@voltro/protocol 0.63.0 → 0.64.0

package/dist/index.js

@@ -1,46 +1,47 @@
-import { A as e, B as t, C as n, D as r, E as i, F as a, G as o, H as s, I as ee, L as te, M as ne, N as c, O as re, P as ie, R as ae, S as oe, T as se, U as ce, V as le, W as ue, _ as de, a as l, b as fe, c as pe, d as me, f as he, g as ge, h as u, i as _e, j as ve, k as ye, l as be, m as xe, n as Se, o as Ce, p as we, r as Te, s as Ee, t as De, u as Oe, v as d, w as ke, x as Ae, y as je, z as Me } from "./scopes-B0kGvAnI.js";
-import { a as Ne, c as Pe, i as Fe, n as Ie, o as Le, r as Re, s as ze, t as Be } from "./serverErrorBus-BeN9pOpY.js";
-import { Context as Ve, Layer as He, Schema as f } from "effect";
-import { Rpc as p } from "@effect/rpc";
+import { A as e, B as t, C as n, D as r, E as i, F as a, G as o, H as s, I as ee, L as te, M as ne, N as c, O as re, P as ie, R as ae, S as oe, T as se, U as ce, V as le, W as ue, _ as de, a as l, b as fe, c as pe, d as me, f as he, g as ge, h as u, i as _e, j as ve, k as ye, l as be, m as xe, n as Se, o as Ce, p as we, r as Te, s as Ee, t as De, u as Oe, v as d, w as ke, x as Ae, y as je, z as Me } from "./scopes-D9t3tYc7.js";
+import { a as Ne, c as Pe, i as f, l as Fe, n as Ie, o as Le, r as Re, s as ze, t as Be, u as Ve } from "./serverErrorBus-QQgyq6fV.js";
+import { Context as He, Layer as Ue, Schema as p } from "effect";
+import { Rpc as m } from "@effect/rpc";
+import { VersionConflict as We } from "@voltro/database/wire";
 //#region src/rowPatch.ts
-var Ue = f.Union(f.String, f.Number), m = f.Record({
-	key: f.String,
-	value: f.Unknown
-}).pipe(f.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), h = f.Union(f.Struct({
-	op: f.Literal("add"),
-	path: f.String,
-	value: m
-}), f.Struct({
-	op: f.Literal("replace"),
-	path: f.String,
-	value: m
-}), f.Struct({
-	op: f.Literal("remove"),
-	path: f.String
-}), f.Struct({
-	op: f.Literal("mergeCells"),
-	path: f.String,
-	value: f.Record({
-		key: f.String,
-		value: f.Unknown
+var Ge = p.Union(p.String, p.Number), h = p.Record({
+	key: p.String,
+	value: p.Unknown
+}).pipe(p.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), g = p.Union(p.Struct({
+	op: p.Literal("add"),
+	path: p.String,
+	value: h
+}), p.Struct({
+	op: p.Literal("replace"),
+	path: p.String,
+	value: h
+}), p.Struct({
+	op: p.Literal("remove"),
+	path: p.String
+}), p.Struct({
+	op: p.Literal("mergeCells"),
+	path: p.String,
+	value: p.Record({
+		key: p.String,
+		value: p.Unknown
 	})
-})), We = f.Struct({
-	ops: f.Array(h),
-	order: f.Array(Ue)
-}), g = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, Ge = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), _ = (e) => {
+})), _ = p.Struct({
+	ops: p.Array(g),
+	order: p.Array(Ge)
+}), v = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, y = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), b = (e) => {
 	let t = Object.keys(e).sort(), n = {};
 	for (let r of t) n[r] = e[r];
 	return JSON.stringify(n);
-}, v = (e, t) => _(e) === _(t), Ke = (e, t) => {
+}, x = (e, t) => b(e) === b(t), Ke = (e, t) => {
 	if (e instanceof Uint8Array && t instanceof Uint8Array) {
 		if (e.length !== t.length) return !1;
 		for (let n = 0; n < e.length; n += 1) if (e[n] !== t[n]) return !1;
 		return !0;
 	}
-	return _({
+	return b({
 		id: 0,
 		v: e
-	}) === _({
+	}) === b({
 		id: 0,
 		v: t
 	});
@@ -69,29 +70,29 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 		let t = r.get(e.id);
 		if (t === void 0) i.push({
 			op: "add",
-			path: g(e.id),
+			path: v(e.id),
 			value: e
 		});
-		else if (!v(t, e)) {
+		else if (!x(t, e)) {
 			let n = ee(t, e);
 			n === void 0 ? i.push({
 				op: "replace",
-				path: g(e.id),
+				path: v(e.id),
 				value: e
-			}) : (v(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
+			}) : (x(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
 				op: "replace",
-				path: g(e.id),
+				path: v(e.id),
 				value: n.scalars
 			}), i.push({
 				op: "mergeCells",
-				path: g(e.id),
+				path: v(e.id),
 				value: n.merges
 			}));
 		}
 	}
 	for (let t of e) o.has(t.id) || i.push({
 		op: "remove",
-		path: g(t.id)
+		path: v(t.id)
 	});
 	return {
 		ops: i,
@@ -105,7 +106,7 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 	for (let t of e) r.set(t.id, t);
 	for (let e of t.ops) {
 		if (e.op === "mergeCells") {
-			let t = Ge(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
+			let t = y(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
 			if (i === void 0) continue;
 			let o = { ...i };
 			for (let [t, r] of Object.entries(e.value)) o[t] = n.mergeCell === void 0 ? r : n.mergeCell(t, i[t], r);
@@ -120,56 +121,56 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 		t !== void 0 && i.push(t);
 	}
 	return i;
-}, y = (e) => f.Union(f.Struct({
-	_tag: f.Literal("snapshot"),
-	revision: f.Number,
+}, S = (e) => p.Union(p.Struct({
+	_tag: p.Literal("snapshot"),
+	revision: p.Number,
 	data: e,
-	computed: f.optional(f.Boolean)
-}), f.Struct({
-	_tag: f.Literal("delta"),
-	revision: f.Number,
-	emittedAt: f.Number,
-	patch: We
-}), f.Struct({
-	_tag: f.Literal("error"),
-	error: f.Unknown,
-	revision: f.optional(f.Number)
-})), b = (e, t) => {
+	computed: p.optional(p.Boolean)
+}), p.Struct({
+	_tag: p.Literal("delta"),
+	revision: p.Number,
+	emittedAt: p.Number,
+	patch: _
+}), p.Struct({
+	_tag: p.Literal("error"),
+	error: p.Unknown,
+	revision: p.optional(p.Number)
+})), C = (e, t) => {
 	let n = `${e ?? "this procedure"} input`;
 	return t === !0 ? `${n} (guarded — the guard did NOT run: the payload failed to decode first, so this says nothing about access)` : n;
 }, Xe = (e) => {
 	let t = e.ast;
 	return t._tag === "TypeLiteral" && (t.propertySignatures?.length ?? 0) === 0 && (t.indexSignatures?.length ?? 0) === 0;
-}, x = (e, t, n) => {
-	let r = b(t, n), i = e.annotations({
+}, w = (e, t, n) => {
+	let r = C(t, n), i = e.annotations({
 		parseOptions: { onExcessProperty: "error" },
 		parseIssueTitle: () => r
