@sequenceholdings/orm 2.1.1 → 2.3.0

package/dist/ir.d.cts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-export { C as CELLS_FIELD, a as CELL_PARTS, b as CellPart, c as cellColumnName } from './constants-YoFGjIBM.cjs';
+export { C as CELLS_FIELD, a as CELL_PARTS, b as CellPart, c as cellColumnName } from './constants-C6EG6Wq7.cjs';
 
 /**
  * Compiled-operation IR — THE frozen contract between the GraphQL compiler
@@ -23,20 +23,39 @@ export { C as CELLS_FIELD, a as CELL_PARTS, b as CellPart, c as cellColumnName }
  *    pattern): executor upgrades decouple from artifact re-pushes.
  */
 
-/** Maximum supported version. Emit v1 until an operation needs v2 semantics. */
-declare const IR_VERSION: 2;
+/** Maximum supported version; emit the oldest version that preserves semantics. */
+declare const IR_VERSION: 5;
 declare const LEGACY_IR_VERSION: 1;
-declare const irVersionSchema: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>;
+declare const GUARDED_IR_VERSION: 2;
+/** Older v2 executors must not strip namespace-scoped authorization. */
+declare const COMPOSED_IR_VERSION: 3;
+declare const SQL_IR_VERSION: 4;
+declare const RUNTIME_SQL_IR_VERSION: 5;
+declare const irVersionSchema: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<3>, z.ZodLiteral<4>, z.ZodLiteral<5>]>;
 /** Keep v1 artifact identity when assembling only legacy operations from registry rows. */
 declare function requiredArtifactIrVersion(operations: readonly unknown[]): z.infer<typeof irVersionSchema>;
-/** The exact claim keys the platform stamps — mirrors claims.ts. */
+/**
+ * The exact claim keys the platform stamps — mirrors claims.ts.
+ *
+ * `ext_subject` and `ext_email` are verified-borrower claims: the subject and
+ * (verified, lowercased) email of an external principal that reached the ORM
+ * through an Artifact Next ingress. Only an embedding host's in-process
+ * delegated credential carries them — never a bearer, data token or header —
+ * and every other caller has them absent, which matches no row.
+ */
 declare const CLAIMS_CONTRACT: {
     readonly sub: "string";
     readonly org: "string?";
+    readonly ext_subject: "string?";
+    readonly ext_email: "string?";
     readonly roles: "string[]";
     readonly capabilities: "string[]";
 };
-type ClaimKey = 'sub' | 'org';
+/** Verified-borrower claim keys; text-typed, compared to text columns with = only. */
+declare const EXTERNAL_POLICY_CLAIM_KEYS: readonly ["ext_subject", "ext_email"];
+type ExternalPolicyClaimKey = (typeof EXTERNAL_POLICY_CLAIM_KEYS)[number];
+type ClaimKey = 'sub' | 'org' | ExternalPolicyClaimKey;
+declare function isExternalPolicyClaimKey(key: string): key is ExternalPolicyClaimKey;
 declare const valueIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"literal">;
     value: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>]>;
@@ -47,6 +66,8 @@ declare const valueIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"claim">;
     key: z.ZodEnum<{
         sub: "sub";
+        ext_subject: "ext_subject";
+        ext_email: "ext_email";
         org: "org";
     }>;
 }, z.core.$strip>], "kind">;
@@ -87,9 +108,11 @@ type PredIr = {
  | {
     kind: 'capability';
     key: string;
+    namespace?: string;
 } | {
     kind: 'role';
     key: string;
+    namespace?: string;
 }
 /** §4f: a client-supplied BoolExp variable lands here, validated + lowered at runtime. */
  | {
@@ -206,6 +229,8 @@ declare const prefetchPlanIrSchema: z.ZodObject<{
             kind: z.ZodLiteral<"claim">;
             key: z.ZodEnum<{
                 sub: "sub";
+                ext_subject: "ext_subject";
+                ext_email: "ext_email";
                 org: "org";
             }>;
         }, z.core.$strip>], "kind">;
@@ -220,6 +245,8 @@ declare const prefetchPlanIrSchema: z.ZodObject<{
             kind: z.ZodLiteral<"claim">;
             key: z.ZodEnum<{
                 sub: "sub";
+                ext_subject: "ext_subject";
