@voltro/protocol 0.52.0 → 0.53.0

package/dist/index.js

@@ -1,165 +1,263 @@
-import { A as e, B as t, C as n, D as r, E as i, F as a, G as o, H as ee, I as te, L as ne, M as re, N as s, O as ie, P as ae, R as oe, S as se, T as ce, U as le, V as ue, W as de, _ as fe, a as c, b as pe, c as me, d as he, f as ge, g as _e, h as l, i as ve, j as ye, k as be, l as xe, m as Se, n as Ce, o as we, p as Te, r as Ee, s as De, t as Oe, u as ke, v as u, w as Ae, x as je, y as Me, z as Ne } from "./scopes-B0kGvAnI.js";
-import { a as Pe, c as Fe, i as Ie, n as Le, o as Re, r as ze, s as Be, t as Ve } from "./serverErrorBus-BeN9pOpY.js";
-import { Context as He, Layer as Ue, Schema as d } from "effect";
-import { Rpc as f } from "@effect/rpc";
+import { A as e, B as t, C as n, D as r, E as i, F as a, G as o, H as s, I as c, L as ee, M as te, N as l, O as ne, P as re, R as ie, S as ae, T as oe, U as se, V as ce, W as le, _ as ue, a as u, b as de, c as fe, d as pe, f as me, g as he, h as d, i as ge, j as _e, k as ve, l as ye, m as be, n as xe, o as Se, p as Ce, r as we, s as Te, t as Ee, u as De, v as f, w as Oe, x as ke, y as Ae, z as je } from "./scopes-B0kGvAnI.js";
+import { a as Me, c as Ne, i as Pe, n as Fe, o as Ie, r as Le, s as Re, t as ze } from "./serverErrorBus-BeN9pOpY.js";
+import { Context as Be, Layer as Ve, Schema as p } from "effect";
+import { Rpc as m } from "@effect/rpc";
 //#region src/rowPatch.ts
-var We = d.Union(d.String, d.Number), p = d.Record({
-	key: d.String,
-	value: d.Unknown
-}).pipe(d.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), m = d.Union(d.Struct({
-	op: d.Literal("add"),
-	path: d.String,
-	value: p
-}), d.Struct({
-	op: d.Literal("replace"),
-	path: d.String,
-	value: p
-}), d.Struct({
-	op: d.Literal("remove"),
-	path: d.String
-})), h = d.Struct({
-	ops: d.Array(m),
-	order: d.Array(We)
-}), g = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, Ge = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), _ = (e) => {
+var He = p.Union(p.String, p.Number), Ue = p.Record({
+	key: p.String,
+	value: p.Unknown
+}).pipe(p.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), We = p.Union(p.Struct({
+	op: p.Literal("add"),
+	path: p.String,
+	value: Ue
+}), p.Struct({
+	op: p.Literal("replace"),
+	path: p.String,
+	value: Ue
+}), p.Struct({
+	op: p.Literal("remove"),
+	path: p.String
+}), p.Struct({
+	op: p.Literal("mergeCells"),
+	path: p.String,
+	value: p.Record({
+		key: p.String,
+		value: p.Unknown
+	})
+})), Ge = p.Struct({
+	ops: p.Array(We),
+	order: p.Array(He)
+}), h = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, Ke = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), g = (e) => {
 	let t = Object.keys(e).sort(), n = {};
 	for (let r of t) n[r] = e[r];
 	return JSON.stringify(n);
-}, Ke = (e, t) => _(e) === _(t), qe = (e, t) => {
-	let n = /* @__PURE__ */ new Map();
-	for (let t of e) n.set(t.id, t);
-	let r = [], i = [], a = /* @__PURE__ */ new Set();
+}, qe = (e, t) => g(e) === g(t), Je = (e, t) => {
+	if (e instanceof Uint8Array && t instanceof Uint8Array) {
+		if (e.length !== t.length) return !1;
+		for (let n = 0; n < e.length; n += 1) if (e[n] !== t[n]) return !1;
+		return !0;
+	}
+	return g({
+		id: 0,
+		v: e
+	}) === g({
+		id: 0,
+		v: t
+	});
+}, Ye = (e, t, n = {}) => {
+	let r = /* @__PURE__ */ new Map();
+	for (let t of e) r.set(t.id, t);
+	let i = [], a = [], o = /* @__PURE__ */ new Set(), s = n.crdt, c = (e, t) => {
+		if (s === void 0 || s.columns.size === 0) return;
+		let n = {}, r = !1;
+		for (let i of s.columns) {
+			if (!(i in t) || Je(e[i], t[i])) continue;
+			let a = s.incremental(i, e[i], t[i]);
+			if (a === void 0) return;
+			n[i] = a, r = !0;
+		}
+		if (!r) return;
+		let i = {};
+		for (let [e, n] of Object.entries(t)) s.columns.has(e) || (i[e] = n);
+		return {
+			scalars: i,
+			merges: n
+		};
+	};
 	for (let e of t) {
-		i.push(e.id), a.add(e.id);
-		let t = n.get(e.id);
-		t === void 0 ? r.push({
+		a.push(e.id), o.add(e.id);
+		let t = r.get(e.id);
+		if (t === void 0) i.push({
 			op: "add",
-			path: g(e.id),
-			value: e
-		}) : Ke(t, e) || r.push({
-			op: "replace",
-			path: g(e.id),
+			path: h(e.id),
 			value: e
 		});
+		else if (!qe(t, e)) {
+			let n = c(t, e);
+			n === void 0 ? i.push({
+				op: "replace",
+				path: h(e.id),
+				value: e
+			}) : (qe(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
+				op: "replace",
+				path: h(e.id),
+				value: n.scalars
+			}), i.push({
+				op: "mergeCells",
+				path: h(e.id),
+				value: n.merges
+			}));
+		}
 	}
-	for (let t of e) a.has(t.id) || r.push({
+	for (let t of e) o.has(t.id) || i.push({
 		op: "remove",
-		path: g(t.id)
+		path: h(t.id)
 	});
 	return {
-		ops: r,
-		order: i
+		ops: i,
+		order: a
 	};
-}, Je = (e) => e.every((e) => {
+}, Xe = (e) => e.every((e) => {
 	let t = e.id;
 	return typeof t == "string" || typeof t == "number";
-}), Ye = (e, t) => {
-	let n = /* @__PURE__ */ new Map();
-	for (let t of e) n.set(t.id, t);
-	for (let e of t.ops) (e.op === "add" || e.op === "replace") && n.set(e.value.id, e.value);
-	let r = [];
+}), Ze = (e, t, n = {}) => {
+	let r = /* @__PURE__ */ new Map();
+	for (let t of e) r.set(t.id, t);
+	for (let e of t.ops) {
+		if (e.op === "mergeCells") {
+			let t = Ke(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
+			if (i === void 0) continue;
+			let o = { ...i };
+			for (let [t, r] of Object.entries(e.value)) o[t] = n.mergeCell === void 0 ? r : n.mergeCell(t, i[t], r);
+			r.set(a, o);
+			continue;
+		}
+		(e.op === "add" || e.op === "replace") && r.set(e.value.id, e.value);
+	}
+	let i = [];
 	for (let e of t.order) {
-		let t = n.get(e);
-		t !== void 0 && r.push(t);
+		let t = r.get(e);
+		t !== void 0 && i.push(t);
 	}
-	return r;
-}, v = (e) => d.Union(d.Struct({
-	_tag: d.Literal("snapshot"),
-	revision: d.Number,
+	return i;
+}, Qe = (e) => p.Union(p.Struct({
+	_tag: p.Literal("snapshot"),
+	revision: p.Number,
 	data: e,
-	computed: d.optional(d.Boolean)
-}), d.Struct({
-	_tag: d.Literal("delta"),
-	revision: d.Number,
-	emittedAt: d.Number,
-	patch: h
-}), d.Struct({
-	_tag: d.Literal("error"),
-	error: d.Unknown,
-	revision: d.optional(d.Number)
-})), y = (e, t) => {
+	computed: p.optional(p.Boolean)
+}), p.Struct({
+	_tag: p.Literal("delta"),
+	revision: p.Number,
+	emittedAt: p.Number,
+	patch: Ge
+}), p.Struct({
+	_tag: p.Literal("error"),
+	error: p.Unknown,
+	revision: p.optional(p.Number)
+})), $e = (e, t) => {
 	let n = `${e ?? "this procedure"} input`;