 	});
-	return Xe(e) ? f.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
-}, S = class extends f.TaggedError()("BusinessRuleViolation", {
-	rule: f.String,
-	params: f.optional(f.Record({
-		key: f.String,
-		value: f.Unknown
+	return Xe(e) ? p.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
+}, T = class extends p.TaggedError()("BusinessRuleViolation", {
+	rule: p.String,
+	params: p.optional(p.Record({
+		key: p.String,
+		value: p.Unknown
 	})),
-	field: f.optional(f.String),
-	message: f.optional(f.String),
-	severity: f.Literal("error", "warning")
-}) {}, C = f.Struct({
-	field: f.String,
-	message: f.String,
-	params: f.optional(f.Record({
-		key: f.String,
-		value: f.Unknown
+	field: p.optional(p.String),
+	message: p.optional(p.String),
+	severity: p.Literal("error", "warning")
+}) {}, E = p.Struct({
+	field: p.String,
+	message: p.String,
+	params: p.optional(p.Record({
+		key: p.String,
+		value: p.Unknown
 	}))
-}), w = class extends f.TaggedError()("ValidationError", {
-	field: f.String,
-	message: f.String,
-	params: f.optional(f.Record({
-		key: f.String,
-		value: f.Unknown
+}), D = class extends p.TaggedError()("ValidationError", {
+	field: p.String,
+	message: p.String,
+	params: p.optional(p.Record({
+		key: p.String,
+		value: p.Unknown
 	}))
-}) {}, Ze = class extends f.TaggedError()("ValidationErrors", { issues: f.Array(C).pipe(f.minItems(1)) }) {}, Qe = (e) => {
+}) {}, O = class extends p.TaggedError()("ValidationErrors", { issues: p.Array(E).pipe(p.minItems(1)) }) {}, Ze = (e) => {
 	if (typeof e != "object" || !e) return [];
 	let t = e._tag;
 	if (t === "ValidationError") {
@@ -195,69 +196,69 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 		}];
 	}
 	return [];
-}, $e = class extends f.TaggedError()("ApprovalRequired", {
-	approvalId: f.String,
-	procedure: f.String,
-	expiresAt: f.String,
-	requiredScopes: f.Array(f.String),
-	reason: f.NullOr(f.String),
-	created: f.Boolean
-}) {}, et = class extends f.TaggedError()("ApprovalNotFound", { approvalId: f.String }) {}, tt = class extends f.TaggedError()("ApprovalSelfApproval", {
-	approvalId: f.String,
-	subjectId: f.NullOr(f.String)
-}) {}, nt = class extends f.TaggedError()("ApprovalRejected", {
-	approvalId: f.String,
-	decidedBy: f.NullOr(f.String),
-	note: f.NullOr(f.String)
-}) {}, T = class extends f.TaggedError()("ApprovalExpired", {
-	approvalId: f.String,
-	expiredAt: f.String
-}) {}, rt = class extends f.TaggedError()("ApprovalNotPending", {
-	approvalId: f.String,
-	status: f.String
-}) {}, it = class extends f.TaggedError()("ApprovalForbidden", {
-	approvalId: f.String,
-	required: f.NullOr(f.String),
-	message: f.String
-}) {}, E = class extends f.TaggedError()("ApprovalUnavailable", {
-	procedure: f.String,
-	message: f.String
-}) {}, at = f.Union($e, nt, T, E), ot = f.Union(et, tt, T, rt, it, E), st = f.Struct({
-	id: f.String,
-	procedure: f.String,
-	kind: f.Literal("mutation", "action"),
-	requestedBy: f.NullOr(f.String),
-	status: f.Literal("pending", "approved", "rejected", "expired", "consumed"),
-	reason: f.NullOr(f.String),
-	requiredScopes: f.Array(f.String),
-	requestedAt: f.String,
-	expiresAt: f.String,
-	decidedBy: f.NullOr(f.String),
-	decidedAt: f.NullOr(f.String),
-	note: f.NullOr(f.String),
-	relation: f.Literal("to-decide", "requested")
-}), D = "channel:", ct = Symbol.for("@voltro/protocol/reactivityChannels"), O = globalThis, k = O[ct] ?? (O[ct] = /* @__PURE__ */ new Map()), lt = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, ut = (e) => {
+}, Qe = class extends p.TaggedError()("ApprovalRequired", {
+	approvalId: p.String,
+	procedure: p.String,
+	expiresAt: p.String,
+	requiredScopes: p.Array(p.String),
+	reason: p.NullOr(p.String),
+	created: p.Boolean
+}) {}, $e = class extends p.TaggedError()("ApprovalNotFound", { approvalId: p.String }) {}, et = class extends p.TaggedError()("ApprovalSelfApproval", {
+	approvalId: p.String,
+	subjectId: p.NullOr(p.String)
+}) {}, tt = class extends p.TaggedError()("ApprovalRejected", {
+	approvalId: p.String,
+	decidedBy: p.NullOr(p.String),
+	note: p.NullOr(p.String)
+}) {}, k = class extends p.TaggedError()("ApprovalExpired", {
+	approvalId: p.String,
+	expiredAt: p.String
+}) {}, nt = class extends p.TaggedError()("ApprovalNotPending", {
+	approvalId: p.String,
+	status: p.String
+}) {}, rt = class extends p.TaggedError()("ApprovalForbidden", {
+	approvalId: p.String,
+	required: p.NullOr(p.String),
+	message: p.String
+}) {}, A = class extends p.TaggedError()("ApprovalUnavailable", {
+	procedure: p.String,
+	message: p.String
+}) {}, it = p.Union(Qe, tt, k, A), at = p.Union($e, et, k, nt, rt, A), ot = p.Struct({
+	id: p.String,
+	procedure: p.String,
+	kind: p.Literal("mutation", "action"),
+	requestedBy: p.NullOr(p.String),
+	status: p.Literal("pending", "approved", "rejected", "expired", "consumed"),
+	reason: p.NullOr(p.String),
+	requiredScopes: p.Array(p.String),
+	requestedAt: p.String,
+	expiresAt: p.String,
+	decidedBy: p.NullOr(p.String),
+	decidedAt: p.NullOr(p.String),
+	note: p.NullOr(p.String),
+	relation: p.Literal("to-decide", "requested")
+}), j = "channel:", st = Symbol.for("@voltro/protocol/reactivityChannels"), ct = globalThis, M = ct[st] ?? (ct[st] = /* @__PURE__ */ new Map()), lt = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, ut = (e) => {
 	if (!lt.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
   \`billing.usage\`. A \`:\` is refused because it is the namespace separator in
-  the routing key (\`${D}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
+  the routing key (\`${j}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
   routes as two.`);
-	let t = k.get(e);
+	let t = M.get(e);
 	if (t !== void 0) return t;
-	let n = `${D}${e}`, r = Object.freeze({
+	let n = `${j}${e}`, r = Object.freeze({
 		kind: "reactivity-channel",
 		name: e,
 		key: n,
 		toString: () => n
 	});
-	return k.set(e, r), r;
