@voltro/plugin-ai-flows 0.70.0 → 0.71.1

package/dist/index.js

@@ -1,91 +1,93 @@
-import { A as e, C as t, D as n, E as r, M as i, O as a, S as o, T as s, _ as c, a as l, b as u, c as d, d as f, f as p, g as m, h, i as ee, j as g, k as te, l as ne, m as re, n as ie, o as ae, p as oe, r as se, s as ce, t as le, u as ue, v as de, w as fe, x as pe, y as me } from "./ir-BOv5uwYI.js";
-import { FLOW_RUN_WORKFLOW as _, HUMAN_RESPONSE_SIGNAL_PREFIX as he, humanResponseSignalName as v } from "./workflow.js";
-import { FlowBriefIncomplete as ge, FlowCapabilityMissing as y, FlowDependencyError as _e, FlowNotAwaitingResponse as ve, FlowNotFound as ye, FlowRunNotFound as b, FlowValidationError as be } from "./errors.js";
-import { n as xe, t as Se } from "./cadence-_9Izk_fL.js";
-import { Cause as Ce, Effect as x, Schema as S } from "effect";
-import { definePlugin as we, pluginInstanceName as Te } from "@voltro/protocol";
-import { boolean as Ee, eq as C, id as De, inSet as Oe, integer as w, json as T, queryFor as E, registerRetention as ke, table as Ae, text as D, timestamp as O } from "@voltro/database";
-import { tenant as je } from "@voltro/plugin-multitenancy/mixin";
-import { audit as Me } from "@voltro/plugin-audit/mixin";
-import { softDelete as Ne } from "@voltro/plugin-soft-delete/mixin";
-import { awaitSignalSuspending as Pe, step as k } from "@voltro/workflow";
-import { defineTool as A, estimateCostUsd as Fe, gatewayCostUsd as Ie, generateImage as Le, generateObject as Re, generateObjectWithTools as ze, generateSpeech as Be, generateText as j, generateVideo as Ve } from "@voltro/ai";
+import { A as e, C as t, D as n, E as r, F as i, I as a, L as o, M as s, N as c, O as l, P as u, S as d, T as f, _ as p, a as m, b as ee, c as h, d as g, f as te, g as ne, h as re, i as ie, j as _, k as ae, l as oe, m as se, n as ce, o as le, p as ue, r as de, s as fe, t as pe, u as me, v as he, w as ge, x as _e, y as ve } from "./ir-B0rox9qW.js";
+import { FLOW_RUN_WORKFLOW as v, HUMAN_RESPONSE_SIGNAL_PREFIX as ye, flowRunWorkflow as y, humanResponseSignalName as b } from "./workflow.js";
+import { FlowBriefIncomplete as be, FlowCapabilityMissing as x, FlowDependencyError as xe, FlowNotAwaitingResponse as Se, FlowNotFound as Ce, FlowReviewDeliveryError as we, FlowRunNotFound as S, FlowValidationError as Te } from "./errors.js";
+import { n as Ee, t as De } from "./cadence-_9Izk_fL.js";
+import { Cause as Oe, Effect as C, Schema as w } from "effect";
+import { WorkflowRunHandleSchema as ke, definePlugin as Ae, pluginInstanceName as je } from "@voltro/protocol";
+import { boolean as Me, eq as T, id as Ne, inSet as Pe, integer as E, json as D, queryFor as O, registerRetention as Fe, table as Ie, text as k, timestamp as A } from "@voltro/database";
+import { tenant as Le } from "@voltro/plugin-multitenancy/mixin";
+import { audit as Re } from "@voltro/plugin-audit/mixin";
+import { softDelete as ze } from "@voltro/plugin-soft-delete/mixin";
+import { awaitSignalSuspending as Be, step as j } from "@voltro/workflow";
+import { defineTool as M, estimateCostUsd as Ve, gatewayCostUsd as He, generateImage as Ue, generateObject as We, generateObjectJson as Ge, generateObjectWithTools as Ke, generateSpeech as qe, generateText as Je, generateVideo as Ye } from "@voltro/ai";
+import { createHash as Xe } from "node:crypto";
 //#region src/table.ts
-var M = Ae("_voltro_ai_flows", {
-	id: De({ prefix: "aifl" }),
-	name: D(),
-	description: D().nullable(),
-	mode: D().default("deterministic"),
-	status: D().default("draft"),
-	visibility: D().default("private"),
-	orchestratorModel: D().nullable(),
-	orchestratorInstructions: D().nullable(),
-	maxSteps: w().default(30),
-	steps: T().nullable(),
-	inputSchema: T().nullable(),
-	chainTo: T().nullable(),
-	cadence: T().nullable(),
-	humanTimeoutMs: w().nullable(),
-	isEnabled: Ee().default(!0),
-	metadata: T().nullable(),
-	icon: D().nullable(),
-	color: D().nullable(),
-	avatarUrl: D().nullable(),
-	usageCount: w().default(0),
-	ownerId: D().nullable()
-}).renamedFrom("ai_flows").with(je(), Me(), Ne()).index(["status"]).index(["visibility"]), N = Ae("_voltro_ai_flow_runs", {
-	id: De({ prefix: "aifr" }),
-	flowRef: D(),
-	flowName: D().nullable(),
-	mode: D().default("deterministic"),
-	status: D().default("pending"),
-	source: D().nullable(),
-	requestId: D(),
-	input: T().nullable(),
-	output: T().nullable(),
-	steps: T().nullable(),
-	currentStep: w().default(0),
-	totalSteps: w().default(0),
-	humanResponse: T().nullable(),
-	chainPending: T().nullable(),
-	chainRefusal: D().nullable(),
-	costMicroUsd: w().default(0),
-	durationMs: w().nullable(),
-	error: D().nullable(),
-	errorMessage: D().nullable(),
-	startedAt: O().nullable(),
-	completedAt: O().nullable(),
-	cancelledAt: O().nullable(),
-	sessionId: D().nullable(),
-	sessionName: D().nullable(),
-	ownerId: D().nullable(),
-	metadata: T().nullable()
-}).renamedFrom("ai_flow_runs").with(je(), Me()).index(["flowRef"]).index(["status"]).index(["requestId"]), He = [M, N], Ue = 168, We = "VOLTRO_AI_FLOW_HUMAN_REVIEW_TIMEOUT_HOURS", Ge = 2160, Ke = "VOLTRO_AI_FLOW_RUNS_TTL_HOURS", qe = 5, Je = "VOLTRO_AI_FLOW_MAX_CHAIN_DEPTH", P = { current: {} }, Ye = (e) => {
-	P.current = e;
-}, F = () => P.current, Xe = () => {
-	P.current = {};
-}, Ze = (e, t) => {
+var N = Ie("_voltro_ai_flows", {
+	id: Ne({ prefix: "aifl" }),
+	name: k(),
+	description: k().nullable(),
+	mode: k().default("deterministic"),
+	status: k().default("draft"),
+	visibility: k().default("private"),
+	orchestratorModel: k().nullable(),
+	orchestratorInstructions: k().nullable(),
+	maxSteps: E().default(30),
+	steps: D().nullable(),
+	inputSchema: D().nullable(),
+	chainTo: D().nullable(),
+	cadence: D().nullable(),
+	humanTimeoutMs: E().nullable(),
+	isEnabled: Me().default(!0),
+	metadata: D().nullable(),
+	icon: k().nullable(),
+	color: k().nullable(),
+	avatarUrl: k().nullable(),
+	usageCount: E().default(0),
+	ownerId: k().nullable()
+}).renamedFrom("ai_flows").with(Le(), Re(), ze()).index(["status"]).index(["visibility"]), P = Ie("_voltro_ai_flow_runs", {
+	id: Ne({ prefix: "aifr" }),
+	flowRef: k(),
+	flowName: k().nullable(),
+	mode: k().default("deterministic"),
+	status: k().default("pending"),
+	source: k().nullable(),
+	requestId: k(),
+	workflowStart: D().nullable(),
+	input: D().nullable(),
+	output: D().nullable(),
+	steps: D().nullable(),
+	currentStep: E().default(0),
+	totalSteps: E().default(0),
+	humanResponse: D().nullable(),
+	chainPending: D().nullable(),
+	chainRefusal: k().nullable(),
+	costMicroUsd: E().default(0),
+	durationMs: E().nullable(),
+	error: k().nullable(),
+	errorMessage: k().nullable(),
+	startedAt: A().nullable(),
+	completedAt: A().nullable(),
+	cancelledAt: A().nullable(),
+	sessionId: k().nullable(),
+	sessionName: k().nullable(),
+	ownerId: k().nullable(),
+	metadata: D().nullable()
+}).renamedFrom("ai_flow_runs").with(Le(), Re()).index(["flowRef"]).index(["status"]).index(["requestId"]), Ze = [N, P], Qe = 168, $e = "VOLTRO_AI_FLOW_HUMAN_REVIEW_TIMEOUT_HOURS", et = 2160, tt = "VOLTRO_AI_FLOW_RUNS_TTL_HOURS", nt = 5, rt = "VOLTRO_AI_FLOW_MAX_CHAIN_DEPTH", F = { current: {} }, it = (e) => {
+	F.current = e;
+}, I = () => F.current, at = () => {
+	F.current = {};
+}, ot = (e, t) => {
 	if (e === void 0 || e.trim() === "") return t * 36e5;
 	let n = Number(e);
 	return !Number.isFinite(n) || n < 0 ? t * 36e5 : n * 36e5;
-}, Qe = (e) => Number.isFinite(e) && e > 0 ? e : Infinity, $e = (e) => {
+}, st = (e) => Number.isFinite(e) && e > 0 ? e : Infinity, ct = (e) => {
 	let t = e.env ?? process.env;
-	return Qe(e.step?.timeoutMs ?? e.flow?.humanTimeoutMs ?? e.deps?.humanReviewTimeoutMs ?? F().humanReviewTimeoutMs ?? Ze(t.VOLTRO_AI_FLOW_HUMAN_REVIEW_TIMEOUT_HOURS, 168));
-}, et = (e) => {
-	let t = e?.env ?? process.env, n = Number(t[Je]), r = e?.maxChainDepth ?? F().maxChainDepth ?? (Number.isFinite(n) && n >= 1 ? n : 5);
+	return st(e.step?.timeoutMs ?? e.flow?.humanTimeoutMs ?? e.deps?.humanReviewTimeoutMs ?? I().humanReviewTimeoutMs ?? ot(t.VOLTRO_AI_FLOW_HUMAN_REVIEW_TIMEOUT_HOURS, 168));
+}, lt = (e) => {
+	let t = e?.env ?? process.env, n = Number(t[rt]), r = e?.maxChainDepth ?? I().maxChainDepth ?? (Number.isFinite(n) && n >= 1 ? n : 5);
 	return Number.isFinite(r) && r >= 1 ? r : 5;
-}, tt = /\{\{\s*([\w.-]+)\s*\}\}/g, I = (e) => {
+}, ut = /\{\{\s*([\w.-]+)\s*\}\}/g, L = (e) => {
 	let t = [];
-	for (let n of e.matchAll(tt)) t.push(n[1]);
+	for (let n of e.matchAll(ut)) t.push(n[1]);
 	return t;
-}, L = (e, t) => e.replace(tt, (e, n) => {
+}, R = (e, t) => e.replace(ut, (e, n) => {
 	let r = t[n];
 	return r == null ? "" : typeof r == "string" ? r : JSON.stringify(r);
-}), nt = (e, t) => {
+}), dt = (e, t) => {
 	let n = /* @__PURE__ */ new Set();
-	for (let r of I(e)) t[r] == null && !n.has(r) && n.add(r);
+	for (let r of L(e)) t[r] == null && !n.has(r) && n.add(r);
 	return [...n];
-}, R = (e) => {
+}, z = (e) => {
 	let t = [], n;
 	if (e.forEach((e, r) => {
 		let i = e.group;
@@ -114,87 +116,127 @@ var M = Ae("_voltro_ai_flows", {
 		});
 	}
 	return t;
-}, rt = (e) => {
+}, ft = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) n.group !== void 0 && t.set(n.group, (t.get(n.group) ?? 0) + 1);
 	return [...t.entries()].filter(([, e]) => e > 1).map(([e]) => e).sort();
-}, z = /* @__PURE__ */ new Map(), it = (e) => {
-	z.set(e.name, e);
-}, at = (e) => z.get(e), ot = () => [...z.values()], st = () => z.clear(), B = (e) => typeof e == "object" && e && !Array.isArray(e) ? e : void 0, V = (e) => Array.isArray(e) ? e : void 0, ct = (e) => {
-	switch (e) {
-		case "string": return S.String;
-		case "number": return S.Number;
-		case "integer": return S.Int;
-		case "boolean": return S.Boolean;
-		case "null": return S.Null;
-		default: return S.Unknown;
+}, B = /* @__PURE__ */ new Map(), pt = (e) => {
+	B.set(e.name, e);
