@voltro/protocol 0.41.0 → 0.43.0

package/dist/index.js

@@ -138,12 +138,12 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	decidedAt: d.NullOr(d.String),
 	note: d.NullOr(d.String),
 	relation: d.Literal("to-decide", "requested")
-}), N = "channel:", Ze = Symbol.for("@voltro/protocol/reactivityChannels"), Qe = globalThis, P = Qe[Ze] ?? (Qe[Ze] = /* @__PURE__ */ new Map()), $e = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, et = (e) => {
-	if (!$e.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
+}), N = "channel:", P = Symbol.for("@voltro/protocol/reactivityChannels"), Ze = globalThis, F = Ze[P] ?? (Ze[P] = /* @__PURE__ */ new Map()), Qe = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, $e = (e) => {
+	if (!Qe.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
   \`billing.usage\`. A \`:\` is refused because it is the namespace separator in
   the routing key (\`${N}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
   routes as two.`);
-	let t = P.get(e);
+	let t = F.get(e);
 	if (t !== void 0) return t;
 	let n = `${N}${e}`, r = Object.freeze({
 		kind: "reactivity-channel",
@@ -151,15 +151,15 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 		key: n,
 		toString: () => n
 	});
-	return P.set(e, r), r;
-}, tt = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", nt = (e) => e.startsWith(N), rt = () => new Set([...P.values()].map((e) => e.key)), F = (e) => tt(e) ? e.key : e, it = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(F) : [F(e)], at = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(F) : F(e), ot = (e) => {
-	let t = rt(), n = [];
-	for (let r of e) for (let e of it(r.source)) !nt(e) || t.has(e) || n.push({
+	return F.set(e, r), r;
+}, et = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", tt = (e) => e.startsWith(N), nt = () => new Set([...F.values()].map((e) => e.key)), I = (e) => et(e) ? e.key : e, rt = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(I) : [I(e)], it = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(I) : I(e), at = (e) => {
+	let t = nt(), n = [];
+	for (let r of e) for (let e of rt(r.source)) !tt(e) || t.has(e) || n.push({
 		procedure: r.name,
 		key: e
 	});
 	return n;
-}, st = (e, t) => {
+}, ot = (e, t) => {
 	let n = e?.injectExternalChange;
 	return n !== void 0 && (n.call(e, {
 		table: t.key,
@@ -168,8 +168,8 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 		old: {},
 		origin: "inline"
 	}), !0);
-}, ct = (e) => e.internal !== !0, I = (e) => {
-	if (lt(e), Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
+}, st = (e) => e.internal !== !0, L = (e) => {
+	if (ct(e), Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
   unguarded procedure, or list the scopes required to call it.`);
 	let t = typeof e.source == "string" ? [e.source] : Array.isArray(e.source) ? e.source : void 0;
 	if (t !== void 0 && (t.length === 0 || t.some((e) => String(e).trim() === ""))) throw Error(`${e.name}: \`source\` is empty, so this query declares reactivity and\n  subscribes to nothing — it serves one snapshot and never updates again,
@@ -186,7 +186,7 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	let n = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
 	if (n.length === 0) return e;
 	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${n.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${n.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${n.join(" / ")} annotation if it is not.`);
-}, lt = (e) => {
+}, ct = (e) => {
 	let t = e.requiresApproval;
 	if (t !== void 0) {
 		if (!Array.isArray(t.approvers) || t.approvers.length === 0) throw Error(`${e.name}: \`requiresApproval.approvers\` is empty, so NOBODY can approve this\n  procedure and every call would park forever. Name the scope(s) an approver must hold
@@ -196,48 +196,48 @@ var We = d.Union(d.String, d.Number), p = d.Record({
   human from every other, and the second-pair-of-eyes control would enforce nothing.
   Give the procedure a \`guards:\` decision, or drop \`requiresApproval\`.`);
 	}
-}, ut = (e) => e.action !== void 0 && e.resourceType !== void 0, dt = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, L = (e, t, n) => {
+}, lt = (e) => e.action !== void 0 && e.resourceType !== void 0, ut = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, R = (e, t, n) => {
 	if (n === void 0) return t;