-}, A = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", j = (e) => e.startsWith(D), M = () => new Set([...k.values()].map((e) => e.key)), N = (e) => A(e) ? e.key : e, P = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(N) : [N(e)], F = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(N) : N(e), dt = (e) => {
-	let t = M(), n = [];
-	for (let r of e) for (let e of P(r.source)) !j(e) || t.has(e) || n.push({
+	return M.set(e, r), r;
+}, dt = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", ft = (e) => e.startsWith(j), pt = () => new Set([...M.values()].map((e) => e.key)), N = (e) => dt(e) ? e.key : e, mt = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(N) : [N(e)], ht = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(N) : N(e), gt = (e) => {
+	let t = pt(), n = [];
+	for (let r of e) for (let e of mt(r.source)) !ft(e) || t.has(e) || n.push({
 		procedure: r.name,
 		key: e
 	});
 	return n;
-}, ft = (e, t) => {
+}, _t = (e, t) => {
 	let n = e?.injectExternalChange;
 	return n !== void 0 && (n.call(e, {
 		table: t.key,
@@ -266,8 +267,8 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 		old: {},
 		origin: "inline"
 	}), !0);
-}, pt = (e) => e.internal !== !0, I = (e) => {
-	if (mt(e), Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
+}, vt = (e) => e.internal !== !0, P = (e) => {
+	if (yt(e), Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
   unguarded procedure, or list the scopes required to call it.`);
 	let t = typeof e.source == "string" ? [e.source] : Array.isArray(e.source) ? e.source : void 0;
 	if (t !== void 0 && (t.length === 0 || t.some((e) => String(e).trim() === ""))) throw Error(`${e.name}: \`source\` is empty, so this query declares reactivity and\n  subscribes to nothing — it serves one snapshot and never updates again,
@@ -284,7 +285,7 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 	let n = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
 	if (n.length === 0) return e;
 	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${n.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${n.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${n.join(" / ")} annotation if it is not.`);
-}, mt = (e) => {
+}, yt = (e) => {
 	let t = e.requiresApproval;
 	if (t !== void 0) {
 		if (!Array.isArray(t.approvers) || t.approvers.length === 0) throw Error(`${e.name}: \`requiresApproval.approvers\` is empty, so NOBODY can approve this\n  procedure and every call would park forever. Name the scope(s) an approver must hold
@@ -294,48 +295,48 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
   human from every other, and the second-pair-of-eyes control would enforce nothing.
   Give the procedure a \`guards:\` decision, or drop \`requiresApproval\`.`);
 	}
-}, ht = (e) => e.action !== void 0 && e.resourceType !== void 0, gt = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, L = (e, t, n) => {
+}, bt = (e) => e.action !== void 0 && e.resourceType !== void 0, xt = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, F = (e, t, n) => {
 	if (n === void 0) return t;
 	if (n.trim() === "") throw Error(`${e}: \`openAccess\` needs a REASON, not an empty string. It is the sentence a\n  reviewer reads to decide whether this procedure should really be callable
   without an authorization check — e.g. \`openAccess: 'public pricing, no caller data'\`.`);
 	if (t !== void 0 && t.length > 0) throw Error(`${e}: \`openAccess\` and \`guards\` are two different access decisions, so\n  declaring both says the procedure is protected AND open. Keep the guards if a
   caller must hold a scope; drop them if anyone may call it.`);
 	return [d(n.trim())];
-}, R = (e) => I({
+}, I = (e) => P({
 	kind: "query",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? f.Never,
-	source: F(e.source),
+	error: e.error ?? p.Never,
+	source: ht(e.source),
 	cache: e.cache,
-	guards: L(e.name, e.guards, e.openAccess),
+	guards: F(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	publicApi: e.publicApi,
 	exposeAsTool: e.exposeAsTool,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), z = (e) => I({
+}), L = (e) => P({
 	kind: "mutation",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? f.Never,
+	error: e.error ?? p.Never,
 	target: e.target,
-	guards: L(e.name, e.guards, e.openAccess),
+	guards: F(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	publicApi: e.publicApi,
 	exposeAsTool: e.exposeAsTool,
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), B = (e) => I({
+}), R = (e) => P({
 	kind: "action",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? f.Never,
-	guards: L(e.name, e.guards, e.openAccess),
+	error: e.error ?? p.Never,
+	guards: F(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	source: e.source,
 	target: e.target,
@@ -344,53 +345,53 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), _t = (e) => I({
+}), St = (e) => P({
 	kind: "stream",
 	name: e.name,
 	input: e.input,
 	element: e.element,
-	error: e.error ?? f.Never,
+	error: e.error ?? p.Never,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin,
-	guards: L(e.name, e.guards, e.openAccess),
+	guards: F(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess
-}), V = (e, t) => t && t.length > 0 ? f.Union(e, ...t) : e, H = (e) => e !== void 0 && e.some((e) => !u(e)), vt = (e, t) => H(t) ? f.Union(e, l, c) : e, yt = (e) => f.Union(e, S), bt = (e) => f.Union(e, w, Ze), xt = (e, t) => t === void 0 ? e : f.Union(e, at), U = (e, t) => {
+}), z = (e, t) => t && t.length > 0 ? p.Union(e, ...t) : e, B = (e) => e !== void 0 && e.some((e) => !u(e)), Ct = (e, t) => B(t) ? p.Union(e, l, c) : e, wt = (e) => p.Union(e, T), Tt = (e) => p.Union(e, D, O), Et = (e, t) => t === void 0 ? e : p.Union(e, it), V = (e, t) => {
 	if (t === "stream") return e.error;
-	let n = vt(e.error, e.guards);
-	return t === "query" ? n : xt(bt(t === "mutation" ? yt(n) : n), e.requiresApproval);
-}, St = (e, t) => ({
+	let n = Ct(e.error, e.guards);
+	return t === "query" ? n : Et(Tt(t === "mutation" ? p.Union(wt(n), f, We) : n), e.requiresApproval);
