@standards/schema 0.0.0-stage → 1.0.0-alpha.382

package/dist/exceptions-DjPVyS-Q.d.mts

@@ -0,0 +1,761 @@
+
+import { z as z$1 } from "zod";
+//#region src/lib/permission-grants.d.ts
+declare const PERMISSION_ACTIONS: readonly ["read", "create", "update", "delete", "manage"];
+/** The only definition of a valid grant (spec B1). */
+declare const permissionGrantSchema: z$1.ZodObject<{
+  scope: z$1.ZodEnum<{
+    object: "object";
+    system: "system";
+  }>;
+  target: z$1.ZodString;
+  actions: z$1.ZodArray<z$1.ZodEnum<{
+    read: "read";
+    create: "create";
+    update: "update";
+    delete: "delete";
+    manage: "manage";
+  }>>;
+}, z$1.core.$strict>;
+type PermissionGrant = z$1.infer<typeof permissionGrantSchema>;
+interface GrantIssue {
+  target: string;
+  reason: "shape" | "unknown-resource" | "off-level" | "split-capability" | "unknown-object" | "object-action";
+}
+declare function findGrantIssues(grants: readonly unknown[], context: {
+  objectNames: ReadonlySet<string>;
+}): GrantIssue[];
+//#endregion
+//#region src/exceptions.d.ts
+/**
+ * Error codes for schema exceptions
+ */
+declare const SchemaErrorCode: {
+  readonly CONNECTOR_INVALID_SIGNATURE: "SCHEMA_CONNECTOR_INVALID_SIGNATURE";
+  readonly DRAFT_REVISION_CONFLICT: "DRAFT_REVISION_CONFLICT";
+  readonly UNKNOWN: "SCHEMA_UNKNOWN_ERROR";
+  readonly OBJECT_NOT_FOUND: "SCHEMA_OBJECT_NOT_FOUND";
+  readonly ATTRIBUTE_NOT_FOUND: "SCHEMA_ATTRIBUTE_NOT_FOUND";
+  readonly RECORD_NOT_FOUND: "SCHEMA_RECORD_NOT_FOUND";
+  readonly RECORD_ID_UNAVAILABLE: "SCHEMA_RECORD_ID_UNAVAILABLE";
+  readonly SOURCE_NOT_FOUND: "SCHEMA_SOURCE_NOT_FOUND";
+  readonly NEWS_ENTRY_NOT_FOUND: "NEWS_ENTRY_NOT_FOUND";
+  readonly ROLE_NOT_FOUND: "SCHEMA_ROLE_NOT_FOUND";
+  readonly MEMORY_NOT_FOUND: "SCHEMA_MEMORY_NOT_FOUND";
+  readonly VALIDATION_FAILED: "SCHEMA_VALIDATION_FAILED";
+  readonly INVALID_ATTRIBUTE_NAME: "SCHEMA_INVALID_ATTRIBUTE_NAME";
+  readonly INVALID_OBJECT_NAME: "SCHEMA_INVALID_OBJECT_NAME";
+  /** A consumer declared, registered, bundled or sourced an object under a framework-native name (#3450). */
+  readonly RESERVED_OBJECT_NAME: "SCHEMA_RESERVED_OBJECT_NAME";
+  readonly PROTECTED_OBJECT: "SCHEMA_PROTECTED_OBJECT";
+  readonly PROTECTED_ATTRIBUTE: "SCHEMA_PROTECTED_ATTRIBUTE";
+  readonly PROTECTED_VIEW: "SCHEMA_PROTECTED_VIEW";
+  readonly PROTECTED_ROLE: "SCHEMA_PROTECTED_ROLE";
+  /** A saved permission grant is outside the permission catalog (spec B1). */
+  readonly PERMISSION_INVALID_GRANT: "SCHEMA_PERMISSION_INVALID_GRANT";
+  readonly FORBIDDEN: "SCHEMA_FORBIDDEN";
+  readonly ACCESS_DENIED: "SCHEMA_ACCESS_DENIED";
+  /**
+   * A workspace RULE refuses the write — the last owner cannot be removed.
+   *
+   * Not `INVARIANT_VIOLATION`, despite the name: that one is an internal
+   * "should never happen" assertion, a bug signal nobody outside the codebase
+   * can act on. This is the opposite — a rule the caller can act on, reached
+   * by a request that was entirely well-formed, whose message tells them how.
+   */
+  readonly WORKSPACE_INVARIANT: "SCHEMA_WORKSPACE_INVARIANT";
+  /** The resource's own state refuses the operation — e.g. a draft already being sent. */
+  readonly STATE_GATE: "SCHEMA_STATE_GATE";
+  /** The operation needs an actor and the request carried none. */
+  readonly ACTOR_CONTEXT_REQUIRED: "SCHEMA_ACTOR_CONTEXT_REQUIRED";
+  /**
+   * The same refusal at the HTTP edge, answered 401 before a contract
+   * operation declaring `actor: "required"` runs: the request authenticated
+   * but carried no actor (a host on `auth.requireUser: false`). Unprefixed on
+   * the wire because the hand-written routes answered exactly this code.
+   */
+  readonly ACTOR_REQUIRED: "ACTOR_CONTEXT_REQUIRED";
+  /**
+   * An admin lever's body names a tenant other than the one the caller is
+   * authenticated in: the body confirms intent, it never selects a target.
+   */
+  readonly TENANT_CONFIRMATION_MISMATCH: "SCHEMA_TENANT_CONFIRMATION_MISMATCH";
+  /** `owner` asked for a workspace API key (#5074): only a personal key may hold it. */
+  readonly API_KEY_OWNER_ROLE_REFUSED: "SCHEMA_API_KEY_OWNER_ROLE_REFUSED";
+  readonly CONNECTOR_API_FAILED: "SCHEMA_CONNECTOR_API_FAILED";
+  readonly CONNECTOR_AUTH_FAILED: "SCHEMA_CONNECTOR_AUTH_FAILED";
+  readonly CONNECTOR_INVALID_STATE: "SCHEMA_CONNECTOR_INVALID_STATE";
+  /**
+   * The provider issued tokens and the flow failed AFTER that — resolving the
+   * connected address. Distinct from CONNECTOR_AUTH_FAILED because the user is
+   * left holding a real grant: consent happened, and it may still be live on the
+   * provider side even though no connection row exists here.