 	if (n.trim() === "") throw Error(`${e}: \`openAccess\` needs a REASON, not an empty string. It is the sentence a\n  reviewer reads to decide whether this procedure should really be callable
   without an authorization check — e.g. \`openAccess: 'public pricing, no caller data'\`.`);
 	if (t !== void 0 && t.length > 0) throw Error(`${e}: \`openAccess\` and \`guards\` are two different access decisions, so\n  declaring both says the procedure is protected AND open. Keep the guards if a
   caller must hold a scope; drop them if anyone may call it.`);
 	return [u(n.trim())];
-}, R = (e) => I({
+}, z = (e) => L({
 	kind: "query",
 	name: e.name,
 	input: e.input,
 	output: e.output,
 	error: e.error ?? d.Never,
-	source: at(e.source),
+	source: it(e.source),
 	cache: e.cache,
-	guards: L(e.name, e.guards, e.openAccess),
+	guards: R(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	publicApi: e.publicApi,
 	exposeAsTool: e.exposeAsTool,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), z = (e) => I({
+}), B = (e) => L({
 	kind: "mutation",
 	name: e.name,
 	input: e.input,
 	output: e.output,
 	error: e.error ?? d.Never,
 	target: e.target,
-	guards: L(e.name, e.guards, e.openAccess),
+	guards: R(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	publicApi: e.publicApi,
 	exposeAsTool: e.exposeAsTool,
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), B = (e) => I({
+}), V = (e) => L({
 	kind: "action",
 	name: e.name,
 	input: e.input,
 	output: e.output,
 	error: e.error ?? d.Never,
-	guards: L(e.name, e.guards, e.openAccess),
+	guards: R(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	source: e.source,
 	target: e.target,
@@ -246,7 +246,7 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), ft = (e) => I({
+}), dt = (e) => L({
 	kind: "stream",
 	name: e.name,
 	input: e.input,
@@ -254,42 +254,42 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	error: e.error ?? d.Never,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin,
-	guards: L(e.name, e.guards, e.openAccess),
+	guards: R(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess
-}), V = (e, t) => t && t.length > 0 ? d.Union(e, ...t) : e, H = (e) => e !== void 0 && e.some((e) => !l(e)), pt = (e, t) => H(t) ? d.Union(e, c, s) : e, mt = (e) => d.Union(e, x), ht = (e, t) => t === void 0 ? e : d.Union(e, A), U = (e, t) => {
+}), H = (e, t) => t && t.length > 0 ? d.Union(e, ...t) : e, U = (e) => e !== void 0 && e.some((e) => !l(e)), ft = (e, t) => U(t) ? d.Union(e, c, s) : e, pt = (e) => d.Union(e, x), mt = (e, t) => t === void 0 ? e : d.Union(e, A), W = (e, t) => {
 	if (t === "stream") return e.error;
-	let n = pt(e.error, e.guards);
-	return t === "query" ? n : ht(t === "mutation" ? mt(n) : n, e.requiresApproval);
-}, gt = (e, t) => f.make(e.name, {
-	payload: b(e.input, e.name, H(e.guards)),
+	let n = ft(e.error, e.guards);
+	return t === "query" ? n : mt(t === "mutation" ? pt(n) : n, e.requiresApproval);
+}, ht = (e, t) => f.make(e.name, {
+	payload: b(e.input, e.name, U(e.guards)),
 	success: v(e.output),
-	error: V(U(e, "query"), t),
+	error: H(W(e, "query"), t),
 	stream: !0
+}), gt = (e, t) => f.make(e.name, {
+	payload: b(e.input, e.name, U(e.guards)),
+	success: e.output,
+	error: H(W(e, "mutation"), t)
 }), _t = (e, t) => f.make(e.name, {
-	payload: b(e.input, e.name, H(e.guards)),
+	payload: b(e.input, e.name, U(e.guards)),
 	success: e.output,
-	error: V(U(e, "mutation"), t)
+	error: H(W(e, "action"), t)
 }), vt = (e, t) => f.make(e.name, {
-	payload: b(e.input, e.name, H(e.guards)),
-	success: e.output,
-	error: V(U(e, "action"), t)
-}), yt = (e, t) => f.make(e.name, {
-	payload: b(e.input, e.name, H(e.guards)),
+	payload: b(e.input, e.name, U(e.guards)),
 	success: e.element,
-	error: V(e.error, t),
+	error: H(e.error, t),
 	stream: !0
-}), bt = (e) => {
+}), yt = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
 	return typeof t == "string" ? t : void 0;
-}, xt = (e) => {
+}, bt = (e) => {
 	switch (e.kind) {
-		case "query": return gt(e);
-		case "mutation": return _t(e);
-		case "action": return vt(e);
-		case "stream": return yt(e);
+		case "query": return ht(e);
+		case "mutation": return gt(e);
+		case "action": return _t(e);
+		case "stream": return vt(e);
 	}
-}, St = (e) => {
+}, xt = (e) => {
 	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
 	if (e.kind === "query") return {
 		kind: "query",
@@ -330,7 +330,7 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 			..."shapeItem" in e && e.shapeItem !== void 0 ? { shapeItem: e.shapeItem } : {}
