@stndrds/schema 1.0.0-alpha.281 → 1.0.0-alpha.284

package/dist/{chunk-ORPCS24B.mjs → chunk-AGRAFDGU.mjs}

@@ -1,5 +1,5 @@
-import { SCHEMA_LIMITS, iconNameSchema } from './chunk-A5PPZ2FM.mjs';
-import { ValidationError } from './chunk-SYQDFZ74.mjs';
+import { SCHEMA_LIMITS, iconNameSchema } from './chunk-5OBQRDRM.mjs';
+import { ValidationError } from './chunk-RUO25ERR.mjs';
 import { z } from 'zod';
 
 // src/types/system-attributes.ts
@@ -959,20 +959,25 @@ var fieldPresentationShape = {
   label: z.string().optional(),
   readOnly: z.boolean().optional()
 };
-var fieldSchema = z.object({
-  /** Stable slot identity. Optional: a builder may omit it, `ensureFieldIds` assigns it. */
-  id: z.string().optional(),
+var fieldShape = {
   attribute: z.string().optional(),
   attributeGroup: attributeGroupFieldSchema.optional(),
   ...fieldPresentationShape
-}).strict().superRefine((field, ctx) => {
+};
+function refineField(field, ctx) {
   if (field.attribute === void 0 === (field.attributeGroup === void 0)) {
     ctx.addIssue({
       code: "custom",
       message: "A field must define exactly one of attribute or attributeGroup"
     });
   }
-});
+}
+var fieldSchema = z.object({
+  /** Stable slot identity. Optional: a builder may omit it, `ensureFieldIds` assigns it. */
+  id: z.string().optional(),
+  ...fieldShape
+}).strict().superRefine(refineField);
+var fieldSlotSchema = z.object({ id: z.string().min(1), ...fieldShape }).strict().superRefine(refineField);
 var baseGroupShape = {
   id: z.string(),
   label: z.string(),
@@ -994,13 +999,16 @@ var baseTabShape = {
   icon: iconNameSchema.optional(),
   order: z.number().optional()
 };
-var formTabWriteSchema = z.object({
+var formTabGroupsSchema = z.array(groupWriteSchema).max(SCHEMA_LIMITS.groupsPerFormTab);
+var formTabShape = {
   ...baseTabShape,
   type: z.literal("form"),
-  groups: z.array(groupWriteSchema).min(1).max(SCHEMA_LIMITS.groupsPerFormTab),
+  groups: formTabGroupsSchema,
   formColumns: z.union([z.literal(1), z.literal(2), z.literal(3)]).optional(),
   density: z.enum(["compact", "comfortable", "spacious"]).optional()
-}).strict().superRefine((tab, ctx) => {
+};
+var formTabDraftObjectSchema = z.object(formTabShape).strict();
+function refineFormTab(tab, ctx) {
   addDuplicateIdIssues(tab.groups, ctx, ["groups"]);
   const totalFields = tab.groups.reduce(
     (count, group) => count + (group.type === "fields" ? group.fields.length : 0),
@@ -1032,7 +1040,9 @@ var formTabWriteSchema = z.object({
       seenAttributeGroupIds.add(id);
     });
   });
-});
+}
+var formTabWriteSchema = z.object({ ...formTabShape, groups: formTabGroupsSchema.min(1) }).strict().superRefine(refineFormTab);
+var formTabDraftSchema = formTabDraftObjectSchema.superRefine(refineFormTab);
 var relationSourceSchema = z.object({
   type: z.literal("relation"),
   attribute: z.string()
@@ -1221,8 +1231,7 @@ var meetingsTabSchema = z.object({
   type: z.literal("meetings"),