+                ext_email: "ext_email";
                 org: "org";
             }>;
         }, z.core.$strip>], "kind">;
@@ -305,6 +332,8 @@ declare const rootIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 kind: z.ZodLiteral<"claim">;
                 key: z.ZodEnum<{
                     sub: "sub";
+                    ext_subject: "ext_subject";
+                    ext_email: "ext_email";
                     org: "org";
                 }>;
             }, z.core.$strip>], "kind">;
@@ -319,6 +348,8 @@ declare const rootIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 kind: z.ZodLiteral<"claim">;
                 key: z.ZodEnum<{
                     sub: "sub";
+                    ext_subject: "ext_subject";
+                    ext_email: "ext_email";
                     org: "org";
                 }>;
             }, z.core.$strip>], "kind">;
@@ -341,6 +372,8 @@ declare const rootIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"claim">;
             key: z.ZodEnum<{
                 sub: "sub";
+                ext_subject: "ext_subject";
+                ext_email: "ext_email";
                 org: "org";
             }>;
         }, z.core.$strip>], "kind">;
@@ -364,6 +397,8 @@ declare const rootIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 kind: z.ZodLiteral<"claim">;
                 key: z.ZodEnum<{
                     sub: "sub";
+                    ext_subject: "ext_subject";
+                    ext_email: "ext_email";
                     org: "org";
                 }>;
             }, z.core.$strip>], "kind">;
@@ -378,6 +413,8 @@ declare const rootIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 kind: z.ZodLiteral<"claim">;
                 key: z.ZodEnum<{
                     sub: "sub";
+                    ext_subject: "ext_subject";
+                    ext_email: "ext_email";
                     org: "org";
                 }>;
             }, z.core.$strip>], "kind">;
@@ -487,6 +524,8 @@ declare const rootIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 kind: z.ZodLiteral<"claim">;
                 key: z.ZodEnum<{
                     sub: "sub";
+                    ext_subject: "ext_subject";
+                    ext_email: "ext_email";
                     org: "org";
                 }>;
             }, z.core.$strip>], "kind">;
@@ -504,6 +543,8 @@ declare const rootIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"claim">;
             key: z.ZodEnum<{
                 sub: "sub";
+                ext_subject: "ext_subject";
+                ext_email: "ext_email";
                 org: "org";
             }>;
         }, z.core.$strip>], "kind">;
@@ -529,6 +570,8 @@ declare const rootIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 kind: z.ZodLiteral<"claim">;
                 key: z.ZodEnum<{
                     sub: "sub";
+                    ext_subject: "ext_subject";
+                    ext_email: "ext_email";
                     org: "org";
                 }>;
             }, z.core.$strip>], "kind">;
@@ -549,6 +592,8 @@ declare const rootIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 kind: z.ZodLiteral<"claim">;
                 key: z.ZodEnum<{
                     sub: "sub";
+                    ext_subject: "ext_subject";
+                    ext_email: "ext_email";
                     org: "org";
                 }>;
             }, z.core.$strip>], "kind">;
@@ -569,6 +614,8 @@ declare const rootIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 kind: z.ZodLiteral<"claim">;
                 key: z.ZodEnum<{
                     sub: "sub";
+                    ext_subject: "ext_subject";
+                    ext_email: "ext_email";
                     org: "org";
                 }>;
             }, z.core.$strip>], "kind">;
@@ -587,6 +634,8 @@ declare const rootIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"claim">;
             key: z.ZodEnum<{
                 sub: "sub";
+                ext_subject: "ext_subject";
