ...path, "fields" ],
+        ctx: ctx
+    }), env = {
+        layers: [ {
+            scope: "activity",
+            entries: layerOf(activityFields2)
+        }, ...stageEnv.layers ]
+    }, actions = (activity.actions ?? []).map((action, a) => desugarAction({
+        action: action,
+        path: [ ...path, "actions", a ],
+        env: env,
+        activityName: activity.name,
+        ctx: ctx
+    })), target = desugarTarget({
+        target: activity.target,
+        env: env,
+        path: [ ...path, "target" ],
+        ctx: ctx
+    });
     return {
-        type: v.literal(type),
-        ...fieldBase(AuthoringEditableSchema, AuthoringGroupMembershipSchema)
+        ...stripUndefined({
+            name: activity.name,
+            semantics: activity.semantics,
+            title: activity.title,
+            description: activity.description,
+            groups: activity.groups,
+            group: normalizeGroup(activity.group),
+            filter: activity.filter,
+            requirements: activity.requirements
+        }),
+        ...target ? {
+            target: target
+        } : {},
+        ...activityFields2 ? {
+            fields: activityFields2
+        } : {},
+        ...actions.length > 0 ? {
+            actions: actions
+        } : {}
     };
 }
 
-const TodoListFieldSchema = pinned()(v.strictObject(listSugarFields("todoList"))), NotesFieldSchema = pinned()(v.strictObject(listSugarFields("notes"))), AuthoringFieldEntrySchema = pinned()(v.lazy(input => {
-    const type = asShape(input).type;
-    return type === "claim" ? ClaimFieldSchema : type === "todoList" ? TodoListFieldSchema : type === "notes" ? NotesFieldSchema : RawAuthoringFieldEntrySchema;
-})), EffectSchema = v.strictObject({
-    name: NonEmpty,
-    title: v.optional(v.string()),
-    description: v.optional(v.string()),
-    bindings: v.optional(v.record(v.string(), ConditionSchema)),
-    input: v.optional(v.record(v.string(), v.unknown())),
-    outputs: v.optional(v.array(FieldShapeSchema))
-}), DefinitionRefSchema = v.strictObject({
-    name: NonEmpty,
-    version: v.optional(v.union([ PositiveInt, v.literal("latest") ]))
-}), SubworkflowsSchema = v.strictObject({
-    forEach: NonEmpty,
-    definition: DefinitionRefSchema,
-    with: v.optional(v.record(NonEmpty, ConditionSchema)),
-    context: v.optional(v.record(NonEmpty, ConditionSchema)),
-    onExit: v.optional(picklist([ "detach", "abort" ]))
-}), ActionParamSchema = v.pipe(v.strictObject({
-    type: picklist([ "string", "number", "boolean", "url", "dateTime", "actor", "doc.ref", "doc.refs", "json" ]),
-    name: NonEmpty,
-    title: v.optional(v.string()),
-    description: v.optional(v.string()),
-    required: v.optional(v.boolean()),
-    options: v.optional(ChoiceOptionsSchema),
-    validation: v.optional(ScalarValidationSchema)
-}), choiceOptionsCheck(), scalarValidationCheck()), CUSTOM_SEMANTIC_HINT = "`custom.<camelCaseMeaning>`", CustomSemanticSchema = v.custom(input => typeof input == "string" && /^custom\.[a-z][a-zA-Z0-9]*$/.test(input)), SemanticSchema = v.union([ picklist(SIGNAL_SEMANTICS), CustomSemanticSchema ], `expected ${SIGNAL_SEMANTICS.join(", ")}, or ${CUSTOM_SEMANTIC_HINT}`), ActionSemanticSchema = v.union([ picklist(ACTION_SEMANTICS), CustomSemanticSchema ], `expected ${ACTION_SEMANTICS.join(", ")}, or ${CUSTOM_SEMANTIC_HINT}`);
-
-function semanticNamespace(semantic) {
-    return semantic.startsWith("custom.") ? semantic : semantic.split(".", 1)[0] ?? semantic;
-}
+const TARGET_DOC_KINDS = [ "doc.ref", "doc.refs", "subject", "release.ref" ];
 
-function hasUniqueSemanticNamespaces(semantics) {
-    const namespaces = semantics.map(semanticNamespace);
-    return new Set(namespaces).size === namespaces.length;
+function desugarTarget({target: target, env: env, path: path, ctx: ctx}) {
+    if (target === void 0 || target.type === "url") return target;
+    const ref = typeof target.field == "string" ? {
+        field: target.field
+    } : target.field, field = resolveRef({
+        ref: ref,
+        env: env,
+        path: [ ...path, "field" ],
+        ctx: ctx
+    }) ?? fallbackRef(ref), entry = entryAt(env, field);
+    return entry && !TARGET_DOC_KINDS.includes(entry.type) && ctx.issues.push({
+        path: [ ...path, "field" ],
+        message: `manual activity target references "${field.field}" of kind "${entry.type}" — a deep-link target needs a document-valued entry (${TARGET_DOC_KINDS.join(", ")})`
+    }), {
+        type: "field",
+        field: field
+    };
 }
 
-function semanticsFieldSchema(semantic) {
-    return v.optional(v.pipe(v.array(semantic), v.minLength(1, "declare at least one semantic, or omit `semantics`"), v.check(hasUniqueSemanticNamespaces, "declare at most one semantic from each namespace")));
+function reportEmptyActionRoles({action: action, path: path, ctx: ctx}) {
+    action.roles === void 0 || action.roles.length > 0 || ctx.issues.push({
+        path: [ ...path, "roles" ],
+        message: "roles: [] names no roles — omit it to allow any identity, or list at least one role"
+    });
 }
 