+   */
+  readonly CONNECTOR_GRANT_ORPHANED: "SCHEMA_CONNECTOR_GRANT_ORPHANED";
+  readonly SYNC_FAILED: "SCHEMA_SYNC_FAILED";
+  readonly SYNC_CONFLICT: "SCHEMA_SYNC_CONFLICT";
+  readonly SYNC_CASCADE: "SCHEMA_SYNC_CASCADE";
+  readonly ORPHAN_SYSTEM_ATTRIBUTE: "SCHEMA_ORPHAN_SYSTEM_ATTRIBUTE";
+  readonly SYSTEM_ENTITY_IMMUTABLE: "SCHEMA_SYSTEM_ENTITY_IMMUTABLE";
+  readonly AMBIGUOUS_CHANGE: "SCHEMA_AMBIGUOUS_CHANGE";
+  readonly RECORD_GRANT_ON_WORKSPACE: "RECORD_GRANT_ON_WORKSPACE";
+  readonly RECORD_GRANT_INVALID_ACTOR: "RECORD_GRANT_INVALID_ACTOR";
+  readonly RECORD_GRANT_UNSHAREABLE_OBJECT: "RECORD_GRANT_UNSHAREABLE_OBJECT";
+  readonly AGENT_GRANT_ON_WORKSPACE: "AGENT_GRANT_ON_WORKSPACE";
+  readonly AGENT_GRANT_INVALID_ACTOR: "AGENT_GRANT_INVALID_ACTOR";
+  readonly PAGE_GRANT_ON_WORKSPACE: "PAGE_GRANT_ON_WORKSPACE";
+  readonly PAGE_GRANT_INVALID_ACTOR: "PAGE_GRANT_INVALID_ACTOR";
+  readonly AGENT_SCHEDULE_AUDIENCE_ON_WORKSPACE: "AGENT_SCHEDULE_AUDIENCE_ON_WORKSPACE";
+  readonly AGENT_SCHEDULE_AUDIENCE_HARNESS: "AGENT_SCHEDULE_AUDIENCE_HARNESS";
+  readonly AGENT_SCHEDULE_AUDIENCE_TOOL: "AGENT_SCHEDULE_AUDIENCE_TOOL";
+  readonly RECORD_COUNT_GROUP_BY_MULTI_VALUED: "RECORD_COUNT_GROUP_BY_MULTI_VALUED";
+  readonly RECORD_COUNT_GROUP_BY_UNSUPPORTED: "RECORD_COUNT_GROUP_BY_UNSUPPORTED";
+  /** A sum or average over a currency attribute holding more than one currency. */
+  readonly AGGREGATE_MIXED_CURRENCY: "AGGREGATE_MIXED_CURRENCY";
+  /** An aggregate combined with a free-text search, which it does not support. */
+  readonly AGGREGATE_SEARCH_UNSUPPORTED: "AGGREGATE_SEARCH_UNSUPPORTED";
+  readonly PAGE_REFERENCED: "PAGE_REFERENCED";
+  readonly DUPLICATE: "SCHEMA_DUPLICATE";
+  readonly DUPLICATE_OBJECT: "SCHEMA_DUPLICATE_OBJECT";
+  readonly DUPLICATE_ATTRIBUTE: "SCHEMA_DUPLICATE_ATTRIBUTE";
+  /** A second live memory page with the same profile, subject or theme key. */
+  readonly MEMORY_PAGE_EXISTS: "SCHEMA_MEMORY_PAGE_EXISTS";
+  /** propose_memory called more than the hourly budget allows for one actor. */
+  readonly MEMORY_PROPOSAL_RATE_LIMITED: "SCHEMA_MEMORY_PROPOSAL_RATE_LIMITED";
+  readonly CONFLICT: "SCHEMA_CONFLICT";
+  /**
+   * A queued record operation was rolled back unsent because an earlier
+   * operation of the same tab on the same record failed (client-side).