+                ext_email: "ext_email";
                 org: "org";
             }>;
         }, z.core.$strip>], "kind">;
@@ -621,8 +670,8 @@ declare const variableIrSchema: z.ZodObject<{
         scalar: z.ZodEnum<{
             bigint: "bigint";
             boolean: "boolean";
-            text: "text";
             date: "date";
+            text: "text";
             timestamptz: "timestamptz";
             jsonb: "jsonb";
             uuid: "uuid";
@@ -655,7 +704,47 @@ declare const variableIrSchema: z.ZodObject<{
 }, z.core.$strip>;
 type VariableIr = z.infer<typeof variableIrSchema>;
 declare const compiledOperationSchema: z.ZodObject<{
-    irVersion: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>;
+    language: z.ZodOptional<z.ZodLiteral<"sql">>;
+    sqlQuery: z.ZodOptional<z.ZodObject<{
+        catalog: z.ZodObject<{
+            identity: z.ZodString;
+            objects: z.ZodArray<z.ZodObject<{
+                ref: z.ZodString;
+                table: z.ZodString;
+                columns: z.ZodArray<z.ZodObject<{
+                    name: z.ZodString;
+                    nullable: z.ZodBoolean;
+                    type: z.ZodString;
+                }, z.core.$strip>>;
+                scan: z.ZodString;
+                read: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        read: z.ZodArray<z.ZodString>;
+        maxRows: z.ZodNumber;
+    }, z.core.$strict>>;
+    sql: z.ZodOptional<z.ZodObject<{
+        text: z.ZodString;
+        columns: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            type: z.ZodEnum<{
+                bigint: "bigint";
+                boolean: "boolean";
+                date: "date";
+                text: "text";
+                timestamptz: "timestamptz";
+                uuid: "uuid";
+                integer: "integer";
+                numeric: "numeric";
+                double: "double";
+            }>;
+            nullable: z.ZodBoolean;
+        }, z.core.$strip>>;
+        parameters: z.ZodArray<z.ZodString>;
+        read: z.ZodArray<z.ZodString>;
+        maxRows: z.ZodNumber;
+    }, z.core.$strict>>;
+    irVersion: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<3>, z.ZodLiteral<4>, z.ZodLiteral<5>]>;
     name: z.ZodString;
     opHash: z.ZodString;
     kind: z.ZodEnum<{
@@ -673,8 +762,8 @@ declare const compiledOperationSchema: z.ZodObject<{
             scalar: z.ZodEnum<{
                 bigint: "bigint";
                 boolean: "boolean";
-                text: "text";
                 date: "date";
+                text: "text";
                 timestamptz: "timestamptz";
                 jsonb: "jsonb";
                 uuid: "uuid";
@@ -759,6 +848,8 @@ declare const compiledOperationSchema: z.ZodObject<{
                     kind: z.ZodLiteral<"claim">;
                     key: z.ZodEnum<{
                         sub: "sub";
+                        ext_subject: "ext_subject";
+                        ext_email: "ext_email";
                         org: "org";
                     }>;
                 }, z.core.$strip>], "kind">;
@@ -773,6 +864,8 @@ declare const compiledOperationSchema: z.ZodObject<{
                     kind: z.ZodLiteral<"claim">;
                     key: z.ZodEnum<{
                         sub: "sub";
+                        ext_subject: "ext_subject";
+                        ext_email: "ext_email";
                         org: "org";
                     }>;
                 }, z.core.$strip>], "kind">;
@@ -795,6 +888,8 @@ declare const compiledOperationSchema: z.ZodObject<{
                 kind: z.ZodLiteral<"claim">;
                 key: z.ZodEnum<{
                     sub: "sub";
+                    ext_subject: "ext_subject";
+                    ext_email: "ext_email";
                     org: "org";
                 }>;
             }, z.core.$strip>], "kind">;
@@ -818,6 +913,8 @@ declare const compiledOperationSchema: z.ZodObject<{