 	return t === !0 ? `${n} (guarded — the guard did NOT run: the payload failed to decode first, so this says nothing about access)` : n;
-}, Xe = (e) => {
+}, et = (e) => {
 	let t = e.ast;
 	return t._tag === "TypeLiteral" && (t.propertySignatures?.length ?? 0) === 0 && (t.indexSignatures?.length ?? 0) === 0;
-}, b = (e, t, n) => {
-	let r = y(t, n), i = e.annotations({
+}, _ = (e, t, n) => {
+	let r = $e(t, n), i = e.annotations({
 		parseOptions: { onExcessProperty: "error" },
 		parseIssueTitle: () => r
 	});
-	return Xe(e) ? d.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
-}, x = class extends d.TaggedError()("BusinessRuleViolation", {
-	rule: d.String,
-	params: d.optional(d.Record({
-		key: d.String,
-		value: d.Unknown
+	return et(e) ? p.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
+}, v = class extends p.TaggedError()("BusinessRuleViolation", {
+	rule: p.String,
+	params: p.optional(p.Record({
+		key: p.String,
+		value: p.Unknown
 	})),
-	field: d.optional(d.String),
-	message: d.optional(d.String),
-	severity: d.Literal("error", "warning")
-}) {}, S = class extends d.TaggedError()("ApprovalRequired", {
-	approvalId: d.String,
-	procedure: d.String,
-	expiresAt: d.String,
-	requiredScopes: d.Array(d.String),
-	reason: d.NullOr(d.String),
-	created: d.Boolean
-}) {}, C = class extends d.TaggedError()("ApprovalNotFound", { approvalId: d.String }) {}, w = class extends d.TaggedError()("ApprovalSelfApproval", {
-	approvalId: d.String,
-	subjectId: d.NullOr(d.String)
-}) {}, T = class extends d.TaggedError()("ApprovalRejected", {
-	approvalId: d.String,
-	decidedBy: d.NullOr(d.String),
-	note: d.NullOr(d.String)
-}) {}, E = class extends d.TaggedError()("ApprovalExpired", {
-	approvalId: d.String,
-	expiredAt: d.String
-}) {}, D = class extends d.TaggedError()("ApprovalNotPending", {
-	approvalId: d.String,
-	status: d.String
-}) {}, O = class extends d.TaggedError()("ApprovalForbidden", {
-	approvalId: d.String,
-	required: d.NullOr(d.String),
-	message: d.String
-}) {}, k = class extends d.TaggedError()("ApprovalUnavailable", {
-	procedure: d.String,
-	message: d.String
-}) {}, A = d.Union(S, T, E, k), j = d.Union(C, w, E, D, O, k), M = d.Struct({
-	id: d.String,
-	procedure: d.String,
-	kind: d.Literal("mutation", "action"),
-	requestedBy: d.NullOr(d.String),
-	status: d.Literal("pending", "approved", "rejected", "expired", "consumed"),
-	reason: d.NullOr(d.String),
-	requiredScopes: d.Array(d.String),
-	requestedAt: d.String,
-	expiresAt: d.String,
-	decidedBy: d.NullOr(d.String),
-	decidedAt: d.NullOr(d.String),
-	note: d.NullOr(d.String),
-	relation: d.Literal("to-decide", "requested")
-}), N = "channel:", P = Symbol.for("@voltro/protocol/reactivityChannels"), Ze = globalThis, F = Ze[P] ?? (Ze[P] = /* @__PURE__ */ new Map()), Qe = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, $e = (e) => {
-	if (!Qe.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
+	field: p.optional(p.String),
+	message: p.optional(p.String),
+	severity: p.Literal("error", "warning")
+}) {}, y = p.Struct({
+	field: p.String,
+	message: p.String,
+	params: p.optional(p.Record({
+		key: p.String,
+		value: p.Unknown
+	}))
+}), b = class extends p.TaggedError()("ValidationError", {
+	field: p.String,
+	message: p.String,
+	params: p.optional(p.Record({
+		key: p.String,
+		value: p.Unknown
+	}))
+}) {}, x = class extends p.TaggedError()("ValidationErrors", { issues: p.Array(y).pipe(p.minItems(1)) }) {}, tt = (e) => {
+	if (typeof e != "object" || !e) return [];
+	let t = e._tag;
+	if (t === "ValidationError") {
+		let t = e;
+		return [{
+			field: t.field,
+			message: t.message,
+			...t.params === void 0 ? {} : { params: t.params }
+		}];
+	}
+	if (t === "ValidationErrors") {
+		let t = e;
+		return Array.isArray(t.issues) ? t.issues : [];
+	}
+	if (t === "BusinessRuleViolation") {
+		let t = e;
+		if (typeof t.field != "string" || t.field.length === 0) return [];
+		let n = typeof t.message == "string" && t.message.length > 0 ? t.message : String(t.rule ?? "validation.invalid");
+		return [{
+			field: t.field,
+			message: n,
+			...t.params === void 0 ? {} : { params: t.params }
+		}];
+	}
+	return [];
+}, S = class extends p.TaggedError()("ApprovalRequired", {
+	approvalId: p.String,
+	procedure: p.String,
+	expiresAt: p.String,
+	requiredScopes: p.Array(p.String),
+	reason: p.NullOr(p.String),
+	created: p.Boolean
+}) {}, C = class extends p.TaggedError()("ApprovalNotFound", { approvalId: p.String }) {}, w = class extends p.TaggedError()("ApprovalSelfApproval", {
+	approvalId: p.String,
+	subjectId: p.NullOr(p.String)
+}) {}, nt = class extends p.TaggedError()("ApprovalRejected", {
+	approvalId: p.String,
+	decidedBy: p.NullOr(p.String),
+	note: p.NullOr(p.String)
+}) {}, T = class extends p.TaggedError()("ApprovalExpired", {
+	approvalId: p.String,
+	expiredAt: p.String
+}) {}, rt = class extends p.TaggedError()("ApprovalNotPending", {
+	approvalId: p.String,
+	status: p.String
+}) {}, it = class extends p.TaggedError()("ApprovalForbidden", {
+	approvalId: p.String,
+	required: p.NullOr(p.String),
+	message: p.String
+}) {}, E = class extends p.TaggedError()("ApprovalUnavailable", {
+	procedure: p.String,
+	message: p.String
+}) {}, at = p.Union(S, nt, T, E), ot = p.Union(C, w, T, rt, it, E), st = p.Struct({
+	id: p.String,
+	procedure: p.String,
+	kind: p.Literal("mutation", "action"),
+	requestedBy: p.NullOr(p.String),
+	status: p.Literal("pending", "approved", "rejected", "expired", "consumed"),
+	reason: p.NullOr(p.String),
+	requiredScopes: p.Array(p.String),
+	requestedAt: p.String,
+	expiresAt: p.String,
+	decidedBy: p.NullOr(p.String),
+	decidedAt: p.NullOr(p.String),
+	note: p.NullOr(p.String),
+	relation: p.Literal("to-decide", "requested")
+}), D = "channel:", O = Symbol.for("@voltro/protocol/reactivityChannels"), k = globalThis, A = k[O] ?? (k[O] = /* @__PURE__ */ new Map()), ct = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, lt = (e) => {
+	if (!ct.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
   \`billing.usage\`. A \`:\` is refused because it is the namespace separator in
-  the routing key (\`${N}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
+  the routing key (\`${D}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
   routes as two.`);
-	let t = F.get(e);
+	let t = A.get(e);
 	if (t !== void 0) return t;
-	let n = `${N}${e}`, r = Object.freeze({
+	let n = `${D}${e}`, r = Object.freeze({
 		kind: "reactivity-channel",
 		name: e,
 		key: n,
 		toString: () => n
 	});
-	return F.set(e, r), r;