   emailAttributeIds: z.array(z.string()).max(SCHEMA_LIMITS.emailAttributesPerTab)
 }).strict();
-var detailTabSchema = z.discriminatedUnion("type", [
-  formTabWriteSchema,
+var nonFormDetailTabSchemas = [
   tableTabSchema,
   customTabSchema,
   activityTabSchema,
@@ -1231,6 +1240,14 @@ var detailTabSchema = z.discriminatedUnion("type", [
   formsTabSchema,
   emailsTabSchema,
   meetingsTabSchema
+];
+var detailTabSchema = z.discriminatedUnion("type", [
+  formTabWriteSchema,
+  ...nonFormDetailTabSchemas
+]);
+var detailTabDraftSchema = z.discriminatedUnion("type", [
+  formTabDraftSchema,
+  ...nonFormDetailTabSchemas
 ]);
 var listTabCommonShape = {
   id: z.string(),
@@ -1285,12 +1302,42 @@ var _listViewConfigSchema = z.object({
     hasDefault = true;
   });
 });
+var sidePanelPaneSchema = z.discriminatedUnion("kind", [
+  z.object({
+    kind: z.literal("fields"),
+    id: z.string().optional(),
+    label: z.string().optional(),
+    attributes: z.array(z.string()).max(SCHEMA_LIMITS.sidePanelAttributes)
+  }).strict(),
+  z.object({
+    kind: z.literal("activity"),
+    id: z.string().optional(),
+    label: z.string().optional()
+  }).strict(),
+  z.object({
+    kind: z.literal("documents"),
+    // Required here alone: the documents content keys its stored sort mode
+    // on this id, so a pane without one would share the main-column
+    // documents tab's sort.
+    id: z.string(),
+    label: z.string().optional(),
+    allowUpload: z.boolean().optional(),
+    allowRemove: z.boolean().optional()
+  }).strict()
+]);
 var _detailViewConfigSchema = z.object({
   tabs: z.array(detailTabSchema).min(1).max(SCHEMA_LIMITS.tabsPerView),
   sidePanel: z.object({
-    attributes: z.array(z.string()).max(SCHEMA_LIMITS.sidePanelAttributes),
+    attributes: z.array(z.string()).max(SCHEMA_LIMITS.sidePanelAttributes).optional(),
+    panes: z.array(sidePanelPaneSchema).max(SCHEMA_LIMITS.sidePanelPanes).optional(),
     width: z.number().optional()
-  }).strict().optional()
+  }).strict().refine((sidePanel) => sidePanel.attributes !== void 0 || sidePanel.panes !== void 0, {
+    message: "sidePanel requires attributes or panes"
+  }).refine((sidePanel) => sidePanel.panes === void 0 || sidePanel.panes.length > 0, {
+    message: "sidePanel panes must not be empty"
+  }).refine((sidePanel) => sidePanel.attributes === void 0 || sidePanel.panes === void 0, {
+    message: "sidePanel takes attributes or panes, not both"
+  }).optional()
 }).strict().superRefine((config, ctx) => {
   addDuplicateIdIssues(config.tabs, ctx, ["tabs"]);
   addDuplicateNameIssues(config.tabs, ctx, ["tabs"]);
@@ -1318,5 +1365,14 @@ function parseViewConfig(type, input) {
       return viewConfigByTypeSchema.parse({ type, config: input }).config;
   }
 }
+var LIST_TAB_TABLE_KEYS = ["columnSizing"];
+var LIST_TAB_KANBAN_KEYS = [
+  "groupByAttribute",
+  "cardUserAttribute",
+  "cardDateAttribute",
+  "kanbanColumnOrder",
+  "kanbanColumnVisibility",
+  "kanbanPinnedColumns"
+];
 