                     kind: z.ZodLiteral<"claim">;
                     key: z.ZodEnum<{
                         sub: "sub";
+                        ext_subject: "ext_subject";
+                        ext_email: "ext_email";
                         org: "org";
                     }>;
                 }, z.core.$strip>], "kind">;
@@ -832,6 +929,8 @@ declare const compiledOperationSchema: z.ZodObject<{
                     kind: z.ZodLiteral<"claim">;
                     key: z.ZodEnum<{
                         sub: "sub";
+                        ext_subject: "ext_subject";
+                        ext_email: "ext_email";
                         org: "org";
                     }>;
                 }, z.core.$strip>], "kind">;
@@ -941,6 +1040,8 @@ declare const compiledOperationSchema: z.ZodObject<{
                     kind: z.ZodLiteral<"claim">;
                     key: z.ZodEnum<{
                         sub: "sub";
+                        ext_subject: "ext_subject";
+                        ext_email: "ext_email";
                         org: "org";
                     }>;
                 }, z.core.$strip>], "kind">;
@@ -958,6 +1059,8 @@ declare const compiledOperationSchema: z.ZodObject<{
                 kind: z.ZodLiteral<"claim">;
                 key: z.ZodEnum<{
                     sub: "sub";
+                    ext_subject: "ext_subject";
+                    ext_email: "ext_email";
                     org: "org";
                 }>;
             }, z.core.$strip>], "kind">;
@@ -983,6 +1086,8 @@ declare const compiledOperationSchema: z.ZodObject<{
                     kind: z.ZodLiteral<"claim">;
                     key: z.ZodEnum<{
                         sub: "sub";
+                        ext_subject: "ext_subject";
+                        ext_email: "ext_email";
                         org: "org";
                     }>;
                 }, z.core.$strip>], "kind">;
@@ -1003,6 +1108,8 @@ declare const compiledOperationSchema: z.ZodObject<{
                     kind: z.ZodLiteral<"claim">;
                     key: z.ZodEnum<{
                         sub: "sub";
+                        ext_subject: "ext_subject";
+                        ext_email: "ext_email";
                         org: "org";
                     }>;
                 }, z.core.$strip>], "kind">;
@@ -1023,6 +1130,8 @@ declare const compiledOperationSchema: z.ZodObject<{
                     kind: z.ZodLiteral<"claim">;
                     key: z.ZodEnum<{
                         sub: "sub";
+                        ext_subject: "ext_subject";
+                        ext_email: "ext_email";
                         org: "org";
                     }>;
                 }, z.core.$strip>], "kind">;
@@ -1041,6 +1150,8 @@ declare const compiledOperationSchema: z.ZodObject<{
                 kind: z.ZodLiteral<"claim">;
                 key: z.ZodEnum<{
                     sub: "sub";
+                    ext_subject: "ext_subject";
+                    ext_email: "ext_email";
                     org: "org";
                 }>;
             }, z.core.$strip>], "kind">;
@@ -1156,6 +1267,23 @@ type ResolvedMetaIr = z.infer<typeof resolvedMetaIrSchema>;
  */
 declare const tableMetaIrSchema: z.ZodObject<{
     table: z.ZodString;
+    namespace: z.ZodOptional<z.ZodString>;
+    dependencies: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    foreignReferences: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        column: z.ZodString;
+        target: z.ZodString;
+        targetColumn: z.ZodString;
+    }, z.core.$strip>>>;
+    exportRead: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<true>, z.ZodObject<{
+        capability: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        role: z.ZodString;
+    }, z.core.$strip>]>>;
+    exportWrite: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<true>, z.ZodObject<{
+        capability: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        role: z.ZodString;