-}, et = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", tt = (e) => e.startsWith(N), nt = () => new Set([...F.values()].map((e) => e.key)), I = (e) => et(e) ? e.key : e, rt = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(I) : [I(e)], it = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(I) : I(e), at = (e) => {
-	let t = nt(), n = [];
-	for (let r of e) for (let e of rt(r.source)) !tt(e) || t.has(e) || n.push({
+	return A.set(e, r), r;
+}, j = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", M = (e) => e.startsWith(D), N = () => new Set([...A.values()].map((e) => e.key)), P = (e) => j(e) ? e.key : e, F = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(P) : [P(e)], I = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(P) : P(e), ut = (e) => {
+	let t = N(), n = [];
+	for (let r of e) for (let e of F(r.source)) !M(e) || t.has(e) || n.push({
 		procedure: r.name,
 		key: e
 	});
 	return n;
-}, ot = (e, t) => {
+}, dt = (e, t) => {
 	let n = e?.injectExternalChange;
 	return n !== void 0 && (n.call(e, {
 		table: t.key,
@@ -168,8 +266,8 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 		old: {},
 		origin: "inline"
 	}), !0);
-}, st = (e) => e.internal !== !0, L = (e) => {
-	if (ct(e), Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
+}, ft = (e) => e.internal !== !0, L = (e) => {
+	if (pt(e), Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
   unguarded procedure, or list the scopes required to call it.`);
 	let t = typeof e.source == "string" ? [e.source] : Array.isArray(e.source) ? e.source : void 0;
 	if (t !== void 0 && (t.length === 0 || t.some((e) => String(e).trim() === ""))) throw Error(`${e.name}: \`source\` is empty, so this query declares reactivity and\n  subscribes to nothing — it serves one snapshot and never updates again,
@@ -186,7 +284,7 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	let n = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
 	if (n.length === 0) return e;
 	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${n.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${n.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${n.join(" / ")} annotation if it is not.`);
-}, ct = (e) => {
+}, pt = (e) => {
 	let t = e.requiresApproval;
 	if (t !== void 0) {
 		if (!Array.isArray(t.approvers) || t.approvers.length === 0) throw Error(`${e.name}: \`requiresApproval.approvers\` is empty, so NOBODY can approve this\n  procedure and every call would park forever. Name the scope(s) an approver must hold
@@ -196,20 +294,20 @@ var We = d.Union(d.String, d.Number), p = d.Record({
   human from every other, and the second-pair-of-eyes control would enforce nothing.
   Give the procedure a \`guards:\` decision, or drop \`requiresApproval\`.`);
 	}
-}, lt = (e) => e.action !== void 0 && e.resourceType !== void 0, ut = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, R = (e, t, n) => {
+}, mt = (e) => e.action !== void 0 && e.resourceType !== void 0, ht = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, R = (e, t, n) => {
 	if (n === void 0) return t;
 	if (n.trim() === "") throw Error(`${e}: \`openAccess\` needs a REASON, not an empty string. It is the sentence a\n  reviewer reads to decide whether this procedure should really be callable
   without an authorization check — e.g. \`openAccess: 'public pricing, no caller data'\`.`);
 	if (t !== void 0 && t.length > 0) throw Error(`${e}: \`openAccess\` and \`guards\` are two different access decisions, so\n  declaring both says the procedure is protected AND open. Keep the guards if a
   caller must hold a scope; drop them if anyone may call it.`);
-	return [u(n.trim())];
+	return [f(n.trim())];
 }, z = (e) => L({
 	kind: "query",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? d.Never,
-	source: it(e.source),
+	error: e.error ?? p.Never,
+	source: I(e.source),
 	cache: e.cache,
 	guards: R(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
@@ -222,7 +320,7 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? d.Never,
+	error: e.error ?? p.Never,
 	target: e.target,
 	guards: R(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
@@ -236,7 +334,7 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? d.Never,
+	error: e.error ?? p.Never,
 	guards: R(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	source: e.source,
@@ -246,50 +344,50 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), dt = (e) => L({
+}), gt = (e) => L({
 	kind: "stream",
 	name: e.name,
 	input: e.input,
 	element: e.element,
-	error: e.error ?? d.Never,
+	error: e.error ?? p.Never,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin,
 	guards: R(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess
-}), H = (e, t) => t && t.length > 0 ? d.Union(e, ...t) : e, U = (e) => e !== void 0 && e.some((e) => !l(e)), ft = (e, t) => U(t) ? d.Union(e, c, s) : e, pt = (e) => d.Union(e, x), mt = (e, t) => t === void 0 ? e : d.Union(e, A), W = (e, t) => {
+}), H = (e, t) => t && t.length > 0 ? p.Union(e, ...t) : e, U = (e) => e !== void 0 && e.some((e) => !d(e)), _t = (e, t) => U(t) ? p.Union(e, u, l) : e, vt = (e) => p.Union(e, v), yt = (e) => p.Union(e, b, x), bt = (e, t) => t === void 0 ? e : p.Union(e, at), W = (e, t) => {
 	if (t === "stream") return e.error;
-	let n = ft(e.error, e.guards);
-	return t === "query" ? n : mt(t === "mutation" ? pt(n) : n, e.requiresApproval);
-}, ht = (e, t) => f.make(e.name, {
-	payload: b(e.input, e.name, U(e.guards)),
-	success: v(e.output),
+	let n = _t(e.error, e.guards);
+	return t === "query" ? n : bt(yt(t === "mutation" ? vt(n) : n), e.requiresApproval);
+}, xt = (e, t) => m.make(e.name, {
+	payload: _(e.input, e.name, U(e.guards)),
+	success: Qe(e.output),
 	error: H(W(e, "query"), t),
 	stream: !0
-}), gt = (e, t) => f.make(e.name, {
-	payload: b(e.input, e.name, U(e.guards)),
+}), St = (e, t) => m.make(e.name, {
+	payload: _(e.input, e.name, U(e.guards)),
 	success: e.output,
 	error: H(W(e, "mutation"), t)
-}), _t = (e, t) => f.make(e.name, {
-	payload: b(e.input, e.name, U(e.guards)),
+}), Ct = (e, t) => m.make(e.name, {
+	payload: _(e.input, e.name, U(e.guards)),
 	success: e.output,
 	error: H(W(e, "action"), t)
-}), vt = (e, t) => f.make(e.name, {
-	payload: b(e.input, e.name, U(e.guards)),
+}), wt = (e, t) => m.make(e.name, {
+	payload: _(e.input, e.name, U(e.guards)),
 	success: e.element,
 	error: H(e.error, t),
 	stream: !0
-}), yt = (e) => {
+}), Tt = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
 	return typeof t == "string" ? t : void 0;
-}, bt = (e) => {
+}, Et = (e) => {