-export { ATTRIBUTE_FILTER_OPERATORS, LIST_VIEW_TAB_VISIBILITIES, NO_VALUE_OPERATORS, OPERATORS_BY_TYPE, REMOVED_OPERATOR_REPLACEMENTS, RESERVED_ATTRIBUTE_NAMES, RESERVED_OBJECT_NAMES, RESOURCE_VISIBILITIES, SYNONYM_ALIASES, SYSTEM_ATTRIBUTES, SYSTEM_ATTRIBUTE_I18N_KEYS, SYSTEM_FIELD_NAMES, SYSTEM_FILTER_ATTRIBUTE_TYPES, canonicalizeFilterValue, collectQualifiedRuleIssues, currentActor, detailTabSchema, detailViewConfigSchema, extractCurrencyFilterValue, extractFilterValue, getAttributeCapabilities, getAttributeFilterOperators, getOperatorPolarity, getRollupFilterOperators2 as getRollupFilterOperators, getSystemAttributeI18nKey, getSystemAttributeList, inverseSourceSchema, isAttributeFilterable, isAttributeGroupable, isAttributeKanbanGroupable, isAttributeSearchable, isAttributeSortable, isDynamicValue, isManagedSystemAttribute, isNoValueOperator, isRelativeDateValue, isSetMembershipOperator, listViewConfigSchema, listViewTabSchema, normalizeFilterRule, normalizeForEdgeRpc, normalizeOperator, now, parseResourceVisibility, parseViewConfig, relationSourceSchema, resolveEffectiveFilterType, resolveIsWithinBounds, resolveUtcDayBounds, tableSourceSchema, toMultiValueOperator, toUtcDayString, today, validateQualifiedRule, viewConfigByTypeSchema, viewTypeSchema };
+export { ATTRIBUTE_FILTER_OPERATORS, LIST_TAB_KANBAN_KEYS, LIST_TAB_TABLE_KEYS, LIST_VIEW_TAB_VISIBILITIES, NO_VALUE_OPERATORS, OPERATORS_BY_TYPE, REMOVED_OPERATOR_REPLACEMENTS, RESERVED_ATTRIBUTE_NAMES, RESERVED_OBJECT_NAMES, RESOURCE_VISIBILITIES, SYNONYM_ALIASES, SYSTEM_ATTRIBUTES, SYSTEM_ATTRIBUTE_I18N_KEYS, SYSTEM_FIELD_NAMES, SYSTEM_FILTER_ATTRIBUTE_TYPES, canonicalizeFilterValue, collectQualifiedRuleIssues, columnsSchema, currentActor, detailTabDraftSchema, detailTabSchema, detailViewConfigSchema, extractCurrencyFilterValue, extractFilterValue, fieldSchema, fieldShape, fieldSlotSchema, filterGroupSchema, filterStateSchema, getAttributeCapabilities, getAttributeFilterOperators, getOperatorPolarity, getRollupFilterOperators2 as getRollupFilterOperators, getSystemAttributeI18nKey, getSystemAttributeList, groupWriteSchema, inverseSourceSchema, isAttributeFilterable, isAttributeGroupable, isAttributeKanbanGroupable, isAttributeSearchable, isAttributeSortable, isDynamicValue, isManagedSystemAttribute, isNoValueOperator, isRelativeDateValue, isSetMembershipOperator, listViewConfigSchema, listViewTabSchema, normalizeFilterRule, normalizeForEdgeRpc, normalizeOperator, now, parseResourceVisibility, parseViewConfig, relationSourceSchema, resolveEffectiveFilterType, resolveIsWithinBounds, resolveUtcDayBounds, sortsSchema, tableSourceSchema, toMultiValueOperator, toUtcDayString, today, validateQualifiedRule, viewConfigByTypeSchema, viewTypeSchema };

package/dist/{chunk-LRFLSFIA.js → chunk-BOICAZHR.js}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkHWZRSXFB_js = require('./chunk-HWZRSXFB.js');
+var chunkV26R64A4_js = require('./chunk-V26R64A4.js');
 var zod = require('zod');
 var constants = require('@stndrds/constants');
 