+}, mt = (e) => B.get(e), ht = () => [...B.values()], gt = () => B.clear(), V = w.suspend(() => w.Union(w.Null, w.Boolean, w.Finite, w.String, w.Array(V).pipe(w.mutable), w.Record({
+	key: w.String,
+	value: V
+}))), H = w.Record({
+	key: w.String,
+	value: w.Record({
+		key: w.String,
+		value: V
+	})
+}), _t = w.Struct({
+	maxTokens: w.optionalWith(w.Int.pipe(w.positive(), w.lessThanOrEqualTo(2 ** 53 - 1)), { exact: !0 }),
+	temperature: w.optionalWith(w.Finite.pipe(w.nonNegative()), { exact: !0 }),
+	providerOptions: w.optionalWith(H, { exact: !0 })
+}), vt = (e) => C.try({
+	try: () => w.decodeUnknownSync(_t, { onExcessProperty: "error" })(e === void 0 ? {} : e),
+	catch: () => "invalid text params: expected maxTokens (positive safe integer), temperature (finite nonnegative number), and/or providerOptions (provider-keyed JSON object); other fields are not supported"
+}), yt = w.String.pipe(w.filter((e) => {
+	try {
+		let t = new URL(e);
+		return (t.protocol === "https:" || t.protocol === "http:") && t.username === "" && t.password === "";
+	} catch {
+		return !1;
 	}
-}, H = (e, t) => {
-	let n = typeof t.description == "string" ? t.description : void 0, r = typeof t.title == "string" ? t.title : void 0;
-	return n === void 0 && r === void 0 ? e : e.annotations({
-		...n === void 0 ? {} : { description: n },
-		...r === void 0 ? {} : { title: r }
+})), U = w.Record({
+	key: w.String,
+	value: yt
+}), bt = (e, t, n = {}) => C.try({
+	try: () => {
+		let r = w.decodeUnknownSync(ve, { onExcessProperty: "error" })(e === void 0 ? {} : e), i = Object.fromEntries(Object.entries(r).map(([e, r]) => [e, r.from === "upload" ? r.url : r.artifact === void 0 ? Object.hasOwn(t, r.ref) ? t[r.ref] : void 0 : Object.hasOwn(n, r.ref) ? n[r.ref]?.[r.artifact]?.url : void 0]));
+		return w.decodeUnknownSync(U)(i);
+	},
+	catch: () => "invalid or unresolved media input: each slot must resolve to an absolute HTTP(S) URL without embedded credentials"
+}), xt = (e, t) => C.try({
+	try: () => {
+		let n = w.decodeUnknownSync(U)(t === void 0 ? {} : t), r = e === "image" ? ["referenceImageUrl", "maskImageUrl"] : e === "video" ? [
+			"referenceImageUrl",
+			"firstFrameImageUrl",
+			"lastFrameImageUrl",
+			"referenceVideoUrl"
+		] : [];
+		if (Object.keys(n).some((e) => !r.includes(e))) throw Error("unsupported slot");
+		if (e === "image" && n.maskImageUrl !== void 0 && n.referenceImageUrl === void 0) throw Error("mask requires reference");
+		return n;
+	},
+	catch: () => `invalid or unsupported media input for ${e}; check the built-in adapter's slot contract`
+}), St = w.Struct({
+	artifacts: p,
+	costMicroUsd: w.optional(w.Finite.pipe(w.nonNegative())),
+	requestId: w.optional(w.NonEmptyString)
+}), Ct = (e) => C.try({
+	try: () => w.decodeUnknownSync(St, { onExcessProperty: "error" })(e),
+	catch: () => "invalid media result: expected artifacts with URL, mediaType and role, exactly one primary artifact, and optional storage references"
+}), W = (e) => e, wt = w.Struct({
+	value: w.optional(w.Unknown),
+	text: w.optional(w.String),
+	url: w.optional(w.String),
+	artifacts: w.optional(p),
+	costMicroUsd: w.optional(w.Number),
+	requestId: w.optional(w.String),
+	error: w.optional(w.String)
+}), Tt = (e) => Ct(e).pipe(C.map((e) => {
+	let t = e.artifacts.find((e) => e.role === "primary");
+	return {
+		value: t.url,
+		url: t.url,
+		artifacts: e.artifacts,
+		...e.requestId === void 0 ? {} : { requestId: e.requestId },
+		...e.costMicroUsd === void 0 ? {} : { costMicroUsd: e.costMicroUsd }
+	};
+}), C.catchAll((e) => C.succeed({ error: e }))), G = () => (/* @__PURE__ */ new Date()).toISOString(), Et = (e) => Math.round(e * 1e6), Dt = (e) => ({
+	name: "gateway",
+	model: e
+}), K = (e, t) => e.resolveModel?.(t) ?? Dt(t), Ot = (e, t, n, r) => C.gen(function* () {
+	return t.maxSteps !== void 0 && (!Number.isSafeInteger(t.maxSteps) || t.maxSteps < 1) ? yield* C.fail(new x({
+		capability: "resolveAgent",
+		message: "agent maxSteps must be a positive safe integer"
+	})) : yield* Je({
+		...r,
+		system: t.system,
+		prompt: n,
+		provider: K(e, t.model),
+		...t.tools === void 0 ? {} : { tools: t.tools },
+		...t.maxSteps === void 0 ? {} : { maxSteps: t.maxSteps }
 	});
-}, lt = (e) => e.length === 0 ? S.Unknown : e.length === 1 ? e[0] : S.Union(...e), ut = () => S.Record({
-	key: S.String,
-	value: S.Unknown
-}), U = (e) => {
-	let t = B(e);
-	if (t === void 0) return S.Unknown;
-	if ("const" in t) return H(S.Literal(t.const), t);
-	let n = V(t.enum);
-	if (n !== void 0 && n.length > 0) return H(S.Literal(...n), t);
-	let r = V(t.anyOf) ?? V(t.oneOf);
-	if (r !== void 0) return H(lt(r.map(U)), t);
-	let i = t.type, a = typeof i == "string" ? [i] : V(i)?.filter((e) => typeof e == "string") ?? [], o = t.nullable === !0 || a.includes("null"), s = a.find((e) => e !== "null"), c = s === "object" || s === void 0 && t.properties !== void 0 ? dt(t) : s === "array" || s === void 0 && t.items !== void 0 ? S.Array(U(t.items)) : s === void 0 ? S.Unknown : ct(s);
-	return H(o ? S.NullOr(c) : c, t);
-}, dt = (e) => {
-	let t = B(e.properties);
-	if (t === void 0) return ut();
-	let n = new Set((V(e.required) ?? []).filter((e) => typeof e == "string")), r = {};
-	for (let [e, i] of Object.entries(t)) {
-		let t = U(i);
-		r[e] = n.has(e) ? t : S.optional(t);
-	}
-	return S.Struct(r);
-}, ft = (e) => {
-	let t = B(e);
-	return t === void 0 || Object.keys(t).length === 0 ? ut() : U(t);
-}, W = (e) => e, pt = S.Struct({
-	value: S.optional(S.Unknown),
-	text: S.optional(S.String),
-	url: S.optional(S.String),
-	costMicroUsd: S.optional(S.Number),
-	requestId: S.optional(S.String),
-	error: S.optional(S.String)
-}), G = () => (/* @__PURE__ */ new Date()).toISOString(), mt = (e) => Math.round(e * 1e6), K = (e, t) => e.resolveModel?.(t) ?? K(e, t), q = (e, t, n) => {
-	let r = Ie(t);
-	return typeof r == "number" ? mt(r) : Fe(e, { model: n ?? "unknown" }).costMicroUsd ?? 0;
-}, J = (e, t, n) => x.promise(() => e.store.update(N.tableName, t, n).then(() => void 0)).pipe(x.catchAllCause(() => x.void)), ht = (e, t) => x.promise(async () => (await e.store.query(E(N).where(C("id", t)).descriptor))[0]?.status === "cancelled").pipe(x.catchAllCause(() => x.succeed(!1))), Y = (e, t) => x.gen(function* () {
-	let n = at(t);
+}), q = (e, t, n) => {
+	let r = He(t);
+	return typeof r == "number" ? Et(r) : Ve(e, { model: n ?? "unknown" }).costMicroUsd ?? 0;
+}, J = (e, t, n) => C.promise(() => e.store.update(P.tableName, t, n).then(() => void 0)).pipe(C.catchAllCause(() => C.void)), kt = (e, t) => C.promise(async () => (await e.store.query(O(P).where(T("id", t)).descriptor))[0]?.status === "cancelled").pipe(C.catchAllCause(() => C.succeed(!1))), Y = (e, t) => C.gen(function* () {
+	let n = mt(t);
 	if (n) return n;
-	let i = (yield* x.promise(() => e.store.query(E(M).where(C("id", t)).descriptor)))[0];
-	return i ? r({
-		name: i.name ?? t,
-		mode: i.mode,
-		steps: i.steps ?? [],
-		maxSteps: i.maxSteps ?? null,
-		brief: i.inputSchema ?? [],
-		orchestratorModel: i.orchestratorModel ?? null,
-		orchestratorInstructions: i.orchestratorInstructions ?? null,
-		chain: i.chainTo ?? null,
-		cadence: i.cadence ?? null,
-		humanTimeoutMs: i.humanTimeoutMs ?? null
-	}) : yield* x.fail(new ye({
+	let r = (yield* C.promise(() => e.store.query(O(N).where(T("id", t)).descriptor)))[0];
+	return r ? _({
+		name: r.name ?? t,
+		mode: r.mode,
+		steps: r.steps ?? [],
+		maxSteps: r.maxSteps ?? null,
+		brief: r.inputSchema ?? [],
+		orchestratorModel: r.orchestratorModel ?? null,
+		orchestratorInstructions: r.orchestratorInstructions ?? null,
+		chain: r.chainTo ?? null,
+		cadence: r.cadence ?? null,
+		humanTimeoutMs: r.humanTimeoutMs ?? null
+	}) : yield* C.fail(new Ce({
 		flowRef: t,
 		message: `no flow registered or stored for "${t}"`
 	}));
-}), gt = (e, t, n, r, i) => x.gen(function* () {
-	let e = L(n.prompt ?? "", r), a = nt(n.prompt ?? "", r);
-	if (a.length > 0) return { error: new _e({
+}), At = (e, t, n, r, i, a) => C.gen(function* () {
+	let e = R(n.prompt ?? "", r), o = yield* vt(n.type === "agent" || n.type === "structured" || n.type === "generate" && (n.modality ?? "text") === "text" ? n.params : void 0).pipe(C.either);
+	if (o._tag === "Left") return { error: `step "${n.id}": ${o.left}` };
+	if (n.mediaInputs !== void 0 && (n.type !== "generate" || (n.modality ?? "text") === "text")) return { error: `step "${n.id}": media inputs require an image, video or audio generation step` };
+	let s = dt(n.prompt ?? "", r);
+	if (s.length > 0) return { error: new xe({
 		stepId: n.id,
-		unresolvedRef: a[0],
-		message: `step "${n.id}" references unresolved {{${a[0]}}}`
+		unresolvedRef: s[0],
+		message: `step "${n.id}" references unresolved {{${s[0]}}}`
 	}).message };
 	switch (n.type) {
 		case "note": return {
@@ -204,44 +246,42 @@ var M = Ae("_voltro_ai_flows", {
 		};
 		case "agent": {
 			if (!n.agentRef) return { error: "agent step missing agentRef" };
-			if (!t.resolveAgent) return { error: new y({
+			if (!t.resolveAgent) return { error: new x({
 				capability: "resolveAgent",
 				message: "no agent resolver configured"
 			}).message };
-			let r = yield* W(t.resolveAgent(n.agentRef)).pipe(x.map((e) => ({
+			let r = yield* W(t.resolveAgent(n.agentRef, i)).pipe(C.map((e) => ({
 				ok: !0,
 				a: e
-			})), x.catchAll((e) => x.succeed({
+			})), C.catchAll((e) => C.succeed({
 				ok: !1,
 				e
 			})));
 			if (!r.ok) return { error: r.e.message };
-			let i = yield* j({
-				system: r.a.system,
-				prompt: e,
-				provider: K(t, r.a.model)
-			}).pipe(x.map((e) => ({
+			let a = yield* Ot(t, r.a, e, o.right).pipe(C.map((e) => ({
 				ok: !0,
 				r: e
-			})), x.catchAll((e) => x.succeed({
+			})), C.catchAll((e) => C.succeed({
 				ok: !1,
 				e
 			})));
-			return i.ok ? {
-				value: i.r.text,
-				text: i.r.text,
-				costMicroUsd: q(i.r.usage, i.r.providerMetadata, r.a.model)
-			} : { error: String(i.e.message ?? i.e) };