 	switch (e.kind) {
-		case "query": return ht(e);
-		case "mutation": return gt(e);
-		case "action": return _t(e);
-		case "stream": return vt(e);
+		case "query": return xt(e);
+		case "mutation": return St(e);
+		case "action": return Ct(e);
+		case "stream": return wt(e);
 	}
-}, xt = (e) => {
+}, Dt = (e) => {
 	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
 	if (e.kind === "query") return {
 		kind: "query",
@@ -330,7 +428,7 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 			..."shapeItem" in e && e.shapeItem !== void 0 ? { shapeItem: e.shapeItem } : {}
 		}))
 	};
-}, St = 7500, Ct = (e) => typeof e == "object" && !!e && e.kind === "event", wt = (e) => {
+}, Ot = 7500, kt = (e) => typeof e == "object" && !!e && e.kind === "event", At = (e) => {
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -359,73 +457,73 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 		name: e.name,
 		key: e.key,
 		payload: e.payload,
-		guards: e.openAccess === void 0 ? e.guards : [u(e.openAccess.trim())],
+		guards: e.openAccess === void 0 ? e.guards : [f(e.openAccess.trim())],
 		openAccess: e.openAccess,
 		rewind: e.rewind,
 		webhook: e.webhook,
 		delivery: e.delivery
 	};
-}, Tt = (e) => d.Struct({
-	_tag: d.Literal("event"),
-	origin: d.String,
-	n: d.Number,
-	emittedAt: d.Number,
+}, jt = (e) => p.Struct({
+	_tag: p.Literal("event"),
+	origin: p.String,
+	n: p.Number,
+	emittedAt: p.Number,
 	payload: e
-}), Et = d.Struct({
-	_tag: d.Literal("gap"),
-	missed: d.Number,
-	reason: d.Literal("buffer", "resume")
-}), Dt = d.Struct({ _tag: d.Literal("attached") }), Ot = (e) => d.Union(Dt, Tt(e), Et), kt = d.Struct({
-	origin: d.String,
-	n: d.Number
-}), G = (e) => d.Struct({
+}), Mt = p.Struct({
+	_tag: p.Literal("gap"),
+	missed: p.Number,
+	reason: p.Literal("buffer", "resume")
+}), Nt = p.Struct({ _tag: p.Literal("attached") }), Pt = (e) => p.Union(Nt, jt(e), Mt), Ft = p.Struct({
+	origin: p.String,
+	n: p.Number
+}), G = (e) => p.Struct({
 	key: e,
-	resume: d.optional(d.Array(kt))
-}), At = (e, t) => {
-	let n = e.guards !== void 0 && e.guards.some((e) => !l(e)) ? d.Union(c, s) : d.Never, r = t && t.length > 0 ? d.Union(n, ...t) : n;
-	return f.make(e.name, {
-		payload: b(G(e.key), e.name, U(e.guards)),
-		success: Ot(e.payload),
+	resume: p.optional(p.Array(Ft))
+}), It = (e, t) => {
+	let n = e.guards !== void 0 && e.guards.some((e) => !d(e)) ? p.Union(u, l) : p.Never, r = t && t.length > 0 ? p.Union(n, ...t) : n;
+	return m.make(e.name, {
+		payload: _(G(e.key), e.name, U(e.guards)),
+		success: Pt(e.payload),
 		error: r,
 		stream: !0
 	});
-}, jt = class extends d.TaggedError()("EventPayloadInvalid", {
-	event: d.String,
-	message: d.String
-}) {}, Mt = class extends d.TaggedError()("EventKeyInvalid", {
-	event: d.String,
-	message: d.String
-}) {}, Nt = class extends d.TaggedError()("EventPayloadTooLarge", {
-	event: d.String,
-	bytes: d.Number,
-	limit: d.Number
-}) {}, Pt = (e) => {
+}, Lt = class extends p.TaggedError()("EventPayloadInvalid", {
+	event: p.String,
+	message: p.String
+}) {}, Rt = class extends p.TaggedError()("EventKeyInvalid", {
+	event: p.String,
+	message: p.String
+}) {}, zt = class extends p.TaggedError()("EventPayloadTooLarge", {
+	event: p.String,
+	bytes: p.Number,
+	limit: p.Number
+}) {}, Bt = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t));
 	return JSON.stringify(t);
-}, Ft = "\0", It = (e, t, n) => [
+}, Vt = "\0", Ht = (e, t, n) => [
 	e ?? "~",
 	t,
-	Pt(n)
-].join("\0"), Lt = (e) => {
+	Bt(n)
+].join("\0"), Ut = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, Rt = (e) => e.split("\0").join(" · "), zt = (e) => e, Bt = (e) => e, Vt = (e) => {
+}, Wt = (e) => e.split("\0").join(" · "), Gt = (e) => e, Kt = (e) => e, qt = (e) => {
 	let t = e.alias?.trim(), n = e.instance?.trim(), r = t !== void 0 && t !== "" ? t : e.base;
 	return n !== void 0 && n !== "" ? `${r}#${n}` : r;
-}, Ht = (e) => {
+}, Jt = (e) => {
 	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
-}, Ut = (e, t) => {
-	let n = He.GenericTag(e);
+}, Yt = (e, t) => {
+	let n = Be.GenericTag(e);
 	return {
 		Tag: n,
-		Live: Ue.succeed(n, t)
+		Live: Ve.succeed(n, t)
 	};
-}, Wt = (e, t, n) => {
+}, Xt = (e, t, n) => {
 	if (!t) return { ok: !0 };
 	let r = K(n);
 	if (!r) return {
@@ -435,7 +533,7 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	let i = t.trim();
 	if (i === "*" || i === "") return { ok: !0 };
 	let a = i.split(/\s+/).filter((e) => e.length > 0);
-	for (let i of a) if (!Gt(i, r)) return {
+	for (let i of a) if (!Zt(i, r)) return {
 		ok: !1,
 		reason: `plugin "${e}" requires framework ${t}, running ${n}`
 	};
@@ -448,7 +546,7 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 		patch: Number(t[3]),
 		pre: t[4] ?? ""
 	} : null;
-}, q = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, Gt = (e, t) => {
+}, q = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, Zt = (e, t) => {
 	if (e === "*") return !0;
 	if (e.startsWith("^")) {
 		let n = K(e.slice(1));
@@ -470,206 +568,206 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 	}
 	let r = K(e);
 	return r ? q(t, r) === 0 : !1;
-}, J = d.Literal("running", "succeeded", "failed", "cancelled", "suspended"), Kt = d.Literal("cancel", "terminate", "abandon"), qt = d.Struct({
-	mode: d.String,
-	dueAt: d.NullOr(d.Number),
-	retryAfterMs: d.NullOr(d.Number),
-	intentId: d.NullOr(d.String)
-}), Jt = d.Struct({
-	id: d.String,
-	workflowName: d.String,
-	executionId: d.NullOr(d.String),
-	status: d.Literal("running", "queued", "dropped", "skipped"),
-	deferral: d.optional(qt)
-}), Y = d.Struct({
-	id: d.String,
-	tag: d.String,
-	executionId: d.String,
+}, J = p.Literal("running", "succeeded", "failed", "cancelled", "suspended"), Qt = p.Literal("cancel", "terminate", "abandon"), $t = p.Struct({
+	mode: p.String,
+	dueAt: p.NullOr(p.Number),
+	retryAfterMs: p.NullOr(p.Number),
+	intentId: p.NullOr(p.String)
+}), en = p.Struct({
+	id: p.String,
+	workflowName: p.String,
+	executionId: p.NullOr(p.String),
+	status: p.Literal("running", "queued", "dropped", "skipped"),
+	deferral: p.optional($t)
+}), Y = p.Struct({
+	id: p.String,
+	tag: p.String,
+	executionId: p.String,
 	status: J,
-	payload: d.Unknown,
-	workflowVersion: d.NullOr(d.String),
-	workflowPatches: d.NullOr(d.Unknown),
-	output: d.NullOr(d.Unknown),
-	subject: d.NullOr(d.Unknown),
-	source: d.NullOr(d.String),
-	errorTag: d.NullOr(d.String),
-	errorMessage: d.NullOr(d.String),
-	cancelled: d.Boolean,
-	startedAt: d.Date,
-	completedAt: d.NullOr(d.Date),