@@ -318,6 +318,7 @@ var SCHEMA_LIMITS = {
   columnsPerTab: 50,
   optionsPerAttribute: 200,
   sidePanelAttributes: 100,
+  sidePanelPanes: 20,
   filterRulesPerTab: 50,
   sortsPerTab: 20,
   emailAttributesPerTab: 30,
@@ -512,6 +513,9 @@ var rollupConfigSchema = baseConfigSchema.extend({
   decimals: zod.z.number().int().min(0).max(10).optional(),
   targetAttributeType: zod.z.string().optional(),
   targetAttributeOptions: zod.z.array(optionSchema).optional(),
+  // The sum's symbol (#2644) — declared here or `.strip()` eats it before
+  // storage, exactly the fate this schema spares its two siblings above.
+  targetCurrencyCode: zod.z.string().length(3).optional(),
   optionsSource: computedOptionsSourceSchema.optional()
 });
 var propertySchemaPassthrough = zod.z.object({ definitions: zod.z.array(zod.z.record(zod.z.string(), zod.z.unknown())) }).passthrough();
@@ -547,7 +551,7 @@ var attributeConfigSchemas = {
 function getAttributeConfigSchema(type) {
   const schema = attributeConfigSchemas[type];
   if (!schema) {
-    throw new Error(`Unsupported attribute type: ${type}`);
+    throw new chunkV26R64A4_js.ValidationError(`Unsupported attribute type: ${type}`, []);
   }
   return schema;
 }
@@ -571,7 +575,7 @@ function getAttributeConfigWriteSchema(type) {
   }
 }
 function validationErrorFromIssues(issues) {
-  return chunkHWZRSXFB_js.ValidationError.fromZodErrors(
+  return chunkV26R64A4_js.ValidationError.fromZodErrors(
     issues.map((issue) => ({
       path: issue.path.map((segment) => typeof segment === "symbol" ? String(segment) : segment),
       message: issue.message
@@ -594,7 +598,7 @@ function validatePatchedIcon(patch) {
   }
   const result = iconNameSchema.optional().safeParse(patch.icon);
   if (!result.success) {
-    throw chunkHWZRSXFB_js.ValidationError.fromZodErrors(
+    throw chunkV26R64A4_js.ValidationError.fromZodErrors(
       result.error.issues.map((issue) => ({
         path: [
           "icon",
@@ -641,6 +645,7 @@ exports.SCHEMA_LIMITS = SCHEMA_LIMITS;
 exports.attributeConfigSchemas = attributeConfigSchemas;
 exports.colorIdSchema = colorIdSchema;
 exports.getAttributeConfigSchema = getAttributeConfigSchema;
+exports.getAttributeConfigWriteSchema = getAttributeConfigWriteSchema;
 exports.iconNameSchema = iconNameSchema;
 exports.multiselectOptionWriteSchema = multiselectOptionWriteSchema;
 exports.parseAttributeConfig = parseAttributeConfig;

package/dist/{chunk-E47WAI5K.js → chunk-I3EYILYO.js}

@@ -1,5 +1,6 @@
 'use strict';
 
+var chunkEEH4XQ7W_js = require('./chunk-EEH4XQ7W.js');
 var chunkEW5XR2X3_js = require('./chunk-EW5XR2X3.js');
 var chunkQWKLQRBX_js = require('./chunk-QWKLQRBX.js');
 var chunkKNGWHQLR_js = require('./chunk-KNGWHQLR.js');
@@ -9,11 +10,10 @@ var chunk5WATIVCA_js = require('./chunk-5WATIVCA.js');
 var chunkSI34M4IC_js = require('./chunk-SI34M4IC.js');
 var chunkYIP5FJ5H_js = require('./chunk-YIP5FJ5H.js');
 var chunkZPFOKBIN_js = require('./chunk-ZPFOKBIN.js');
-var chunkHWZRSXFB_js = require('./chunk-HWZRSXFB.js');
+var chunkV26R64A4_js = require('./chunk-V26R64A4.js');
 var chunkACKMC6FL_js = require('./chunk-ACKMC6FL.js');
 var chunkE6JUYGJX_js = require('./chunk-E6JUYGJX.js');
 var chunkQ4SZAMJT_js = require('./chunk-Q4SZAMJT.js');
-var chunkEEH4XQ7W_js = require('./chunk-EEH4XQ7W.js');
 var chunkYKWSHBT5_js = require('./chunk-YKWSHBT5.js');
 var zod = require('zod');
 