+   */
+  readonly OPERATION_ABANDONED: "SCHEMA_OPERATION_ABANDONED";
+  readonly STORAGE_UPLOAD_FAILED: "SCHEMA_STORAGE_UPLOAD_FAILED";
+  readonly STORAGE_DOWNLOAD_FAILED: "SCHEMA_STORAGE_DOWNLOAD_FAILED";
+  readonly STORAGE_DELETE_FAILED: "SCHEMA_STORAGE_DELETE_FAILED";
+  readonly STORAGE_URL_FAILED: "SCHEMA_STORAGE_URL_FAILED";
+  readonly REPOSITORY_CREATE_FAILED: "SCHEMA_REPOSITORY_CREATE_FAILED";
+  readonly REPOSITORY_UPDATE_FAILED: "SCHEMA_REPOSITORY_UPDATE_FAILED";
+  readonly REPOSITORY_DELETE_FAILED: "SCHEMA_REPOSITORY_DELETE_FAILED";
+  readonly REPOSITORY_QUERY_FAILED: "SCHEMA_REPOSITORY_QUERY_FAILED";
+  readonly NOT_IMPLEMENTED: "SCHEMA_NOT_IMPLEMENTED";
+  readonly TIMEOUT: "SCHEMA_TIMEOUT";
+  /** A bounded read (a page block's aggregate or list) outran its statement timeout. 504. */
+  readonly QUERY_TIMEOUT: "QUERY_TIMEOUT";
+  readonly RECORD_REFERENCED: "SCHEMA_RECORD_REFERENCED";
+  readonly ATTRIBUTE_IN_USE: "SCHEMA_ATTRIBUTE_IN_USE";
+  readonly OBJECT_REFERENCED: "SCHEMA_OBJECT_REFERENCED";
+  readonly CONFIGURATION_REQUIRED: "CONFIGURATION_REQUIRED";
+  readonly SEARCH_ADAPTER_REQUIRED: "SEARCH_ADAPTER_REQUIRED";
+  readonly SEARCH_BACKEND_FAILED: "SEARCH_BACKEND_FAILED";
+  readonly SEARCH_BACKEND_REJECTED: "SEARCH_BACKEND_REJECTED";
+  readonly SEARCH_PATH_NOT_INDEXED: "SEARCH_PATH_NOT_INDEXED";
+  readonly INVARIANT_VIOLATION: "INVARIANT_VIOLATION";
+  readonly TENANT_CONTEXT_MISSING: "TENANT_CONTEXT_MISSING";
+  /** A Hatchet run's metadata does not match the outbox row that produced it — a forged or replayed run (403). */
+  readonly JOB_RUN_METADATA_MISMATCH: "JOB_RUN_METADATA_MISMATCH";
+  /** A coalesced run failed and the coalescing primitive already handled it (items given back or dropped and reported). */
+  readonly JOB_COALESCED_FAILURE_HANDLED: "JOB_COALESCED_FAILURE_HANDLED";
+  readonly FEATURE_FLAGS_CONTEXT: "FEATURE_FLAGS_CONTEXT";
+  readonly REALTIME_RATE_LIMITED: "REALTIME_RATE_LIMITED";
+  readonly REALTIME_DELIVERY_FAILED: "REALTIME_DELIVERY_FAILED";
+  readonly REALTIME_SUBSCRIPTION_FAILED: "REALTIME_SUBSCRIPTION_FAILED";
+  readonly AGENT_UNKNOWN: "AGENT_UNKNOWN";
+  readonly AGENT_DEPTH_EXCEEDED: "AGENT_DEPTH_EXCEEDED";
+  readonly AGENT_COST_LIMIT_EXCEEDED: "AGENT_COST_LIMIT_EXCEEDED";
+  readonly AGENT_TREE_COST_LIMIT_EXCEEDED: "AGENT_TREE_COST_LIMIT_EXCEEDED";
+  readonly CREDITS_EXHAUSTED: "CREDITS_EXHAUSTED";
+  readonly QUOTA_EXCEEDED: "QUOTA_EXCEEDED";
+  readonly EXPORT_TOO_LARGE: "EXPORT_TOO_LARGE";
+  readonly AGENT_SESSION_NOT_FOUND: "AGENT_SESSION_NOT_FOUND";
+  readonly AGENT_DEFINITION_NOT_FOUND: "AGENT_DEFINITION_NOT_FOUND";
+  readonly AGENT_RUN_CONFIG: "AGENT_RUN_CONFIG";
+  readonly AGENT_STREAMING: "AGENT_STREAMING";
+  readonly AGENT_MISSING_ACTOR: "AGENT_MISSING_ACTOR";
+  readonly AGENT_INVALID_STATE: "AGENT_INVALID_STATE";
+  /** A tool group grant names no native group or known `kind:id`, or a surface that is never granted. */
+  readonly AGENT_TRIGGER_THREAD_BUSY: "AGENT_TRIGGER_THREAD_BUSY";
+  readonly AGENT_TOOL_GROUP_UNKNOWN: "AGENT_TOOL_GROUP_UNKNOWN";
+  /** A private resource granted to a workspace definition (or one its owner cannot see). */
+  readonly AGENT_TOOL_GROUP_NOT_CONTAINED: "AGENT_TOOL_GROUP_NOT_CONTAINED";
+  /** A connection that does not hold the scope its kind needs (e.g. read). */
+  readonly AGENT_TOOL_GROUP_SCOPE_MISSING: "AGENT_TOOL_GROUP_SCOPE_MISSING";
+  /** A definition with a harness accepts only `memory` and trusted `mcp:<id>`. */
+  readonly AGENT_TOOL_GROUP_HARNESS: "AGENT_TOOL_GROUP_HARNESS";
+  /** A device or browser granted to a routine: its runs have nobody at the keyboard. */
+  readonly AGENT_TOOL_GROUP_NEEDS_PERSON: "AGENT_TOOL_GROUP_NEEDS_PERSON";
+  /** The `notifications` group granted to a non-routine: a conversation has no run to notify from. */
+  readonly AGENT_TOOL_GROUP_ROUTINE_ONLY: "AGENT_TOOL_GROUP_ROUTINE_ONLY";
+  /** A grant lacks a required tool group, such as GitHub without sandbox. */
+  readonly AGENT_TOOL_GROUP_REQUIRES: "AGENT_TOOL_GROUP_REQUIRES";
+  readonly AGENT_COMPACTION_IMPOSSIBLE: "AGENT_COMPACTION_IMPOSSIBLE";