-const SemanticsFieldSchema = semanticsFieldSchema(SemanticSchema), ActionSemanticsFieldSchema = semanticsFieldSchema(ActionSemanticSchema);
-
-function actionFields(op, group) {
-    return {
-        name: NonEmpty,
-        semantics: ActionSemanticsFieldSchema,
-        title: v.optional(v.string()),
-        description: v.optional(v.string()),
-        group: v.optional(group),
-        when: v.optional(ConditionSchema),
-        filter: v.optional(ConditionSchema),
-        params: v.optional(v.array(ActionParamSchema)),
-        ops: v.optional(v.array(op)),
-        effects: v.optional(v.array(EffectSchema)),
-        spawn: v.optional(SubworkflowsSchema)
-    };
+function desugarActionOps(args) {
+    const {action: action, path: path, env: env, activityName: activityName, ctx: ctx} = args, ops = desugarOps({
+        ops: action.ops,
+        path: [ ...path, "ops" ],
+        env: env,
+        firingActivity: activityName,
+        ctx: ctx
+    }) ?? [];
+    return action.status !== void 0 && ops.push({
+        type: "status.set",
+        activity: activityName,
+        status: action.status
+    }), ops;
 }
 
-const StoredActionSchema = pinned()(v.strictObject({
-    ...actionFields(StoredOpSchema, StoredGroupMembershipSchema),
-    roles: v.optional(v.array(NonEmpty))
-})), TerminalActivityStatus = picklist(TERMINAL_ACTIVITY_STATUSES), RawAuthoringActionSchema = pinned()(v.strictObject({
-    ...actionFields(AuthoringOpSchema, AuthoringGroupMembershipSchema),
-    roles: v.optional(v.array(NonEmpty)),
-    status: v.optional(TerminalActivityStatus)
-})), ClaimActionSchema = pinned()(v.strictObject({
-    type: v.literal("claim"),
-    name: NonEmpty,
-    title: v.optional(v.string()),
-    description: v.optional(v.string()),
-    group: v.optional(AuthoringGroupMembershipSchema),
-    field: v.union([ NonEmpty, AuthoringFieldRefSchema ]),
-    roles: v.optional(v.array(NonEmpty)),
-    filter: v.optional(ConditionSchema),
-    params: v.optional(v.array(ActionParamSchema)),
-    effects: v.optional(v.array(EffectSchema))
-})), AuthoringActionSchema = pinned()(v.lazy(input => typeof input == "object" && input !== null && "type" in input ? ClaimActionSchema : RawAuthoringActionSchema)), requirementBase = {
-    name: NonEmpty,
-    title: v.optional(v.string()),
-    description: v.optional(v.string())
-}, GroqRequirementSchemaRaw = v.strictObject({
-    ...requirementBase,
-    type: v.literal("groq"),
-    query: ConditionSchema
-}), SingleSubjectRequirementSchemaRaw = v.strictObject({
-    ...requirementBase,
-    type: v.literal("singleSubject")
-}), GroqRequirementSchema = pinned()(GroqRequirementSchemaRaw), StartRequirementSchema = pinned()(v.variant("type", [ GroqRequirementSchemaRaw, SingleSubjectRequirementSchemaRaw ]));
-
-function activityFields({field: field, action: action, target: target, group: group}) {
+function desugarAction({action: action, path: path, env: env, activityName: activityName, ctx: ctx}) {
+    reportEmptyActionRoles({
+        action: action,
+        path: path,
+        ctx: ctx
+    });
+    const cascadeFired = isCascadeFired(action), filter = cascadeFired ? action.filter : andConditions([ rolesCondition(action.roles, ctx.roleAliases), action.filter ]), ops = desugarActionOps({
+        action: action,
+        path: path,
+        env: env,
+        activityName: activityName,
+        ctx: ctx
+    });
     return {
-        name: NonEmpty,
-        semantics: SemanticsFieldSchema,
-        title: v.optional(v.string()),
-        description: v.optional(v.string()),
-        groups: v.optional(v.array(GroupSchema)),
-        group: v.optional(group),
-        target: v.optional(target),
-        filter: v.optional(ConditionSchema),
-        requirements: v.optional(v.array(GroqRequirementSchema)),
-        actions: v.optional(v.array(action)),
-        fields: v.optional(v.array(field))
+        ...stripUndefined({
+            name: action.name,
+            semantics: action.semantics,
+            title: action.title,
+            description: action.description,
+            group: normalizeGroup(action.group),
+            when: action.when,
+            params: action.params,
+            effects: action.effects?.map(effect => desugarEffect({
+                effect: effect,
+                ctx: ctx
+            })),
+            spawn: action.spawn
+        }),
+        ...cascadeFired && action.roles !== void 0 && action.roles.length > 0 ? {
+            roles: action.roles
+        } : {},
+        ...filter ? {
+            filter: filter
+        } : {},
+        ...ops.length > 0 ? {
+            ops: ops
+        } : {}
     };
 }
 
-const StoredActivitySchema = pinned()(v.strictObject(activityFields({
-    field: FieldEntrySchema,
-    action: StoredActionSchema,
-    target: StoredManualTargetSchema,
-    group: StoredGroupMembershipSchema
-}))), AuthoringActivitySchema = pinned()(v.strictObject(activityFields({
-    field: AuthoringFieldEntrySchema,
-    action: AuthoringActionSchema,
-    target: AuthoringManualTargetSchema,
-    group: AuthoringGroupMembershipSchema
-})));
+const DEFAULT_TRANSITION_WHEN = "$allActivitiesDone";
 
-function transitionFields(when) {
+function desugarTransition({transition: transition}) {
     return {
-        name: NonEmpty,
-        title: v.optional(v.string()),
-        description: v.optional(v.string()),
-        to: NonEmpty,
-        when: when
+        ...stripUndefined({
+            name: transition.name,
+            title: transition.title,
+            description: transition.description,
+            to: transition.to
+        }),
+        when: transition.when ?? DEFAULT_TRANSITION_WHEN
     };
 }
 