@@ -162,7 +162,7 @@ function validateObjectOrThrow(objectDef, data) {
   if (!result.success) {
     const errors = result.errors ?? [];
     const detail = errors.map((err) => `${err.path.join(".")}: ${err.message}`).join("\n") || "Unknown validation error";
-    throw new chunkHWZRSXFB_js.ValidationError(
+    throw new chunkV26R64A4_js.ValidationError(
       `Validation failed for ${objectDef.label}:
 ${detail}`,
       errors.map((err) => ({ path: err.path, message: err.message }))
@@ -189,7 +189,7 @@ function validateDraftOrThrow(objectDef, data) {
   if (!result.success) {
     const errors = result.errors ?? [];
     const detail = errors.map((err) => `${err.path.join(".")}: ${err.message}`).join("\n") || "Unknown validation error";
-    throw new chunkHWZRSXFB_js.ValidationError(
+    throw new chunkV26R64A4_js.ValidationError(
       `Draft validation failed for ${objectDef.label}:
 ${detail}`,
       errors.map((err) => ({ path: err.path, message: err.message }))
@@ -201,7 +201,7 @@ function rejectUnknownAttributesOrThrow(objectDef, data) {
   const knownNames = new Set(objectDef.attributes.map((a) => a.name));
   const unknownKeys = Object.keys(data).filter((key) => !knownNames.has(key));
   if (unknownKeys.length > 0) {
-    throw new chunkHWZRSXFB_js.ValidationError(
+    throw new chunkV26R64A4_js.ValidationError(
       `Unknown attribute${unknownKeys.length > 1 ? "s" : ""} for ${objectDef.label}: ${unknownKeys.join(", ")}`,
       unknownKeys.map((key) => ({ path: [key], message: "Unknown attribute" }))
     );

package/dist/{chunk-OYHBQMC7.js → chunk-K6ET4CXP.js}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkHWZRSXFB_js = require('./chunk-HWZRSXFB.js');
+var chunkV26R64A4_js = require('./chunk-V26R64A4.js');
 
 // src/utils/canonical-json.ts
 function canonicalStringify(value) {
@@ -17,10 +17,10 @@ function canonicalStringify(value) {
       case "object":
         break;
       default:
-        throw new chunkHWZRSXFB_js.ValidationError(`Cannot canonicalize value of type ${typeof v}`, []);
+        throw new chunkV26R64A4_js.ValidationError(`Cannot canonicalize value of type ${typeof v}`, []);
     }
     const obj = v;
-    if (seen.has(obj)) throw new chunkHWZRSXFB_js.ValidationError("Cannot canonicalize circular structure", []);
+    if (seen.has(obj)) throw new chunkV26R64A4_js.ValidationError("Cannot canonicalize circular structure", []);
     seen.add(obj);
     try {
       if (Array.isArray(obj)) return `[${obj.map((e) => encode(e) ?? "null").join(",")}]`;

package/dist/{chunk-MLTXSBOB.mjs → chunk-PNOWKRH2.mjs}

@@ -1,3 +1,4 @@
+import { createRelationValidator } from './chunk-GO6LQADH.mjs';
 import { createRichtextValidator } from './chunk-QVLQPW3O.mjs';
 import { createMultiselectValidator, createSelectValidator, createStatusValidator } from './chunk-ZDQ5AP26.mjs';
 import { createUserValidator } from './chunk-LV3FEUKU.mjs';
@@ -7,11 +8,10 @@ import { createCheckboxValidator } from './chunk-OSSGN43B.mjs';
 import { createDateValidator } from './chunk-Q44QKLN4.mjs';
 import { createNumberValidator } from './chunk-UANQJ2GH.mjs';
 import { createTextValidator } from './chunk-O73ROMWQ.mjs';
-import { ValidationError } from './chunk-SYQDFZ74.mjs';
+import { ValidationError } from './chunk-RUO25ERR.mjs';
 import { createCurrencyValidator } from './chunk-AYVHMVKQ.mjs';
 import { createLocationValidator } from './chunk-YUFTHPOE.mjs';
 import { createPhoneValidator } from './chunk-R5LAJCBU.mjs';
-import { createRelationValidator } from './chunk-GO6LQADH.mjs';
 import { DEFAULT_VALIDATION_MESSAGES, formatZodErrors } from './chunk-HRQEZUAA.mjs';
 import { z } from 'zod';
 