+  readonly AGENT_COMPACTION_TIMEOUT: "AGENT_COMPACTION_TIMEOUT";
+  readonly AGENT_SESSION_OWNER_FENCED: "AGENT_SESSION_OWNER_FENCED";
+  readonly AGENT_TURN_RESUME_EXHAUSTED: "AGENT_TURN_RESUME_EXHAUSTED";
+  readonly AGENT_SESSION_STREAM_CURSOR_EXPIRED: "AGENT_SESSION_STREAM_CURSOR_EXPIRED";
+  readonly AGENT_MESSAGE_NOT_FOUND: "AGENT_MESSAGE_NOT_FOUND";
+  readonly AGENT_MESSAGE_NOT_EDITABLE: "AGENT_MESSAGE_NOT_EDITABLE";
+  readonly INVALID_TOOL_INPUT: "INVALID_TOOL_INPUT";
+  readonly TOOL_FAILED: "TOOL_FAILED";
+  readonly REFERENCE_NOT_FOUND: "REFERENCE_NOT_FOUND";
+  readonly REFERENCE_INVALID: "REFERENCE_INVALID";
+  readonly CAPABILITY_UNAVAILABLE: "CAPABILITY_UNAVAILABLE";
+  readonly EDIT_MATCH_NOT_FOUND: "EDIT_MATCH_NOT_FOUND";
+  readonly EDIT_MATCH_AMBIGUOUS: "EDIT_MATCH_AMBIGUOUS";
+  readonly EDIT_NO_CHANGE: "EDIT_NO_CHANGE";
+  readonly EDIT_TARGET_UNAVAILABLE: "EDIT_TARGET_UNAVAILABLE";
+  readonly EDIT_TARGET_UNSUPPORTED: "EDIT_TARGET_UNSUPPORTED";
+  readonly AGENT_EXECUTION_CANCELLED: "AGENT_EXECUTION_CANCELLED";
+  readonly AGENT_EXECUTION_TIMEOUT: "AGENT_EXECUTION_TIMEOUT";
+  readonly AGENT_TURN_FINALIZER_STALLED: "AGENT_TURN_FINALIZER_STALLED";
+  readonly ENVIRONMENT_NOT_READY: "ENVIRONMENT_NOT_READY";
+  readonly ENVIRONMENT_IN_USE: "ENVIRONMENT_IN_USE";
+  readonly ENVIRONMENT_MODEL_ACCESS_MISSING: "ENVIRONMENT_MODEL_ACCESS_MISSING";
+  readonly ENVIRONMENT_BUILD_FAILED: "ENVIRONMENT_BUILD_FAILED";
+  readonly ENVIRONMENT_RUN_FAILED: "ENVIRONMENT_RUN_FAILED";
+  readonly SANDBOX_PROVIDER_FAILED: "SANDBOX_PROVIDER_FAILED";
+  readonly CLOUD_BROWSER_LAUNCH_FAILED: "CLOUD_BROWSER_LAUNCH_FAILED";
+  readonly CLOUD_BROWSER_PROVIDER_FAILED: "CLOUD_BROWSER_PROVIDER_FAILED";
+  readonly CLOUD_BROWSER_EXTENSION_TIMEOUT: "CLOUD_BROWSER_EXTENSION_TIMEOUT";
+  readonly CLOUD_BROWSER_CLOSED: "CLOUD_BROWSER_CLOSED";
+  readonly BROWSER_PROFILE_LOCKED: "BROWSER_PROFILE_LOCKED";
+  readonly DEVICE_NOT_FOUND: "DEVICE_NOT_FOUND";
+  readonly DEVICE_OFFLINE: "DEVICE_OFFLINE";
+  readonly DEVICE_CAPABILITY_MISMATCH: "DEVICE_CAPABILITY_MISMATCH";
+  readonly DEVICE_CHANNEL_PROTOCOL: "DEVICE_CHANNEL_PROTOCOL";
+  readonly DEVICE_CONTROL_ELSEWHERE: "DEVICE_CONTROL_ELSEWHERE";
+  readonly DEVICE_CONTROL_REVOKED: "DEVICE_CONTROL_REVOKED";
+  readonly AI_UNKNOWN: "AI_UNKNOWN";
+  readonly AI_USAGE_LIMIT_EXCEEDED: "AI_USAGE_LIMIT_EXCEEDED";
+  readonly AI_INVALID_USAGE: "AI_INVALID_USAGE";
+  readonly AI_INVALID_MODEL: "AI_INVALID_MODEL";
+  readonly AI_INVALID_MODEL_INPUT: "AI_INVALID_MODEL_INPUT";
+  readonly AI_REPOSITORY_ERROR: "AI_REPOSITORY_ERROR";
+  readonly AI_GENERATION_FAILED: "AI_GENERATION_FAILED";
+  readonly AI_DECISION_FAILED: "AI_DECISION_FAILED";
+  readonly AI_IMAGE_USAGE_PENDING: "AI_IMAGE_USAGE_PENDING";
+  readonly AI_IMAGE_GENERATION_INDETERMINATE: "AI_IMAGE_GENERATION_INDETERMINATE";
+  readonly AI_IMAGE_RESERVATION_CLEANUP_INDETERMINATE: "AI_IMAGE_RESERVATION_CLEANUP_INDETERMINATE";
+  readonly AI_IMAGE_PUBLICATION_FAILED: "AI_IMAGE_PUBLICATION_FAILED";
+  readonly FILE_PUBLIC_NOT_ATTACHABLE: "FILE_PUBLIC_NOT_ATTACHABLE";
+  readonly DOCUMENT_MIME_NOT_ACCEPTED: "DOCUMENT_MIME_NOT_ACCEPTED";
+  readonly DOCUMENT_MULTIPLE_NOT_ALLOWED: "DOCUMENT_MULTIPLE_NOT_ALLOWED";
+  readonly DOCUMENT_NOT_FOUND_FOR_OPERATION: "DOCUMENT_NOT_FOUND_FOR_OPERATION";
+  readonly DOCUMENT_STORAGE_FAILED: "DOCUMENT_STORAGE_FAILED";
+  readonly DOCUMENT_SIZE_EXCEEDED: "DOCUMENT_SIZE_EXCEEDED";
+  readonly DOCUMENT_OCR_FAILED: "DOCUMENT_OCR_FAILED";
+  readonly DOCUMENT_BLOB_EMPTY: "DOCUMENT_BLOB_EMPTY";
+  readonly DOCUMENT_FILE_TOO_LARGE: "DOCUMENT_FILE_TOO_LARGE";
+  readonly DOCUMENT_FILE_NOT_FOUND: "DOCUMENT_FILE_NOT_FOUND";
+  readonly DOCUMENT_FILE_ALREADY_PACKED: "DOCUMENT_FILE_ALREADY_PACKED";
+  readonly DOCUMENT_RECORD_NOT_FOUND: "DOCUMENT_RECORD_NOT_FOUND";
+  readonly DOCUMENT_RECORD_OBJECT_MISMATCH: "DOCUMENT_RECORD_OBJECT_MISMATCH";
+  readonly DOCUMENT_FOLDER_SERVICE_UNAVAILABLE: "DOCUMENT_FOLDER_SERVICE_UNAVAILABLE";
+  readonly DOCUMENT_FOLDER_PATH_NOT_FOUND: "DOCUMENT_FOLDER_PATH_NOT_FOUND";
+  readonly EMAIL_PROVIDER_API_FAILED: "EMAIL_PROVIDER_API_FAILED";