-const StoredTransitionSchema = pinned()(v.strictObject(transitionFields(ConditionSchema))), AuthoringTransitionSchema = pinned()(v.strictObject(transitionFields(v.optional(ConditionSchema)))), GuardActionSchema = picklist(MUTATION_GUARD_ACTIONS), GuardReadPath = v.pipe(NonEmpty, v.check(path => !/[\r\n\u2028\u2029]/.test(path), "a guard read path cannot contain a line break")), GuardReadSchema = v.variant("type", [ v.strictObject({
-    type: v.literal("self")
-}), v.strictObject({
-    type: v.literal("now")
-}), v.strictObject({
-    type: v.literal("fieldRead"),
-    field: FieldEntryName,
-    path: v.optional(GuardReadPath)
-}), v.strictObject({
-    type: v.literal("effectsRead"),
-    effect: v.pipe(NonEmpty, v.check(name => !name.includes("'"), "an effect name cannot contain `'`")),
-    path: v.optional(GuardReadPath)
-}) ]);
-
-function guardMatchFields(read) {
+function desugarGuard(guard) {
+    const {match: match, metadata: metadata, ...rest} = guard, {idRefs: idRefs, ...matchRest} = match;
     return {
-        types: v.optional(v.array(NonEmpty)),
-        idRefs: v.optional(v.array(read)),
-        idPatterns: v.optional(v.array(NonEmpty)),
-        actions: v.pipe(v.array(GuardActionSchema), v.minLength(1, "a guard must match at least one action"))
+        ...rest,
+        match: {
+            ...matchRest,
+            ...idRefs !== void 0 ? {
+                idRefs: idRefs.map(printGuardRead)
+            } : {}
+        },
+        ...metadata !== void 0 ? {
+            metadata: Object.fromEntries(Object.entries(metadata).map(([key, read]) => [ key, printGuardRead(read) ]))
+        } : {}
     };
 }
 
-function guardFields(read) {
+function desugarOps({ops: ops, path: path, env: env, firingActivity: firingActivity, ctx: ctx}) {
+    if (ops) return ops.map((op, i) => desugarOp({
+        op: op,
+        path: [ ...path, i ],
+        env: env,
+        firingActivity: firingActivity,
+        ctx: ctx
+    }));
+}
+
+function desugarOp({op: op, path: path, env: env, firingActivity: firingActivity, ctx: ctx}) {
+    if (op.type === "status.set") return {
+        type: "status.set",
+        activity: op.activity ?? firingActivity,
+        status: op.status
+    };
+    if (op.type === "audit") return desugarAuditOp({
+        op: op,
+        path: path,
+        env: env,
+        ctx: ctx
+    });
+    const target = resolveRef({
+        ref: op.target,
+        env: env,
+        path: [ ...path, "target" ],
+        ctx: ctx
+    }) ?? fallbackRef(op.target);
     return {
-        name: NonEmpty,
-        title: v.optional(v.string()),
-        description: v.optional(v.string()),
-        match: v.strictObject(guardMatchFields(read)),
-        predicate: v.optional(v.string()),
-        metadata: v.optional(v.record(NonEmpty, read))
+        ...op,
+        target: target
     };
 }
 
-const GuardSchema = v.strictObject(guardFields(NonEmpty)), AuthoringGuardSchema = v.strictObject(guardFields(GuardReadSchema));
+const AUDIT_STAMPS = {
+    actor: {
+        type: "actor"
+    },
+    at: {
+        type: "now"
+    }
+};
 
-function stageFields({field: field, activity: activity, transition: transition, guard: guard, editable: editable}) {
+function desugarAuditOp({op: op, path: path, env: env, ctx: ctx}) {
+    const target = resolveRef({
+        ref: op.target,
+        env: env,
+        path: [ ...path, "target" ],
+        ctx: ctx
+    }) ?? fallbackRef(op.target);
+    if (op.value.type !== "object") return ctx.issues.push({
+        path: [ ...path, "value" ],
+        message: `audit value must be an object source carrying the domain fields (got "${op.value.type}")`
+    }), {
+        type: "field.append",
+        target: target,
+        value: op.value
+    };
+    const actorField = op.stampFields?.actor ?? "actor", atField = op.stampFields?.at ?? "at", fields = {
+        ...op.value.fields
+    };
+    for (const [stamp, source] of [ [ actorField, AUDIT_STAMPS.actor ], [ atField, AUDIT_STAMPS.at ] ]) {
+        if (stamp in fields) {
+            ctx.issues.push({
+                path: [ ...path, "value", "fields", stamp ],
+                message: `audit stamp field "${stamp}" collides with an authored domain field — rename yours or remap the stamp via stampFields`
+            });
+            continue;
+        }
+        fields[stamp] = source;
+    }
     return {
-        name: NonEmpty,
-        semantics: SemanticsFieldSchema,
-        title: v.optional(v.string()),
-        description: v.optional(v.string()),
-        groups: v.optional(v.array(GroupSchema)),
-        activities: v.optional(v.array(activity)),
-        transitions: v.optional(v.array(transition)),
-        guards: v.optional(v.array(guard)),
-        fields: v.optional(v.array(field)),
-        editable: v.optional(v.record(FieldEntryName, editable))
+        type: "field.append",
+        target: target,
+        value: {
+            type: "object",
+            fields: fields
+        }
     };
 }
 
-const StoredStageSchema = pinned()(v.strictObject(stageFields({
-    field: FieldEntrySchema,
-    activity: StoredActivitySchema,
-    transition: StoredTransitionSchema,
-    guard: GuardSchema,
-    editable: StoredEditableSchema
-}))), AuthoringStageSchema = pinned()(v.strictObject(stageFields({
-    field: AuthoringFieldEntrySchema,
-    activity: AuthoringActivitySchema,
-    transition: AuthoringTransitionSchema,
-    guard: AuthoringGuardSchema,
-    editable: AuthoringEditableSchema
-}))), RoleAliasesSchema = v.record(NonEmpty, v.pipe(v.array(NonEmpty), v.minLength(1, "a role alias must list at least one fulfilling role"))), WORKFLOW_LIFECYCLES = [ "standalone", "child" ], START_KINDS = [ "interactive", "autonomous" ];
-
-function startFields(kind) {
-    return {
-        kind: kind,
-        filter: v.optional(ConditionSchema),
-        requirements: v.optional(v.array(StartRequirementSchema))
+function resolveRef({ref: ref, env: env, path: path, ctx: ctx}) {
+    const layers = ref.scope === void 0 ? env.layers : env.layers.filter(l => l.scope === ref.scope);
+    for (const layer of layers) if (layer.entries.has(ref.field)) return {
+        scope: layer.scope,
+        field: ref.field
     };
+    const reachable = env.layers.flatMap(l => [ ...l.entries.keys() ].map(n => `${l.scope}:${n}`));
+    ctx.issues.push({
+        path: path,
+        message: `field reference "${ref.field}"${ref.scope ? ` (scope "${ref.scope}")` : ""} does not resolve to a declared entry. Reachable: ${reachable.join(", ") || "(none)"}`
+    });
 }
 