+			return a.ok ? {
+				value: a.r.text,
+				text: a.r.text,
+				costMicroUsd: q(a.r.usage, a.r.providerMetadata, r.a.model)
+			} : { error: String(a.e.message ?? a.e) };
 		}
 		case "structured": {
-			let r = n.model ?? t.defaultModels?.text, i = yield* Re({
+			if (n.schema === void 0) return { error: `step "${n.id}": structured step requires a JSON Schema` };
+			let r = n.model ?? t.defaultModels?.text, i = yield* Ge({
+				...o.right,
 				prompt: e,
-				schema: ft(n.schema),
+				jsonSchema: n.schema,
 				...r ? { provider: K(t, r) } : {}
-			}).pipe(x.map((e) => ({
+			}).pipe(C.map((e) => ({
 				ok: !0,
 				r: e
-			})), x.catchAll((e) => x.succeed({
+			})), C.catchAll((e) => C.succeed({
 				ok: !1,
 				e
 			})));
@@ -252,15 +292,16 @@ var M = Ae("_voltro_ai_flows", {
 			} : { error: String(i.e.message ?? i.e) };
 		}
 		case "generate": {
-			let r = n.modality ?? "text";
-			if (r === "text") {
-				let r = n.model ?? t.defaultModels?.text, i = yield* j({
+			let s = n.modality ?? "text";
+			if (s === "text") {
+				let r = n.model ?? t.defaultModels?.text, i = yield* Je({
+					...o.right,
 					prompt: e,
 					...r ? { provider: K(t, r) } : {}
-				}).pipe(x.map((e) => ({
+				}).pipe(C.map((e) => ({
 					ok: !0,
 					r: e
-				})), x.catchAll((e) => x.succeed({
+				})), C.catchAll((e) => C.succeed({
 					ok: !1,
 					e
 				})));
@@ -270,285 +311,287 @@ var M = Ae("_voltro_ai_flows", {
 					costMicroUsd: q(i.r.usage, i.r.providerMetadata, r)
 				} : { error: String(i.e.message ?? i.e) };
 			}
-			if (!t.generateMedia) return { error: new y({
-				capability: `media:${r}`,
-				message: `no media generator configured for ${r}`
+			if (!t.generateMedia) return { error: new x({
+				capability: `media:${s}`,
+				message: `no media generator configured for ${s}`
 			}).message };
-			let a = n.model ?? t.defaultModels?.[r], o = yield* W(t.generateMedia({
-				modality: r,
-				...a ? { model: a } : {},
+			let c = yield* bt(n.mediaInputs, r, a).pipe(C.either);
+			if (c._tag === "Left") return { error: `step "${n.id}": ${c.left}` };
+			let l = n.model ?? t.defaultModels?.[s], u = yield* W(t.generateMedia({
+				modality: s,
+				...l ? { model: l } : {},
 				prompt: e,
 				...n.params ? { params: n.params } : {},
+				...n.mediaInputs === void 0 ? {} : { inputs: c.right },
 				run: i
-			})).pipe(x.map((e) => ({
+			})).pipe(C.map((e) => ({
 				ok: !0,
 				m: e
-			})), x.catchAll((e) => x.succeed({
+			})), C.catchAll((e) => C.succeed({
 				ok: !1,
 				e
 			})));
-			return o.ok ? {
-				value: o.m.url,
-				url: o.m.url,
-				...o.m.requestId ? { requestId: o.m.requestId } : {},
-				costMicroUsd: o.m.costMicroUsd ?? 0
-			} : { error: o.e.message };
+			return u.ok ? yield* Tt(u.m) : { error: u.e.message };
 		}
-		case "human": return { error: new y({
+		case "human": return { error: new x({
 			capability: "human",
 			message: "human step reached the step interpreter — it should have been parked by the deterministic executor (routing bug)"
 		}).message };
 		default: return { error: `unknown step type: ${String(n.type)}` };
 	}
-}), _t = (t, n, r, i, a, o) => x.gen(function* () {
-	let s = { ...a }, c = i.steps.map((e, t) => ({
+}), jt = (e, t, n, r, o, s) => C.gen(function* () {
+	let c = Object.assign(Object.create(null), o), l = Object.create(null), u = r.steps.map((e, t) => ({
 		id: t,
 		title: e.title ?? `Step ${t + 1}`,
 		type: e.type,
 		status: "pending",
 		...e.description ? { description: e.description } : {}
-	})), l = 0;
-	yield* J(t, r, {
+	})), d = 0;
+	yield* J(e, n, {
 		status: "running",
-		steps: c,
-		totalSteps: i.steps.length,
+		steps: u,
+		totalSteps: r.steps.length,
 		currentStep: 0,
 		startedAt: G()
 	});
-	for (let a of R(i.steps)) {
-		if (yield* ht(t, r)) return {
-			runId: r,
+	for (let o of z(r.steps)) {
+		if (yield* kt(e, n)) return {
+			runId: n,
 			status: "cancelled"
 		};
-		if (a.steps.length > 1) {
-			let i = [];
-			for (let { index: t, step: n } of a.steps) {
-				if (n.when !== void 0 && !g(n.when, s)) {
-					c[t] = {
-						...c[t],
+		if (o.steps.length > 1) {
+			let r = [];
+			for (let { index: e, step: t } of o.steps) {
+				if (t.when !== void 0 && !a(t.when, c)) {
+					u[e] = {
+						...u[e],
 						status: "skipped",
 						completedAt: G(),
-						skipReason: e(n.when)
+						skipReason: i(t.when)
 					};
 					continue;
 				}
-				i.push({
-					index: t,
-					step: n
-				}), c[t] = {
-					...c[t],
+				r.push({
+					index: e,
+					step: t
+				}), u[e] = {
+					...u[e],
 					status: "running",
 					startedAt: G()
 				};
 			}
-			yield* J(t, r, {
-				steps: c,
-				currentStep: a.steps[0].index
+			yield* J(e, n, {
+				steps: u,
+				currentStep: o.steps[0].index
 			});
-			let u = yield* x.all(i.map(({ index: e, step: i }) => k({
-				name: `flow-${e}-${i.id}`,
-				input: { index: e },
-				success: pt,
-				execute: gt(t, n, i, s, {
-					runId: r,
-					tenantId: o.tenantId
-				})
-			}).pipe(x.map((t) => ({
-				index: e,
+			let f = yield* C.all(r.map(({ index: r, step: i }) => j({
+				name: `flow-${r}-${i.id}`,
+				input: { index: r },
+				success: wt,
+				execute: At(e, t, i, c, {
+					runId: n,
+					tenantId: s.tenantId
+				}, l)
+			}).pipe(C.map((e) => ({
+				index: r,
 				step: i,
-				result: t
-			})))), { concurrency: "unbounded" }), d = u.find((e) => e.result.error);
-			for (let { index: e, step: t, result: n } of u) {
+				result: e
+			})))), { concurrency: "unbounded" }), p = f.find((e) => e.result.error);
+			for (let { index: e, step: t, result: n } of f) {
 				if (n.error) {
-					c[e] = {
-						...c[e],
+					u[e] = {
+						...u[e],
 						status: "failed",
 						completedAt: G(),
 						errorMessage: n.error
 					};
 					continue;
 				}
-				t.outputKey && n.value !== void 0 && (s[t.outputKey] = n.value), l += n.costMicroUsd ?? 0, c[e] = {
-					...c[e],
+				t.outputKey && n.value !== void 0 && (c[t.outputKey] = n.value), t.outputKey && n.artifacts !== void 0 && (l[t.outputKey] = n.artifacts), d += n.costMicroUsd ?? 0, u[e] = {
+					...u[e],
 					status: "succeeded",
 					completedAt: G(),
 					...n.text ? { output: { text: n.text } } : {},
 					...n.url ? { url: n.url } : {},
+					...n.artifacts === void 0 ? {} : { artifacts: n.artifacts },
 					...n.requestId ? { requestId: n.requestId } : {},
 					...n.costMicroUsd ? { costMicroUsd: n.costMicroUsd } : {}
 				};
 			}
-			if (d !== void 0) return yield* J(t, r, {
-				steps: c,
+			if (p !== void 0) return yield* J(e, n, {
+				steps: u,
 				status: "failed",
-				errorMessage: d.result.error,
+				errorMessage: p.result.error,
 				completedAt: G(),
-				costMicroUsd: l
+				costMicroUsd: d
 			}), {
-				runId: r,
+				runId: n,
 				status: "failed"
 			};
-			yield* J(t, r, {
-				steps: c,
-				currentStep: a.steps[a.steps.length - 1].index + 1,
-				costMicroUsd: l
+			yield* J(e, n, {
+				steps: u,
+				currentStep: o.steps[o.steps.length - 1].index + 1,
+				costMicroUsd: d
 			});
 			continue;
 		}
-		let { index: u, step: f } = a.steps[0];
-		if (f.when !== void 0 && !g(f.when, s)) {
-			c[u] = {
-				...c[u],
+		let { index: f, step: p } = o.steps[0];
+		if (p.when !== void 0 && !a(p.when, c)) {
+			u[f] = {
+				...u[f],
 				status: "skipped",
 				completedAt: G(),
-				skipReason: e(f.when)
-			}, yield* J(t, r, {
-				steps: c,
-				currentStep: u + 1
+				skipReason: i(p.when)
+			}, yield* J(e, n, {
+				steps: u,
+				currentStep: f + 1
 			});
 			continue;
 		}
-		if (f.type === "human") {
-			let e = {
-				mode: f.reviewMode ?? "approve",
-				...f.options ? { options: f.options } : {},
-				prompt: L(f.prompt ?? "", s)
+		if (p.type === "human") {
+			let i = {
+				mode: p.reviewMode ?? "approve",
+				...p.options ? { options: p.options } : {},
+				prompt: R(p.prompt ?? "", c)
 			};
-			c[u] = {
-				...c[u],
+			u[f] = {
+				...u[f],
 				status: "waiting",
 				startedAt: G(),
-				review: e
-			}, yield* J(t, r, {
-				steps: c,
+				review: i
+			}, yield* J(e, n, {
+				steps: u,
 				status: "waiting",
-				currentStep: u
-			}), n.onEvent && (yield* W(n.onEvent({
+				currentStep: f
+			}), t.onEvent && (yield* W(t.onEvent({
 				kind: "review-needed",
-				runId: r,
-				flowName: i.name,
-				ownerId: o.ownerId,
-				source: o.source
-			})).pipe(x.catchAllCause(() => x.void)));
-			let a = $e({
-				step: f,
-				flow: i,
-				deps: n
-			}), p = yield* Pe(t, {
-				name: v(u),
-				schema: d,
+				runId: n,
+				flowName: r.name,
+				ownerId: s.ownerId,
+				source: s.source
+			})).pipe(C.catchAllCause(() => C.void)));
+			let a = ct({
+				step: p,
+				flow: r,
+				deps: t
+			}), o = yield* Be(e, {
+				name: b(f),
+				schema: g,
 				timeoutMs: a
-			}).pipe(x.map((e) => ({
+			}).pipe(C.map((e) => ({
 				ok: !0,
 				a: e
-			})), x.catchAllCause((e) => Ce.isInterruptedOnly(e) ? x.failCause(e) : x.succeed({
+			})), C.catchAllCause((e) => Oe.isInterruptedOnly(e) ? C.failCause(e) : C.succeed({
 				ok: !1,
 				cause: e
 			})));
-			if (!p.ok) {
-				let e = Number.isFinite(a) ? `human review timed out after ${a}ms` : "human review failed";
-				return c[u] = {
-					...c[u],
+			if (!o.ok) {
+				let t = Number.isFinite(a) ? `human review timed out after ${a}ms` : "human review failed";
+				return u[f] = {
+					...u[f],
 					status: "failed",
 					completedAt: G(),
-					errorMessage: e
-				}, yield* J(t, r, {
-					steps: c,
+					errorMessage: t
+				}, yield* J(e, n, {
+					steps: u,
 					status: "failed",
-					errorMessage: e,
+					errorMessage: t,
 					completedAt: G(),
-					costMicroUsd: l
+					costMicroUsd: d
 				}), {
-					runId: r,
+					runId: n,
 					status: "failed"
 				};
 			}
-			let m = p.a;
-			if (m.decision === "reject") return c[u] = {
-				...c[u],
+			let l = o.a;
+			if (l.decision === "reject") return u[f] = {
+				...u[f],