+  readonly EMAIL_SEND_FAILED: "EMAIL_SEND_FAILED";
+  readonly EMAIL_SENT_NOT_STORED: "EMAIL_SENT_NOT_STORED";
+  readonly EMAIL_BATCH_ITEM_FAILED: "EMAIL_BATCH_ITEM_FAILED";
+  /** A read or write a mailbox-scoped EmailService cannot narrow to its granted mailboxes: refused rather than served tenant-wide. */
+  readonly EMAIL_SCOPE_UNSUPPORTED: "EMAIL_SCOPE_UNSUPPORTED";
+  /** A mailbox scope already holds the maximum number of custom categories. */
+  readonly EMAIL_CATEGORY_LIMIT: "EMAIL_CATEGORY_LIMIT";
+  readonly CALENDAR_PROVIDER_API_FAILED: "CALENDAR_PROVIDER_API_FAILED";
+  /** The embeddings feature is enabled but no Gateway credential is configured. */
+  readonly EMBEDDING_MODEL_UNAVAILABLE: "EMBEDDING_MODEL_UNAVAILABLE";
+  /** The provider returned vectors whose length differs from the configured dimensions. */
+  readonly EMBEDDING_DIMENSION_MISMATCH: "EMBEDDING_DIMENSION_MISMATCH";
+};
+type SchemaErrorCode = (typeof SchemaErrorCode)[keyof typeof SchemaErrorCode];
+/**
+ * Base error class for all schema-related errors
+ */
+/** What a `SchemaError` serialises to; a subclass may withhold `name` and `details`. */
+interface SchemaErrorJson {
+  code: SchemaErrorCode;
+  message: string;
+  name?: string;
+  details?: Record<string, unknown>;
+}
+declare class SchemaError extends Error {
+  readonly code: SchemaErrorCode;
+  readonly details?: Record<string, unknown>;
+  constructor(message: string, code?: SchemaErrorCode, details?: Record<string, unknown>);
+  toJSON(): SchemaErrorJson;
+}
+/**
+ * Base class for "not found" errors
+ */
+declare class NotFoundError extends SchemaError {
+  /** Literal discriminator for `Effect.catchTag`; a widened `string` breaks narrowing. */
+  readonly _tag = "NotFoundError";
+  readonly resourceType: string;
+  readonly resourceId: string;
+  constructor(resourceType: string, resourceId: string, code?: SchemaErrorCode, message?: string);
+}
+/**
+ * Object not found error
+ */
+declare class ObjectNotFoundError extends NotFoundError {
+  constructor(objectId: string);
+}
+/**
+ * Attribute not found error
+ */
+declare class AttributeNotFoundError extends NotFoundError {
+  constructor(attributeId: string);
+}
+/**
+ * Record not found error
+ */
+declare class RecordNotFoundError extends NotFoundError {
+  constructor(recordId: string);
+}
+/**
+ * Validation error with field-level details
+ */
+interface ValidationErrorDetail {
+  path: string[];
+  message: string;
+  code?: string;
+}
+/**
+ * Validation error thrown when data fails schema validation
+ */
+declare class ValidationError extends SchemaError {
+  /** Literal discriminator for `Effect.catchTag`; a widened `string` breaks narrowing. */
+  readonly _tag = "ValidationError";
+  readonly errors: ValidationErrorDetail[];
+  constructor(message: string, errors: ValidationErrorDetail[]);
+  /**
+   * Create a validation error from Zod-style errors
+   */
+  static fromZodErrors(errors: Array<{
+    path: (string | number)[];
+    message: string;
+  }>): ValidationError;
+}
+/**
+ * A system attribute change the code alone cannot disambiguate: a stored
+ * system attribute that disappeared alongside a new one of the same type
+ * (rename or drop + add?), or a retype whose stored values the new type cannot
+ * read. Refused at boot and at source push; resolved by a hand-written SQL
+ * migration, by shipping a real removal and addition in separate deploys, or —
+ * on a source push, for a rename or a `text → phone` / `number → currency`
+ * retype — by the resolution the refusal names (#4362).
+ * HTTP status: 400 Bad Request.
+ *
+ * The first detail's `path[0]` is the declared attribute name, so the boot
+ * report pins the refusal to it.
+ */
+declare class AmbiguousSchemaChangeError extends ValidationError {
+  readonly code: "SCHEMA_AMBIGUOUS_CHANGE";
+  constructor(message: string, errors: ValidationErrorDetail[]);
+}
+type AggregateErrorCode = typeof SchemaErrorCode.AGGREGATE_MIXED_CURRENCY | typeof SchemaErrorCode.AGGREGATE_SEARCH_UNSUPPORTED;
+/**
+ * An aggregate request the runtime cannot answer (`AGGREGATE_*` codes).
+ * HTTP status: 400 Bad Request.