-const StoredStartSchema = pinned()(v.strictObject(startFields(picklist(START_KINDS)))), AuthoringStartSchema = pinned()(v.strictObject(startFields(v.optional(picklist(START_KINDS)))));
+function entryAt(env, ref) {
+    return env.layers.find(l => l.scope === ref.scope)?.entries.get(ref.field);
+}
 
-function workflowFields({field: field, stage: stage, start: start}) {
+function fallbackRef(ref) {
     return {
-        name: NonEmpty,
-        semantics: SemanticsFieldSchema,
-        title: NonEmpty,
-        description: v.optional(v.string()),
-        groups: v.optional(v.array(GroupSchema)),
-        lifecycle: v.optional(picklist(WORKFLOW_LIFECYCLES)),
-        start: v.optional(start),
-        initialStage: NonEmpty,
-        fields: v.optional(v.array(field)),
-        stages: v.pipe(v.array(stage), v.minLength(1, "must declare at least one stage")),
-        predicates: v.optional(v.record(groqIdentifier("`$<name>`"), ConditionSchema)),
-        roleAliases: v.optional(RoleAliasesSchema)
+        scope: ref.scope ?? "workflow",
+        field: ref.field
     };
 }
 
-const WorkflowDefinitionSchema = pinned()(v.strictObject(workflowFields({
-    field: FieldEntrySchema,
-    stage: StoredStageSchema,
-    start: StoredStartSchema
-})));
+function rolesCondition(roles, aliases) {
+    if (!(!roles || roles.length === 0)) return groq`count($actor.roles[@ in ${expandRequiredRoles(roles, aliases)}]) > 0`;
+}
+
+function stripUndefined(obj) {
+    const out = {};
+    for (const [k, value] of Object.entries(obj)) value !== void 0 && (out[k] = value);
+    return out;
+}
+
+function isUnevaluable(result) {
+    return result == null;
+}
+
+async function evaluateConditionOutcome(args) {
+    const {condition: condition, snapshot: snapshot, params: params} = args;
+    return evaluateConditionOutcome$1({
+        condition: condition,
+        params: params,
+        dataset: snapshot.docs
+    });
+}
+
+async function evaluateCondition(args) {
+    return await evaluateConditionOutcome(args) === "satisfied";
+}
+
+async function evaluatePredicates(args) {
+    const out = {};
+    for (const [name, groq2] of Object.entries(args.predicates ?? {})) {
+        const result = await runGroq({
+            groq: groq2,
+            params: args.params,
+            snapshot: args.snapshot
+        }), outcome = conditionOutcome(result);
+        out[name] = outcome === "unevaluable" ? null : outcome === "satisfied";
+    }
+    return out;
+}
+
+async function runGroq({groq: groq2, params: params, snapshot: snapshot}) {
+    return runGroq$1({
+        groq: groq2,
+        params: params,
+        dataset: snapshot.docs
+    });
+}
+
+function conditionSyntaxIssues(groq2, boundVars) {
+    const issues = [];
+    let tree;
+    try {
+        tree = parse(groq2);
+    } catch (err) {
+        issues.push(errorMessage(err));
+    }
+    if (/\*\s*\[\s*_type\b/.test(groq2) && issues.push("condition scans by `_type` — that's a discovery query, not a predicate. Conditions evaluate against the in-memory snapshot (instance + ancestors + field-declared docs). To bring extra docs in scope, declare a `doc.ref` (or `doc.refs`) field entry on the workflow or this stage. For lake scans like \"all articles in this release\", use a spawn action's `forEach` instead."), 
+    boundVars !== void 0 && tree !== void 0) for (const name of conditionParameterNames(groq2)) boundVars.includes(name) || issues.push(`reads $${name}, which this scope does not bind — an unbound variable evaluates to GROQ null, so the condition silently never matches. Bound here: ` + boundVars.map(n => `$${n}`).join(", "));
+    return issues;
+}
+
+function conditionParameterNames(groq2) {
+    const read = /* @__PURE__ */ new Set;
+    return walkAstNodes(tryParseGroq(groq2), node => {
+        node.type === "Parameter" && typeof node.name == "string" && read.add(node.name);
+    }), read;
+}
 
-function parseStoredDefinition(input, label) {
-    return parseOrThrow({
-        schema: WorkflowDefinitionSchema,
-        input: input,
-        label: label
-    });
+function conditionFieldReadNames(groq2) {
+    return new Set(conditionFieldReads(groq2).map(read => read.name));
 }
 
-const AuthoringWorkflowSchema = pinned()(v.strictObject(workflowFields({
-    field: AuthoringFieldEntrySchema,
-    stage: AuthoringStageSchema,
-    start: AuthoringStartSchema
-}))), WORKFLOW_DEFINITION_TYPE = "sanity.workflow.definition";
+function conditionFieldReads(groq2) {
+    const reads = /* @__PURE__ */ new Map;
+    return collectFieldReads(tryParseGroq(groq2), reads), [ ...reads.values() ];
+}
 