 				status: "failed",
 				completedAt: G(),
 				errorMessage: "rejected by reviewer"
-			}, yield* J(t, r, {
-				steps: c,
+			}, yield* J(e, n, {
+				steps: u,
 				status: "cancelled",
+				humanResponse: l,
 				completedAt: G(),
-				costMicroUsd: l
+				costMicroUsd: d
 			}), {
-				runId: r,
+				runId: n,
 				status: "cancelled"
 			};
-			f.outputKey && (s[f.outputKey] = m.value ?? m.text ?? m.decision ?? !0), c[u] = {
-				...c[u],
+			p.outputKey && (c[p.outputKey] = l.value ?? l.text ?? l.decision ?? !0), u[f] = {
+				...u[f],
 				status: "succeeded",
 				completedAt: G(),
-				output: { text: String(m.text ?? m.value ?? m.decision ?? "approved") }
-			}, yield* J(t, r, {
-				steps: c,
+				output: { text: String(l.text ?? l.value ?? l.decision ?? "approved") }
+			}, yield* J(e, n, {
+				steps: u,
 				status: "running",
-				currentStep: u + 1
+				humanResponse: l,
+				currentStep: f + 1
 			});
 			continue;
 		}
-		c[u] = {
-			...c[u],
+		u[f] = {
+			...u[f],
 			status: "running",
 			startedAt: G()
-		}, yield* J(t, r, {
-			steps: c,
-			currentStep: u
+		}, yield* J(e, n, {
+			steps: u,
+			currentStep: f
 		});
-		let p = yield* k({
-			name: `flow-${u}-${f.id}`,
-			input: { index: u },
-			success: pt,
-			execute: gt(t, n, f, s, {
-				runId: r,
-				tenantId: o.tenantId
-			})
+		let m = yield* j({
+			name: `flow-${f}-${p.id}`,
+			input: { index: f },
+			success: wt,
+			execute: At(e, t, p, c, {
+				runId: n,
+				tenantId: s.tenantId
+			}, l)
 		});
-		if (p.error) return c[u] = {
-			...c[u],
+		if (m.error) return u[f] = {
+			...u[f],
 			status: "failed",
 			completedAt: G(),
-			errorMessage: p.error
-		}, yield* J(t, r, {
-			steps: c,
+			errorMessage: m.error
+		}, yield* J(e, n, {
+			steps: u,
 			status: "failed",
-			errorMessage: p.error,
+			errorMessage: m.error,
 			completedAt: G(),
-			costMicroUsd: l
+			costMicroUsd: d
 		}), {
-			runId: r,
+			runId: n,
 			status: "failed"
 		};
-		f.outputKey && p.value !== void 0 && (s[f.outputKey] = p.value), l += p.costMicroUsd ?? 0, c[u] = {
-			...c[u],
+		p.outputKey && m.value !== void 0 && (c[p.outputKey] = m.value), p.outputKey && m.artifacts !== void 0 && (l[p.outputKey] = m.artifacts), d += m.costMicroUsd ?? 0, u[f] = {
+			...u[f],
 			status: "succeeded",
 			completedAt: G(),
-			...p.text ? { output: { text: p.text } } : {},
-			...p.url ? { url: p.url } : {},
-			...p.requestId ? { requestId: p.requestId } : {},
-			...p.costMicroUsd ? { costMicroUsd: p.costMicroUsd } : {}
-		}, yield* J(t, r, {
-			steps: c,
-			currentStep: u + 1,
-			costMicroUsd: l
+			...m.text ? { output: { text: m.text } } : {},
+			...m.url ? { url: m.url } : {},
+			...m.artifacts === void 0 ? {} : { artifacts: m.artifacts },
+			...m.requestId ? { requestId: m.requestId } : {},
+			...m.costMicroUsd ? { costMicroUsd: m.costMicroUsd } : {}
+		}, yield* J(e, n, {
+			steps: u,
+			currentStep: f + 1,
+			costMicroUsd: d
 		});
 	}
-	let u = {};
-	for (let e of i.steps) e.outputKey && s[e.outputKey] !== void 0 && (u[e.outputKey] = s[e.outputKey]);
-	return yield* J(t, r, {
+	let f = Object.create(null);
+	for (let e of r.steps) e.outputKey && c[e.outputKey] !== void 0 && (f[e.outputKey] = c[e.outputKey]);
+	return yield* J(e, n, {
 		status: "succeeded",
-		output: u,
+		output: f,
 		completedAt: G(),
-		costMicroUsd: l
+		costMicroUsd: d
 	}), {
-		runId: r,
+		runId: n,
 		status: "succeeded",
-		output: u
+		output: f
 	};
-}), vt = (e, t, n, r, i, a, o) => x.gen(function* () {
+}), Mt = (e, t, n, r, i, a, o) => C.gen(function* () {
 	let s = n.chain;
 	if (!s) return;
 	let c = [...a.chainPath ?? [], a.flowRef];
@@ -557,7 +600,7 @@ var M = Ae("_voltro_ai_flows", {
 		yield* J(e, t, { chainRefusal: `chain to "${s.flowRef}" refused — it is already in this run's chain (${c.join(" → ")}), which would loop` });
 		return;
 	}
-	let l = et(o);
+	let l = lt(o);
 	if (c.length >= l) {
 		yield* J(e, t, { chainRefusal: `chain to "${s.flowRef}" refused — depth ${c.length} reached the limit of ${l} (${c.join(" → ")})` });
 		return;
@@ -578,9 +621,9 @@ var M = Ae("_voltro_ai_flows", {
 	let f = e.workflows;
 	if (!f) return;
 	let p = `${t}--chain`, m = `${a.requestId}--chain`;
-	yield* x.promise(async () => {
+	yield* C.promise(async () => {
 		try {
-			await e.store.insert(N.tableName, {
+			await e.store.insert(P.tableName, {
 				id: p,
 				flowRef: s.flowRef,
 				flowName: s.flowRef,
@@ -598,276 +641,322 @@ var M = Ae("_voltro_ai_flows", {
 			requestId: m,
 			chainPath: c
 		});
-	}).pipe(x.catchAllCause(() => x.void));
-}), yt = (e) => e.steps.length === 0 ? "" : "Suggested plan (you MAY reorder, insert, or skip steps):\n" + e.steps.map((e, t) => `${t + 1}. [${e.type}${e.modality ? `/${e.modality}` : ""}] ${e.title ?? e.id}${e.prompt ? `: ${e.prompt}` : ""}`).join("\n"), bt = (e) => {
+	}).pipe(C.catchAllCause(() => C.void));
+}), Nt = (e) => e.steps.length === 0 ? "" : "Suggested plan (you MAY reorder, insert, or skip steps):\n" + e.steps.map((e, t) => `${t + 1}. [${e.type}${e.modality ? `/${e.modality}` : ""}] ${e.title ?? e.id}${e.prompt ? `: ${e.prompt}` : ""}`).join("\n"), Pt = (e) => {
 	let t = Object.entries(e);
 	return t.length === 0 ? "Execute the flow." : "Brief for this run:\n" + t.map(([e, t]) => `- ${e}: ${typeof t == "string" ? t : JSON.stringify(t)}`).join("\n");
-}, xt = (e) => [
+}, Ft = (e) => [
 	e.orchestrator?.instructions ?? "You are an orchestrator that uses the available tools to produce a bundled result.",
-	yt(e),
+	Nt(e),
 	"When finished, emit a JSON object mapping each deliverable name (outputKey) to its value."
-].filter(Boolean).join("\n\n"), St = S.Struct({
-	object: S.Record({
-		key: S.String,
-		value: S.Unknown
+].filter(Boolean).join("\n\n"), It = w.Struct({
+	object: w.Record({
+		key: w.String,
+		value: w.Unknown
 	}),
-	planCostMicroUsd: S.Number,
-	toolCostMicroUsd: S.Number,
-	steps: S.Array(pe),
-	error: S.optional(S.String)
-}), Ct = (e, t, n, r, i, a, o) => x.gen(function* () {
+	planCostMicroUsd: w.Number,
+	toolCostMicroUsd: w.Number,
+	steps: w.Array(r),
+	error: w.optional(w.String)
+}), Lt = (e, t, n, r, i, a, o, s) => C.gen(function* () {
 	yield* J(e, n, {
 		status: "running",
 		startedAt: G(),
 		totalSteps: r.steps.length
 	});
-	let s = yield* k({
+	let c = yield* j({
 		name: "flow-agentic",
 		input: { flowRef: r.name },
-		success: St,
-		execute: x.gen(function* () {
-			let s = [], c = 0, l = (e) => {
-				let t = s.length;
-				return s.push({
+		success: It,
+		execute: C.gen(function* () {
+			let c = [], l = 0, u = (e) => {
+				let t = c.length;
+				return c.push({
 					id: t,
 					status: "running",
 					startedAt: G(),
 					...e
 				}), t;
-			}, u = (e, t) => {
-				s[e] = {
-					...s[e],
+			}, d = (e, t) => {
+				c[e] = {
+					...c[e],
 					completedAt: G(),
 					...t
 				};
-			}, d = () => J(e, n, {
-				steps: s,
-				currentStep: s.length,
-				costMicroUsd: c
-			}), f = A({
-				name: "run_agent",
-				description: "Delegate a text task to an allowed sub-agent. Returns the agent's text.",
-				input: S.Struct({
-					agentRef: S.String,
-					prompt: S.String
-				}),
-				execute: ({ agentRef: e, prompt: n }) => x.gen(function* () {
-					let r = l({
-						title: `agent:${e}`,
-						type: "agent"
-					});
-					if (yield* d(), !t.resolveAgent) return u(r, {
-						status: "failed",
-						errorMessage: "no agent resolver configured"
-					}), yield* d(), "ERROR: no agent resolver configured";
-					let i = yield* W(t.resolveAgent(e)).pipe(x.map((e) => ({
-						ok: !0,
-						a: e
-					})), x.catchAll((e) => x.succeed({
-						ok: !1,
-						e
-					})));
-					if (!i.ok) return u(r, {
-						status: "failed",
-						errorMessage: i.e.message
-					}), yield* d(), `ERROR: ${i.e.message}`;
-					let a = yield* j({
-						system: i.a.system,
-						prompt: n,
-						provider: K(t, i.a.model)
-					}).pipe(x.map((e) => ({
-						ok: !0,
-						r: e
-					})), x.catchAll((e) => x.succeed({
-						ok: !1,
-						e
-					})));
-					if (!a.ok) {
-						let e = String(a.e.message ?? a.e);
-						return u(r, {
+			}, f = () => J(e, n, {
+				steps: c,
+				currentStep: c.length,
+				costMicroUsd: l
+			}), p = {
+				run_agent: M({
+					name: "run_agent",
+					description: "Delegate a text task to an allowed sub-agent. Returns the agent's text.",
+					input: w.Struct({
+						agentRef: w.String,
+						prompt: w.String
+					}),
+					execute: ({ agentRef: e, prompt: r }) => C.gen(function* () {
+						let i = u({
+							title: `agent:${e}`,
+							type: "agent"
+						});
+						if (yield* f(), !t.resolveAgent) return d(i, {
 							status: "failed",
-							errorMessage: e
-						}), yield* d(), `ERROR: ${e}`;
-					}
-					let o = q(a.r.usage, a.r.providerMetadata, i.a.model);
-					return c += o, u(r, {
-						status: "succeeded",
-						output: { text: a.r.text },
-						costMicroUsd: o
-					}), yield* d(), a.r.text;
-				})
-			}), p = A({
-				name: "generate_media",
-				description: "Generate an image, video, or audio artifact. Returns the hosted URL.",
-				input: S.Struct({
-					modality: S.Literal("image", "video", "audio"),
-					prompt: S.String,
-					model: S.optional(S.String)
-				}),
-				execute: ({ modality: e, prompt: r, model: i }) => x.gen(function* () {
-					let a = l({
-						title: `media:${e}`,
-						type: "generate"
-					});
-					if (yield* d(), !t.generateMedia) return u(a, {
-						status: "failed",
-						errorMessage: `no media generator for ${e}`
-					}), yield* d(), `ERROR: no media generator configured for ${e}`;
-					let s = yield* W(t.generateMedia({
-						modality: e,
-						prompt: r,
-						...i ? { model: i } : {},
-						run: {
+							errorMessage: "no agent resolver configured"
+						}), yield* f(), "ERROR: no agent resolver configured";
+						let a = yield* W(t.resolveAgent(e, {
 							runId: n,