+}, Dt = (e, t) => z(Ct(e.errorSchema, e.guards), t), Ot = (e, t) => ({
 	...e,
 	name: t
-}), Ct = (e, t) => p.make(e.name, {
-	payload: x(e.input, e.name, H(e.guards)),
-	success: y(e.output),
-	error: V(U(e, "query"), t),
+}), kt = (e, t) => m.make(e.name, {
+	payload: w(e.input, e.name, B(e.guards)),
+	success: S(e.output),
+	error: z(V(e, "query"), t),
 	stream: !0
-}), wt = (e, t) => p.make(e.name, {
-	payload: x(e.input, e.name, H(e.guards)),
+}), At = (e, t) => m.make(e.name, {
+	payload: w(e.input, e.name, B(e.guards)),
 	success: e.output,
-	error: V(U(e, "mutation"), t)
-}), Tt = (e, t) => p.make(e.name, {
-	payload: x(e.input, e.name, H(e.guards)),
+	error: z(V(e, "mutation"), t)
+}), jt = (e, t) => m.make(e.name, {
+	payload: w(e.input, e.name, B(e.guards)),
 	success: e.output,
-	error: V(U(e, "action"), t)
-}), Et = (e, t) => p.make(e.name, {
-	payload: x(e.input, e.name, H(e.guards)),
+	error: z(V(e, "action"), t)
+}), Mt = (e, t) => m.make(e.name, {
+	payload: w(e.input, e.name, B(e.guards)),
 	success: e.element,
-	error: V(e.error, t),
+	error: z(e.error, t),
 	stream: !0
-}), Dt = (e) => {
+}), Nt = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
 	return typeof t == "string" ? t : void 0;
-}, Ot = (e) => {
+}, Pt = (e) => {
 	switch (e.kind) {
-		case "query": return Ct(e);
-		case "mutation": return wt(e);
-		case "action": return Tt(e);
-		case "stream": return Et(e);
+		case "query": return kt(e);
+		case "mutation": return At(e);
+		case "action": return jt(e);
+		case "stream": return Mt(e);
 	}
-}, kt = (e) => {
+}, Ft = (e) => {
 	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
 	if (e.kind === "query") return {
 		kind: "query",
@@ -432,7 +433,7 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 			..."relations" in e && e.relations !== void 0 ? { relations: e.relations } : {}
 		}))
 	};
-}, At = 7500, jt = (e) => typeof e == "object" && !!e && e.kind === "event", Mt = (e) => {
+}, It = 7500, Lt = (e) => typeof e == "object" && !!e && e.kind === "event", Rt = (e) => {
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -467,67 +468,108 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 		webhook: e.webhook,
 		delivery: e.delivery
 	};
-}, Nt = (e) => f.Struct({
-	_tag: f.Literal("event"),
-	origin: f.String,
-	n: f.Number,
-	emittedAt: f.Number,
+}, zt = (e) => p.Struct({
+	_tag: p.Literal("event"),
+	origin: p.String,
+	n: p.Number,
+	emittedAt: p.Number,
 	payload: e
-}), Pt = f.Struct({
-	_tag: f.Literal("gap"),
-	missed: f.Number,
-	reason: f.Literal("buffer", "resume")
-}), Ft = f.Struct({ _tag: f.Literal("attached") }), It = (e) => f.Union(Ft, Nt(e), Pt), Lt = f.Struct({
-	origin: f.String,
-	n: f.Number
-}), Rt = (e) => f.Struct({
+}), Bt = p.Struct({
+	_tag: p.Literal("gap"),
+	missed: p.Number,
+	reason: p.Literal("buffer", "resume")
+}), Vt = p.Struct({ _tag: p.Literal("attached") }), Ht = (e) => p.Union(Vt, zt(e), Bt), Ut = p.Struct({
+	origin: p.String,
+	n: p.Number
+}), Wt = (e) => p.Struct({
 	key: e,
-	resume: f.optional(f.Array(Lt))
-}), zt = (e, t) => {
-	let n = e.guards !== void 0 && e.guards.some((e) => !u(e)) ? f.Union(l, c) : f.Never, r = t && t.length > 0 ? f.Union(n, ...t) : n;
-	return p.make(e.name, {
-		payload: x(Rt(e.key), e.name, H(e.guards)),
-		success: It(e.payload),
+	resume: p.optional(p.Array(Ut))
+}), Gt = (e, t) => {
+	let n = e.guards !== void 0 && e.guards.some((e) => !u(e)) ? p.Union(l, c) : p.Never, r = t && t.length > 0 ? p.Union(n, ...t) : n;
+	return m.make(e.name, {
+		payload: w(Wt(e.key), e.name, B(e.guards)),
+		success: Ht(e.payload),
 		error: r,
 		stream: !0
 	});
-}, Bt = class extends f.TaggedError()("EventPayloadInvalid", {
-	event: f.String,
-	message: f.String
-}) {}, Vt = class extends f.TaggedError()("EventKeyInvalid", {
-	event: f.String,
-	message: f.String
-}) {}, Ht = class extends f.TaggedError()("EventPayloadTooLarge", {
-	event: f.String,
-	bytes: f.Number,
-	limit: f.Number
-}) {}, Ut = (e) => {
+}, Kt = class extends p.TaggedError()("EventPayloadInvalid", {
+	event: p.String,
+	message: p.String
+}) {}, qt = class extends p.TaggedError()("EventKeyInvalid", {
+	event: p.String,
+	message: p.String
+}) {}, Jt = class extends p.TaggedError()("EventPayloadTooLarge", {
+	event: p.String,
+	bytes: p.Number,
+	limit: p.Number
+}) {}, Yt = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t));
 	return JSON.stringify(t);
-}, Wt = "\0", Gt = (e, t, n) => [
+}, Xt = "\0", Zt = (e, t, n) => [
 	e ?? "~",
 	t,
-	Ut(n)
-].join("\0"), Kt = (e) => {
+	Yt(n)
+].join("\0"), Qt = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, qt = (e) => e.split("\0").join(" · "), Jt = (e) => e, Yt = (e) => e, Xt = (e) => {
+}, $t = (e) => e.split("\0").join(" · "), H = Symbol.for("@voltro/protocol/workflow-access"), en = {
+	guards: void 0,
+	openAccess: void 0,
+	internal: !1
+}, tn = (e, t) => {
+	let n = t.guards;
+	if (n !== void 0 && n.length === 0) throw Error(`workflow("${e}"): \`guards: []\` is empty, so it enforces nothing —\n  but it reads at the call site as if the start were protected. Omit the field
+  and decide with \`openAccess\` or \`internal\`, or list the scopes that may start it.`);
+	if (t.openAccess !== void 0) {
+		if (t.openAccess.trim() === "") throw Error(`workflow("${e}"): \`openAccess\` needs a REASON, not an empty string. It is\n  the sentence a reviewer reads to decide whether anyone should really be able to
+  start durable work without an authorization check — e.g. \`openAccess: 'public
+  newsletter signup; the payload carries only the address being confirmed'\`.`);
+		if (n !== void 0 && n.length > 0) throw Error(`workflow("${e}"): \`openAccess\` and \`guards\` are two different access\n  decisions, so declaring both says the start is protected AND open. Keep the
+  guards if a caller must hold a scope; drop them if anyone may start it.`);
+		if (t.internal === !0) throw Error(`workflow("${e}"): \`internal: true\` cannot be combined with \`openAccess\`.\n  \`internal\` takes the start OFF the wire, and \`openAccess\` declares who may