-function isStartableDefinition(definition) {
-    return definition.lifecycle !== "child";
+function collectFieldReads(node, reads) {
+    if (Array.isArray(node)) {
+        for (const item of node) collectFieldReads(item, reads);
+        return;
+    }
+    if (typeof node != "object" || node === null) return;
+    const chain = fieldsAttributeChain(node);
+    if (chain !== void 0) {
+        const [name, ...tail] = chain, path = tail.length > 0 ? tail.join(".") : void 0;
+        reads.set(`${name}.${path ?? ""}`, {
+            name: name,
+            path: path
+        });
+        return;
+    }
+    for (const value of Object.values(node)) collectFieldReads(value, reads);
 }
 
-function startKindOf(definition) {
-    return definition.start?.kind ?? "interactive";
+function fieldsAttributeChain(node) {
+    const names = [];
+    let current = node;
+    for (;typeof current == "object" && current !== null; ) {
+        const typed = current;
+        if (typed.type !== "AccessAttribute" || typeof typed.name != "string") return;
+        names.unshift(typed.name);
+        const base = typed.base;
+        if (base?.type === "Parameter" && base.name === "fields") return names;
+        current = base;
+    }
 }
 
-function isSubjectEntry(entry) {
-    return entry.type === "subject";
+function conditionEffectReads(groq2) {
+    const reads = [];
+    return walkAstNodes(tryParseGroq(groq2), node => {
+        if (node.type !== "AccessAttribute" || typeof node.name != "string") return;
+        const base = node.base;
+        base?.type !== "AccessAttribute" || typeof base.name != "string" || base.base?.type === "Parameter" && base.base.name === "effects" && reads.push({
+            effect: base.name,
+            key: node.name
+        });
+    }), reads;
 }
 
-function isDueDateEntry(entry) {
-    return entry.type === "dueDate" || entry.type === "dueDatetime";
+function readsRootDocument(groq2) {
+    return nodeReadsRoot(tryParseGroq(groq2), 0);
 }
 
-function isInputSourced(entry) {
-    return entry.initialValue?.type === "input";
+const SCOPED_CHILD = {
+    Filter: "expr",
+    Projection: "expr",
+    Map: "expr",
+    FlatMap: "expr",
+    PipeFuncCall: "args"
+};
+
+function nodeReadsRoot(node, depth) {
+    if (Array.isArray(node)) return node.some(item => nodeReadsRoot(item, depth));
+    if (typeof node != "object" || node === null) return !1;
+    const typed = node;
+    if (depth === 0 && typed.type === "This" || depth === 0 && typed.type === "AccessAttribute" && typed.base === void 0) return !0;
+    if (typed.type === "Parent") {
+        const climb = typeof typed.n == "number" ? typed.n : 1;
+        return depth - climb <= 0;
+    }
+    const scopedChild = typeof typed.type == "string" ? SCOPED_CHILD[typed.type] : void 0;
+    return scopedChild !== void 0 ? Object.entries(node).some(([key, value]) => nodeReadsRoot(value, key === scopedChild ? depth + 1 : depth)) : Object.values(node).some(value => nodeReadsRoot(value, depth));
 }
 
-function parseOrThrow({schema: schema, input: input, label: label}) {
-    const result = v.safeParse(schema, input);
-    if (!result.success) throw new Error(formatValidationError(label, issuesFromValibot(result.issues)));
-    return result.output;
+function tryParseGroq(groq2) {
+    try {
+        return parse(groq2);
+    } catch {
+        return;
+    }
 }
 