 							tenantId: o
+						})).pipe(C.map((e) => ({
+							ok: !0,
+							a: e
+						})), C.catchAll((e) => C.succeed({
+							ok: !1,
+							e
+						})));
+						if (!a.ok) return d(i, {
+							status: "failed",
+							errorMessage: a.e.message
+						}), yield* f(), `ERROR: ${a.e.message}`;
+						let s = yield* Ot(t, a.a, r, {}).pipe(C.map((e) => ({
+							ok: !0,
+							r: e
+						})), C.catchAll((e) => C.succeed({
+							ok: !1,
+							e
+						})));
+						if (!s.ok) {
+							let e = String(s.e.message ?? s.e);
+							return d(i, {
+								status: "failed",
+								errorMessage: e
+							}), yield* f(), `ERROR: ${e}`;
 						}
-					})).pipe(x.map((e) => ({
-						ok: !0,
-						r: e
-					})), x.catchAll((e) => x.succeed({
-						ok: !1,
-						e
-					})));
-					return s.ok ? (c += s.r.costMicroUsd ?? 0, u(a, {
-						status: "succeeded",
-						url: s.r.url,
-						...s.r.requestId ? { requestId: s.r.requestId } : {},
-						costMicroUsd: s.r.costMicroUsd ?? 0
-					}), yield* d(), s.r.url) : (u(a, {
-						status: "failed",
-						errorMessage: s.e.message
-					}), yield* d(), `ERROR: ${s.e.message}`);
-				})
-			}), m = A({
-				name: "pick_structured",
-				description: "Produce a JSON object for a task. Returns the object.",
-				input: S.Struct({
-					prompt: S.String,
-					model: S.optional(S.String)
+						let c = q(s.r.usage, s.r.providerMetadata, a.a.model);
+						return l += c, d(i, {
+							status: "succeeded",
+							output: { text: s.r.text },
+							costMicroUsd: c
+						}), yield* f(), s.r.text;
+					})
 				}),
-				execute: ({ prompt: e, model: n }) => x.gen(function* () {
-					let r = l({
-						title: "structured",
-						type: "structured"
-					});
-					yield* d();
-					let i = yield* Re({
-						prompt: e,
-						schema: S.Record({
-							key: S.String,
-							value: S.Unknown
-						}),
-						...n ? { provider: K(t, n) } : {}
-					}).pipe(x.map((e) => ({
-						ok: !0,
-						r: e
-					})), x.catchAll((e) => x.succeed({
-						ok: !1,
-						e
-					})));
-					if (!i.ok) {
-						let e = String(i.e.message ?? i.e);
-						return u(r, {
+				generate_media: M({
+					name: "generate_media",
+					description: "Generate image, video, or audio artifacts. Returns every artifact with its URL, role, media type and optional storage reference.",
+					input: w.Struct({
+						modality: w.Literal("image", "video", "audio"),
+						prompt: w.String,
+						model: w.optional(w.String),
+						inputs: w.optional(U),
+						params: w.optional(w.Record({
+							key: w.String,
+							value: w.Unknown
+						}))
+					}),
+					execute: ({ modality: e, prompt: r, model: i, inputs: a, params: s }) => C.gen(function* () {
+						let c = u({
+							title: `media:${e}`,
+							type: "generate"
+						});
+						if (yield* f(), !t.generateMedia) return d(c, {
+							status: "failed",
+							errorMessage: `no media generator for ${e}`
+						}), yield* f(), `ERROR: no media generator configured for ${e}`;
+						let p = yield* W(t.generateMedia({
+							modality: e,
+							prompt: r,
+							...i ? { model: i } : {},
+							...a === void 0 ? {} : { inputs: a },
+							...s === void 0 ? {} : { params: s },
+							run: {
+								runId: n,
+								tenantId: o
+							}
+						})).pipe(C.map((e) => ({
+							ok: !0,
+							r: e
+						})), C.catchAll((e) => C.succeed({
+							ok: !1,
+							e
+						})));
+						if (!p.ok) return d(c, {
 							status: "failed",
-							errorMessage: e
-						}), yield* d(), { error: e };
-					}
-					let a = q(i.r.usage, i.r.providerMetadata, n);
-					return c += a, u(r, {
-						status: "succeeded",
-						output: { text: JSON.stringify(i.r.object) },
-						costMicroUsd: a
-					}), yield* d(), i.r.object;
+							errorMessage: p.e.message
+						}), yield* f(), `ERROR: ${p.e.message}`;
+						let m = yield* Tt(p.r);
+						return m.error ? (d(c, {
+							status: "failed",
+							errorMessage: m.error
+						}), yield* f(), { error: m.error }) : (l += m.costMicroUsd ?? 0, d(c, {
+							status: "succeeded",
+							url: m.url,
+							artifacts: m.artifacts,
+							...m.requestId ? { requestId: m.requestId } : {},
+							costMicroUsd: m.costMicroUsd ?? 0
+						}), yield* f(), { artifacts: m.artifacts });
+					})
+				}),
+				pick_structured: M({
+					name: "pick_structured",
+					description: "Produce a JSON object for a task. Returns the object.",
+					input: w.Struct({
+						prompt: w.String,
+						model: w.optional(w.String)
+					}),
+					execute: ({ prompt: e, model: n }) => C.gen(function* () {
+						let r = u({
+							title: "structured",
+							type: "structured"
+						});
+						yield* f();
+						let i = yield* We({
+							prompt: e,
+							schema: w.Record({
+								key: w.String,
+								value: w.Unknown
+							}),
+							...n ? { provider: K(t, n) } : {}
+						}).pipe(C.map((e) => ({
+							ok: !0,
+							r: e
+						})), C.catchAll((e) => C.succeed({
+							ok: !1,
+							e
+						})));
+						if (!i.ok) {
+							let e = String(i.e.message ?? i.e);
+							return d(r, {
+								status: "failed",
+								errorMessage: e
+							}), yield* f(), { error: e };
+						}
+						let a = q(i.r.usage, i.r.providerMetadata, n);
+						return l += a, d(r, {
+							status: "succeeded",
+							output: { text: JSON.stringify(i.r.object) },
+							costMicroUsd: a
+						}), yield* f(), i.r.object;
+					})
 				})
-			}), h = t.memoryPrefix ? yield* W(t.memoryPrefix(a)).pipe(x.catchAll(() => x.succeed(""))) : "", ee = h ? `${h}\n\n${xt(r)}` : xt(r), g = yield* ze({
-				system: ee,
-				prompt: bt(i),
-				schema: S.Record({
-					key: S.String,
-					value: S.Unknown
+			}, m = yield* (t.resolveTools ? W(t.resolveTools(s, {
+				runId: n,
+				tenantId: o
+			})) : C.succeed({})).pipe(C.either);
+			if (m._tag === "Left") return {
+				object: {},
+				planCostMicroUsd: 0,
+				toolCostMicroUsd: 0,
+				steps: c,
+				error: "flow tool resolution failed"
+			};
+			if (Object.keys(m.right).some((e) => Object.hasOwn(p, e))) return {
+				object: {},
+				planCostMicroUsd: 0,
+				toolCostMicroUsd: 0,
+				steps: c,
+				error: "flow tools cannot replace reserved planner tools"
+			};
+			let ee = t.memoryPrefix ? yield* W(t.memoryPrefix(a)).pipe(C.catchAll(() => C.succeed(""))) : "", h = ee ? `${ee}\n\n${Ft(r)}` : Ft(r), g = yield* Ke({
+				system: h,
+				prompt: Pt(i),
+				schema: w.Record({
+					key: w.String,
+					value: w.Unknown
 				}),
 				tools: {
-					run_agent: f,
-					generate_media: p,
-					pick_structured: m
+					...m.right,
+					...p
 				},
 				maxSteps: r.maxSteps,
 				...r.orchestrator?.model ? { provider: K(t, r.orchestrator.model) } : {}
-			}).pipe(x.map((e) => ({
+			}).pipe(C.map((e) => ({
 				ok: !0,
 				r: e
-			})), x.catchAll((e) => x.succeed({
+			})), C.catchAll((e) => C.succeed({
 				ok: !1,
 				e
 			})));
 			return g.ok ? {
 				object: g.r.object,
 				planCostMicroUsd: q(g.r.usage, g.r.providerMetadata, r.orchestrator?.model),
-				toolCostMicroUsd: c,
-				steps: s
+				toolCostMicroUsd: l,
+				steps: c
 			} : {
 				object: {},
 				planCostMicroUsd: 0,
-				toolCostMicroUsd: c,
-				steps: s,
+				toolCostMicroUsd: l,
+				steps: c,
 				error: String(g.e.message ?? g.e)
 			};
 		})
-	}), c = s.planCostMicroUsd + s.toolCostMicroUsd;
-	return s.error ? (yield* J(e, n, {
+	}), l = c.planCostMicroUsd + c.toolCostMicroUsd;
+	return c.error ? (yield* J(e, n, {
 		status: "failed",
-		steps: s.steps,
-		errorMessage: s.error,
+		steps: c.steps,
+		errorMessage: c.error,
 		completedAt: G(),
-		costMicroUsd: c
+		costMicroUsd: l
 	}), {
 		runId: n,
 		status: "failed"
 	}) : (yield* J(e, n, {
 		status: "succeeded",
-		steps: s.steps,
-		output: s.object,
+		steps: c.steps,
+		output: c.object,
 		completedAt: G(),
-		costMicroUsd: c
+		costMicroUsd: l
 	}), {
 		runId: n,
 		status: "succeeded",
-		output: s.object
+		output: c.object
 	});
-}), wt = (e, t = {}) => (n, r) => x.gen(function* () {
-	let { runId: r, flowRef: i, input: a } = n, o = yield* k({
+}), Rt = (e, t = {}) => (n, r) => C.gen(function* () {
+	let { runId: r, flowRef: i, input: a } = n, o = yield* C.tryPromise(() => e.store.query(O(P).where(T("id", r)).descriptor)).pipe(C.flatMap(w.decodeUnknown(w.Tuple(w.Struct({
+		id: w.Literal(r),
+		tenantId: w.NullOr(w.NonEmptyString),
+		ownerId: w.optional(w.NullOr(w.String))
+	})))), C.either);
+	if (o._tag === "Left") return yield* J(e, r, {
+		status: "failed",
+		errorMessage: "flow run context unavailable: expected one matching run row with an explicit tenantId (string or null)",
+		completedAt: G()
+	}), {
+		runId: r,
+		status: "failed"
+	};
+	let { tenantId: s, ownerId: c = null } = o.right[0], l = yield* j({
 		name: "flow-0-resolve",
 		input: { flowRef: i },
-		success: S.Struct({
-			ir: S.Unknown,
-			error: S.optional(S.String)
+		success: w.Struct({
+			ir: w.Unknown,
+			error: w.optional(w.String)
 		}),
-		execute: Y(e, i).pipe(x.map((e) => ({ ir: e })), x.catchAll((e) => x.succeed({
+		execute: Y(e, i).pipe(C.map((e) => ({ ir: e })), C.catchAll((e) => C.succeed({
 			ir: void 0,
 			error: e.message
 		})))
 	});
-	if (o.error || !o.ir) return yield* J(e, r, {
+	if (l.error || !l.ir) return yield* J(e, r, {
 		status: "failed",
-		errorMessage: o.error ?? "flow not found",
+		errorMessage: l.error ?? "flow not found",
 		completedAt: G()
 	}), {
 		runId: r,
 		status: "failed"
 	};
-	let s = o.ir, c = (yield* x.promise(() => e.store.query(E(N).where(C("id", r)).descriptor)).pipe(x.catchAllCause(() => x.succeed([]))))[0], l = c?.ownerId ?? null, u = c?.tenantId ?? null, d = s.mode === "agentic" ? yield* Ct(e, t, r, s, a, l, u) : yield* _t(e, t, r, s, a, {
-		ownerId: l,
-		tenantId: u,
+	let u = l.ir, d = u.mode === "agentic" ? yield* Lt(e, t, r, u, a, c, s, i) : yield* jt(e, t, r, u, a, {
+		ownerId: c,
+		tenantId: s,
 		source: n.source
 	});