+ */
+declare class AggregateValidationError extends ValidationError {
+  readonly code: AggregateErrorCode;
+  constructor(code: AggregateErrorCode, message: string, errors?: ValidationErrorDetail[]);
+}
+/** A `content.page` tab that references a page: the record view holding it. */
+interface PageReference {
+  object: string;
+  view: string;
+  content: string;
+}
+/**
+ * A page that `content.page` tabs still reference: deleting it or making it
+ * private would leave those tabs pointing at nothing (or at a page their
+ * readers cannot see). Lists every referencing tab.
+ * HTTP status: 400 Bad Request.
+ */
+declare class PageReferencedError extends ValidationError {
+  readonly code: "PAGE_REFERENCED";
+  readonly references: PageReference[];
+  constructor(message: string, references: PageReference[]);
+}
+type ToolGroupGrantErrorCode = typeof SchemaErrorCode.AGENT_TOOL_GROUP_UNKNOWN | typeof SchemaErrorCode.AGENT_TOOL_GROUP_NOT_CONTAINED | typeof SchemaErrorCode.AGENT_TOOL_GROUP_SCOPE_MISSING | typeof SchemaErrorCode.AGENT_TOOL_GROUP_HARNESS | typeof SchemaErrorCode.AGENT_TOOL_GROUP_NEEDS_PERSON | typeof SchemaErrorCode.AGENT_TOOL_GROUP_ROUTINE_ONLY | typeof SchemaErrorCode.AGENT_TOOL_GROUP_REQUIRES;
+/**
+ * A `toolGroups` entry refused by `assertToolGroupsGrantable`.
+ * HTTP status: 400 Bad Request.
+ */
+declare class ToolGroupGrantError extends ValidationError {
+  readonly code: ToolGroupGrantErrorCode;
+  readonly grant: string;
+  constructor(code: ToolGroupGrantErrorCode, grant: string, message: string);
+}
+/**
+ * Error thrown when attempting to modify a protected (system) resource
+ */
+declare class ProtectedResourceError extends SchemaError {
+  readonly resourceType: "object" | "attribute" | "view";
+  readonly resourceName: string;
+  readonly operation: "delete" | "modify";
+  constructor(resourceType: "object" | "attribute" | "view", resourceName: string, operation: "delete" | "modify");
+}
+/**
+ * Error thrown during native object synchronization
+ */
+declare class SyncError extends SchemaError {
+  readonly objectName: string;
+  readonly cause?: Error;
+  constructor(objectName: string, message: string, cause?: Error);
+}
+/**
+ * Thrown when code tries to mutate a system entity at runtime.
+ * System entities are declared in code and immutable at runtime.
+ * HTTP status: 403 Forbidden.
+ */
+declare class SystemEntityImmutableError extends SchemaError {
+  readonly entityType: string;
+  readonly entityName: string;
+  constructor(entityType: string, entityName: string);
+}
+interface SyncConflictParams {
+  objectName: string;
+  attributeName?: string;
+  reason: string;
+}
+/**
+ * Thrown at boot when an auto-promote cannot proceed due to incompatible types
+ * or constraints. The dev must resolve manually (relax constraints, migrate
+ * values, or rename).
+ */
+declare class SyncConflictError extends SchemaError {
+  readonly objectName: string;
+  readonly attributeName?: string;
+  readonly reason: string;
+  constructor(params: SyncConflictParams);
+}
+/**
+ * Thrown at boot when an object is being demoted but still has system attributes
+ * declared in code. The dev forgot to remove those attributes too, or kept the
+ * object inconsistently.
+ */
+declare class SyncCascadeError extends SchemaError {
+  readonly objectName: string;
+  readonly conflictingAttributes: string[];
+  constructor(objectName: string, conflictingAttributes: string[]);
+}
+/**
+ * Thrown at boot when an attribute is system:true but its object parent is
+ * system:false. This invariant should never be violated — if seen, it's a bug
+ * in the boot reconciliation logic or in a manual DB mutation.
+ */
+declare class OrphanSystemAttributeError extends SchemaError {
+  readonly objectName: string;
+  readonly attributeName: string;
+  constructor(objectName: string, attributeName: string);
+}
+/**
+ * Error thrown when attempting to create a duplicate resource.
+ *
+ * `resourceType` is free-form: pass `"object"`/`"attribute"` for schema
+ * resources (a specific code is selected automatically), or any domain label
+ * (`"tool"`, `"background job handler"`, …) for runtime registries, which fall
+ * back to the generic `DUPLICATE` code. The default message is
+ * `'<ResourceType> "<name>" already exists'`; pass a custom message when the
+ * domain reads better with different wording (e.g. "already registered for
+ * type X").
+ */
+declare class DuplicateError extends SchemaError {
+  readonly resourceType: string;
+  readonly resourceName: string;
+  constructor(resourceType: string, resourceName: string, message?: string);
+}
+/**
+ * A consumer tried to build, register, bundle or source an object under a name
+ * the framework owns (`skill`, `memory`, `drives`, `artifact`, `meeting`).
+ * Raised at declaration time so the collision fails in the consumer's own
+ * tests, never at boot: the platform's `wealth-manager` bundle once shipped
+ * `meeting` and hid the native calendar object from every tenant for three
+ * days (#3450).
+ */
+declare const RESERVED_NAME_CONTEXTS: {
+  readonly builder: "cannot be built by a consumer";
+  readonly registry: "cannot be registered by a consumer";
+  readonly bundle: "cannot be claimed by a bundle";
+  readonly source: "cannot be declared by a schema source";
+};
+declare class ReservedObjectNameError extends SchemaError {
+  readonly objectName: string;
+  constructor(objectName: string, context: keyof typeof RESERVED_NAME_CONTEXTS);
+}
+/**
+ * Check if an error is a SchemaError
+ */
+declare function isSchemaError(error: unknown): error is SchemaError;
+/**
+ * Check if an error is a NotFoundError
+ */
+declare function isNotFoundError(error: unknown): error is NotFoundError;
+/**
+ * Check if an error is a ValidationError
+ */
+declare function isValidationError(error: unknown): error is ValidationError;
+/**
+ * Check if an error is a ProtectedResourceError
+ */
+declare function isProtectedResourceError(error: unknown): error is ProtectedResourceError;
+/**
+ * Error thrown when a user lacks permission to perform an action.