-function labelFor(fn, value) {
-    if (value && typeof value == "object" && "name" in value) {
-        const raw = value.name;
-        if (typeof raw == "string") return `${fn}("${raw}")`;
+function walkAstNodes(node, visit) {
+    if (Array.isArray(node)) {
+        for (const item of node) walkAstNodes(item, visit);
+        return;
     }
-    return fn;
+    if (!(typeof node != "object" || node === null)) {
+        visit(node);
+        for (const value of Object.values(node)) walkAstNodes(value, visit);
+    }
+}
+
+const CONDITION_VARS = [ {
+    name: "self",
+    binding: "always",
+    label: "this workflow instance",
+    description: "GDR URI of the instance document itself — `*[_id == $self][0]` reads the instance in the snapshot."
+}, {
+    name: "fields",
+    binding: "always",
+    label: "the workflow's fields",
+    description: "Declared field entries rendered by name (`$fields.<name>` is the value, no wrapper). Stage/activity scopes overlay lexically. What a read puts in your hand follows the declared kind: a singular `doc.ref` (or `subject`) DEREFERENCES into the hydrated document (lake `_id`/`_type` plus content fields — which may themselves be named `id`/`type`), while `doc.refs` elements and `release.ref` stay REFERENCES — `{id, type[, releaseName]}` with `id` a GDR URI — because identity reads (membership, counting, joins) must stay total without hydrating every target, and targets may live in resources the evaluation cannot fetch from. Conditions evaluate against the in-memory snapshot only, so a dereferencing plural kind would silently hole wherever hydration lagged."
+}, {
+    name: "parent",
+    binding: "always",
+    label: "the parent workflow",
+    description: "The parent instance's GDR URI, `null` on a root instance."
+}, {
+    name: "ancestors",
+    binding: "always",
+    label: "the workflow's ancestors",
+    description: "GDR URIs of the ancestor chain, root first."
+}, {
+    name: "stage",
+    binding: "always",
+    label: "the current stage",
+    description: "The current stage's name."
+}, {
+    name: "now",
+    binding: "always",
+    label: "the current time",
+    description: "The ISO clock reading shared by every condition in one evaluation pass, so they agree on the time."
+}, {
+    name: "context",
+    binding: "always",
+    label: "start-time context",
+    description: "The instance's `context` bag: values seeded at `startInstance` plus a parent's `spawn.context` handoff, by entry name. Written only at start — never mutated afterwards."
+}, {
+    name: "effects",
+    binding: "always",
+    label: "automation outputs",
+    description: "Completed effects' outputs, namespaced by effect name (`$effects['<effect>'].<output>`) — each effect's latest completed run wins. Handler fuel — transition triggers should read instance/lake state (or $effectStatus) instead."
+}, {
+    name: "effectStatus",
+    binding: "always",
+    label: "automation status",
+    description: "Effect name → `'done'` | `'failed'` of the latest completed run queued during the current stage entry; absent until the effect drains for this entry. Re-entry-safe: runs queued under a prior entry never count, so `$effectStatus['<effect>'] == 'done'` (or `defined($effectStatus['<effect>'])` for settled-either-way) waits for the fresh run."
+}, {
+    name: "activities",
+    binding: "always",
+    label: "this stage's activities",
+    description: "The current stage's activity rows, statuses included."
+}, {
+    name: "allActivitiesDone",
+    binding: "always",
+    label: "all activities in this stage are finished",
+    description: "Every current-stage activity is `done` or `skipped` — the default transition gate."
+}, {
+    name: "anyActivityFailed",
+    binding: "always",
+    label: "an activity in this stage has failed",
+    description: "Some current-stage activity is `failed`."
+}, {
+    name: "actor",
+    binding: "caller",
+    label: "you",
+    description: "The acting identity (id + roles); `undefined` when no caller rides the evaluation. Never holds a value in the cascade gates (deploy-rejected there)."
+}, {
+    name: "assigned",
+    binding: "caller",
+    label: "you are assigned to this activity",
+    description: "Whether the caller matches the activity's assignees-kind field entry (by user id, or by a role under the definition's `roleAliases`); `false` outside an activity context. Constant `false` in the cascade gates (deploy-rejected there)."
+}, {
+    name: "can",
+    binding: "caller",
+    label: "your permissions",
+    description: "Advisory per-permission booleans computed from the caller's grants; `undefined` without grants. Bound wherever grants ride the evaluation: the projection's rendered scope (fireAction-action filters, activity requirements, editability predicates) and the fireAction/editField commit gates. Deploy rejects it at every site that evaluates without grants: transition `when`s, activity filters, cascade-fired actions' `when`/`filter`, effect bindings, where-op `where`s, and the spawn `forEach`/`with`/`context` sites."
+}, {
+    name: "attributes",
+    binding: "caller",
+    label: "your attributes",
+    description: "Advisory org-level User Attributes for the caller (Enterprise — same values as lake `user::attributes()`), keyed by attribute name with each active scalar or array value. `undefined` on expected HTTP absence; unexpected fetch failures throw; empty page binds `{}`. Bound wherever grants ride the evaluation (same sites as `$can`). Soft-gate paths fetch at most 100 attributes (no further pages) and warn when the envelope reports `hasMore: true` (partial bag still binds). Not a security boundary — the Content Lake remains the only enforcement point."
+}, {
+    name: "row",
+    binding: "spawn",
+    label: "the spawned row",
+    description: "One `spawn.forEach` result row, bound while its `with` map evaluates — and the row under test while a where-op `where` evaluates (per row). Deploy rejects a read at every other site (including `spawn.forEach` itself and `spawn.context`), where it is GROQ null."
+}, {
+    name: "params",
+    binding: "caller",
+    label: "the action's arguments",
+    description: "The firing action's args — they hold values only while a fireAction-fired action's effect bindings and where-op `where`s evaluate (spawn sites don't bind it at all, and a cascade-fired action has no caller to supply args). Deploy rejects a read in the cascade gates, in a cascade-fired action's payload, and in the caller-bound projection (action filters, requirements, editable predicates): args exist only once the caller fires the action, after those sites have evaluated."
+}, {
+    name: "subworkflows",
+    binding: "always",
+    label: "the spawned subworkflows",
+    description: "Every row of the instance's subworkflow registry, faceted by `activity`/`action`/`definition`/`rowKey`/`status` (`'active'|'done'|'aborted'`) with `current` marking the open stage entry's cohort and `stage` the child's current stage. Usable anywhere — transition `when`s, requirements, any stage's gates; the settled gate is `count($subworkflows[activity == <name> && current && status == 'active']) == 0`."
+} ], RESERVED_CONDITION_VARS = CONDITION_VARS.map(v2 => v2.name), FILTER_SCOPE_VARS = CONDITION_VARS.filter(v2 => v2.binding === "always").map(v2 => v2.name), CALLER_BOUND_VARS = CONDITION_VARS.filter(v2 => v2.binding === "caller").map(v2 => v2.name), START_FILTER_VARS = [ {
+    name: "tag",
+    label: "this engine tag",
+    description: "The engine's tag partition — scope `*[...]` instance scans with `tag == $tag`."
+}, {
+    name: "definition",
+    label: "this workflow definition",
+    description: "The `name` of the definition under evaluation (its own start block binds it)."
+}, {
+    name: "now",
+    label: "the current time",
+    description: "The ISO clock reading of the evaluating engine."
+} ], START_REQUIREMENT_VARS = [ ...START_FILTER_VARS, {
+    name: "fields",
+    label: "the start's input fields",
+    description: "The caller's input entries by name (`initialFields` — at `startInstance`, the values the start would seed; at a pre-flight, the values gathered so far, so a read of a not-yet-supplied entry is GROQ null). Document references bind as GDR envelopes — `$fields.<entry>.id` is the GDR URI, never a string authors assemble — a singular `doc.ref` or `subject` included (nothing hydrates at the gate or the pre-flight). Pathed reads are deploy-checked against these envelope shapes."
+} ], GUARD_PREDICATE_VARS = [ {
+    name: "document",
+    description: "The attempted mutation images, exposed as `document.before` and `document.after`."
+}, {
+    name: "guard",
+    description: "The guard document itself (its `metadata` carries deploy-time resolved values)."
+}, {
+    name: "mutation",
+    description: "The attempted mutation — `mutation.action` is the write kind being gated."
+} ];
+
+function effectBackoffMs(retry, endedAttempts) {
+    const {backoff: backoff} = retry;
+    return backoff === void 0 || endedAttempts < 1 ? 0 : backoff.kind === "fixed" ? backoff.delayMs : backoff.delayMs * 2 ** (endedAttempts - 1);
+}
+
+function totalEffectBackoffMs(retry) {
+    const waits = retry.attempts - 1;
+    return retry.backoff === void 0 || waits < 1 ? 0 : retry.backoff.kind === "fixed" ? retry.backoff.delayMs * waits : retry.backoff.delayMs * (2 ** waits - 1);
 }
 
 function knownList(ids) {
@@ -3237,6 +3326,40 @@ function pushOutputIssues(args) {
     }
 }
 