-	return d.status === "succeeded" && s.chain && (yield* vt(e, r, s, a, d.output ?? {}, n, t)), t.onEvent && (d.status === "succeeded" || d.status === "failed") && (yield* W(t.onEvent({
+	return d.status === "succeeded" && u.chain && (yield* Mt(e, r, u, a, d.output ?? {}, n, t)), t.onEvent && (d.status === "succeeded" || d.status === "failed") && (yield* W(t.onEvent({
 		kind: d.status,
 		runId: r,
-		flowName: s.name,
-		ownerId: l,
+		flowName: u.name,
+		ownerId: c,
 		source: n.source
-	})).pipe(x.catchAllCause(() => x.void))), d;
-}), Tt = {
+	})).pipe(C.catchAllCause(() => C.void))), d;
+}), zt = {
 	text: (e) => ({
 		type: "generate",
 		modality: "text",
@@ -894,31 +983,32 @@ var M = Ae("_voltro_ai_flows", {
 		type: "human",
 		...e
 	})
-}, Et = (e) => e.map((e, t) => "id" in e && e.id ? e : {
+}, Bt = (e) => e.map((e, t) => "id" in e && e.id ? e : {
 	id: `step-${t}`,
 	...e
-}), Dt = (e) => {
-	let t = [], r = R(e.steps);
-	for (let e of rt(r)) t.push(`group "${e}" is not contiguous — only CONSECUTIVE steps sharing a group run concurrently, so this would execute as two separate fan-outs`);
-	let i = new Set(e.brief.map((e) => e.key));
-	for (let e of r) {
+}), Vt = (e) => {
+	let t = [], n = z(e.steps);
+	for (let e of ft(n)) t.push(`group "${e}" is not contiguous — only CONSECUTIVE steps sharing a group run concurrently, so this would execute as two separate fan-outs`);
+	let r = new Set(e.brief.map((e) => e.key));
+	for (let e of n) {
 		for (let { step: n } of e.steps) {
 			n.type === "human" && n.group !== void 0 && t.push(`step "${n.id}" is a human review inside group "${n.group}" — a review SUSPENDS the whole run, which one branch of a fan-out cannot do`);
-			for (let r of I(n.prompt ?? "")) i.has(r) || t.push(e.steps.length > 1 ? `step "${n.id}" references {{${r}}} which is produced inside its OWN group "${n.group}" or does not exist — grouped steps run concurrently, so they cannot read each other` : `step "${n.id}" references {{${r}}} which is not a brief field or a prior step outputKey`);
-			n.when !== void 0 && !i.has(n.when.ref) && t.push(`step "${n.id}" has a when-condition on {{${n.when.ref}}} which is not a brief field or a prior step outputKey — it would never run`);
+			for (let i of L(n.prompt ?? "")) r.has(i) || t.push(e.steps.length > 1 ? `step "${n.id}" references {{${i}}} which is produced inside its OWN group "${n.group}" or does not exist — grouped steps run concurrently, so they cannot read each other` : `step "${n.id}" references {{${i}}} which is not a brief field or a prior step outputKey`);
+			for (let [e, i] of Object.entries(n.mediaInputs ?? {})) i.from === "step" && !r.has(i.ref) && t.push(`step "${n.id}" media input "${e}" references "${i.ref}" which is not a brief field or an earlier segment's outputKey`);
+			n.when !== void 0 && !r.has(n.when.ref) && t.push(`step "${n.id}" has a when-condition on {{${n.when.ref}}} which is not a brief field or a prior step outputKey — it would never run`);
 		}
-		for (let { step: t } of e.steps) t.outputKey && i.add(n(t.outputKey));
+		for (let { step: t } of e.steps) t.outputKey && r.add(s(t.outputKey));
 	}
-	if (t.length > 0) throw new be({
+	if (t.length > 0) throw new Te({
 		flowRef: e.name,
 		message: `flow "${e.name}" has ${t.length} problem(s)`,
 		issues: t
 	});
-}, Ot = (e) => {
-	let t = r({
+}, Ht = (e) => {
+	let t = _({
 		name: e.name,
 		mode: e.mode,
-		steps: Et(e.steps),
+		steps: Bt(e.steps),
 		maxSteps: e.maxSteps,
 		brief: e.brief,
 		orchestratorModel: e.orchestrator?.model,
@@ -927,230 +1017,379 @@ var M = Ae("_voltro_ai_flows", {
 		cadence: e.cadence,
 		humanTimeoutMs: e.humanTimeoutMs
 	});
-	return Dt(t), it(t), t;
-}, X = (e) => String(e).padStart(2, "0"), kt = (e, t) => `cron-${e}-${t.getFullYear()}${X(t.getMonth() + 1)}${X(t.getDate())}-${X(t.getHours())}${X(t.getMinutes())}`, At = async (e) => {
+	return Vt(t), pt(t), t;
+}, X = async (e, t, n) => {
+	let r = w.decodeUnknownSync(ke.pipe(w.filter((e) => e.workflowName === "flow.run" && e.id.length > 0)))(n);
+	if (await e.store.update(P.tableName, t, { workflowStart: r }) === null) throw Error("flow start receipt could not be recorded; workflow submission may have succeeded");
+	return r;
+}, Ut = (e, t, n) => {
+	if (!Number.isFinite(t.getTime())) throw Error("cadence timestamp must be valid");
+	return `cron-${Xe("sha256").update(JSON.stringify([
+		n,
+		e,
+		Math.floor(t.getTime() / 6e4)
+	])).digest("hex")}`;
+}, Wt = async (e) => {
 	let t = [];
-	for (let e of ot()) e.cadence && (e.cadence.repeats?.length ?? 0) > 0 && t.push({
-		flowRef: e.name,
-		cadence: e.cadence,
-		defaultInput: e.cadence.defaultInput ?? {}
+	for (let n of ht()) n.cadence && (n.cadence.repeats?.length ?? 0) > 0 && t.push({
+		tenantId: e.request.subject.tenantId,
+		flowRef: n.name,
+		cadence: n.cadence,
+		defaultInput: n.cadence.defaultInput ?? {}
 	});
 	let n = await e.store.select("_voltro_ai_flows").where("isEnabled", !0).all();
-	for (let e of n) e.id && e.cadence && (e.cadence.repeats?.length ?? 0) > 0 && t.push({
-		flowRef: e.id,
-		cadence: e.cadence,
-		defaultInput: e.cadence.defaultInput ?? {}
+	for (let r of n) r.id && r.cadence && (r.cadence.repeats?.length ?? 0) > 0 && t.push({
+		tenantId: r.tenantId ?? e.request.subject.tenantId,
+		flowRef: r.id,
+		cadence: r.cadence,
+		defaultInput: r.cadence.defaultInput ?? {}
 	});
 	return t;
-}, jt = async (e, t = /* @__PURE__ */ new Date()) => {
-	let n = e.workflows, r = [], i = 0, a = await At(e).catch(() => []);
-	for (let o of a) {
-		if (!Se(o.cadence, t) || (i += 1, !n)) continue;
-		let a = kt(o.flowRef, t), s = `run-${a}`;
+}, Gt = async (e, t = /* @__PURE__ */ new Date()) => {
+	let n = [], r = 0, i = await Wt(e), a = [];
+	for (let o of i) {
+		if (!De(o.cadence, t)) continue;
+		r += 1;
+		let i = Ut(o.flowRef, t, o.tenantId), s = `run-${i}`;
 		try {
-			try {
-				await e.store.insert("_voltro_ai_flow_runs", {
+			if (!e.workflows) throw Error("workflow runtime unavailable; no cadence start was submitted");
+			(await e.transaction(async (e) => {
+				let t = e.workflows;
+				if (!t) throw Error("workflow runtime unavailable in transaction; no cadence start was submitted");
+				await e.store.insertIgnoreWithOutcome("_voltro_ai_flow_runs", {
 					id: s,
 					flowRef: o.flowRef,
 					flowName: o.flowRef,
 					status: "pending",
 					source: "cron",
-					requestId: a,
+					requestId: i,
 					input: o.defaultInput
+				}, { conflictColumns: ["id"] });
+				let n = await e.store.select("_voltro_ai_flow_runs").where("id", s).first();
+				if (!n) throw Error("cadence run is not readable after persistence");
+				let r = w.decodeUnknownSync(y.payloadSchema.pipe(w.filter((e) => e.runId === s && e.flowRef === o.flowRef && e.requestId === i && e.source === "cron")))({
+					...n,
+					runId: n.id
 				});
-			} catch {}
-			await n.start("flow.run", {
-				runId: s,
-				flowRef: o.flowRef,
-				input: o.defaultInput,
-				source: "cron",
-				requestId: a
-			}), r.push(a);
-		} catch {}
+				return X(e, s, await t.start("flow.run", r));
+			}, o.tenantId === null ? void 0 : { tenantId: o.tenantId })).status === "running" && n.push(i);
+		} catch (e) {
+			a.push(e);
+		}
 	}
+	if (a.length > 0) throw AggregateError(a, `${a.length} cadence submission(s) failed`);
 	return {
-		matched: i,
-		started: r
+		matched: r,
+		started: n
 	};
-}, Mt = (e) => ({
+}, Z = (e) => w.optionalWith(e, { exact: !0 }), Kt = w.Int.pipe(w.positive(), w.lessThanOrEqualTo(2 ** 53 - 1)), qt = w.Int.pipe(w.between(-(2 ** 53 - 1), 2 ** 53 - 1)), Jt = w.TemplateLiteral(w.Number, "x", w.Number).pipe(w.pattern(/^[1-9]\d*x[1-9]\d*$/)), Yt = w.TemplateLiteral(w.Number, ":", w.Number).pipe(w.pattern(/^[1-9]\d*:[1-9]\d*$/)), Xt = w.Struct({
+	n: Z(Kt),
+	seed: Z(qt),
+	size: Z(Jt),
+	aspectRatio: Z(Yt),
+	providerOptions: Z(H)
+}), Zt = w.Struct({
+	voice: Z(w.NonEmptyString),
+	outputFormat: Z(w.NonEmptyString),
+	instructions: Z(w.String),
+	speed: Z(w.Finite.pipe(w.positive())),
+	language: Z(w.NonEmptyString),
+	providerOptions: Z(H)
+}), Qt = w.Struct({
+	aspectRatio: Z(Yt),
+	durationSeconds: Z(w.Finite.pipe(w.positive())),
+	resolution: Z(Jt),
+	fps: Z(w.Finite.pipe(w.positive())),
+	seed: Z(qt),
+	generateAudio: Z(w.Boolean),
+	maxInlineBytes: Z(Kt),
+	providerOptions: Z(H)
+}), Q = (e, t, n) => C.try({
+	try: () => w.decodeUnknownSync(e, { onExcessProperty: "error" })(t === void 0 ? {} : t),
+	catch: () => `invalid ${n} media params: check the built-in adapter's supported options and value ranges`
+}), $t = (e) => Q(Xt, e, "image"), en = (e) => Q(Zt, e, "audio"), tn = (e) => Q(Qt, e, "video"), nn = (e) => ({
 	name: "gateway",
 	model: e
-}), Nt = (e) => Math.round(e * 1e6), Z = (e, t, n) => {
-	let r = Ie(t);
-	return typeof r == "number" ? Nt(r) : e ? Fe(e, { model: n ?? "unknown" }).costMicroUsd ?? 0 : 0;
-}, Pt = (e, t) => (n) => {
-	let r = n.model, i = (e) => t?.resolveModel?.(e) ?? Mt(e);
-	return x.gen(function* () {
+}), rn = (e) => Math.round(e * 1e6), $ = (e, t, n) => {
+	let r = He(t);
+	return typeof r == "number" ? rn(r) : e ? Ve(e, { model: n ?? "unknown" }).costMicroUsd ?? 0 : 0;
+}, an = (e, t) => (n) => {
+	let r = n.model, i = (e) => t?.resolveModel?.(e) ?? nn(e);
+	return C.gen(function* () {
+		let t = yield* xt(n.modality, n.inputs).pipe(C.mapError((e) => new x({
+			capability: `media:${n.modality}`,
+			message: e
+		})));
 		if (n.modality === "image") {
-			let t = yield* Le({
+			let a = yield* $t(n.params).pipe(C.mapError((e) => new x({
+				capability: "media:image",
+				message: e
+			}))), o = t.referenceImageUrl, s = t.maskImageUrl, c = yield* Ue({
+				...a,
 				prompt: n.prompt,
+				...o === void 0 ? {} : { inputs: {
+					images: [o],
+					...s === void 0 ? {} : { mask: s }
+				} },
 				...r ? { provider: i(r) } : {}
-			}), a = t.images[0];
-			if (!a) return yield* x.fail(new y({
+			});