-	durationMs: d.NullOr(d.Number),
-	traceId: d.NullOr(d.String),
-	parentExecutionId: d.NullOr(d.String),
-	parentClosePolicy: d.NullOr(Kt)
-}), Yt = d.Struct({
-	tag: d.optional(d.String),
-	status: d.optional(J),
-	limit: d.optional(d.Number)
-}), Xt = d.Struct({
-	id: d.String,
-	runId: d.String,
-	stepName: d.String,
-	attempt: d.Number,
-	status: d.Literal("running", "succeeded", "failed"),
-	input: d.NullOr(d.Unknown),
-	retryPolicy: d.NullOr(d.Unknown),
-	output: d.NullOr(d.Unknown),
-	errorTag: d.NullOr(d.String),
-	errorMessage: d.NullOr(d.String),
-	errorCause: d.NullOr(d.Unknown),
-	startedAt: d.Date,
-	completedAt: d.NullOr(d.Date),
-	durationMs: d.NullOr(d.Number)
-}), Zt = d.Struct({
-	id: d.String,
-	runId: d.String,
-	eventType: d.String,
-	payload: d.NullOr(d.Unknown),
-	occurredAt: d.Date,
-	stepName: d.NullOr(d.String),
-	attempt: d.NullOr(d.Number)
-}), Qt = d.Struct({
-	id: d.String,
-	name: d.String,
-	payload: d.Unknown,
-	source: d.String,
-	subject: d.NullOr(d.Unknown),
-	traceId: d.NullOr(d.String),
-	occurredAt: d.Date
-}), $t = d.Struct({
-	id: d.String,
-	eventId: d.String,
-	eventName: d.String,
-	triggerId: d.String,
-	workflowName: d.String,
-	executionId: d.NullOr(d.String),
-	status: d.Literal("starting", "started", "skipped", "failed"),
-	idempotencyKey: d.String,
-	skipped: d.Boolean,
-	errorMessage: d.NullOr(d.String),
-	createdAt: d.Date,
-	completedAt: d.NullOr(d.Date)
-}), en = d.Struct({ id: d.String }), X = d.Struct({ runId: d.String }), tn = d.Struct({
-	name: d.optional(d.String),
-	limit: d.optional(d.Number)
-}), nn = d.Struct({ eventId: d.String }), Z = d.Struct({
-	workflowName: d.String,
-	executionId: d.String
-}), rn = d.Struct({
-	id: d.String,
-	signalName: d.String,
-	payload: d.optional(d.Unknown)
-}), an = d.Struct({
-	id: d.String,
-	updateName: d.String,
-	payload: d.optional(d.Unknown),
-	timeoutMs: d.optional(d.Number)
-}), on = d.Struct({
-	eventId: d.String,
-	updateId: d.String,
-	completedEventId: d.String,
-	result: d.Unknown
-}), sn = z({
+	payload: p.Unknown,
+	workflowVersion: p.NullOr(p.String),
+	workflowPatches: p.NullOr(p.Unknown),
+	output: p.NullOr(p.Unknown),
+	subject: p.NullOr(p.Unknown),
+	source: p.NullOr(p.String),
+	errorTag: p.NullOr(p.String),
+	errorMessage: p.NullOr(p.String),
+	cancelled: p.Boolean,
+	startedAt: p.Date,
+	completedAt: p.NullOr(p.Date),
+	durationMs: p.NullOr(p.Number),
+	traceId: p.NullOr(p.String),
+	parentExecutionId: p.NullOr(p.String),
+	parentClosePolicy: p.NullOr(Qt)
+}), tn = p.Struct({
+	tag: p.optional(p.String),
+	status: p.optional(J),
+	limit: p.optional(p.Number)
+}), nn = p.Struct({
+	id: p.String,
+	runId: p.String,
+	stepName: p.String,
+	attempt: p.Number,
+	status: p.Literal("running", "succeeded", "failed"),
+	input: p.NullOr(p.Unknown),
+	retryPolicy: p.NullOr(p.Unknown),
+	output: p.NullOr(p.Unknown),
+	errorTag: p.NullOr(p.String),
+	errorMessage: p.NullOr(p.String),
+	errorCause: p.NullOr(p.Unknown),
+	startedAt: p.Date,
+	completedAt: p.NullOr(p.Date),
+	durationMs: p.NullOr(p.Number)
+}), rn = p.Struct({
+	id: p.String,
+	runId: p.String,
+	eventType: p.String,
+	payload: p.NullOr(p.Unknown),
+	occurredAt: p.Date,
+	stepName: p.NullOr(p.String),
+	attempt: p.NullOr(p.Number)
+}), an = p.Struct({
+	id: p.String,
+	name: p.String,
+	payload: p.Unknown,
+	source: p.String,
+	subject: p.NullOr(p.Unknown),
+	traceId: p.NullOr(p.String),
+	occurredAt: p.Date
+}), on = p.Struct({
+	id: p.String,
+	eventId: p.String,
+	eventName: p.String,
+	triggerId: p.String,
+	workflowName: p.String,
+	executionId: p.NullOr(p.String),
+	status: p.Literal("starting", "started", "skipped", "failed"),
+	idempotencyKey: p.String,
+	skipped: p.Boolean,
+	errorMessage: p.NullOr(p.String),
+	createdAt: p.Date,
+	completedAt: p.NullOr(p.Date)
+}), sn = p.Struct({ id: p.String }), X = p.Struct({ runId: p.String }), cn = p.Struct({
+	name: p.optional(p.String),
+	limit: p.optional(p.Number)
+}), ln = p.Struct({ eventId: p.String }), Z = p.Struct({
+	workflowName: p.String,
+	executionId: p.String
+}), un = p.Struct({
+	id: p.String,
+	signalName: p.String,
+	payload: p.optional(p.Unknown)
+}), dn = p.Struct({
+	id: p.String,
+	updateName: p.String,
+	payload: p.optional(p.Unknown),
+	timeoutMs: p.optional(p.Number)
+}), fn = p.Struct({
+	eventId: p.String,
+	updateId: p.String,
+	completedEventId: p.String,
+	result: p.Unknown
+}), pn = z({
 	name: "__voltro.workflow.run",
 	source: "_voltro_workflow_runs",
-	input: en,
-	output: d.Array(Y)
-}), cn = z({
+	input: sn,
+	output: p.Array(Y)
+}), mn = z({
 	name: "__voltro.workflow.runs",
 	source: "_voltro_workflow_runs",
-	input: Yt,
-	output: d.Array(Y)
-}), ln = z({
+	input: tn,
+	output: p.Array(Y)
+}), hn = z({
 	name: "__voltro.workflow.run.steps",
 	source: "_voltro_workflow_run_steps",
 	input: X,
-	output: d.Array(Xt)
-}), un = z({
+	output: p.Array(nn)
+}), gn = z({
 	name: "__voltro.workflow.run.events",
 	source: "_voltro_workflow_run_events",
 	input: X,
-	output: d.Array(Zt)
-}), dn = z({
+	output: p.Array(rn)
+}), _n = z({
 	name: "__voltro.workflow.domainEvents",
 	source: "_voltro_workflow_events",
-	input: tn,
-	output: d.Array(Qt)
-}), fn = z({
+	input: cn,
+	output: p.Array(an)
+}), vn = z({
 	name: "__voltro.workflow.event.deliveries",
 	source: "_voltro_workflow_event_deliveries",
-	input: nn,
-	output: d.Array($t)
-}), pn = V({
+	input: ln,
+	output: p.Array(on)
+}), yn = V({
 	name: "__voltro.workflow.cancel",
 	input: Z,
-	output: d.Struct({ ok: d.Boolean })
-}), mn = V({
+	output: p.Struct({ ok: p.Boolean })
+}), bn = V({
 	name: "__voltro.workflow.resume",
 	input: Z,
-	output: d.Struct({ ok: d.Boolean })
-}), hn = V({
+	output: p.Struct({ ok: p.Boolean })
+}), xn = V({
 	name: "__voltro.workflow.signal",
-	input: rn,
-	output: d.Struct({ eventId: d.String })
-}), gn = V({
+	input: un,
+	output: p.Struct({ eventId: p.String })
+}), Sn = V({
 	name: "__voltro.workflow.update",
-	input: an,
-	output: on
-}), _n = "__voltro.undo.log", vn = "__voltro.undo.apply", yn = "__voltro.undo.redo", bn = d.Struct({
-	id: d.String,
-	tag: d.String,
-	label: d.NullOr(d.String),
-	undone: d.Boolean,
-	crossesAction: d.Boolean,
-	createdAt: d.String
-}), xn = class extends d.TaggedError()("UndoNotFound", { invocationId: d.String }) {}, Sn = class extends d.TaggedError()("UndoForbidden", { invocationId: d.String }) {}, Cn = class extends d.TaggedError()("UndoConflict", {
-	invocationId: d.String,
-	reason: d.Literal("conflict", "action")
-}) {}, wn = d.Union(xn, Sn, Cn), Tn = z({