package/dist/{chunk-XCLVXM7F.mjs → chunk-R57T4UDX.mjs}

@@ -1,4 +1,4 @@
-import { ValidationError } from './chunk-SYQDFZ74.mjs';
+import { ValidationError } from './chunk-RUO25ERR.mjs';
 
 // src/utils/canonical-json.ts
 function canonicalStringify(value) {

package/dist/{chunk-SYQDFZ74.mjs → chunk-RUO25ERR.mjs}

@@ -19,8 +19,40 @@ var SchemaErrorCode = {
   PROTECTED_VIEW: "SCHEMA_PROTECTED_VIEW",
   PROTECTED_ROLE: "SCHEMA_PROTECTED_ROLE",
   // Permissions
+  //
+  // `FORBIDDEN` means "you lack permission", and only that (#2681).
   FORBIDDEN: "SCHEMA_FORBIDDEN",
   ACCESS_DENIED: "SCHEMA_ACCESS_DENIED",
+  // Refusals that are NOT permission denials (#2681)
+  //
+  // `FORBIDDEN`'s message is redacted to a neutral sentence (#2675), which is
+  // honest only while the code means one thing. It did not: a workspace
+  // invariant (the last owner), a state gate (a disarmed reflex), an
+  // immutability refusal (system forms) and a missing actor context each told
+  // a caller who holds every permission that they lack one, sending them to an
+  // administrator with nothing to grant. So a refusal a permission grant would
+  // NOT lift takes one of the codes below — plus `SYSTEM_ENTITY_IMMUTABLE`,
+  // which already existed — and keeps the explanatory message that names its
+  // remedy. Every one answers 403, exactly as it did while miscoded: the
+  // ruling changed the semantics, not a single HTTP status.
+  //
+  // A fifth site was seen and deliberately left alone: `ApiKeyService`'s
+  // missing-actor refusal answers 400 `VALIDATION_FAILED`, and moving it here
+  // would change a public HTTP status — which the ruling forbids. It stays at
+  // its 400 pending a ruling of its own.
+  /**
+   * A workspace RULE refuses the write — the last owner cannot be removed.
+   *
+   * Not `INVARIANT_VIOLATION`, despite the name: that one is an internal
+   * "should never happen" assertion, a bug signal nobody outside the codebase
+   * can act on. This is the opposite — a rule the caller can act on, reached
+   * by a request that was entirely well-formed, whose message tells them how.
+   */
+  WORKSPACE_INVARIANT: "SCHEMA_WORKSPACE_INVARIANT",
+  /** The resource's own state refuses the operation — a disarmed reflex run. */
+  STATE_GATE: "SCHEMA_STATE_GATE",
+  /** The operation needs an actor and the request carried none. */
+  ACTOR_CONTEXT_REQUIRED: "SCHEMA_ACTOR_CONTEXT_REQUIRED",
   // Connectors
   CONNECTOR_AUTH_FAILED: "SCHEMA_CONNECTOR_AUTH_FAILED",
   CONNECTOR_INVALID_STATE: "SCHEMA_CONNECTOR_INVALID_STATE",
@@ -171,6 +203,8 @@ var NotFoundError = class extends SchemaError {
       resourceType,
       resourceId
     });
+    /** Literal discriminator for `Effect.catchTag`; a widened `string` breaks narrowing. */
+    this._tag = "NotFoundError";
     this.name = "NotFoundError";
     this.resourceType = resourceType;
     this.resourceId = resourceId;
@@ -203,6 +237,8 @@ var SchemaPlanNotFoundError = class extends NotFoundError {
 var ValidationError = class _ValidationError extends SchemaError {
   constructor(message, errors) {
     super(message, SchemaErrorCode.VALIDATION_FAILED, { errors });
+    /** Literal discriminator for `Effect.catchTag`; a widened `string` breaks narrowing. */
+    this._tag = "ValidationError";
     this.name = "ValidationError";
     this.errors = errors;
   }