+  start it over the wire — a decision about a door that does not exist. Drop
+  \`openAccess\` (an internal workflow needs no wire decision), or drop
+  \`internal: true\` if the workflow really is meant to be startable by clients.`);
+	}
+	return {
+		guards: t.openAccess === void 0 ? t.guards : [d(t.openAccess.trim())],
+		openAccess: t.openAccess?.trim(),
+		internal: t.internal === !0
+	};
+}, nn = (e, t) => {
+	Object.defineProperty(e, H, {
+		value: t,
+		enumerable: !1
+	});
+}, U = (e) => {
+	if (typeof e != "object" || !e) return en;
+	let t = e[H];
+	return t === void 0 ? en : t;
+}, rn = (e) => {
+	let t = U(e);
+	return {
+		name: e.name,
+		internal: t.internal,
+		guards: t.guards,
+		openAccess: t.openAccess
+	};
+}, an = (e) => e, on = (e) => e, sn = (e) => {
 	let t = e.alias?.trim(), n = e.instance?.trim(), r = t !== void 0 && t !== "" ? t : e.base;
 	return n !== void 0 && n !== "" ? `${r}#${n}` : r;
-}, Zt = (e) => {
+}, cn = (e) => {
 	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
-}, Qt = (e, t) => {
-	let n = Ve.GenericTag(e);
+}, ln = (e, t) => {
+	let n = He.GenericTag(e);
 	return {
 		Tag: n,
-		Live: He.succeed(n, t)
+		Live: Ue.succeed(n, t)
 	};
-}, $t = (e, t, n) => {
+}, un = (e, t, n) => {
 	if (!t) return { ok: !0 };
 	let r = n === void 0 ? null : W(n);
 	if (!r) return {
@@ -537,7 +579,7 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 	let i = t.trim();
 	if (i === "*" || i === "") return { ok: !0 };
 	let a = i.split(/\s+/).filter((e) => e.length > 0);
-	for (let i of a) if (!en(i, r)) return {
+	for (let i of a) if (!dn(i, r)) return {
 		ok: !1,
 		reason: `plugin "${e}" requires framework ${t}, running ${n}`
 	};
@@ -550,7 +592,7 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 		patch: Number(t[3]),
 		pre: t[4] ?? ""
 	} : null;
-}, G = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, en = (e, t) => {
+}, G = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, dn = (e, t) => {
 	if (e === "*") return !0;
 	if (e.startsWith("^")) {
 		let n = W(e.slice(1));
@@ -572,234 +614,244 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 	}
 	let r = W(e);
 	return r ? G(t, r) === 0 : !1;
-}, tn = (e) => {
+}, fn = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/-([a-zA-Z0-9])/g, (e, t) => t.toUpperCase());
-}, nn = (e) => {
+}, pn = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/#/g, "--").replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
-}, rn = Symbol.for("@voltro/protocol/pluginAliases"), K = () => {
-	let e = globalThis, t = e[rn];
+}, mn = Symbol.for("@voltro/protocol/pluginAliases"), K = () => {
+	let e = globalThis, t = e[mn];
 	if (t instanceof Map) return t;
 	let n = /* @__PURE__ */ new Map();
-	return e[rn] = n, n;
-}, an = (e) => {
+	return e[mn] = n, n;
+}, hn = (e) => {
 	let t = K();
 	for (let [n, r] of Object.entries(e)) {
 		if (r === "") continue;
 		let e = t.get(n);
 		e === void 0 ? t.set(n, /* @__PURE__ */ new Set([r])) : e.add(r);
 	}
-}, on = () => {
+}, gn = () => {
 	K().clear();
-}, sn = (e, t) => {
+}, _n = (e, t) => {
 	let n = K().get(e);
-	if (n === void 0 || n.size === 0) return `${tn(e)}.${t}`;
+	if (n === void 0 || n.size === 0) return `${fn(e)}.${t}`;
 	if (n.size === 1) return `${[...n][0]}.${t}`;
 	let r = [...n].filter((e) => !e.includes("#"));
 	if (r.length === 1) return `${r[0]}.${t}`;
 	throw Error(`[voltro] ${e} is installed more than once (${[...n].sort().join(", ")}) and no single install is the primary one, so a plugin hook cannot tell which of them it addresses. Call the route by its full tag instead — e.g. useSubscription(api, '${[...n].sort()[0]}.${t}').`);
-}, q = f.Literal("running", "succeeded", "failed", "cancelled", "suspended"), cn = f.Literal("cancel", "terminate", "abandon"), ln = f.Struct({
-	mode: f.String,
-	dueAt: f.NullOr(f.Number),
-	retryAfterMs: f.NullOr(f.Number),
-	intentId: f.NullOr(f.String)
-}), un = f.Struct({
-	id: f.String,
-	workflowName: f.String,
-	executionId: f.NullOr(f.String),
-	status: f.Literal("running", "queued", "dropped", "skipped"),
-	deferral: f.optional(ln)
-}), J = f.Struct({
-	id: f.String,
-	tag: f.String,
-	executionId: f.String,
+}, q = p.Literal("running", "succeeded", "failed", "cancelled", "suspended"), vn = p.Literal("cancel", "terminate", "abandon"), yn = p.Struct({
+	mode: p.String,
+	dueAt: p.NullOr(p.Number),
+	retryAfterMs: p.NullOr(p.Number),
+	intentId: p.NullOr(p.String)
+}), bn = p.Struct({
+	id: p.String,
+	workflowName: p.String,
+	executionId: p.NullOr(p.String),
+	status: p.Literal("running", "queued", "dropped", "skipped", "replayed"),
+	deferral: p.optional(yn)
+}), xn = (e, t) => {
+	let n = U(e);
+	return m.make(e.name, {
+		payload: w(e.payloadSchema, e.name, B(n.guards)),
+		success: bn,
+		error: Dt({
+			errorSchema: e.errorSchema,
+			guards: n.guards
+		}, t)
+	});
+}, J = p.Struct({
+	id: p.String,
+	tag: p.String,
+	executionId: p.String,
 	status: q,
-	payload: f.Unknown,
-	workflowVersion: f.NullOr(f.String),
-	workflowPatches: f.NullOr(f.Unknown),
-	output: f.NullOr(f.Unknown),
-	subject: f.NullOr(f.Unknown),
-	source: f.NullOr(f.String),
-	errorTag: f.NullOr(f.String),
-	errorMessage: f.NullOr(f.String),
-	cancelled: f.Boolean,
-	startedAt: f.Date,
-	completedAt: f.NullOr(f.Date),
-	durationMs: f.NullOr(f.Number),
-	traceId: f.NullOr(f.String),
-	parentExecutionId: f.NullOr(f.String),
-	parentClosePolicy: f.NullOr(cn)
-}), dn = f.Struct({
-	tag: f.optional(f.String),
-	status: f.optional(q),
-	limit: f.optional(f.Number)
-}), fn = f.Struct({
-	id: f.String,
-	runId: f.String,
-	stepName: f.String,
-	attempt: f.Number,
-	status: f.Literal("running", "succeeded", "failed"),
-	input: f.NullOr(f.Unknown),
-	retryPolicy: f.NullOr(f.Unknown),
-	output: f.NullOr(f.Unknown),
-	errorTag: f.NullOr(f.String),
-	errorMessage: f.NullOr(f.String),
-	errorCause: f.NullOr(f.Unknown),
-	startedAt: f.Date,
-	completedAt: f.NullOr(f.Date),