-	name: _n,
+	input: dn,
+	output: fn
+}), Cn = "__voltro.undo.log", wn = "__voltro.undo.apply", Tn = "__voltro.undo.redo", En = p.Struct({
+	id: p.String,
+	tag: p.String,
+	label: p.NullOr(p.String),
+	undone: p.Boolean,
+	crossesAction: p.Boolean,
+	createdAt: p.String
+}), Dn = class extends p.TaggedError()("UndoNotFound", { invocationId: p.String }) {}, On = class extends p.TaggedError()("UndoForbidden", { invocationId: p.String }) {}, kn = class extends p.TaggedError()("UndoConflict", {
+	invocationId: p.String,
+	reason: p.Literal("conflict", "action")
+}) {}, An = p.Union(Dn, On, kn), jn = z({
+	name: Cn,
 	source: "_voltro_undo_log",
-	input: d.Struct({ limit: d.optional(d.Number) }),
-	output: d.Array(bn),
+	input: p.Struct({ limit: p.optional(p.Number) }),
+	output: p.Array(En),
 	openAccess: "subject-scoped by construction: lists only the calling subject's own undoable actions"
-}), En = B({
-	name: vn,
-	input: d.Struct({ invocationId: d.String }),
-	output: d.Struct({ ok: d.Boolean }),
-	error: wn,
+}), Mn = B({
+	name: wn,
+	input: p.Struct({ invocationId: p.String }),
+	output: p.Struct({ ok: p.Boolean }),
+	error: An,
 	openAccess: "subject-scoped by construction: undo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), Dn = B({
-	name: yn,
-	input: d.Struct({ invocationId: d.String }),
-	output: d.Struct({ ok: d.Boolean }),
-	error: wn,
+}), Nn = B({
+	name: Tn,
+	input: p.Struct({ invocationId: p.String }),
+	output: p.Struct({ ok: p.Boolean }),
+	error: An,
 	openAccess: "subject-scoped by construction: redo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), On = class extends d.TaggedError()("TenantScopeViolation", {
-	table: d.String,
-	reason: d.String
-}) {}, kn = class extends d.TaggedError()("StoreOperationFailed", {
-	operation: d.String,
-	table: d.String,
-	cause: d.String
-}) {}, An = class extends d.TaggedError()("TableValidationFailed", {
-	table: d.String,
-	summary: d.String,
-	issues: d.Array(d.Struct({
-		path: d.String,
-		message: d.String
+}), Pn = class extends p.TaggedError()("TenantScopeViolation", {
+	table: p.String,
+	reason: p.String
+}) {}, Fn = class extends p.TaggedError()("StoreOperationFailed", {
+	operation: p.String,
+	table: p.String,
+	cause: p.String
+}) {}, In = class extends p.TaggedError()("TableValidationFailed", {
+	table: p.String,
+	summary: p.String,
+	issues: p.Array(p.Struct({
+		path: p.String,
+		message: p.String
 	}))
-}) {}, jn = class extends d.TaggedError()("TenantRowNotFound", {
-	table: d.String,
-	id: d.String,
-	reason: d.String
-}) {}, Mn = class extends d.TaggedError()("ServerOnlyColumnWrite", {
-	table: d.String,
-	columns: d.Array(d.String)
-}) {}, Nn = class extends d.TaggedError()("ConstraintViolation", {
-	kind: d.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
-	table: d.String,
-	operation: d.String,
-	constraint: d.optional(d.String),
-	column: d.optional(d.String)
+}) {}, Ln = class extends p.TaggedError()("TenantRowNotFound", {
+	table: p.String,
+	id: p.String,
+	reason: p.String
+}) {}, Rn = class extends p.TaggedError()("ServerOnlyColumnWrite", {
+	table: p.String,
+	columns: p.Array(p.String)
+}) {}, zn = class extends p.TaggedError()("ConstraintViolation", {
+	kind: p.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
+	table: p.String,
+	operation: p.String,
+	constraint: p.optional(p.String),
+	column: p.optional(p.String)
 }) {
 	get message() {
 		let e = this.constraint ?? this.column, t = e === void 0 ? `on ${this.table}` : `${e} on ${this.table}`;
@@ -681,85 +779,85 @@ var We = d.Union(d.String, d.Number), p = d.Record({
 			case "check": return `check constraint ${t}: the row does not satisfy it`;
 		}
 	}
-}, Pn = "__voltro.approvals.pending", Fn = "__voltro.approvals.decide", In = z({
-	name: Pn,
+}, Bn = "__voltro.approvals.pending", Vn = "__voltro.approvals.decide", Hn = z({
+	name: Bn,
 	source: "_voltro_approvals",
-	input: d.Struct({ limit: d.optional(d.Number) }),
-	output: d.Array(M),
+	input: p.Struct({ limit: p.optional(p.Number) }),
+	output: p.Array(st),
 	openAccess: "the answer is scoped to the caller — a row appears only if they requested it or hold its recorded approver scopes, so an anonymous caller sees nothing"
-}), Ln = B({
-	name: Fn,
-	input: d.Struct({
-		approvalId: d.String,
-		decision: d.Literal("approve", "reject"),
-		note: d.optional(d.String)
+}), Un = B({
+	name: Vn,
+	input: p.Struct({
+		approvalId: p.String,
+		decision: p.Literal("approve", "reject"),
+		note: p.optional(p.String)
 	}),
-	output: d.Struct({
-		approvalId: d.String,
-		status: d.Literal("approved", "rejected")
+	output: p.Struct({
+		approvalId: p.String,
+		status: p.Literal("approved", "rejected")
 	}),
-	error: j,
+	error: ot,
 	openAccess: "the approver authority is the PENDING ROW's own recorded scopes (plus an unconditional self-approval refusal), checked in-handler — a descriptor-level scope would have to be the union of every approval-requiring procedure in the app"
-}), Rn = "__voltro.connections.list", zn = "__voltro.connections.start", Bn = "__voltro.connections.submitToken", Vn = "__voltro.connections.disconnect", Q = d.Literal("oauth2", "pat"), Hn = d.Literal("disconnected", "connected", "expired", "revoked", "error"), Un = d.Struct({
-	connectionId: d.String,
+}), Wn = "__voltro.connections.list", Gn = "__voltro.connections.start", Kn = "__voltro.connections.submitToken", qn = "__voltro.connections.disconnect", Q = p.Literal("oauth2", "pat"), Jn = p.Literal("disconnected", "connected", "expired", "revoked", "error"), Yn = p.Struct({
+	connectionId: p.String,
 	kind: Q,
-	label: d.String,
-	status: Hn,
-	accountId: d.NullOr(d.String),
-	accountLabel: d.NullOr(d.String),
-	scopes: d.Array(d.String),
-	expiresAt: d.NullOr(d.String),
-	lastError: d.NullOr(d.String),
-	connectedAt: d.NullOr(d.String)
-}), Wn = class extends d.TaggedError()("ConnectionNotDeclared", { connectionId: d.String }) {}, Gn = class extends d.TaggedError()("ConnectionSubjectRequired", { connectionId: d.String }) {}, Kn = class extends d.TaggedError()("ConnectionKindMismatch", {
-	connectionId: d.String,
+	label: p.String,
+	status: Jn,
+	accountId: p.NullOr(p.String),
+	accountLabel: p.NullOr(p.String),
+	scopes: p.Array(p.String),
+	expiresAt: p.NullOr(p.String),
+	lastError: p.NullOr(p.String),
+	connectedAt: p.NullOr(p.String)
+}), Xn = class extends p.TaggedError()("ConnectionNotDeclared", { connectionId: p.String }) {}, Zn = class extends p.TaggedError()("ConnectionSubjectRequired", { connectionId: p.String }) {}, Qn = class extends p.TaggedError()("ConnectionKindMismatch", {