package/dist/{chunk-HWZRSXFB.js → chunk-V26R64A4.js}

@@ -21,8 +21,40 @@ var SchemaErrorCode = {
   PROTECTED_VIEW: "SCHEMA_PROTECTED_VIEW",
   PROTECTED_ROLE: "SCHEMA_PROTECTED_ROLE",
   // Permissions
+  //
+  // `FORBIDDEN` means "you lack permission", and only that (#2681).
   FORBIDDEN: "SCHEMA_FORBIDDEN",
   ACCESS_DENIED: "SCHEMA_ACCESS_DENIED",
+  // Refusals that are NOT permission denials (#2681)
+  //
+  // `FORBIDDEN`'s message is redacted to a neutral sentence (#2675), which is
+  // honest only while the code means one thing. It did not: a workspace
+  // invariant (the last owner), a state gate (a disarmed reflex), an
+  // immutability refusal (system forms) and a missing actor context each told
+  // a caller who holds every permission that they lack one, sending them to an
+  // administrator with nothing to grant. So a refusal a permission grant would
+  // NOT lift takes one of the codes below — plus `SYSTEM_ENTITY_IMMUTABLE`,
+  // which already existed — and keeps the explanatory message that names its
+  // remedy. Every one answers 403, exactly as it did while miscoded: the
+  // ruling changed the semantics, not a single HTTP status.
+  //
+  // A fifth site was seen and deliberately left alone: `ApiKeyService`'s
+  // missing-actor refusal answers 400 `VALIDATION_FAILED`, and moving it here
+  // would change a public HTTP status — which the ruling forbids. It stays at
+  // its 400 pending a ruling of its own.
+  /**
+   * A workspace RULE refuses the write — the last owner cannot be removed.
+   *
+   * Not `INVARIANT_VIOLATION`, despite the name: that one is an internal
+   * "should never happen" assertion, a bug signal nobody outside the codebase
+   * can act on. This is the opposite — a rule the caller can act on, reached
+   * by a request that was entirely well-formed, whose message tells them how.
+   */
+  WORKSPACE_INVARIANT: "SCHEMA_WORKSPACE_INVARIANT",
+  /** The resource's own state refuses the operation — a disarmed reflex run. */
+  STATE_GATE: "SCHEMA_STATE_GATE",
+  /** The operation needs an actor and the request carried none. */
+  ACTOR_CONTEXT_REQUIRED: "SCHEMA_ACTOR_CONTEXT_REQUIRED",
   // Connectors
   CONNECTOR_AUTH_FAILED: "SCHEMA_CONNECTOR_AUTH_FAILED",
   CONNECTOR_INVALID_STATE: "SCHEMA_CONNECTOR_INVALID_STATE",
@@ -173,6 +205,8 @@ var NotFoundError = class extends SchemaError {
       resourceType,
       resourceId
     });
+    /** Literal discriminator for `Effect.catchTag`; a widened `string` breaks narrowing. */
+    this._tag = "NotFoundError";
     this.name = "NotFoundError";
     this.resourceType = resourceType;
     this.resourceId = resourceId;
@@ -205,6 +239,8 @@ var SchemaPlanNotFoundError = class extends NotFoundError {
 var ValidationError = class _ValidationError extends SchemaError {
   constructor(message, errors) {
     super(message, SchemaErrorCode.VALIDATION_FAILED, { errors });
+    /** Literal discriminator for `Effect.catchTag`; a widened `string` breaks narrowing. */
+    this._tag = "ValidationError";
     this.name = "ValidationError";
     this.errors = errors;
   }