-	durationMs: f.NullOr(f.Number)
-}), pn = f.Struct({
-	id: f.String,
-	runId: f.String,
-	eventType: f.String,
-	payload: f.NullOr(f.Unknown),
-	occurredAt: f.Date,
-	stepName: f.NullOr(f.String),
-	attempt: f.NullOr(f.Number)
-}), mn = f.Struct({
-	id: f.String,
-	name: f.String,
-	payload: f.Unknown,
-	source: f.String,
-	subject: f.NullOr(f.Unknown),
-	traceId: f.NullOr(f.String),
-	occurredAt: f.Date
-}), hn = f.Struct({
-	id: f.String,
-	eventId: f.String,
-	eventName: f.String,
-	triggerId: f.String,
-	workflowName: f.String,
-	executionId: f.NullOr(f.String),
-	status: f.Literal("starting", "started", "skipped", "failed"),
-	idempotencyKey: f.String,
-	skipped: f.Boolean,
-	errorMessage: f.NullOr(f.String),
-	createdAt: f.Date,
-	completedAt: f.NullOr(f.Date)
-}), gn = f.Struct({ id: f.String }), Y = f.Struct({ runId: f.String }), _n = f.Struct({
-	name: f.optional(f.String),
-	limit: f.optional(f.Number)
-}), vn = f.Struct({ eventId: f.String }), X = f.Struct({
-	workflowName: f.String,
-	executionId: f.String
-}), yn = f.Struct({
-	id: f.String,
-	signalName: f.String,
-	payload: f.optional(f.Unknown)
-}), bn = f.Struct({
-	id: f.String,
-	updateName: f.String,
-	payload: f.optional(f.Unknown),
-	timeoutMs: f.optional(f.Number)
-}), xn = f.Struct({
-	eventId: f.String,
-	updateId: f.String,
-	completedEventId: f.String,
-	result: f.Unknown
-}), Sn = R({
+	payload: p.Unknown,
+	workflowVersion: p.NullOr(p.String),
+	workflowPatches: p.NullOr(p.Unknown),
+	output: p.NullOr(p.Unknown),
+	subject: p.NullOr(p.Unknown),
+	source: p.NullOr(p.String),
+	errorTag: p.NullOr(p.String),
+	errorMessage: p.NullOr(p.String),
+	cancelled: p.Boolean,
+	startedAt: p.Date,
+	completedAt: p.NullOr(p.Date),
+	durationMs: p.NullOr(p.Number),
+	traceId: p.NullOr(p.String),
+	parentExecutionId: p.NullOr(p.String),
+	parentClosePolicy: p.NullOr(vn)
+}), Sn = p.Struct({
+	tag: p.optional(p.String),
+	status: p.optional(q),
+	limit: p.optional(p.Number)
+}), Cn = p.Struct({
+	id: p.String,
+	runId: p.String,
+	stepName: p.String,
+	attempt: p.Number,
+	status: p.Literal("running", "succeeded", "failed"),
+	input: p.NullOr(p.Unknown),
+	retryPolicy: p.NullOr(p.Unknown),
+	output: p.NullOr(p.Unknown),
+	errorTag: p.NullOr(p.String),
+	errorMessage: p.NullOr(p.String),
+	errorCause: p.NullOr(p.Unknown),
+	startedAt: p.Date,
+	completedAt: p.NullOr(p.Date),
+	durationMs: p.NullOr(p.Number)
+}), wn = p.Struct({
+	id: p.String,
+	runId: p.String,
+	eventType: p.String,
+	payload: p.NullOr(p.Unknown),
+	occurredAt: p.Date,
+	stepName: p.NullOr(p.String),
+	attempt: p.NullOr(p.Number)
+}), Tn = p.Struct({
+	id: p.String,
+	name: p.String,
+	payload: p.Unknown,
+	source: p.String,
+	subject: p.NullOr(p.Unknown),
+	traceId: p.NullOr(p.String),
+	occurredAt: p.Date
+}), En = p.Struct({
+	id: p.String,
+	eventId: p.String,
+	eventName: p.String,
+	triggerId: p.String,
+	workflowName: p.String,
+	executionId: p.NullOr(p.String),
+	status: p.Literal("starting", "started", "skipped", "failed"),
+	idempotencyKey: p.String,
+	skipped: p.Boolean,
+	errorMessage: p.NullOr(p.String),
+	createdAt: p.Date,
+	completedAt: p.NullOr(p.Date)
+}), Dn = p.Struct({ id: p.String }), Y = p.Struct({ runId: p.String }), On = p.Struct({
+	name: p.optional(p.String),
+	limit: p.optional(p.Number)
+}), kn = p.Struct({ eventId: p.String }), X = p.Struct({
+	workflowName: p.String,
+	executionId: p.String
+}), An = p.Struct({
+	id: p.String,
+	signalName: p.String,
+	payload: p.optional(p.Unknown)
+}), jn = p.Struct({
+	id: p.String,
+	updateName: p.String,
+	payload: p.optional(p.Unknown),
+	timeoutMs: p.optional(p.Number)
+}), Mn = p.Struct({
+	eventId: p.String,
+	updateId: p.String,
+	completedEventId: p.String,
+	result: p.Unknown
+}), Nn = I({
 	name: "__voltro.workflow.run",
 	source: "_voltro_workflow_runs",
-	input: gn,
-	output: f.Array(J)
-}), Cn = R({
+	input: Dn,
+	output: p.Array(J)
+}), Pn = I({
 	name: "__voltro.workflow.runs",
 	source: "_voltro_workflow_runs",
-	input: dn,
-	output: f.Array(J)
-}), wn = R({
+	input: Sn,
+	output: p.Array(J)
+}), Fn = I({
 	name: "__voltro.workflow.run.steps",
 	source: "_voltro_workflow_run_steps",
 	input: Y,
-	output: f.Array(fn)
-}), Tn = R({
+	output: p.Array(Cn)
+}), In = I({
 	name: "__voltro.workflow.run.events",
 	source: "_voltro_workflow_run_events",
 	input: Y,
-	output: f.Array(pn)
-}), En = R({
+	output: p.Array(wn)
+}), Ln = I({
 	name: "__voltro.workflow.domainEvents",
 	source: "_voltro_workflow_events",
-	input: _n,
-	output: f.Array(mn)
-}), Dn = R({
+	input: On,
+	output: p.Array(Tn)
+}), Rn = I({
 	name: "__voltro.workflow.event.deliveries",
 	source: "_voltro_workflow_event_deliveries",
-	input: vn,
-	output: f.Array(hn)
-}), On = B({
+	input: kn,
+	output: p.Array(En)
+}), zn = R({
 	name: "__voltro.workflow.cancel",
 	input: X,
-	output: f.Struct({ ok: f.Boolean })
-}), kn = B({
+	output: p.Struct({ ok: p.Boolean })
+}), Bn = R({
 	name: "__voltro.workflow.resume",
 	input: X,
-	output: f.Struct({ ok: f.Boolean })
-}), An = B({
+	output: p.Struct({ ok: p.Boolean })
+}), Vn = R({
 	name: "__voltro.workflow.signal",
-	input: yn,
-	output: f.Struct({ eventId: f.String })
-}), jn = B({
+	input: An,
+	output: p.Struct({ eventId: p.String })
+}), Hn = R({
 	name: "__voltro.workflow.update",
-	input: bn,
-	output: xn
-}), Mn = "__voltro.undo.log", Nn = "__voltro.undo.apply", Pn = "__voltro.undo.redo", Fn = f.Struct({
-	id: f.String,
-	tag: f.String,
-	label: f.NullOr(f.String),
-	undone: f.Boolean,
-	crossesAction: f.Boolean,
-	createdAt: f.String
-}), In = class extends f.TaggedError()("UndoNotFound", { invocationId: f.String }) {}, Ln = class extends f.TaggedError()("UndoForbidden", { invocationId: f.String }) {}, Rn = class extends f.TaggedError()("UndoConflict", {
-	invocationId: f.String,
-	reason: f.Literal("conflict", "action")
-}) {}, zn = f.Union(In, Ln, Rn), Bn = R({
-	name: Mn,
+	input: jn,
+	output: Mn