+function checkEffectRetry(def, issues) {
+    for (const {action: action, path: path} of actionSites(def)) for (const [e, effect] of (action.effects ?? []).entries()) effect.retry !== void 0 && pushRetryIssue({
+        retry: effect.retry,
+        name: effect.name,
+        path: [ ...path, "effects", e, "retry" ],
+        issues: issues
+    });
+}
+
+function pushRetryIssue(args) {
+    const {retry: retry, name: name, path: path, issues: issues} = args;
+    if (retry.expiryMs !== void 0 && retry.expiryMs > MAX_RETRY_SPAN_MS) {
+        issues.push({
+            path: [ ...path, "expiryMs" ],
+            message: `effect "${name}" declares a ${retry.expiryMs}ms \`expiryMs\`, past the ${MAX_RETRY_SPAN_MS}ms ceiling — a policy runs inside one \`drainEffects\` invocation, and no host offers a single execution longer than a year. Lower \`expiryMs\``
+        });
+        return;
+    }
+    const wait = totalEffectBackoffMs(retry);
+    if (wait > MAX_RETRY_SPAN_MS) {
+        issues.push({
+            path: [ ...path, "attempts" ],
+            message: `effect "${name}" accumulates ${spanned(wait)} of backoff before attempt ${retry.attempts}, past the ${MAX_RETRY_SPAN_MS}ms ceiling — a policy runs inside one \`drainEffects\` invocation, and no host offers a single execution longer than a year. Lower \`attempts\` or \`backoff.delayMs\``
+        });
+        return;
+    }
+    retry.expiryMs === void 0 || wait < retry.expiryMs || issues.push({
+        path: [ ...path, "expiryMs" ],
+        message: `effect "${name}" waits ${wait}ms of backoff before attempt ${retry.attempts}, which its ${retry.expiryMs}ms \`expiryMs\` closes first — the effect fails before the declared attempts run. Raise \`expiryMs\`, or lower \`attempts\`/\`backoff.delayMs\``
+    });
+}
+
+const spanned = ms => Number.isFinite(ms) ? `${ms}ms` : "more milliseconds than a number can count", MAX_RETRY_SPAN_MS = 316224e5;
+
 function checkSubjectEntries(def, issues) {
     for (const {entries: entries, scope: scope, path: path, label: label} of fieldScopes(def)) {
         const subjects = (entries ?? []).flatMap((entry, n) => isSubjectEntry(entry) ? [ {
@@ -4012,9 +4135,9 @@ function checkWorkflowInvariants(def) {
     checkUnboundConditionVars(def, issues), checkConditionFieldReads(def, issues), checkFieldReadSeeds(def, issues), 
     checkFieldReadOpValues(def, issues), checkFieldTargetOps(def, issues), checkGuardFieldReads(def, issues), 
     checkAssigneesEntries(def, issues), checkDueDateEntries(def, issues), checkSubjectEntries(def, issues), 
-    checkLevelKindEffectOutputs(def, issues), checkActivityTerminalPaths(def, issues), 
+    checkLevelKindEffectOutputs(def, issues), checkEffectRetry(def, issues), checkActivityTerminalPaths(def, issues), 
     checkTerminalStageActivities(def, issues), checkTriggeredActionParams(def, issues), 
     checkStoredRolesPlacement(def, issues), checkGroups(def, issues), issues;
 }
 