 		}))
 	};
-}, Ct = 7500, wt = (e) => typeof e == "object" && !!e && e.kind === "event", Tt = (e) => {
+}, St = 7500, Ct = (e) => typeof e == "object" && !!e && e.kind === "event", wt = (e) => {
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -365,69 +365,69 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 		webhook: e.webhook,
 		delivery: e.delivery
 	};
-}, Et = (e) => d.Struct({
+}, Tt = (e) => d.Struct({
 	_tag: d.Literal("event"),
 	origin: d.String,
 	n: d.Number,
 	emittedAt: d.Number,
 	payload: e
-}), Dt = d.Struct({
+}), Et = d.Struct({
 	_tag: d.Literal("gap"),
 	missed: d.Number,
 	reason: d.Literal("buffer", "resume")
-}), Ot = d.Struct({ _tag: d.Literal("attached") }), kt = (e) => d.Union(Ot, Et(e), Dt), At = d.Struct({
+}), Dt = d.Struct({ _tag: d.Literal("attached") }), Ot = (e) => d.Union(Dt, Tt(e), Et), kt = d.Struct({
 	origin: d.String,
 	n: d.Number
-}), jt = (e) => d.Struct({
+}), At = (e) => d.Struct({
 	key: e,
-	resume: d.optional(d.Array(At))
-}), Mt = (e, t) => {
+	resume: d.optional(d.Array(kt))
+}), jt = (e, t) => {
 	let n = e.guards !== void 0 && e.guards.some((e) => !l(e)) ? d.Union(c, s) : d.Never, r = t && t.length > 0 ? d.Union(n, ...t) : n;
 	return f.make(e.name, {
-		payload: b(jt(e.key), e.name, H(e.guards)),
-		success: kt(e.payload),
+		payload: b(At(e.key), e.name, U(e.guards)),
+		success: Ot(e.payload),
 		error: r,
 		stream: !0
 	});
-}, Nt = class extends d.TaggedError()("EventPayloadInvalid", {
+}, Mt = class extends d.TaggedError()("EventPayloadInvalid", {
 	event: d.String,
 	message: d.String
-}) {}, Pt = class extends d.TaggedError()("EventKeyInvalid", {
+}) {}, Nt = class extends d.TaggedError()("EventKeyInvalid", {
 	event: d.String,
 	message: d.String
-}) {}, Ft = class extends d.TaggedError()("EventPayloadTooLarge", {
+}) {}, Pt = class extends d.TaggedError()("EventPayloadTooLarge", {
 	event: d.String,
 	bytes: d.Number,
 	limit: d.Number
-}) {}, It = (e) => {
+}) {}, Ft = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t));
 	return JSON.stringify(t);
-}, Lt = "\0", Rt = (e, t, n) => [
+}, It = "\0", Lt = (e, t, n) => [
 	e ?? "~",
 	t,
-	It(n)
-].join("\0"), zt = (e) => {
+	Ft(n)
+].join("\0"), Rt = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, Bt = (e) => e.split("\0").join(" · "), Vt = (e) => e, Ht = (e) => e, Ut = (e) => {
+}, zt = (e) => e.split("\0").join(" · "), Bt = (e) => e, Vt = (e) => e, Ht = (e) => {
 	let t = e.alias?.trim(), n = e.instance?.trim(), r = t !== void 0 && t !== "" ? t : e.base;
 	return n !== void 0 && n !== "" ? `${r}#${n}` : r;
-}, Wt = (e) => {
+}, Ut = (e) => {
 	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
-}, Gt = (e, t) => {
+}, Wt = (e, t) => {
 	let n = He.GenericTag(e);
 	return {
 		Tag: n,
 		Live: Ue.succeed(n, t)
 	};
-}, Kt = (e, t, n) => {
+}, Gt = (e, t, n) => {
 	if (!t) return { ok: !0 };
-	let r = W(n);
+	let r = G(n);
 	if (!r) return {
 		ok: !1,
 		reason: `cannot parse runningVersion "${n}"`
@@ -435,12 +435,12 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	let i = t.trim();
 	if (i === "*" || i === "") return { ok: !0 };
 	let a = i.split(/\s+/).filter((e) => e.length > 0);
-	for (let i of a) if (!qt(i, r)) return {
+	for (let i of a) if (!Kt(i, r)) return {
 		ok: !1,
 		reason: `plugin "${e}" requires framework ${t}, running ${n}`
 	};
 	return { ok: !0 };
-}, W = (e) => {
+}, G = (e) => {
 	let t = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9a-zA-Z.-]+))?$/.exec(e.trim());
 	return t ? {
 		major: Number(t[1]),
@@ -448,44 +448,44 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 		patch: Number(t[3]),
 		pre: t[4] ?? ""
 	} : null;
-}, G = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, qt = (e, t) => {
+}, K = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, Kt = (e, t) => {
 	if (e === "*") return !0;
 	if (e.startsWith("^")) {
-		let n = W(e.slice(1));
-		return !n || t.major !== n.major ? !1 : G(t, n) >= 0;
+		let n = G(e.slice(1));
+		return !n || t.major !== n.major ? !1 : K(t, n) >= 0;
 	}
 	if (e.startsWith("~")) {
-		let n = W(e.slice(1));
-		return !n || t.major !== n.major || t.minor !== n.minor ? !1 : G(t, n) >= 0;
+		let n = G(e.slice(1));
+		return !n || t.major !== n.major || t.minor !== n.minor ? !1 : K(t, n) >= 0;
 	}
 	let n = /^(>=|<=|>|<)(.+)$/.exec(e);
 	if (n) {
-		let e = n[1], r = W(n[2]);