+    }, z.core.$strip>]>>;
     schema: z.ZodString;
     typename: z.ZodString;
     claimsGated: z.ZodDefault<z.ZodBoolean>;
@@ -1165,8 +1293,8 @@ declare const tableMetaIrSchema: z.ZodObject<{
         type: z.ZodUnion<readonly [z.ZodEnum<{
             bigint: "bigint";
             boolean: "boolean";
-            text: "text";
             date: "date";
+            text: "text";
             timestamptz: "timestamptz";
             jsonb: "jsonb";
             uuid: "uuid";
@@ -1263,12 +1391,33 @@ declare const tableMetaIrSchema: z.ZodObject<{
 }, z.core.$strip>;
 type TableMetaIr = z.infer<typeof tableMetaIrSchema>;
 declare const compiledArtifactSchema: z.ZodObject<{
-    irVersion: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>;
+    irVersion: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<3>, z.ZodLiteral<4>, z.ZodLiteral<5>]>;
     namespace: z.ZodString;
     schemaHash: z.ZodString;
+    ownSchemaHash: z.ZodOptional<z.ZodString>;
+    dependencies: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    readPolicies: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<PredIr, unknown, z.core.$ZodTypeInternals<PredIr, unknown>>>>;
     opsHash: z.ZodString;
+    unbackedTables: z.ZodOptional<z.ZodArray<z.ZodString>>;
     tables: z.ZodRecord<z.ZodString, z.ZodObject<{
         table: z.ZodString;
+        namespace: z.ZodOptional<z.ZodString>;
+        dependencies: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        foreignReferences: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            column: z.ZodString;
+            target: z.ZodString;
+            targetColumn: z.ZodString;
+        }, z.core.$strip>>>;
+        exportRead: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<true>, z.ZodObject<{
+            capability: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            role: z.ZodString;
+        }, z.core.$strip>]>>;
+        exportWrite: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<true>, z.ZodObject<{
+            capability: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            role: z.ZodString;
+        }, z.core.$strip>]>>;
         schema: z.ZodString;
         typename: z.ZodString;
         claimsGated: z.ZodDefault<z.ZodBoolean>;
@@ -1278,8 +1427,8 @@ declare const compiledArtifactSchema: z.ZodObject<{
             type: z.ZodUnion<readonly [z.ZodEnum<{
                 bigint: "bigint";
                 boolean: "boolean";
-                text: "text";
                 date: "date";
+                text: "text";
                 timestamptz: "timestamptz";
                 jsonb: "jsonb";
                 uuid: "uuid";
@@ -1375,7 +1524,47 @@ declare const compiledArtifactSchema: z.ZodObject<{
         dynamicFilterMaxNodes: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strip>>;
     operations: z.ZodRecord<z.ZodString, z.ZodObject<{
-        irVersion: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>]>;
+        language: z.ZodOptional<z.ZodLiteral<"sql">>;
+        sqlQuery: z.ZodOptional<z.ZodObject<{
+            catalog: z.ZodObject<{
+                identity: z.ZodString;
+                objects: z.ZodArray<z.ZodObject<{
+                    ref: z.ZodString;
+                    table: z.ZodString;
+                    columns: z.ZodArray<z.ZodObject<{
+                        name: z.ZodString;
+                        nullable: z.ZodBoolean;
+                        type: z.ZodString;
+                    }, z.core.$strip>>;
+                    scan: z.ZodString;
+                    read: z.ZodArray<z.ZodString>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>;
+            read: z.ZodArray<z.ZodString>;
+            maxRows: z.ZodNumber;
+        }, z.core.$strict>>;
+        sql: z.ZodOptional<z.ZodObject<{
+            text: z.ZodString;
+            columns: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                type: z.ZodEnum<{