-export { ACTION_SEMANTICS, ACTIVITY_KINDS, ACTIVITY_STATUSES, ACTOR_KINDS, ANONYMOUS_IDENTITY, ActorShape, AuthoringActionSchema, AuthoringActivitySchema, AuthoringFieldEntrySchema, AuthoringGuardSchema, AuthoringOpSchema, AuthoringStageSchema, AuthoringTransitionSchema, AuthoringWorkflowSchema, CALLER_BOUND_VARS, CONDITION_VARS, ContractViolationError, DECISION_SEMANTICS, DEFAULT_TRANSITION_WHEN, DOCUMENT_VALUE_PERMISSIONS, DRIVER_KINDS, DefinitionInUseError, DefinitionNotFoundError, EFFECTS_READ, EXECUTOR_CLASSIFICATIONS, EffectNotFoundError, EffectSchema, FIELD_READ, FIELD_SCOPES, FIELD_VALUE_KINDS, FILTER_SCOPE_VARS, FieldValueShapeError, GROUP_KINDS, GUARD_PREDICATE_VARS, GdrShape, GroupSchema, InstanceNotFoundError, IsoTimestamp, MUTATION_GUARD_ACTIONS, NonEmptyString, PersistedDocShapeError, RESERVED_CONDITION_VARS, RESOURCE_ALIAS_NAME_SOURCE, SIGNAL_SEMANTICS, START_FILTER_VARS, START_REQUIREMENT_VARS, SYSTEM_IDENTITY, SpawnContractsInvalidError, StoredFieldOpSchema, VersionSpecificDatasetGdrError, WORKFLOW_DEFINITION_TYPE, WorkflowConfigSchema, WorkflowError, actorFulfillsRole, andConditions, assignmentKindAcceptsRoles, checkWorkflowInvariants, choiceValueIssues, classifyPrincipalId, clientConfigFromResource, conditionEffectReads, conditionFieldReadNames, conditionParameterNames, conditionSyntaxIssues, datasetResourceParts, definitionDocId, deriveActivityKind, deriveExecutorClassification, desugarWorkflow, directoryBridgeId, driverKind, errorMessage, evaluateCondition, evaluateConditionOutcome, evaluatePredicates, extractDocumentId, fieldValueSchemas, firstCarriedGlobalId, formatIssuePath, formatIssues, formatValidationError, gdrFromResource, gdrRef, gdrResourcePrefix, gdrUri, groq, groupMembershipNames, isAlwaysArrayFieldKind, isAssignmentFieldEntry, isBareSeedId, isCascadeFired, isGdr, isGdrUri, isGuardReadExpr, isInputSourced, isNotesEntry, isParseableInstant, isRecord, isSingleDocRefEntry, isSingleDocRefKind, isStartableDefinition, isSubjectEntry, isTerminalActivityStatus, isTodoListEntry, isTodoListItem, isUnevaluable, labelFor, lakePrincipalId, parseFieldValue, parseGdr, parseOrThrow, parsePersistedDoc, parseResourceGdr, parseStoredDefinition, readsRootDocument, refCanvas, refDashboard, refDataset, refKindAcceptsTypes, refMediaLibrary, refTypeIssues, rejectedRefTypes, releaseDocId, releaseRef, resourceAliasesToMap, resourceFromGdrUri, resourceFromParsed, resourceGdr, rethrowWithContext, runGroq, sameResource, scalarValidationIssues, schemaTreeShape, selfGdr, startKindOf, tagScopeFilter, toBareId, toPhysicalGdr, tolerantEntries, tolerantObject, tryParseGdr, validateFieldAppendItem, validateFieldValue, validateResourceAliasName, validateTag };
+export { ACTION_SEMANTICS, ACTIVITY_KINDS, ACTIVITY_STATUSES, ACTOR_KINDS, ANONYMOUS_IDENTITY, ActorShape, AuthoringActionSchema, AuthoringActivitySchema, AuthoringEffectSchema, AuthoringFieldEntrySchema, AuthoringGuardSchema, AuthoringOpSchema, AuthoringStageSchema, AuthoringTransitionSchema, AuthoringWorkflowSchema, CALLER_BOUND_VARS, CONDITION_VARS, ContractViolationError, DECISION_SEMANTICS, DEFAULT_TRANSITION_WHEN, DOCUMENT_VALUE_PERMISSIONS, DRIVER_KINDS, DefinitionInUseError, DefinitionNotFoundError, EFFECTS_READ, EXECUTOR_CLASSIFICATIONS, EffectNotFoundError, FIELD_READ, FIELD_SCOPES, FIELD_VALUE_KINDS, FILTER_SCOPE_VARS, FieldValueShapeError, GROUP_KINDS, GUARD_ACTIONS_REQUIRED_MESSAGE, GUARD_PREDICATE_VARS, GdrShape, GroupSchema, InstanceNotFoundError, IsoTimestamp, LAKE_MUTATION_GUARD_ACTIONS, MUTATION_GUARD_ACTIONS, MUTATION_GUARD_ID_SPACES, NonEmptyString$1 as NonEmptyString, PersistedDocShapeError, RESERVED_CONDITION_VARS, RESOURCE_ALIAS_NAME_SOURCE, SIGNAL_SEMANTICS, START_FILTER_VARS, START_REQUIREMENT_VARS, SYSTEM_IDENTITY, SpawnContractsInvalidError, StoredFieldOpSchema, UNIVERSAL_ROLE_ALIAS_KEY, VersionSpecificDatasetGdrError, WORKFLOW_DEFINITION_TYPE, WorkflowConfigSchema, WorkflowError, activeAssignmentMembers, actorFulfillsRole, actorMatchesAssignment, andConditions, assignmentKindAcceptsRoles, assignmentMatch, assignmentMembers, assignmentState, assignmentStateCounts, checkWorkflowInvariants, choiceValueIssues, classifyPrincipalId, clientConfigFromResource, condemnSubworkflow, condemnedSubworkflows, conditionEffectReads, conditionFieldReadNames, conditionParameterNames, conditionSyntaxIssues, datasetResourceParts, definitionDocId, deriveActivityKind, deriveExecutorClassification, desugarWorkflow, directoryBridgeId, driverKind, effectBackoffMs, errorMessage, evaluateCondition, evaluateConditionOutcome, evaluatePredicates, extractDocumentId, fieldValueSchemas, findCurrentActivityEntry, findOpenStageEntry, firstCarriedGlobalId, formatIssuePath, formatIssues, formatValidationError, gdrFromResource, gdrRef, gdrResourcePrefix, gdrUri, groq, groupMembershipNames, identityMatchesAssignment, instanceAssignmentStateCounts, isAlwaysArrayFieldKind, isAssignmentFieldEntry, isBareDocumentId, isBareSeedId, isCascadeFired, isFilterScopedOut, isGdr, isGdrUri, isGuardReadExpr, isInputSourced, isNotesEntry, isParseableInstant, isRecord, isSingleDocRefEntry, isSingleDocRefKind, isStartableDefinition, isSubjectEntry, isTerminalActivityStatus, isTodoListEntry, isTodoListItem, isUnevaluable, labelFor, lakePrincipalId, liveSubworkflows, mutationGuardActionIdSpace, mutationGuardRequiresSplitEmission, normalizeAssignmentMembers, openActivityAssignments, parseFieldValue, parseGdr, parseOrThrow, parsePersistedDoc, parseResourceGdr, parseStoredDefinition, readsRootDocument, refCanvas, refDashboard, refDataset, refKindAcceptsTypes, refMediaLibrary, refTypeIssues, rejectedRefTypes, releaseDocId, releaseRef, resolvedChildStatus, resourceAliasesToMap, resourceFromGdrUri, resourceFromParsed, resourceGdr, rethrowWithContext, runGroq, sameResource, scalarValidationIssues, schemaTreeShape, selfGdr, startKindOf, tagScopeFilter, toBareId, toPhysicalGdr, tolerantEntries, tolerantObject, tryParseGdr, validateFieldAppendItem, validateFieldValue, validateResourceAliasName, validateTag };