+		let e = n[1], r = G(n[2]);
 		if (!r) return !1;
-		let i = G(t, r);
+		let i = K(t, r);
 		if (e === ">=") return i >= 0;
 		if (e === "<=") return i <= 0;
 		if (e === ">") return i > 0;
 		if (e === "<") return i < 0;
 	}
-	let r = W(e);
-	return r ? G(t, r) === 0 : !1;
-}, K = d.Literal("running", "succeeded", "failed", "cancelled", "suspended"), Jt = d.Literal("cancel", "terminate", "abandon"), Yt = d.Struct({
+	let r = G(e);
+	return r ? K(t, r) === 0 : !1;
+}, q = d.Literal("running", "succeeded", "failed", "cancelled", "suspended"), qt = d.Literal("cancel", "terminate", "abandon"), Jt = d.Struct({
 	mode: d.String,
 	dueAt: d.NullOr(d.Number),
 	retryAfterMs: d.NullOr(d.Number),
 	intentId: d.NullOr(d.String)
-}), Xt = d.Struct({
+}), Yt = d.Struct({
 	id: d.String,
 	workflowName: d.String,
 	executionId: d.NullOr(d.String),
 	status: d.Literal("running", "queued", "dropped", "skipped"),
-	deferral: d.optional(Yt)
-}), q = d.Struct({
+	deferral: d.optional(Jt)
+}), J = d.Struct({
 	id: d.String,
 	tag: d.String,
 	executionId: d.String,
-	status: K,
+	status: q,
 	payload: d.Unknown,
 	workflowVersion: d.NullOr(d.String),
 	workflowPatches: d.NullOr(d.Unknown),
@@ -500,12 +500,12 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	durationMs: d.NullOr(d.Number),
 	traceId: d.NullOr(d.String),
 	parentExecutionId: d.NullOr(d.String),
-	parentClosePolicy: d.NullOr(Jt)
-}), Zt = d.Struct({
+	parentClosePolicy: d.NullOr(qt)
+}), Xt = d.Struct({
 	tag: d.optional(d.String),
-	status: d.optional(K),
+	status: d.optional(q),
 	limit: d.optional(d.Number)
-}), Qt = d.Struct({
+}), Zt = d.Struct({
 	id: d.String,
 	runId: d.String,
 	stepName: d.String,
@@ -520,7 +520,7 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	startedAt: d.Date,
 	completedAt: d.NullOr(d.Date),
 	durationMs: d.NullOr(d.Number)
-}), $t = d.Struct({
+}), Qt = d.Struct({
 	id: d.String,
 	runId: d.String,
 	eventType: d.String,
@@ -528,7 +528,7 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	occurredAt: d.Date,
 	stepName: d.NullOr(d.String),
 	attempt: d.NullOr(d.Number)
-}), en = d.Struct({
+}), $t = d.Struct({
 	id: d.String,
 	name: d.String,
 	payload: d.Unknown,
@@ -536,7 +536,7 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	subject: d.NullOr(d.Unknown),
 	traceId: d.NullOr(d.String),
 	occurredAt: d.Date
-}), tn = d.Struct({
+}), en = d.Struct({
 	id: d.String,
 	eventId: d.String,
 	eventName: d.String,
@@ -549,108 +549,146 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	errorMessage: d.NullOr(d.String),
 	createdAt: d.Date,
 	completedAt: d.NullOr(d.Date)
-}), nn = d.Struct({ id: d.String }), J = d.Struct({ runId: d.String }), rn = d.Struct({
+}), tn = d.Struct({ id: d.String }), Y = d.Struct({ runId: d.String }), nn = d.Struct({
 	name: d.optional(d.String),
 	limit: d.optional(d.Number)
-}), an = d.Struct({ eventId: d.String }), Y = d.Struct({
+}), rn = d.Struct({ eventId: d.String }), X = d.Struct({
 	workflowName: d.String,
 	executionId: d.String
-}), on = d.Struct({
+}), an = d.Struct({
 	id: d.String,
 	signalName: d.String,
 	payload: d.optional(d.Unknown)
-}), sn = d.Struct({
+}), on = d.Struct({
 	id: d.String,
 	updateName: d.String,
 	payload: d.optional(d.Unknown),
 	timeoutMs: d.optional(d.Number)
-}), cn = d.Struct({
+}), sn = d.Struct({
 	eventId: d.String,
 	updateId: d.String,
 	completedEventId: d.String,
 	result: d.Unknown
-}), ln = R({
+}), cn = z({
 	name: "__voltro.workflow.run",
 	source: "_voltro_workflow_runs",
-	input: nn,
-	output: d.Array(q)
-}), un = R({
+	input: tn,
+	output: d.Array(J)
+}), ln = z({
 	name: "__voltro.workflow.runs",
 	source: "_voltro_workflow_runs",
-	input: Zt,
-	output: d.Array(q)
-}), dn = R({
+	input: Xt,
+	output: d.Array(J)
+}), un = z({
 	name: "__voltro.workflow.run.steps",
 	source: "_voltro_workflow_run_steps",
-	input: J,
-	output: d.Array(Qt)
-}), fn = R({
+	input: Y,
+	output: d.Array(Zt)
+}), dn = z({
 	name: "__voltro.workflow.run.events",
 	source: "_voltro_workflow_run_events",
-	input: J,
-	output: d.Array($t)
-}), pn = R({
+	input: Y,
+	output: d.Array(Qt)
+}), fn = z({
 	name: "__voltro.workflow.domainEvents",
 	source: "_voltro_workflow_events",
-	input: rn,
-	output: d.Array(en)
-}), mn = R({
+	input: nn,
+	output: d.Array($t)
+}), pn = z({
 	name: "__voltro.workflow.event.deliveries",
 	source: "_voltro_workflow_event_deliveries",
-	input: an,
-	output: d.Array(tn)