+	connectionId: p.String,
 	expected: Q,
 	actual: Q
-}) {}, qn = class extends d.TaggedError()("ConnectionHandshakeFailed", {
-	connectionId: d.String,
-	reason: d.String,
-	transient: d.Boolean
-}) {}, $ = d.Union(Wn, Gn, Kn, qn), Jn = z({
-	name: Rn,
+}) {}, $n = class extends p.TaggedError()("ConnectionHandshakeFailed", {
+	connectionId: p.String,
+	reason: p.String,
+	transient: p.Boolean
+}) {}, $ = p.Union(Xn, Zn, Qn, $n), er = z({
+	name: Wn,
 	source: "_voltro_connections",
-	input: d.Struct({}),
-	output: d.Array(Un),
+	input: p.Struct({}),
+	output: p.Array(Yn),
 	openAccess: "self-scoped read: projects the declared connections for the calling subject only (its own connect/disconnect state)"
-}), Yn = V({
-	name: zn,
-	input: d.Struct({
-		connectionId: d.String,
-		redirectTo: d.optional(d.String)
+}), tr = V({
+	name: Gn,
+	input: p.Struct({
+		connectionId: p.String,
+		redirectTo: p.optional(p.String)
 	}),
-	output: d.Struct({
-		authorizeUrl: d.String,
-		state: d.String
+	output: p.Struct({
+		authorizeUrl: p.String,
+		state: p.String
 	}),
 	error: $,
 	openAccess: "self-service: begins an oauth handshake that stores a credential for the calling subject only; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Xn = B({
-	name: Bn,
-	input: d.Struct({
-		connectionId: d.String,
-		token: d.String
+}), nr = B({
+	name: Kn,
+	input: p.Struct({
+		connectionId: p.String,
+		token: p.String
 	}),
-	output: d.Struct({ ok: d.Boolean }),
+	output: p.Struct({ ok: p.Boolean }),
 	error: $,
 	openAccess: "self-service: stores a pasted token as the calling subject's own credential; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Zn = B({
-	name: Vn,
-	input: d.Struct({ connectionId: d.String }),
-	output: d.Struct({ ok: d.Boolean }),
+}), rr = B({
+	name: qn,
+	input: p.Struct({ connectionId: p.String }),
+	output: p.Struct({ ok: p.Boolean }),
 	error: $,
 	openAccess: "self-service: deletes only the calling subject's own credential row for this connection"
-}), Qn = (e) => {
+}), ir = (e) => {
 	let t = e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : 0;
 	return Number.isNaN(t) ? 0 : t;
-}, $n = 4001, er = /* @__PURE__ */ new Set(["/rpc", "/ws"]), tr = (e) => {
+}, ar = 4001, or = /* @__PURE__ */ new Set(["/rpc", "/ws"]), sr = (e) => {
 	if (!e.path.startsWith("/")) throw Error(`defineWebSocket: path must be absolute, got '${e.path}'`);
-	if (er.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
+	if (or.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
 	if (e.auth !== "subject" && e.auth !== "public") throw Error(`defineWebSocket: auth must be 'subject' or 'public' (explicitly — an unauthenticated socket has to be a decision somebody wrote down), got '${String(e.auth)}'`);
 	return e;
-}, nr = 1;
+}, cr = 1;
 //#endregion
-export { Oe as ADMIN_SCOPE, Ce as APIKEY_ISSUE_ORG_SCOPE, Ee as APIKEY_ISSUE_OTHER_SCOPE, ve as APIKEY_ISSUE_SELF_SCOPE, Fn as APPROVALS_DECIDE_TAG, Pn as APPROVALS_PENDING_TAG, j as ApprovalDecisionErrors, A as ApprovalErrors, E as ApprovalExpired, O as ApprovalForbidden, C as ApprovalNotFound, D as ApprovalNotPending, T as ApprovalRejected, S as ApprovalRequired, w as ApprovalSelfApproval, k as ApprovalUnavailable, Ae as AuthMiddleware, x as BusinessRuleViolation, Rn as CONNECTIONS_LIST_TAG, Vn as CONNECTION_DISCONNECT_TAG, zn as CONNECTION_START_TAG, Bn as CONNECTION_SUBMIT_TOKEN_TAG, qn as ConnectionHandshakeFailed, ce as ConnectionInfo, i as ConnectionInfoMiddleware, Q as ConnectionKind, Kn as ConnectionKindMismatch, Wn as ConnectionNotDeclared, Un as ConnectionState, Hn as ConnectionStatus, Gn as ConnectionSubjectRequired, Nn as ConstraintViolation, r as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ie as DEFAULT_SCOPE_CACHE_TTL_MS, Ft as EVENT_ROUTE_SEP, Mt as EventKeyInvalid, jt as EventPayloadInvalid, Nt as EventPayloadTooLarge, $n as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, be as IMPERSONATION_METADATA_KEY, St as MAX_EVENT_ENVELOPE_BYTES, nr as PROTOCOL_VERSION, M as PendingApproval, N as REACTIVITY_CHANNEL_PREFIX, c as ScopeError, Mn as ServerOnlyColumnWrite, kn as StoreOperationFailed, e as Subject, ye as SubjectIdentity, re as SubjectService, An as TableValidationFailed, jn as TenantRowNotFound, On as TenantScopeViolation, vn as UNDO_APPLY_TAG, _n as UNDO_LOG_TAG, yn as UNDO_REDO_TAG, s as Unauthenticated, Cn as UndoConflict, Sn as UndoForbidden, bn as UndoLogEntry, xn as UndoNotFound, Z as WorkflowControlInputSchema, Qt as WorkflowDomainEventRowSchema, tn as WorkflowDomainEventsInputSchema, nn as WorkflowEventDeliveriesInputSchema, $t as WorkflowEventDeliveryRowSchema, Kt as WorkflowParentClosePolicySchema, Zt as WorkflowRunEventRowSchema, Jt as WorkflowRunHandleSchema, en as WorkflowRunRefSchema, Y as WorkflowRunRowSchema, J as WorkflowRunStatusSchema, Xt as WorkflowRunStepRowSchema, X as WorkflowRunTableRefSchema, Yt as WorkflowRunsInputSchema, rn as WorkflowSignalInputSchema, qt as WorkflowStartDeferralSchema, an as WorkflowUpdateInputSchema, on as WorkflowUpdateResultSchema, _t as actionToRpc, we as advisoryResourceGuardWarning, ae as anonymousSubject, Ye as applyRowPatch, a as applyScopeDecision, Ln as approvalsDecideDescriptor, In as approvalsPendingQueryDescriptor, te as assertAuthenticated, ze as beginIdempotent, Wt as checkFrameworkCompat, De as checkGuards, me as checkGuardsEffect, ne as composeAuthStrategies, Ht as composeRpcInterceptors, Zn as connectionDisconnectDescriptor, Yn as connectionStartDescriptor, Xn as connectionSubmitTokenDescriptor, Jn as connectionsListQueryDescriptor, nt as declaredReactivityChannelKeys, V as defineAction, wt as defineEvent, B as defineMutation, zt as definePlugin, Bt as definePluginRoute, Ut as definePluginService, z as defineQuery, dt as defineStream, tr as defineWebSocket, qe as diffRows, xe as effectiveScopes, Pt as encodeEventKey, yt as errorTag, Dt as eventAttached, Tt as eventEnvelope, Et as eventGap, kt as eventResumePoint, It as eventRoute, Ot as eventStreamEvent, G as eventSubscribeInput, At as eventToRpc, Ie as failIdempotent, ke as findAdvisoryResourceGuards, Pe as finishIdempotent, Rt as formatEventRoute, he as getPolicyGuardResolver, ge as getResourceScopeResolver, ut as hasAccessDecision, oe as hasCallbackRoutes, Te as hasEffectiveScope, U as hasEnforcedGuard, Se as hasScope, g as idToPath, Re as idempotencyScope, y as inputLabel, Ct as isEventDescriptor, Je as isIdKeyed, l as isOpenAccess, _e as isPolicyCheck, lt as isPolicyGuard, et as