+                    bigint: "bigint";
+                    boolean: "boolean";
+                    date: "date";
+                    text: "text";
+                    timestamptz: "timestamptz";
+                    uuid: "uuid";
+                    integer: "integer";
+                    numeric: "numeric";
+                    double: "double";
+                }>;
+                nullable: z.ZodBoolean;
+            }, z.core.$strip>>;
+            parameters: z.ZodArray<z.ZodString>;
+            read: z.ZodArray<z.ZodString>;
+            maxRows: z.ZodNumber;
+        }, z.core.$strict>>;
+        irVersion: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<3>, z.ZodLiteral<4>, z.ZodLiteral<5>]>;
         name: z.ZodString;
         opHash: z.ZodString;
         kind: z.ZodEnum<{
@@ -1393,8 +1582,8 @@ declare const compiledArtifactSchema: z.ZodObject<{
                 scalar: z.ZodEnum<{
                     bigint: "bigint";
                     boolean: "boolean";
-                    text: "text";
                     date: "date";
+                    text: "text";
                     timestamptz: "timestamptz";
                     jsonb: "jsonb";
                     uuid: "uuid";
@@ -1479,6 +1668,8 @@ declare const compiledArtifactSchema: z.ZodObject<{
                         kind: z.ZodLiteral<"claim">;
                         key: z.ZodEnum<{
                             sub: "sub";
+                            ext_subject: "ext_subject";
+                            ext_email: "ext_email";
                             org: "org";
                         }>;
                     }, z.core.$strip>], "kind">;
@@ -1493,6 +1684,8 @@ declare const compiledArtifactSchema: z.ZodObject<{
                         kind: z.ZodLiteral<"claim">;
                         key: z.ZodEnum<{
                             sub: "sub";
+                            ext_subject: "ext_subject";
+                            ext_email: "ext_email";
                             org: "org";
                         }>;
                     }, z.core.$strip>], "kind">;
@@ -1515,6 +1708,8 @@ declare const compiledArtifactSchema: z.ZodObject<{
                     kind: z.ZodLiteral<"claim">;
                     key: z.ZodEnum<{
                         sub: "sub";
+                        ext_subject: "ext_subject";
+                        ext_email: "ext_email";
                         org: "org";
                     }>;
                 }, z.core.$strip>], "kind">;
@@ -1538,6 +1733,8 @@ declare const compiledArtifactSchema: z.ZodObject<{
                         kind: z.ZodLiteral<"claim">;
                         key: z.ZodEnum<{
                             sub: "sub";
+                            ext_subject: "ext_subject";
+                            ext_email: "ext_email";
                             org: "org";
                         }>;
                     }, z.core.$strip>], "kind">;
@@ -1552,6 +1749,8 @@ declare const compiledArtifactSchema: z.ZodObject<{
                         kind: z.ZodLiteral<"claim">;
                         key: z.ZodEnum<{
                             sub: "sub";
+                            ext_subject: "ext_subject";
+                            ext_email: "ext_email";
                             org: "org";
                         }>;
                     }, z.core.$strip>], "kind">;
@@ -1661,6 +1860,8 @@ declare const compiledArtifactSchema: z.ZodObject<{
                         kind: z.ZodLiteral<"claim">;
                         key: z.ZodEnum<{
                             sub: "sub";
+                            ext_subject: "ext_subject";
+                            ext_email: "ext_email";
                             org: "org";
                         }>;
                     }, z.core.$strip>], "kind">;
@@ -1678,6 +1879,8 @@ declare const compiledArtifactSchema: z.ZodObject<{
                     kind: z.ZodLiteral<"claim">;
                     key: z.ZodEnum<{