-}), hn = B({
+	input: rn,
+	output: d.Array(en)
+}), mn = V({
 	name: "__voltro.workflow.cancel",
-	input: Y,
+	input: X,
 	output: d.Struct({ ok: d.Boolean })
-}), gn = B({
+}), hn = V({
 	name: "__voltro.workflow.resume",
-	input: Y,
+	input: X,
 	output: d.Struct({ ok: d.Boolean })
-}), _n = B({
+}), gn = V({
 	name: "__voltro.workflow.signal",
-	input: on,
+	input: an,
 	output: d.Struct({ eventId: d.String })
-}), vn = B({
+}), _n = V({
 	name: "__voltro.workflow.update",
-	input: sn,
-	output: cn
-}), yn = "__voltro.undo.log", bn = "__voltro.undo.apply", xn = "__voltro.undo.redo", Sn = d.Struct({
+	input: on,
+	output: sn
+}), vn = "__voltro.undo.log", yn = "__voltro.undo.apply", bn = "__voltro.undo.redo", xn = d.Struct({
 	id: d.String,
 	tag: d.String,
 	label: d.NullOr(d.String),
 	undone: d.Boolean,
 	crossesAction: d.Boolean,
 	createdAt: d.String
-}), Cn = class extends d.TaggedError()("UndoNotFound", { invocationId: d.String }) {}, wn = class extends d.TaggedError()("UndoForbidden", { invocationId: d.String }) {}, X = class extends d.TaggedError()("UndoConflict", {
+}), Sn = class extends d.TaggedError()("UndoNotFound", { invocationId: d.String }) {}, Cn = class extends d.TaggedError()("UndoForbidden", { invocationId: d.String }) {}, wn = class extends d.TaggedError()("UndoConflict", {
 	invocationId: d.String,
 	reason: d.Literal("conflict", "action")
-}) {}, Tn = d.Union(Cn, wn, X), En = R({
-	name: yn,
+}) {}, Tn = d.Union(Sn, Cn, wn), En = z({
+	name: vn,
 	source: "_voltro_undo_log",
 	input: d.Struct({ limit: d.optional(d.Number) }),
-	output: d.Array(Sn),
+	output: d.Array(xn),
 	openAccess: "subject-scoped by construction: lists only the calling subject's own undoable actions"
-}), Dn = z({
-	name: bn,
+}), Dn = B({
+	name: yn,
 	input: d.Struct({ invocationId: d.String }),
 	output: d.Struct({ ok: d.Boolean }),
 	error: Tn,
 	openAccess: "subject-scoped by construction: undo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), On = z({
-	name: xn,
+}), On = B({
+	name: bn,
 	input: d.Struct({ invocationId: d.String }),
 	output: d.Struct({ ok: d.Boolean }),
 	error: Tn,
 	openAccess: "subject-scoped by construction: redo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), kn = "__voltro.approvals.pending", An = "__voltro.approvals.decide", jn = R({
-	name: kn,
+}), kn = class extends d.TaggedError()("TenantScopeViolation", {
+	table: d.String,
+	reason: d.String
+}) {}, An = class extends d.TaggedError()("StoreOperationFailed", {
+	operation: d.String,
+	table: d.String,
+	cause: d.String
+}) {}, jn = class extends d.TaggedError()("TableValidationFailed", {
+	table: d.String,
+	summary: d.String,
+	issues: d.Array(d.Struct({
+		path: d.String,
+		message: d.String
+	}))
+}) {}, Mn = class extends d.TaggedError()("TenantRowNotFound", {
+	table: d.String,
+	id: d.String,
+	reason: d.String
+}) {}, Nn = class extends d.TaggedError()("ServerOnlyColumnWrite", {
+	table: d.String,
+	columns: d.Array(d.String)
+}) {}, Pn = class extends d.TaggedError()("ConstraintViolation", {
+	kind: d.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
+	table: d.String,
+	operation: d.String,
+	constraint: d.optional(d.String),
+	column: d.optional(d.String)
+}) {
+	get message() {
+		let e = this.constraint ?? this.column, t = e === void 0 ? `on ${this.table}` : `${e} on ${this.table}`;
+		switch (this.kind) {
+			case "foreignKey": return `foreign key ${t}: the referenced row does not exist`;
+			case "foreignKeyInUse": return `foreign key ${t}: the row is still referenced by other rows`;
+			case "unique": return `unique constraint ${t}: a row with this value already exists`;
+			case "notNull": return `not-null constraint ${t}: the column requires a value`;
+			case "check": return `check constraint ${t}: the row does not satisfy it`;
+		}
+	}
+}, Fn = "__voltro.approvals.pending", Z = "__voltro.approvals.decide", In = z({
+	name: Fn,
 	source: "_voltro_approvals",
 	input: d.Struct({ limit: d.optional(d.Number) }),
 	output: d.Array(M),
 	openAccess: "the answer is scoped to the caller — a row appears only if they requested it or hold its recorded approver scopes, so an anonymous caller sees nothing"
-}), Mn = z({
-	name: An,
+}), Ln = B({
+	name: Z,
 	input: d.Struct({
 		approvalId: d.String,
 		decision: d.Literal("approve", "reject"),
@@ -662,33 +700,33 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	}),
 	error: j,