+}), Un = "__voltro.undo.log", Wn = "__voltro.undo.apply", Gn = "__voltro.undo.redo", Kn = p.Struct({
+	id: p.String,
+	tag: p.String,
+	label: p.NullOr(p.String),
+	undone: p.Boolean,
+	crossesAction: p.Boolean,
+	createdAt: p.String
+}), qn = class extends p.TaggedError()("UndoNotFound", { invocationId: p.String }) {}, Jn = class extends p.TaggedError()("UndoForbidden", { invocationId: p.String }) {}, Yn = class extends p.TaggedError()("UndoConflict", {
+	invocationId: p.String,
+	reason: p.Literal("conflict", "action")
+}) {}, Xn = p.Union(qn, Jn, Yn), Zn = I({
+	name: Un,
 	source: "_voltro_undo_log",
-	input: f.Struct({ limit: f.optional(f.Number) }),
-	output: f.Array(Fn),
+	input: p.Struct({ limit: p.optional(p.Number) }),
+	output: p.Array(Kn),
 	openAccess: "subject-scoped by construction: lists only the calling subject's own undoable actions"
-}), Vn = z({
-	name: Nn,
-	input: f.Struct({ invocationId: f.String }),
-	output: f.Struct({ ok: f.Boolean }),
-	error: zn,
+}), Qn = L({
+	name: Wn,
+	input: p.Struct({ invocationId: p.String }),
+	output: p.Struct({ ok: p.Boolean }),
+	error: Xn,
 	openAccess: "subject-scoped by construction: undo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), Hn = z({
-	name: Pn,
-	input: f.Struct({ invocationId: f.String }),
-	output: f.Struct({ ok: f.Boolean }),
-	error: zn,
+}), $n = L({
+	name: Gn,
+	input: p.Struct({ invocationId: p.String }),
+	output: p.Struct({ ok: p.Boolean }),
+	error: Xn,
 	openAccess: "subject-scoped by construction: redo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), Un = class extends f.TaggedError()("TenantScopeViolation", {
-	table: f.String,
-	reason: f.String
-}) {}, Wn = class extends f.TaggedError()("StoreOperationFailed", {
-	operation: f.String,
-	table: f.String,
-	cause: f.String
-}) {}, Gn = class extends f.TaggedError()("TableValidationFailed", {
-	table: f.String,
-	summary: f.String,
-	issues: f.Array(f.Struct({
-		path: f.String,
-		message: f.String
+}), er = class extends p.TaggedError()("TenantScopeViolation", {
+	table: p.String,
+	reason: p.String
+}) {}, tr = class extends p.TaggedError()("StoreOperationFailed", {
+	operation: p.String,
+	table: p.String,
+	cause: p.String
+}) {}, nr = class extends p.TaggedError()("TableValidationFailed", {
+	table: p.String,
+	summary: p.String,
+	issues: p.Array(p.Struct({
+		path: p.String,
+		message: p.String
 	}))
-}) {}, Kn = class extends f.TaggedError()("TenantRowNotFound", {
-	table: f.String,
-	id: f.String,
-	reason: f.String
-}) {}, qn = class extends f.TaggedError()("ServerOnlyColumnWrite", {
-	table: f.String,
-	columns: f.Array(f.String)
-}) {}, Jn = class extends f.TaggedError()("ConstraintViolation", {
-	kind: f.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
-	table: f.String,
-	operation: f.String,
-	constraint: f.optional(f.String),
-	column: f.optional(f.String),
-	detail: f.optional(f.String)
+}) {}, rr = class extends p.TaggedError()("TenantRowNotFound", {
+	table: p.String,
+	id: p.String,
+	reason: p.String
+}) {}, ir = class extends p.TaggedError()("ServerOnlyColumnWrite", {
+	table: p.String,
+	columns: p.Array(p.String)
+}) {}, ar = class extends p.TaggedError()("ConstraintViolation", {
+	kind: p.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
+	table: p.String,
+	operation: p.String,
+	constraint: p.optional(p.String),
+	column: p.optional(p.String),
+	detail: p.optional(p.String)
 }) {
 	get message() {
 		if (this.detail !== void 0) return this.detail;
@@ -812,85 +864,85 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 			case "check": return `check constraint ${t}: the row does not satisfy it`;
 		}
 	}
-}, Yn = "__voltro.approvals.pending", Xn = "__voltro.approvals.decide", Zn = R({
-	name: Yn,
+}, or = "__voltro.approvals.pending", sr = "__voltro.approvals.decide", cr = I({
+	name: or,
 	source: "_voltro_approvals",
-	input: f.Struct({ limit: f.optional(f.Number) }),
-	output: f.Array(st),
+	input: p.Struct({ limit: p.optional(p.Number) }),
+	output: p.Array(ot),
 	openAccess: "the answer is scoped to the caller — a row appears only if they requested it or hold its recorded approver scopes, so an anonymous caller sees nothing"
-}), Qn = z({
-	name: Xn,
-	input: f.Struct({
-		approvalId: f.String,
-		decision: f.Literal("approve", "reject"),
-		note: f.optional(f.String)
+}), lr = L({
+	name: sr,
+	input: p.Struct({
+		approvalId: p.String,
+		decision: p.Literal("approve", "reject"),
+		note: p.optional(p.String)
 	}),
-	output: f.Struct({
-		approvalId: f.String,
-		status: f.Literal("approved", "rejected")
+	output: p.Struct({
+		approvalId: p.String,
+		status: p.Literal("approved", "rejected")
 	}),
-	error: ot,
+	error: at,
 	openAccess: "the approver authority is the PENDING ROW's own recorded scopes (plus an unconditional self-approval refusal), checked in-handler — a descriptor-level scope would have to be the union of every approval-requiring procedure in the app"
-}), $n = "__voltro.connections.list", er = "__voltro.connections.start", Z = "__voltro.connections.submitToken", tr = "__voltro.connections.disconnect", Q = f.Literal("oauth2", "pat"), nr = f.Literal("disconnected", "connected", "expired", "revoked", "error"), rr = f.Struct({
-	connectionId: f.String,
+}), Z = "__voltro.connections.list", ur = "__voltro.connections.start", dr = "__voltro.connections.submitToken", fr = "__voltro.connections.disconnect", Q = p.Literal("oauth2", "pat"), pr = p.Literal("disconnected", "connected", "expired", "revoked", "error"), mr = p.Struct({
+	connectionId: p.String,
 	kind: Q,
-	label: f.String,
-	status: nr,
-	accountId: f.NullOr(f.String),
-	accountLabel: f.NullOr(f.String),
-	scopes: f.Array(f.String),
-	expiresAt: f.NullOr(f.String),
-	lastError: f.NullOr(f.String),
-	connectedAt: f.NullOr(f.String)
-}), ir = class extends f.TaggedError()("ConnectionNotDeclared", { connectionId: f.String }) {}, ar = class extends f.TaggedError()("ConnectionSubjectRequired", { connectionId: f.String }) {}, or = class extends f.TaggedError()("ConnectionKindMismatch", {