                         sub: "sub";
+                        ext_subject: "ext_subject";
+                        ext_email: "ext_email";
                         org: "org";
                     }>;
                 }, z.core.$strip>], "kind">;
@@ -1703,6 +1906,8 @@ declare const compiledArtifactSchema: z.ZodObject<{
                         kind: z.ZodLiteral<"claim">;
                         key: z.ZodEnum<{
                             sub: "sub";
+                            ext_subject: "ext_subject";
+                            ext_email: "ext_email";
                             org: "org";
                         }>;
                     }, z.core.$strip>], "kind">;
@@ -1723,6 +1928,8 @@ declare const compiledArtifactSchema: z.ZodObject<{
                         kind: z.ZodLiteral<"claim">;
                         key: z.ZodEnum<{
                             sub: "sub";
+                            ext_subject: "ext_subject";
+                            ext_email: "ext_email";
                             org: "org";
                         }>;
                     }, z.core.$strip>], "kind">;
@@ -1743,6 +1950,8 @@ declare const compiledArtifactSchema: z.ZodObject<{
                         kind: z.ZodLiteral<"claim">;
                         key: z.ZodEnum<{
                             sub: "sub";
+                            ext_subject: "ext_subject";
+                            ext_email: "ext_email";
                             org: "org";
                         }>;
                     }, z.core.$strip>], "kind">;
@@ -1761,6 +1970,8 @@ declare const compiledArtifactSchema: z.ZodObject<{
                     kind: z.ZodLiteral<"claim">;
                     key: z.ZodEnum<{
                         sub: "sub";
+                        ext_subject: "ext_subject";
+                        ext_email: "ext_email";
                         org: "org";
                     }>;
                 }, z.core.$strip>], "kind">;
@@ -1790,4 +2001,4 @@ declare function normalizeIr(raw: unknown): CompiledArtifact;
 /** Index an artifact's operations by opHash (the wire selector). */
 declare function indexByHash(artifact: CompiledArtifact): Map<string, CompiledOperation>;
 
-export { CLAIMS_CONTRACT, CMP_OPS, type CellSelectionIr, type ClaimKey, type CmpOp, type CompiledArtifact, type CompiledOperation, DATE_BUCKETS, type DateBucket, type GroupByKeyIr, INPUT_REF_KINDS, IR_VERSION, type InputRefKind, IrVersionError, LEGACY_IR_VERSION, type LimitIr, type OrderIr, type PredIr, type PrefetchPlanIr, type ResolvedMetaIr, type ResolvedSourceIr, type RootIr, type SelectionIr, type TableMetaIr, type ValueIr, type VariableDefaultIr, type VariableIr, compiledArtifactSchema, compiledOperationSchema, indexByHash, limitIrSchema, normalizeIr, orderIrSchema, predIrSchema, prefetchPlanIrSchema, requiredArtifactIrVersion, resolvedMetaIrSchema, resolvedSourceIrSchema, rootIrSchema, selectionIrSchema, tableMetaIrSchema, valueIrSchema, variableDefaultIrSchema, variableIrSchema };
+export { CLAIMS_CONTRACT, CMP_OPS, COMPOSED_IR_VERSION, type CellSelectionIr, type ClaimKey, type CmpOp, type CompiledArtifact, type CompiledOperation, DATE_BUCKETS, type DateBucket, EXTERNAL_POLICY_CLAIM_KEYS, type ExternalPolicyClaimKey, GUARDED_IR_VERSION, type GroupByKeyIr, INPUT_REF_KINDS, IR_VERSION, type InputRefKind, IrVersionError, LEGACY_IR_VERSION, type LimitIr, type OrderIr, type PredIr, type PrefetchPlanIr, RUNTIME_SQL_IR_VERSION, type ResolvedMetaIr, type ResolvedSourceIr, type RootIr, SQL_IR_VERSION, type SelectionIr, type TableMetaIr, type ValueIr, type VariableDefaultIr, type VariableIr, compiledArtifactSchema, compiledOperationSchema, indexByHash, isExternalPolicyClaimKey, limitIrSchema, normalizeIr, orderIrSchema, predIrSchema, prefetchPlanIrSchema, requiredArtifactIrVersion, resolvedMetaIrSchema, resolvedSourceIrSchema, rootIrSchema, selectionIrSchema, tableMetaIrSchema, valueIrSchema, variableDefaultIrSchema, variableIrSchema };