 	openAccess: "the approver authority is the PENDING ROW's own recorded scopes (plus an unconditional self-approval refusal), checked in-handler — a descriptor-level scope would have to be the union of every approval-requiring procedure in the app"
-}), Nn = "__voltro.connections.list", Pn = "__voltro.connections.start", Fn = "__voltro.connections.submitToken", In = "__voltro.connections.disconnect", Z = d.Literal("oauth2", "pat"), Ln = d.Literal("disconnected", "connected", "expired", "revoked", "error"), Rn = d.Struct({
+}), Rn = "__voltro.connections.list", zn = "__voltro.connections.start", Bn = "__voltro.connections.submitToken", Vn = "__voltro.connections.disconnect", Q = d.Literal("oauth2", "pat"), Hn = d.Literal("disconnected", "connected", "expired", "revoked", "error"), Un = d.Struct({
 	connectionId: d.String,
-	kind: Z,
+	kind: Q,
 	label: d.String,
-	status: Ln,
+	status: Hn,
 	accountId: d.NullOr(d.String),
 	accountLabel: d.NullOr(d.String),
 	scopes: d.Array(d.String),
 	expiresAt: d.NullOr(d.String),
 	lastError: d.NullOr(d.String),
 	connectedAt: d.NullOr(d.String)
-}), zn = class extends d.TaggedError()("ConnectionNotDeclared", { connectionId: d.String }) {}, Bn = class extends d.TaggedError()("ConnectionSubjectRequired", { connectionId: d.String }) {}, Vn = class extends d.TaggedError()("ConnectionKindMismatch", {
+}), Wn = class extends d.TaggedError()("ConnectionNotDeclared", { connectionId: d.String }) {}, Gn = class extends d.TaggedError()("ConnectionSubjectRequired", { connectionId: d.String }) {}, Kn = class extends d.TaggedError()("ConnectionKindMismatch", {
 	connectionId: d.String,
-	expected: Z,
-	actual: Z
-}) {}, Q = class extends d.TaggedError()("ConnectionHandshakeFailed", {
+	expected: Q,
+	actual: Q
+}) {}, qn = class extends d.TaggedError()("ConnectionHandshakeFailed", {
 	connectionId: d.String,
 	reason: d.String,
 	transient: d.Boolean
-}) {}, $ = d.Union(zn, Bn, Vn, Q), Hn = R({
-	name: Nn,
+}) {}, $ = d.Union(Wn, Gn, Kn, qn), Jn = z({
+	name: Rn,
 	source: "_voltro_connections",
 	input: d.Struct({}),
-	output: d.Array(Rn),
+	output: d.Array(Un),
 	openAccess: "self-scoped read: projects the declared connections for the calling subject only (its own connect/disconnect state)"
-}), Un = B({
-	name: Pn,
+}), Yn = V({
+	name: zn,
 	input: d.Struct({
 		connectionId: d.String,
 		redirectTo: d.optional(d.String)
@@ -699,8 +737,8 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	}),
 	error: $,
 	openAccess: "self-service: begins an oauth handshake that stores a credential for the calling subject only; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Wn = z({
-	name: Fn,
+}), Xn = B({
+	name: Bn,
 	input: d.Struct({
 		connectionId: d.String,
 		token: d.String
@@ -708,15 +746,15 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	output: d.Struct({ ok: d.Boolean }),
 	error: $,
 	openAccess: "self-service: stores a pasted token as the calling subject's own credential; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Gn = z({
-	name: In,
+}), Zn = B({
+	name: Vn,
 	input: d.Struct({ connectionId: d.String }),
 	output: d.Struct({ ok: d.Boolean }),
 	error: $,
 	openAccess: "self-service: deletes only the calling subject's own credential row for this connection"
-}), Kn = (e) => {
+}), Qn = (e) => {
 	let t = e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : 0;
 	return Number.isNaN(t) ? 0 : t;
-}, qn = 1;
+}, $n = 1;
 //#endregion
-export { Oe as ADMIN_SCOPE, Ce as APIKEY_ISSUE_ORG_SCOPE, Ee as APIKEY_ISSUE_OTHER_SCOPE, ve as APIKEY_ISSUE_SELF_SCOPE, An as APPROVALS_DECIDE_TAG, kn as APPROVALS_PENDING_TAG, j as ApprovalDecisionErrors, A as ApprovalErrors, E as ApprovalExpired, O as ApprovalForbidden, C as ApprovalNotFound, D as ApprovalNotPending, T as ApprovalRejected, S as ApprovalRequired, w as ApprovalSelfApproval, k as ApprovalUnavailable, Ae as AuthMiddleware, x as BusinessRuleViolation, Nn as CONNECTIONS_LIST_TAG, In as CONNECTION_DISCONNECT_TAG, Pn as CONNECTION_START_TAG, Fn as CONNECTION_SUBMIT_TOKEN_TAG, Q as ConnectionHandshakeFailed, ce as ConnectionInfo, i as ConnectionInfoMiddleware, Z as ConnectionKind, Vn as ConnectionKindMismatch, zn as ConnectionNotDeclared, Rn as ConnectionState, Ln as ConnectionStatus, Bn as ConnectionSubjectRequired, r as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ie as DEFAULT_SCOPE_CACHE_TTL_MS, Lt as EVENT_ROUTE_SEP, Pt as EventKeyInvalid, Nt