+			if (c.images.length === 0) return yield* C.fail(new x({
 				capability: "media:image",
 				message: "no image produced"
 			}));
-			let o = yield* x.promise(() => e.put({
-				data: a.data,
-				mediaType: a.mediaType,
-				run: n.run
-			}));
+			let l = [];
+			for (let [t, r] of c.images.entries()) {
+				let i = yield* e.put({
+					data: r.data,
+					mediaType: r.mediaType,
+					run: n.run
+				}).pipe(C.mapError(() => new x({
+					capability: "media:image",
+					message: "media persistence failed"
+				})));
+				l.push({
+					url: i.url,
+					mediaType: r.mediaType,
+					role: t === 0 ? "primary" : "variant",
+					...i.refId === void 0 ? {} : { storageRefId: i.refId },
+					...r.providerMetadata === void 0 ? {} : { providerMetadata: r.providerMetadata }
+				});
+			}
 			return {
-				url: o.url,
-				...o.refId ? { requestId: o.refId } : {},
-				costMicroUsd: Z(t.usage, t.providerMetadata, r)
+				artifacts: l,
+				costMicroUsd: $(c.usage, c.providerMetadata, r)
 			};
 		}
 		if (n.modality === "audio") {
-			let t = yield* Be({
+			let t = yield* en(n.params).pipe(C.mapError((e) => new x({
+				capability: "media:audio",
+				message: e
+			}))), a = yield* qe({
+				...t,
 				text: n.prompt,
 				...r ? { provider: i(r) } : {}
-			}), a = yield* x.promise(() => e.put({
-				data: t.audio.data,
-				mediaType: t.audio.mediaType,
+			}), o = yield* e.put({
+				data: a.audio.data,
+				mediaType: a.audio.mediaType,
 				run: n.run
-			}));
+			}).pipe(C.mapError(() => new x({
+				capability: "media:audio",
+				message: "media persistence failed"
+			})));
 			return {
-				url: a.url,
-				...a.refId ? { requestId: a.refId } : {},
-				costMicroUsd: Z(t.usage, t.providerMetadata, r)
+				artifacts: [{
+					url: o.url,
+					mediaType: a.audio.mediaType,
+					role: "primary",
+					...o.refId === void 0 ? {} : { storageRefId: o.refId }
+				}],
+				costMicroUsd: $(a.usage, a.providerMetadata, r)
 			};
 		}
-		let t = yield* Ve({
+		let { maxInlineBytes: a, providerOptions: o, ...s } = yield* tn(n.params).pipe(C.mapError((e) => new x({
+			capability: "media:video",
+			message: e
+		}))), c = yield* Ye({
 			prompt: n.prompt,
+			inputs: {
+				...t.referenceImageUrl === void 0 ? {} : { image: t.referenceImageUrl },
+				...t.referenceVideoUrl === void 0 ? {} : { references: [t.referenceVideoUrl] },
+				frameImages: [...t.firstFrameImageUrl === void 0 ? [] : [{
+					frameType: "first_frame",
+					image: t.firstFrameImageUrl
+				}], ...t.lastFrameImageUrl === void 0 ? [] : [{
+					frameType: "last_frame",
+					image: t.lastFrameImageUrl
+				}]]
+			},
 			...r ? { provider: i(r) } : {},
-			...n.params ? { params: n.params } : {}
-		}), a;
-		if (t.video.url) a = e.ingestUrl ? yield* x.promise(() => e.ingestUrl(t.video.url, n.run)) : { url: t.video.url };
-		else if (t.video.data) a = yield* x.promise(() => e.put({
-			data: t.video.data,
-			mediaType: t.video.mediaType,
+			params: s,
+			...o === void 0 ? {} : { providerOptions: o },
+			...a === void 0 ? {} : { maxInlineBytes: a }
+		}), l;
+		if (c.video.url) l = e.ingestUrl ? yield* e.ingestUrl(c.video.url, n.run).pipe(C.mapError(() => new x({
+			capability: "media:video",
+			message: "media persistence failed"
+		}))) : { url: c.video.url };
+		else if (c.video.data) l = yield* e.put({
+			data: c.video.data,
+			mediaType: c.video.mediaType,
 			run: n.run
-		}));
-		else return yield* x.fail(new y({
+		}).pipe(C.mapError(() => new x({
+			capability: "media:video",
+			message: "media persistence failed"
+		})));
+		else return yield* C.fail(new x({
 			capability: "media:video",
 			message: "no video produced"
 		}));
 		return {
-			url: a.url,
-			...a.refId ? { requestId: a.refId } : {},
-			costMicroUsd: Z(t.usage, t.providerMetadata, r)
+			artifacts: [{
+				url: l.url,
+				mediaType: c.video.mediaType,
+				role: "primary",
+				...l.refId === void 0 ? {} : { storageRefId: l.refId }
+			}],
+			costMicroUsd: $(c.usage, c.providerMetadata, r)
 		};
-	}).pipe(x.catchAll((e) => e instanceof y ? x.fail(e) : x.fail(new y({
+	}).pipe(C.catchAll((e) => e instanceof x ? C.fail(e) : C.fail(new x({
 		capability: `media:${n.modality}`,
 		message: String(e.message ?? e)
 	}))));
-}, Q = () => globalThis.crypto?.randomUUID?.() ?? `req-${Date.now().toString(36)}`, Ft = (e) => e.request?.subject?.id ?? null, $ = (e, t) => x.promise(() => e.store.query(E(N).where(C("id", t)).descriptor)).pipe(x.map((e) => e[0])), It = (e, t) => x.gen(function* () {
+}, on = () => globalThis.crypto?.randomUUID?.() ?? `req-${Date.now().toString(36)}`, sn = (e) => e.request?.subject?.id ?? null, cn = (e, t) => C.promise(() => e.store.query(O(P).where(T("id", t)).descriptor)).pipe(C.map((e) => e[0])), ln = (e) => C.sync(() => {
+	let t = e.workflows;
+	if (!t) throw Error("workflow runtime unavailable; no flow start was submitted");
+	return t;
+}), un = (e, t) => C.gen(function* () {
+	yield* ln(e);
 	let n = yield* Y(e, t.flowRef), r = t.input ?? {}, i = n.brief.filter((e) => e.required && e.type !== "boolean" && (r[e.key] === void 0 || r[e.key] === null || r[e.key] === "")).map((e) => e.key);
-	if (i.length > 0) return yield* x.fail(new ge({
+	if (i.length > 0) return yield* C.fail(new be({
 		missing: i,
 		message: `missing required brief field(s): ${i.join(", ")}`
 	}));
-	let a = Q(), o = `run-${a}`, s = t.source ?? "manual";
-	yield* x.promise(() => e.store.insert(N.tableName, {
-		id: o,
-		flowRef: t.flowRef,
-		flowName: n.name,
-		mode: n.mode,
-		status: "pending",
-		source: s,
-		requestId: a,
-		input: r,
-		ownerId: Ft(e)
-	}));
-	let c = e.workflows;
-	return c && (yield* x.promise(() => c.start(_, {
-		runId: o,
-		flowRef: t.flowRef,
-		input: r,
-		source: s,
-		requestId: a
-	}))), {
-		runId: o,
-		requestId: a,
-		status: "pending"
-	};
-}), Lt = (e, t) => x.gen(function* () {
-	let n = yield* $(e, t.runId);
-	if (!n) return yield* x.fail(new b({
-		runId: t.runId,
-		message: "run not found"
-	}));
-	let r = n.requestId ?? Q(), i = n.flowRef, a = n.input ?? {}, o = n.source ?? "manual";
-	yield* x.promise(() => e.store.update(N.tableName, t.runId, {
-		status: "pending",
-		error: null,
-		errorMessage: null
+	let a = on(), o = `run-${a}`, s = t.source ?? "manual";
+	return yield* C.promise(() => e.transaction(async (e) => {
+		let i = e.workflows;
+		if (!i) throw Error("workflow runtime unavailable in transaction; no flow start was submitted");
+		await e.store.insert(P.tableName, {
+			id: o,
+			flowRef: t.flowRef,
+			flowName: n.name,
+			mode: n.mode,
+			status: "pending",
+			source: s,
+			requestId: a,
+			input: r,
+			ownerId: sn(e)
+		});
+		let c = await X(e, o, await i.start(v, {
+			runId: o,
+			flowRef: t.flowRef,
+			input: r,
+			source: s,
+			requestId: a
+		}));
+		return h.make({
+			runId: o,
+			requestId: a,
+			admission: c
+		});
 	}));
-	let s = e.workflows;
-	return s && (yield* x.promise(() => s.start(_, {
-		runId: t.runId,
-		flowRef: i,
-		input: a,
-		source: o,
-		requestId: r
-	}))), {
-		runId: t.runId,
-		requestId: r,
-		status: "pending"
-	};
-}), Rt = (e, t) => x.gen(function* () {
-	return (yield* $(e, t.runId)) ? (yield* x.promise(() => e.store.update(N.tableName, t.runId, {
+}), dn = (e, t) => C.gen(function* () {
+	return yield* ln(e), yield* C.tryPromise({
+		try: () => e.transaction(async (e) => {
+			let n = e.workflows;
+			if (!n) throw Error("workflow runtime unavailable in transaction; no flow start was submitted");
+			let r = (await e.store.query(O(P).where(T("id", t.runId)).descriptor))[0];
+			if (!r) throw new S({
+				runId: t.runId,
+				message: "run not found"
+			});
+			let i = r.requestId;
+			if (typeof i != "string" || i.length === 0) throw Error("stored flow run has no valid requestId; retry refused without changing the run");
+			let a = w.decodeUnknownEither(y.payloadSchema.pipe(w.filter((e) => e.runId === t.runId && e.flowRef.length > 0)))({
+				...r,
+				runId: r.id
+			});
+			if (a._tag === "Left") throw Error("stored workflow payload is incomplete or invalid; retry refused without changing the run");
+			let o = await X(e, t.runId, await n.start(v, a.right));
+			return h.make({
+				runId: t.runId,
+				requestId: i,
+				admission: o
+			});
+		}),
+		catch: (e) => e
+	}).pipe(C.catchAll((e) => e instanceof S ? C.fail(e) : C.die(e)));
+}), fn = (e, t) => C.gen(function* () {
+	return (yield* cn(e, t.runId)) ? (yield* C.promise(() => e.store.update(P.tableName, t.runId, {
 		status: "cancelled",
 		cancelledAt: (/* @__PURE__ */ new Date()).toISOString()
 	})), {
 		runId: t.runId,
 		status: "cancelled"
-	}) : yield* x.fail(new b({
+	}) : yield* C.fail(new S({
 		runId: t.runId,
 		message: "run not found"
 	}));
-}), zt = (e) => {
-	let t = e.steps?.find((e) => e.status === "waiting");
-	if (t !== void 0) return t.id;
-	let n = e.currentStep;
-	return typeof n == "number" ? n : 0;
-}, Bt = (e, t) => x.gen(function* () {
-	let n = yield* $(e, t.runId);
-	if (!n) return yield* x.fail(new b({
+}), pn = (e) => {
+	let t = e.steps?.filter((e) => e.status === "waiting"), n = t?.[0];
+	if (t?.length !== 1 || n?.type !== "human" || !Number.isSafeInteger(n.id) || n.id < 0) throw Error("expected exactly one waiting human step with a nonnegative integer index");
+	return n.id;
+}, mn = (e, t) => C.gen(function* () {
+	let n = (e, n) => new we({
+		runId: t.runId,
+		reason: e,
+		message: n
+	}), r = yield* w.decodeUnknown(le, { onExcessProperty: "error" })(t).pipe(C.mapError(() => n("invalid-response", "review response requires runId, displayed stepIndex and a valid response")));
+	if (r.response.decision === void 0 && r.response.text === void 0 && r.response.value === void 0) return yield* C.fail(n("invalid-response", "review response must contain a decision, text or value"));
+	let i = e.workflows;
+	if (!i) return yield* C.fail(n("runtime-unavailable", "workflow runtime unavailable; review was not sent"));