isReactivityChannel, tt as isReactivityChannelKey, Ne as isSystemSubject, st as isWireReachable, t as makeScopeCache, Be as memoryIdempotencyStore, fe as missingAccessDecision, gt as mutationToRpc, xt as normalizeDescriptor, it as normalizeSource, u as openAccessSpec, Lt as parseEventRoute, Ge as pathToId, Vt as pluginInstanceName, ot as publishReactivity, Ve as publishServerError, ht as queryToRpc, ue as rawImpersonationMark, $e as reactivityChannel, Me as requireScope, m as rowPatchOpSchema, h as rowPatchSchema, ee as scopeCacheKey, pe as setEffectiveScopes, je as setPolicyGuardResolver, se as setResourceScopeResolver, rt as sourceKeys, vt as streamToRpc, b as strictInput, le as subjectIdentity, n as subjectScopes, Le as subscribeServerErrors, v as subscriptionEvent, de as systemSubject, o as tenantScopedSubject, bt as toRpc, Qn as tsMs, at as undeclaredChannelKeys, En as undoApplyDescriptor, Tn as undoLogQueryDescriptor, Dn as undoRedoDescriptor, W as wireErrorUnion, pn as workflowCancelDescriptor, dn as workflowDomainEventsQueryDescriptor, fn as workflowEventDeliveriesQueryDescriptor, mn as workflowResumeDescriptor, un as workflowRunEventsQueryDescriptor, sn as workflowRunQueryDescriptor, ln as workflowRunStepsQueryDescriptor, cn as workflowRunsQueryDescriptor, hn as workflowSignalDescriptor, gn as workflowUpdateDescriptor, Fe as wsMutationIdempotencyScope };
+export { Ee as ADMIN_SCOPE, xe as APIKEY_ISSUE_ORG_SCOPE, we as APIKEY_ISSUE_OTHER_SCOPE, ge as APIKEY_ISSUE_SELF_SCOPE, Vn as APPROVALS_DECIDE_TAG, Bn as APPROVALS_PENDING_TAG, ot as ApprovalDecisionErrors, at as ApprovalErrors, T as ApprovalExpired, it as ApprovalForbidden, C as ApprovalNotFound, rt as ApprovalNotPending, nt as ApprovalRejected, S as ApprovalRequired, w as ApprovalSelfApproval, E as ApprovalUnavailable, Oe as AuthMiddleware, v as BusinessRuleViolation, Wn as CONNECTIONS_LIST_TAG, qn as CONNECTION_DISCONNECT_TAG, Gn as CONNECTION_START_TAG, Kn as CONNECTION_SUBMIT_TOKEN_TAG, $n as ConnectionHandshakeFailed, oe as ConnectionInfo, i as ConnectionInfoMiddleware, Q as ConnectionKind, Qn as ConnectionKindMismatch, Xn as ConnectionNotDeclared, Yn as ConnectionState, Jn as ConnectionStatus, Zn as ConnectionSubjectRequired, zn as ConstraintViolation, r as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ne as DEFAULT_SCOPE_CACHE_TTL_MS, Vt as EVENT_ROUTE_SEP, Rt as EventKeyInvalid, Lt as EventPayloadInvalid, zt as EventPayloadTooLarge, ar as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, ve as IMPERSONATION_METADATA_KEY, Ot as MAX_EVENT_ENVELOPE_BYTES, cr as PROTOCOL_VERSION, st as PendingApproval, D as REACTIVITY_CHANNEL_PREFIX, u as ScopeError, Rn as ServerOnlyColumnWrite, Fn as StoreOperationFailed, e as Subject, _e as SubjectIdentity, te as SubjectService, In as TableValidationFailed, Ln as TenantRowNotFound, Pn as TenantScopeViolation, wn as UNDO_APPLY_TAG, Cn as UNDO_LOG_TAG, Tn as UNDO_REDO_TAG, l as Unauthenticated, kn as UndoConflict, On as UndoForbidden, En as UndoLogEntry, Dn as UndoNotFound, b as ValidationError, x as ValidationErrors, y as ValidationIssue, Z as WorkflowControlInputSchema, an as WorkflowDomainEventRowSchema, cn as WorkflowDomainEventsInputSchema, ln as WorkflowEventDeliveriesInputSchema, on as WorkflowEventDeliveryRowSchema, Qt as WorkflowParentClosePolicySchema, rn as WorkflowRunEventRowSchema, en as WorkflowRunHandleSchema, sn as WorkflowRunRefSchema, Y as WorkflowRunRowSchema, J as WorkflowRunStatusSchema, nn as WorkflowRunStepRowSchema, X as WorkflowRunTableRefSchema, tn as WorkflowRunsInputSchema, un as WorkflowSignalInputSchema, $t as WorkflowStartDeferralSchema, dn as WorkflowUpdateInputSchema, fn as WorkflowUpdateResultSchema, Ct as actionToRpc, Se as advisoryResourceGuardWarning, re as anonymousSubject, Ze as applyRowPatch, a as applyScopeDecision, Un as approvalsDecideDescriptor, Hn as approvalsPendingQueryDescriptor, c as assertAuthenticated, Le as beginIdempotent, Xt as checkFrameworkCompat, Te as checkGuards, fe as checkGuardsEffect, ee as composeAuthStrategies, Jt as composeRpcInterceptors, rr as connectionDisconnectDescriptor, tr as connectionStartDescriptor, nr as connectionSubmitTokenDescriptor, er as connectionsListQueryDescriptor, N as declaredReactivityChannelKeys, V as defineAction, At as defineEvent, B as defineMutation, Gt as definePlugin, Kt as definePluginRoute, Yt as definePluginService, z as defineQuery, gt as defineStream, sr as defineWebSocket, Ye as diffRows, ye as effectiveScopes, Bt as encodeEventKey, Tt as errorTag, Nt as eventAttached, jt as eventEnvelope, Mt as eventGap, Ft as eventResumePoint, Ht as eventRoute, Pt as eventStreamEvent, G as eventSubscribeInput, It as eventToRpc, Pe as failIdempotent, tt as fieldIssuesOf, De as findAdvisoryResourceGuards, Me as finishIdempotent, Wt as formatEventRoute, pe as getPolicyGuardResolver, me as getResourceScopeResolver, ht as hasAccessDecision, ie as hasCallbackRoutes, Ce as hasEffectiveScope, U as hasEnforcedGuard, be as hasScope, h as idToPath, Ie as idempotencyScope, $e as inputLabel, kt as isEventDescriptor, Xe as isIdKeyed, d as isOpenAccess, he as isPolicyCheck, mt as isPolicyGuard, j as isReactivityChannel, M as isReactivityChannelKey, je as isSystemSubject, ft as isWireReachable, t as makeScopeCache, Re as memoryIdempotencyStore, ue as missingAccessDecision, St as mutationToRpc, Dt as normalizeDescriptor, I as normalizeSource, f as openAccessSpec, Ut as parseEventRoute, Ke as pathToId, qt as pluginInstanceName, dt as publishReactivity, ze as publishServerError, xt as queryToRpc, ce as rawImpersonationMark, lt as reactivityChannel, Ae as requireScope, We as rowPatchOpSchema, Ge as rowPatchSchema, s as scopeCacheKey, de as setEffectiveScopes, ke as setPolicyGuardResolver, ae as setResourceScopeResolver, F as sourceKeys, wt as streamToRpc, _ as strictInput, se as subjectIdentity, n as subjectScopes, Fe as subscribeServerErrors, Qe as subscriptionEvent, le as systemSubject, o as tenantScopedSubject, Et as toRpc, ir as tsMs, ut as undeclaredChannelKeys, Mn as undoApplyDescriptor, jn as undoLogQueryDescriptor, Nn as undoRedoDescriptor, W as wireErrorUnion, yn as workflowCancelDescriptor, _n as workflowDomainEventsQueryDescriptor, vn as workflowEventDeliveriesQueryDescriptor, bn as workflowResumeDescriptor, gn as workflowRunEventsQueryDescriptor, pn as workflowRunQueryDescriptor, hn as workflowRunStepsQueryDescriptor, mn as workflowRunsQueryDescriptor, xn as workflowSignalDescriptor, Sn as workflowUpdateDescriptor, Ne as wsMutationIdempotencyScope };