as EventPayloadInvalid, Ft as EventPayloadTooLarge, be as IMPERSONATION_METADATA_KEY, Ct as MAX_EVENT_ENVELOPE_BYTES, qn as PROTOCOL_VERSION, M as PendingApproval, N as REACTIVITY_CHANNEL_PREFIX, c as ScopeError, e as Subject, ye as SubjectIdentity, re as SubjectService, bn as UNDO_APPLY_TAG, yn as UNDO_LOG_TAG, xn as UNDO_REDO_TAG, s as Unauthenticated, X as UndoConflict, wn as UndoForbidden, Sn as UndoLogEntry, Cn as UndoNotFound, Y as WorkflowControlInputSchema, en as WorkflowDomainEventRowSchema, rn as WorkflowDomainEventsInputSchema, an as WorkflowEventDeliveriesInputSchema, tn as WorkflowEventDeliveryRowSchema, Jt as WorkflowParentClosePolicySchema, $t as WorkflowRunEventRowSchema, Xt as WorkflowRunHandleSchema, nn as WorkflowRunRefSchema, q as WorkflowRunRowSchema, K as WorkflowRunStatusSchema, Qt as WorkflowRunStepRowSchema, J as WorkflowRunTableRefSchema, Zt as WorkflowRunsInputSchema, on as WorkflowSignalInputSchema, Yt as WorkflowStartDeferralSchema, sn as WorkflowUpdateInputSchema, cn as WorkflowUpdateResultSchema, vt as actionToRpc, we as advisoryResourceGuardWarning, ae as anonymousSubject, Ye as applyRowPatch, a as applyScopeDecision, Mn as approvalsDecideDescriptor, jn as approvalsPendingQueryDescriptor, te as assertAuthenticated, ze as beginIdempotent, Kt as checkFrameworkCompat, De as checkGuards, me as checkGuardsEffect, ne as composeAuthStrategies, Wt as composeRpcInterceptors, Gn as connectionDisconnectDescriptor, Un as connectionStartDescriptor, Wn as connectionSubmitTokenDescriptor, Hn as connectionsListQueryDescriptor, rt as declaredReactivityChannelKeys, B as defineAction, Tt as defineEvent, z as defineMutation, Vt as definePlugin, Ht as definePluginRoute, Gt as definePluginService, R as defineQuery, ft as defineStream, qe as diffRows, xe as effectiveScopes, It as encodeEventKey, bt as errorTag, Ot as eventAttached, Et as eventEnvelope, Dt as eventGap, At as eventResumePoint, Rt as eventRoute, kt as eventStreamEvent, jt as eventSubscribeInput, Mt as eventToRpc, Ie as failIdempotent, ke as findAdvisoryResourceGuards, Pe as finishIdempotent, Bt as formatEventRoute, he as getPolicyGuardResolver, ge as getResourceScopeResolver, dt as hasAccessDecision, oe as hasCallbackRoutes, Te as hasEffectiveScope, H as hasEnforcedGuard, Se as hasScope, g as idToPath, Re as idempotencyScope, y as inputLabel, wt as isEventDescriptor, Je as isIdKeyed, l as isOpenAccess, _e as isPolicyCheck, ut as isPolicyGuard, tt as isReactivityChannel, nt as isReactivityChannelKey, Ne as isSystemSubject, ct as isWireReachable, t as makeScopeCache, Be as memoryIdempotencyStore, fe as missingAccessDecision, _t as mutationToRpc, St as normalizeDescriptor, at as normalizeSource, u as openAccessSpec, zt as parseEventRoute, Ge as pathToId, Ut as pluginInstanceName, st as publishReactivity, Ve as publishServerError, gt as queryToRpc, ue as rawImpersonationMark, et as reactivityChannel, Me as requireScope, m as rowPatchOpSchema, h as rowPatchSchema, ee as scopeCacheKey, pe as setEffectiveScopes, je as setPolicyGuardResolver, se as setResourceScopeResolver, it as sourceKeys, yt as streamToRpc, b as strictInput, le as subjectIdentity, n as subjectScopes, Le as subscribeServerErrors, v as subscriptionEvent, de as systemSubject, o as tenantScopedSubject, xt as toRpc, Kn as tsMs, ot as undeclaredChannelKeys, Dn as undoApplyDescriptor, En as undoLogQueryDescriptor, On as undoRedoDescriptor, U as wireErrorUnion, hn as workflowCancelDescriptor, pn as workflowDomainEventsQueryDescriptor, mn as workflowEventDeliveriesQueryDescriptor, gn as workflowResumeDescriptor, fn as workflowRunEventsQueryDescriptor, ln as workflowRunQueryDescriptor, dn as workflowRunStepsQueryDescriptor, un as workflowRunsQueryDescriptor, _n as workflowSignalDescriptor, vn as workflowUpdateDescriptor, Fe as wsMutationIdempotencyScope };