+	let a = yield* cn(e, t.runId);
+	if (!a) return yield* C.fail(new S({
 		runId: t.runId,
 		message: "run not found"
 	}));
-	let r = n.status;
-	if (r !== "waiting") return yield* x.fail(new ve({
+	let o = a.status;
+	if (o !== "waiting") return yield* C.fail(new Se({
 		runId: t.runId,
-		status: r ?? "unknown",
-		message: `run is "${r}", not awaiting a response`
+		status: o ?? "unknown",
+		message: `run is "${o}", not awaiting a response`
 	}));
-	let i = {
-		...t.response,
+	let s = yield* C.try({
+		try: () => pn(a),
+		catch: () => n("invalid-run", "stored run has no unambiguous waiting review")
+	});
+	if (s !== r.stepIndex) return yield* C.fail(new Se({
+		runId: t.runId,
+		status: o,
+		message: "this review is no longer waiting; reload the run before answering"
+	}));
+	let c = yield* w.decodeUnknown(w.Struct({
+		runId: w.Literal(t.runId),
+		flowRef: w.NonEmptyString,
+		requestId: w.NonEmptyString,
+		input: w.Record({
+			key: w.String,
+			value: w.Unknown
+		}),
+		source: w.Literal("manual", "cron")
+	}))({
+		...a,
+		runId: a.id
+	}).pipe(C.mapError(() => n("invalid-run", "stored workflow payload is incomplete; review was not sent"))), l = yield* y.executionId(c), u = {
+		...r.response,
 		respondedAt: (/* @__PURE__ */ new Date()).toISOString()
-	};
-	yield* x.promise(() => e.store.update(N.tableName, t.runId, { humanResponse: i }));
-	let a = e.workflows, o = n.requestId, s = zt(n);
-	return a && o && (yield* x.promise(() => a.signal({
-		workflowName: _,
-		executionId: `flow-run:${o}`
-	}, v(s), i)).pipe(x.catchAllCause(() => x.void))), {
+	}, d = yield* C.tryPromise({
+		try: () => i.signal({
+			workflowName: v,
+			executionId: l
+		}, b(s), u),
+		catch: () => n("delivery-unknown", "review delivery was not confirmed; observe the run before retrying")
+	}), f = yield* w.decodeUnknown(w.Struct({ eventId: w.NonEmptyString }))(d).pipe(C.mapError(() => n("delivery-unknown", "workflow runtime returned no valid review delivery receipt")));
+	return yield* w.decodeUnknown(fe)({
 		runId: t.runId,
-		stepIndex: s
-	};
-}), Vt = (e, t) => x.promise(() => e.store.query(E(M).where(C("id", t.id)).descriptor)).pipe(x.map((e) => e[0])), Ht = (e) => x.promise(() => e.store.query(E(M).descriptor)), Ut = (e, t) => x.promise(() => e.store.insert(M.tableName, {
-	id: t.id ?? `flow-${Q()}`,
+		stepIndex: s,
+		executionId: l,
+		eventId: f.eventId,
+		status: "accepted"
+	}).pipe(C.mapError(() => n("delivery-unknown", "workflow runtime returned no valid review delivery receipt")));
+}), hn = (e, t) => C.promise(() => e.store.query(O(N).where(T("id", t.id)).descriptor)).pipe(C.map((e) => e[0])), gn = (e) => C.promise(() => e.store.query(O(N).descriptor)), _n = (e, t) => C.promise(() => e.store.insert(N.tableName, {
+	id: t.id ?? `flow-${on()}`,
 	...t
-})), Wt = (e, t) => x.promise(() => e.store.update(M.tableName, t.id, t.patch)), Gt = (e, t) => x.promise(() => e.store.delete(M.tableName, t.id)), Kt = "aiFlows", qt = (e = {}) => {
-	let t = Te({
-		base: Kt,
+})), vn = (e, t) => C.promise(() => e.store.update(N.tableName, t.id, t.patch)), yn = (e, t) => C.promise(() => e.store.delete(N.tableName, t.id)), bn = "aiFlows", xn = (e = {}) => {
+	let t = je({
+		base: bn,
 		alias: e.alias
 	});
-	Ye(e.humanReviewTimeoutMs === void 0 ? {} : { humanReviewTimeoutMs: e.humanReviewTimeoutMs }), ke({
+	it(e.humanReviewTimeoutMs === void 0 ? {} : { humanReviewTimeoutMs: e.humanReviewTimeoutMs }), Fe({
 		source: "plugin",
-		table: N.tableName,
+		table: P.tableName,
 		timeColumn: "createdAt",
-		ttlMs: e.runsTtlMs ?? Ze(process.env.VOLTRO_AI_FLOW_RUNS_TTL_HOURS, 2160),
-		envVar: Ke,
+		ttlMs: e.runsTtlMs ?? ot(process.env.VOLTRO_AI_FLOW_RUNS_TTL_HOURS, 2160),
+		envVar: tt,
 		label: "ai flow runs",
-		where: Oe("status", [
+		where: Pe("status", [
 			"succeeded",
 			"failed",
 			"cancelled"
@@ -1163,23 +1402,42 @@ var M = Ae("_voltro_ai_flows", {
 		kind: "json",
 		status: e,
 		data: { error: t }
-	}), o = (e, t) => x.promise(async () => {
-		let n = r.current;
-		if (!n) return a(503, "store not bound yet");
-		let o = await n.query({
+	}), o = (e, t, n) => C.promise(async () => {
+		let o = r.current;
+		if (!o) return a(503, "store not bound yet");
+		let s = await o.query({
 			table: e,
-			predicate: void 0,
-			order: [],
-			take: t,
+			predicate: n === void 0 ? void 0 : T("id", n),
+			order: [{
+				column: "createdAt",
+				direction: "desc"
+			}, {
+				column: "id",
+				direction: "desc"
+			}],
+			take: n === void 0 ? t : 1,
 			skip: void 0,
-			projection: void 0
+			projection: e === "_voltro_ai_flow_runs" && n === void 0 ? [
+				"id",
+				"flowRef",
+				"flowName",
+				"mode",
+				"status",
+				"source",
+				"currentStep",
+				"totalSteps",
+				"costMicroUsd",
+				"startedAt",
+				"completedAt",
+				"createdAt"
+			] : void 0
 		});
 		return i({
-			count: o.length,
-			rows: o,
+			count: s.length,
+			rows: s,
 			take: t
 		});
-	}).pipe(x.catchAllCause(() => x.succeed(a(500, "query failed")))), s = (e, t) => {
+	}).pipe(C.catchAllCause(() => C.succeed(a(500, "query failed")))), s = (e, t) => {
 		let r = /[?&]take=(\d+)/.exec(e)?.[1], i = r === void 0 ? t : Number(r);
 		return Math.min(n, Math.max(1, Number.isFinite(i) ? i : t));
 	}, c = [{
@@ -1190,15 +1448,15 @@ var M = Ae("_voltro_ai_flows", {
 	}, {
 		method: "GET",
 		path: "/runs",
-		description: "List recent flow runs (`?take=` up to the configured max).",
-		handler: (e) => o("_voltro_ai_flow_runs", s(e.url, Math.min(100, n)))
+		description: "List recent run summaries (`?take=` bounded); `?runId=` reads one run with payloads and steps.",
+		handler: (e) => o("_voltro_ai_flow_runs", s(e.url, Math.min(100, n)), new URL(e.url, "http://inspect.local").searchParams.get("runId") ?? void 0)
 	}];
-	return we({
+	return Ae({
 		name: t,
-		baseName: Kt,
+		baseName: bn,
 		description: "AI Flows — durable multi-step AI pipelines (deterministic + agentic) with human-in-the-loop, chaining, and cadence. Code-first (defineFlow) or data-driven.",
 		permissions: ["store:write", "inspect:read"],
-		...e.tables === !1 ? {} : { extendSchema: { tables: He } },
+		...e.tables === !1 ? {} : { extendSchema: { tables: Ze } },
 		inspectEndpoints: c,
 		bindDataStore: (e) => {
 			r.current = e;
@@ -1206,4 +1464,4 @@ var M = Ae("_voltro_ai_flows", {
 	});
 };
 //#endregion
-export { le as BriefField, ie as ChainPending, a as ConditionOp, Ke as FLOW_RUNS_TTL_ENV, Ge as FLOW_RUNS_TTL_HOURS_DEFAULT, _ as FLOW_RUN_WORKFLOW, se as FlowCadence, ee as FlowChain, l as FlowMode, ae as FlowStatus, ce as FlowStep, he as HUMAN_RESPONSE_SIGNAL_PREFIX, We as HUMAN_REVIEW_TIMEOUT_ENV, Ue as HUMAN_REVIEW_TIMEOUT_HOURS_DEFAULT, d as HumanResponse, ne as Json, qe as MAX_CHAIN_DEPTH_DEFAULT, Je as MAX_CHAIN_DEPTH_ENV, ue as MAX_STEPS_DEFAULT, f as MAX_STEPS_MAX, p as MAX_STEPS_MIN, oe as MediaInputSlot, re as MediaInputs, h as Modality, m as ReviewMode, c as ReviewOption, de as RunReview, me as RunSource, u as RunStatus, pe as RunStep, o as RunStepStatus, te as StepCondition, t as StepType, fe as Visibility, N as aiFlowRunsTable, qt as aiFlowsPlugin, M as aiFlowsTable, He as aiFlowsTables, wt as buildFlowRunExecute, Se as cadenceMatches, Rt as cancelFlow, s as clampMaxSteps, st as clearRegistry, I as collectRefs, Ut as createFlow, kt as cronRequestId, Ot as defineFlow, Gt as deleteFlow, e as describeCondition, g as evaluateCondition, R as flowSegments, Tt as flowStep, F as getAiFlowsDefaults, Vt as getFlow, at as getRegisteredFlow, v as humanResponseSignalName, L as interpolate, i as isTruthy, ft as jsonSchemaToEffectSchema, It as launchFlow, Ht as listFlows, ot as listRegisteredFlows, Pt as makeMediaGenerator, xe as nextRuns, rt as nonContiguousGroups, r as normalizeFlow, it as registerFlow, Xe as resetAiFlowsDefaults, $e as resolveHumanReviewTimeoutMs, Y as resolveIr, et as resolveMaxChainDepth, Bt as respondToFlow, Lt as retryFlow, jt as runCadenceTick, n as sanitizeOutputKey, Ye as setAiFlowsDefaults, nt as unresolvedRefs, Wt as updateFlow, Dt as validateFlow, zt as waitingStepIndex };
+export { pe as BriefField, ce as ChainPending, c as ConditionOp, tt as FLOW_RUNS_TTL_ENV, et as FLOW_RUNS_TTL_HOURS_DEFAULT, v as FLOW_RUN_WORKFLOW, de as FlowCadence, ie as FlowChain, m as FlowMode, le as FlowReviewInput, fe as FlowReviewReceipt, h as FlowStartReceipt, oe as FlowStatus, me as FlowStep, ye as HUMAN_RESPONSE_SIGNAL_PREFIX, $e as HUMAN_REVIEW_TIMEOUT_ENV, Qe as HUMAN_REVIEW_TIMEOUT_HOURS_DEFAULT, g as HumanResponse, te as Json, nt as MAX_CHAIN_DEPTH_DEFAULT, rt as MAX_CHAIN_DEPTH_ENV, ue as MAX_STEPS_DEFAULT, se as MAX_STEPS_MAX, re as MAX_STEPS_MIN, ne as MediaArtifact, p as MediaArtifacts, he as MediaInputSlot, ve as MediaInputs, ee as Modality, _e as ReviewMode, d as ReviewOption, t as RunReview, ge as RunSource, f as RunStatus, r as RunStep, n as RunStepStatus, u as StepCondition, l as StepType, ae as Visibility, P as aiFlowRunsTable, xn as aiFlowsPlugin, N as aiFlowsTable, Ze as aiFlowsTables, Rt as buildFlowRunExecute, De as cadenceMatches, fn as cancelFlow, e as clampMaxSteps, gt as clearRegistry, L as collectRefs, _n as createFlow, Ut as cronRequestId, Ht as defineFlow, yn as deleteFlow, i as describeCondition, a as evaluateCondition, z as flowSegments, zt as flowStep, I as getAiFlowsDefaults, hn as getFlow, mt as getRegisteredFlow, b as humanResponseSignalName, R as interpolate, o as isTruthy, un as launchFlow, gn as listFlows, ht as listRegisteredFlows, an as makeMediaGenerator, Ee as nextRuns, ft as nonContiguousGroups, _ as normalizeFlow, pt as registerFlow, at as resetAiFlowsDefaults, ct as resolveHumanReviewTimeoutMs, Y as resolveIr, lt as resolveMaxChainDepth, mn as respondToFlow, dn as retryFlow, Gt as runCadenceTick, s as sanitizeOutputKey, it as setAiFlowsDefaults, dt as unresolvedRefs, vn as updateFlow, Vt as validateFlow, pn as waitingStepIndex };