+ *
+ * That, and nothing else (#2681) — its message is redacted, so it must not
+ * carry a refusal a permission grant would not lift: use `WORKSPACE_INVARIANT`,
+ * `STATE_GATE`, `ACTOR_CONTEXT_REQUIRED` or `SYSTEM_ENTITY_IMMUTABLE` instead.
+ */
+declare class ForbiddenError extends SchemaError {
+  /** Literal discriminator for `Effect.catchTag`; a widened `string` breaks narrowing. */
+  readonly _tag = "ForbiddenError";
+  readonly objectName: string;
+  readonly action: string;
+  readonly userId?: string;
+  constructor(objectName: string, action: string, userId?: string);
+}
+/**
+ * Error thrown when trying to modify a protected role
+ */
+declare class ProtectedRoleError extends SchemaError {
+  readonly roleName: string;
+  readonly operation: "delete" | "modify";
+  constructor(roleName: string, operation: "delete" | "modify");
+}
+/**
+ * Error thrown when a saved permission grant falls outside the permission
+ * catalog (spec B1): an unknown resource, a level the catalog never declared,
+ * a split capability, an unknown object, or a shape the schema rejects.
+ */
+declare class InvalidPermissionGrantError extends SchemaError {
+  readonly issues: GrantIssue[];
+  readonly _tag = "InvalidPermissionGrantError";
+  constructor(issues: GrantIssue[]);
+}
+/**
+ * Role not found error
+ */
+declare class RoleNotFoundError extends NotFoundError {
+  constructor(roleId: string);
+}
+/**
+ * Thrown when a record has been modified by another request between read and write.
+ * Clients should retry the operation with fresh data.
+ * Maps to HTTP 409 Conflict.
+ */
+declare class ConcurrentModificationError extends SchemaError {
+  constructor(recordId: string);
+}
+/**
+ * Storage operation type for error context
+ */
+type StorageOperation = "upload" | "download" | "delete" | "signedUrl";
+/**
+ * Error thrown when a storage operation fails
+ */
+declare class StorageError extends SchemaError {
+  readonly operation: StorageOperation;
+  readonly path?: string;
+  readonly cause?: string;
+  constructor(operation: StorageOperation, message: string, path?: string, cause?: string);
+}
+/**
+ * Error thrown when access to a resource is denied (e.g., tenant path mismatch)
+ */
+declare class AccessDeniedError extends SchemaError {
+  readonly resource: string;
+  readonly reason?: string;
+  constructor(resource: string, reason?: string);
+}
+/**
+ * Repository operation type for error context
+ */
+type RepositoryOperation = "create" | "update" | "delete" | "query";
+/**
+ * Error thrown when a repository operation fails
+ */
+declare class RepositoryError extends SchemaError {
+  readonly operation: RepositoryOperation;
+  readonly entity: string;
+  readonly cause?: string;
+  constructor(operation: RepositoryOperation, entity: string, message: string, cause?: string);
+}
+/**
+ * Why a search backend call failed, as far as retrying is concerned.
+ *
+ * - `unavailable` — transport-level or otherwise transient: the backend was
+ *   unreachable, answered garbage, or a task failed for a reason a later
+ *   attempt may not meet. Worth retrying.
+ * - `capacity` — the backend is out of storage (disk full, database size
+ *   limit). Every retry fails the same way, and on a full disk each one
+ *   allocates more temporary files.
+ * - `rejected` — the backend refused this payload (malformed, too large).
+ *   Deterministic: the same payload is refused again.
+ */
+type SearchBackendFailureKind = "unavailable" | "capacity" | "rejected";
+interface SearchBackendErrorOptions {
+  /** Defaults to `unavailable`. */
+  kind?: SearchBackendFailureKind;
+  /** The backend's own machine code, e.g. Meili's `malformed_payload`. */
+  backendCode?: string;
+  /**
+   * A fixed phrase the adapter chose from what it recognised — e.g.
+   * "No space left on device (os error 28)". Never raw backend text: the
+   * message is exported to telemetry as a template.
+   */
+  detail?: string;
+}
+/**
+ * Error thrown when a search backend call fails — e.g. the Meili client
+ * received a non-JSON body (`JSON.parse` SyntaxError), a network failure, or
+ * a write the backend refused. Translates an otherwise un-fingerprintable bare
+ * exception into a typed error with a stable `code` and a user-safe message.
+ * The original failure text is preserved in `cause`/`details`, never in the
+ * message.
+ *
+ * A refusal the backend will repeat (`capacity`, `rejected`, #4306) takes
+ * `SEARCH_BACKEND_REJECTED` and names the backend's code and the adapter's
+ * fixed `detail` in its message, so a full disk pages as itself rather than
+ * as a transient outage.
+ */
+declare class SearchBackendError extends SchemaError {
+  readonly scope: string;
+  readonly cause?: string;
+  readonly kind: SearchBackendFailureKind;
+  readonly backendCode?: string;
+  constructor(scope: string, cause?: string, options?: SearchBackendErrorOptions);
+}
+/**
+ * A search read the backend refused because a filter or sort names a path it
+ * cannot filter or sort on yet: the index's settings lag the schema (a newly
+ * created attribute until its settings write lands). Retrying soon may
+ * succeed; the records query service answers the read through Postgres
+ * instead, so a search never returns a wrong or failed answer for it.