+export { Oe as ADMIN_SCOPE, Ce as APIKEY_ISSUE_ORG_SCOPE, Ee as APIKEY_ISSUE_OTHER_SCOPE, ve as APIKEY_ISSUE_SELF_SCOPE, Z as APPROVALS_DECIDE_TAG, Fn as APPROVALS_PENDING_TAG, j as ApprovalDecisionErrors, A as ApprovalErrors, E as ApprovalExpired, O as ApprovalForbidden, C as ApprovalNotFound, D as ApprovalNotPending, T as ApprovalRejected, S as ApprovalRequired, w as ApprovalSelfApproval, k as ApprovalUnavailable, Ae as AuthMiddleware, x as BusinessRuleViolation, Rn as CONNECTIONS_LIST_TAG, Vn as CONNECTION_DISCONNECT_TAG, zn as CONNECTION_START_TAG, Bn as CONNECTION_SUBMIT_TOKEN_TAG, qn as ConnectionHandshakeFailed, ce as ConnectionInfo, i as ConnectionInfoMiddleware, Q as ConnectionKind, Kn as ConnectionKindMismatch, Wn as ConnectionNotDeclared, Un as ConnectionState, Hn as ConnectionStatus, Gn as ConnectionSubjectRequired, Pn as ConstraintViolation, r as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ie as DEFAULT_SCOPE_CACHE_TTL_MS, It as EVENT_ROUTE_SEP, Nt as EventKeyInvalid, Mt as EventPayloadInvalid, Pt as EventPayloadTooLarge, be as IMPERSONATION_METADATA_KEY, St as MAX_EVENT_ENVELOPE_BYTES, $n as PROTOCOL_VERSION, M as PendingApproval, N as REACTIVITY_CHANNEL_PREFIX, c as ScopeError, Nn as ServerOnlyColumnWrite, An as StoreOperationFailed, e as Subject, ye as SubjectIdentity, re as SubjectService, jn as TableValidationFailed, Mn as TenantRowNotFound, kn as TenantScopeViolation, yn as UNDO_APPLY_TAG, vn as UNDO_LOG_TAG, bn as UNDO_REDO_TAG, s as Unauthenticated, wn as UndoConflict, Cn as UndoForbidden, xn as UndoLogEntry, Sn as UndoNotFound, X as WorkflowControlInputSchema, $t as WorkflowDomainEventRowSchema, nn as WorkflowDomainEventsInputSchema, rn as WorkflowEventDeliveriesInputSchema, en as WorkflowEventDeliveryRowSchema, qt as WorkflowParentClosePolicySchema, Qt as WorkflowRunEventRowSchema, Yt as WorkflowRunHandleSchema, tn as WorkflowRunRefSchema, J as WorkflowRunRowSchema, q as WorkflowRunStatusSchema, Zt as WorkflowRunStepRowSchema, Y as WorkflowRunTableRefSchema, Xt as WorkflowRunsInputSchema, an as WorkflowSignalInputSchema, Jt as WorkflowStartDeferralSchema, on as WorkflowUpdateInputSchema, sn as WorkflowUpdateResultSchema, _t as actionToRpc, we as advisoryResourceGuardWarning, ae as anonymousSubject, Ye as applyRowPatch, a as applyScopeDecision, Ln as approvalsDecideDescriptor, In as approvalsPendingQueryDescriptor, te as assertAuthenticated, ze as beginIdempotent, Gt as checkFrameworkCompat, De as checkGuards, me as checkGuardsEffect, ne as composeAuthStrategies, Ut as composeRpcInterceptors, Zn as connectionDisconnectDescriptor, Yn as connectionStartDescriptor, Xn as connectionSubmitTokenDescriptor, Jn as connectionsListQueryDescriptor, nt as declaredReactivityChannelKeys, V as defineAction, wt as defineEvent, B as defineMutation, Bt as definePlugin, Vt as definePluginRoute, Wt as definePluginService, z as defineQuery, dt as defineStream, qe as diffRows, xe as effectiveScopes, Ft as encodeEventKey, yt as errorTag, Dt as eventAttached, Tt as eventEnvelope, Et as eventGap, kt as eventResumePoint, Lt as eventRoute, Ot as eventStreamEvent, At as eventSubscribeInput, jt as eventToRpc, Ie as failIdempotent, ke as findAdvisoryResourceGuards, Pe as finishIdempotent, zt as formatEventRoute, he as getPolicyGuardResolver, ge as getResourceScopeResolver, ut as hasAccessDecision, oe as hasCallbackRoutes, Te as hasEffectiveScope, U as hasEnforcedGuard, Se as hasScope, g as idToPath, Re as idempotencyScope, y as inputLabel, Ct as isEventDescriptor, Je as isIdKeyed, l as isOpenAccess, _e as isPolicyCheck, lt as isPolicyGuard, et as isReactivityChannel, tt as isReactivityChannelKey, Ne as isSystemSubject, st as isWireReachable, t as makeScopeCache, Be as memoryIdempotencyStore, fe as missingAccessDecision, gt as mutationToRpc, xt as normalizeDescriptor, it as normalizeSource, u as openAccessSpec, Rt as parseEventRoute, Ge as pathToId, Ht as pluginInstanceName, ot as publishReactivity, Ve as publishServerError, ht as queryToRpc, ue as rawImpersonationMark, $e as reactivityChannel, Me as requireScope, m as rowPatchOpSchema, h as rowPatchSchema, ee as scopeCacheKey, pe as setEffectiveScopes, je as setPolicyGuardResolver, se as setResourceScopeResolver, rt as sourceKeys, vt as streamToRpc, b as strictInput, le as subjectIdentity, n as subjectScopes, Le as subscribeServerErrors, v as subscriptionEvent, de as systemSubject, o as tenantScopedSubject, bt as toRpc, Qn as tsMs, at as undeclaredChannelKeys, Dn as undoApplyDescriptor, En as undoLogQueryDescriptor, On as undoRedoDescriptor, W as wireErrorUnion, mn as workflowCancelDescriptor, fn as workflowDomainEventsQueryDescriptor, pn as workflowEventDeliveriesQueryDescriptor, hn as workflowResumeDescriptor, dn as workflowRunEventsQueryDescriptor, cn as workflowRunQueryDescriptor, un as workflowRunStepsQueryDescriptor, ln as workflowRunsQueryDescriptor, gn as workflowSignalDescriptor, _n as workflowUpdateDescriptor, Fe as wsMutationIdempotencyScope };