+ */
+declare class SearchPathNotIndexedError extends SchemaError {
+  readonly scope: string;
+  readonly role: "filter" | "sort";
+  readonly cause?: string;
+  constructor(scope: string, role: "filter" | "sort", cause?: string);
+}
+/**
+ * Error thrown when a feature or method is not yet implemented
+ */
+declare class NotImplementedError extends SchemaError {
+  readonly feature: string;
+  readonly milestone?: string;
+  constructor(feature: string, milestone?: string);
+}
+/**
+ * Memory entry not found error
+ */
+declare class MemoryNotFoundError extends NotFoundError {
+  constructor(memoryId: string);
+}
+/**
+ * Reference information for a record that is blocking deletion.
+ */
+interface RecordReference {
+  /** Technical name of the object (e.g., "contacts") */
+  objectName: string;
+  /** Display label of the object (e.g., "Contacts") */
+  objectLabel: string;
+  /** Number of records referencing the target */
+  count: number;
+}
+/**
+ * Thrown when attempting to delete a record that is referenced by other records.
+ *
+ * This implements the "Restrict" behavior: deletion is blocked and the user
+ * must first remove or update the referencing records.
+ */
+declare class RecordReferencedError extends SchemaError {
+  readonly recordId: string;
+  readonly references: RecordReference[];
+  constructor(recordId: string, references: RecordReference[]);
+}
+/**
+ * Usage context where an attribute is being used.
+ */
+type AttributeUsage = "labelExpression" | "embeddingExpression" | "view" | "filter";
+/**
+ * Thrown when attempting to delete an attribute that is in use.
+ *
+ * Attributes cannot be deleted if they are referenced in:
+ * - The object's labelExpression template
+ * - A saved view's column configuration
+ * - A saved filter condition
+ */
+declare class AttributeInUseError extends SchemaError {
+  readonly attributeName: string;
+  readonly usage: AttributeUsage;
+  /** Where exactly, when the usage alone would not let the caller find it. */
+  readonly location?: string;
+  constructor(attributeName: string, usage: AttributeUsage, location?: string);
+}
+/**
+ * Thrown when attempting to delete an object that is a relation target.
+ *
+ * Objects cannot be deleted if other objects have relation attributes
+ * pointing to them as a target.
+ */
+declare class ObjectReferencedError extends SchemaError {
+  readonly objectName: string;
+  readonly referencingObjects: string[];
+  constructor(objectName: string, referencingObjects: string[]);
+}
+/**
+ * Supabase Realtime refused a publish because the channel was rate limited.
+ *
+ * Lives here rather than beside the publisher so the browser channel client and
+ * the server publisher can share one error vocabulary without either package
+ * depending on the other.
+ */
+declare class RealtimeRateLimitedError extends SchemaError {
+  constructor();
+}
+/**
+ * A record export whose scope holds more rows than the export cap. Raised
+ * before the first CSV byte, so the transport can still answer JSON — or, when
+ * the scope grew past the cap during the read, mid-stream (`atLeast`: the
+ * total is a lower bound), where the transport destroys the connection.
+ */
+declare class ExportTooLargeError extends SchemaError {
+  constructor(total: number, max: number, { atLeast }?: {
+    atLeast?: boolean;
+  });
+}
+/**
+ * A bounded read outran its `statement_timeout` (SQLSTATE 57014): a page
+ * block's aggregate or list. The caller may retry; nothing was written.
+ * HTTP status: 504 Gateway Timeout.
+ */
+declare class QueryTimeoutError extends SchemaError {
+  constructor();
+}
+/**
+ * A Supabase Realtime publish did not reach the channel.
+ */
+declare class RealtimeDeliveryError extends SchemaError {
+  constructor();
+}
+/**
+ * A Supabase Realtime channel could not be subscribed to.
+ */
+declare class RealtimeSubscriptionError extends SchemaError {
+  constructor();
+}
+/**
+ * Check if an error is a RecordReferencedError
+ */
+declare function isRecordReferencedError(error: unknown): error is RecordReferencedError;
+/**
+ * Check if an error is an AttributeInUseError
+ */
+declare function isAttributeInUseError(error: unknown): error is AttributeInUseError;
+/**
+ * Check if an error is an ObjectReferencedError
+ */
+declare function isObjectReferencedError(error: unknown): error is ObjectReferencedError;
+//#endregion
+export { isObjectReferencedError as $, RepositoryError as A, SearchPathNotIndexedError as B, QueryTimeoutError as C, RecordNotFoundError as D, RealtimeSubscriptionError as E, SchemaErrorCode as F, SyncError as G, StorageOperation as H, SchemaErrorJson as I, ToolGroupGrantErrorCode as J, SystemEntityImmutableError as K, SearchBackendError as L, ReservedObjectNameError as M, RoleNotFoundError as N, RecordReference as O, SchemaError as P, isNotFoundError as Q, SearchBackendErrorOptions as R, ProtectedRoleError as S, RealtimeRateLimitedError as T, SyncCascadeError as U, StorageError as V, SyncConflictError as W, ValidationErrorDetail as X, ValidationError as Y, isAttributeInUseError as Z, ObjectReferencedError as _, AttributeInUseError as a, PERMISSION_ACTIONS as at, PageReferencedError as b, ConcurrentModificationError as c, permissionGrantSchema as ct, ForbiddenError as d, isProtectedResourceError as et, InvalidPermissionGrantError as f, ObjectNotFoundError as g, NotImplementedError as h, AmbiguousSchemaChangeError as i, GrantIssue as it, RepositoryOperation as j, RecordReferencedError as k, DuplicateError as l, NotFoundError as m, AggregateErrorCode as n, isSchemaError as nt, AttributeNotFoundError as o, PermissionGrant as ot, MemoryNotFoundError as p, ToolGroupGrantError as q, AggregateValidationError as r, isValidationError as rt, AttributeUsage as s, findGrantIssues as st, AccessDeniedError as t, isRecordReferencedError as tt, ExportTooLargeError as u, OrphanSystemAttributeError as v, RealtimeDeliveryError as w, ProtectedResourceError as x, PageReference as y, SearchBackendFailureKind as z };