-	connectionId: f.String,
+	label: p.String,
+	status: pr,
+	accountId: p.NullOr(p.String),
+	accountLabel: p.NullOr(p.String),
+	scopes: p.Array(p.String),
+	expiresAt: p.NullOr(p.String),
+	lastError: p.NullOr(p.String),
+	connectedAt: p.NullOr(p.String)
+}), hr = class extends p.TaggedError()("ConnectionNotDeclared", { connectionId: p.String }) {}, gr = class extends p.TaggedError()("ConnectionSubjectRequired", { connectionId: p.String }) {}, _r = class extends p.TaggedError()("ConnectionKindMismatch", {
+	connectionId: p.String,
 	expected: Q,
 	actual: Q
-}) {}, sr = class extends f.TaggedError()("ConnectionHandshakeFailed", {
-	connectionId: f.String,
-	reason: f.String,
-	transient: f.Boolean
-}) {}, $ = f.Union(ir, ar, or, sr), cr = R({
-	name: $n,
+}) {}, vr = class extends p.TaggedError()("ConnectionHandshakeFailed", {
+	connectionId: p.String,
+	reason: p.String,
+	transient: p.Boolean
+}) {}, $ = p.Union(hr, gr, _r, vr), yr = I({
+	name: Z,
 	source: "_voltro_connections",
-	input: f.Struct({}),
-	output: f.Array(rr),
+	input: p.Struct({}),
+	output: p.Array(mr),
 	openAccess: "self-scoped read: projects the declared connections for the calling subject only (its own connect/disconnect state)"
-}), lr = B({
-	name: er,
-	input: f.Struct({
-		connectionId: f.String,
-		redirectTo: f.optional(f.String)
+}), br = R({
+	name: ur,
+	input: p.Struct({
+		connectionId: p.String,
+		redirectTo: p.optional(p.String)
 	}),
-	output: f.Struct({
-		authorizeUrl: f.String,
-		state: f.String
+	output: p.Struct({
+		authorizeUrl: p.String,
+		state: p.String
 	}),
 	error: $,
 	openAccess: "self-service: begins an oauth handshake that stores a credential for the calling subject only; anonymous callers fail typed with ConnectionSubjectRequired"
-}), ur = z({
-	name: Z,
-	input: f.Struct({
-		connectionId: f.String,
-		token: f.String
+}), xr = L({
+	name: dr,
+	input: p.Struct({
+		connectionId: p.String,
+		token: p.String
 	}),
-	output: f.Struct({ ok: f.Boolean }),
+	output: p.Struct({ ok: p.Boolean }),
 	error: $,
 	openAccess: "self-service: stores a pasted token as the calling subject's own credential; anonymous callers fail typed with ConnectionSubjectRequired"
-}), dr = z({
-	name: tr,
-	input: f.Struct({ connectionId: f.String }),
-	output: f.Struct({ ok: f.Boolean }),
+}), Sr = L({
+	name: fr,
+	input: p.Struct({ connectionId: p.String }),
+	output: p.Struct({ ok: p.Boolean }),
 	error: $,
 	openAccess: "self-service: deletes only the calling subject's own credential row for this connection"
-}), fr = (e) => {
+}), Cr = (e) => {
 	let t = e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : 0;
 	return Number.isNaN(t) ? 0 : t;
-}, pr = 4001, mr = /* @__PURE__ */ new Set(["/rpc", "/ws"]), hr = (e) => {
+}, wr = 4001, Tr = /* @__PURE__ */ new Set(["/rpc", "/ws"]), Er = (e) => {
 	if (!e.path.startsWith("/")) throw Error(`defineWebSocket: path must be absolute, got '${e.path}'`);
-	if (mr.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
+	if (Tr.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
 	if (e.auth !== "subject" && e.auth !== "public") throw Error(`defineWebSocket: auth must be 'subject' or 'public' (explicitly — an unauthenticated socket has to be a decision somebody wrote down), got '${String(e.auth)}'`);
 	return e;
-}, gr = 1;
+}, Dr = 1;
 //#endregion
-export { De as ADMIN_SCOPE, Se as APIKEY_ISSUE_ORG_SCOPE, Te as APIKEY_ISSUE_OTHER_SCOPE, _e as APIKEY_ISSUE_SELF_SCOPE, Xn as APPROVALS_DECIDE_TAG, Yn as APPROVALS_PENDING_TAG, ot as ApprovalDecisionErrors, at as ApprovalErrors, T as ApprovalExpired, it as ApprovalForbidden, et as ApprovalNotFound, rt as ApprovalNotPending, nt as ApprovalRejected, $e as ApprovalRequired, tt as ApprovalSelfApproval, E as ApprovalUnavailable, ke as AuthMiddleware, S as BusinessRuleViolation, $n as CONNECTIONS_LIST_TAG, tr as CONNECTION_DISCONNECT_TAG, er as CONNECTION_START_TAG, Z as CONNECTION_SUBMIT_TOKEN_TAG, sr as ConnectionHandshakeFailed, se as ConnectionInfo, i as ConnectionInfoMiddleware, Q as ConnectionKind, or as ConnectionKindMismatch, ir as ConnectionNotDeclared, rr as ConnectionState, nr as ConnectionStatus, ar as ConnectionSubjectRequired, Jn as ConstraintViolation, r as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, re as DEFAULT_SCOPE_CACHE_TTL_MS, Wt as EVENT_ROUTE_SEP, Vt as EventKeyInvalid, Bt as EventPayloadInvalid, Ht as EventPayloadTooLarge, pr as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, ye as IMPERSONATION_METADATA_KEY, At as MAX_EVENT_ENVELOPE_BYTES, gr as PROTOCOL_VERSION, st as PendingApproval, D as REACTIVITY_CHANNEL_PREFIX, l as ScopeError, qn as ServerOnlyColumnWrite, Wn as StoreOperationFailed, e as Subject, ve as SubjectIdentity, ne as SubjectService, Gn as TableValidationFailed, Kn as TenantRowNotFound, Un as TenantScopeViolation, Nn as UNDO_APPLY_TAG, Mn as UNDO_LOG_TAG, Pn as UNDO_REDO_TAG, c as Unauthenticated, Rn as UndoConflict, Ln as UndoForbidden, Fn as UndoLogEntry, In as UndoNotFound, w as ValidationError, Ze as ValidationErrors, C as ValidationIssue, X as WorkflowControlInputSchema, mn as WorkflowDomainEventRowSchema, _n as WorkflowDomainEventsInputSchema, vn as WorkflowEventDeliveriesInputSchema, hn as WorkflowEventDeliveryRowSchema, cn as WorkflowParentClosePolicySchema, pn as WorkflowRunEventRowSchema, un as WorkflowRunHandleSchema, gn as WorkflowRunRefSchema, J as WorkflowRunRowSchema, q as WorkflowRunStatusSchema, fn as WorkflowRunStepRowSchema, Y as WorkflowRunTableRefSchema, dn as WorkflowRunsInputSchema, yn as WorkflowSignalInputSchema, ln as WorkflowStartDeferralSchema, bn as WorkflowUpdateInputSchema, xn as WorkflowUpdateResultSchema, Tt as actionToRpc, Ce as advisoryResourceGuardWarning, ie as anonymousSubject, Ye as applyRowPatch, a as applyScopeDecision, Qn as approvalsDecideDescriptor, Zn as approvalsPendingQueryDescriptor, ee as assertAuthenticated, Re as beginIdempotent, $t as checkFrameworkCompat, Ee as checkGuards, pe as checkGuardsEffect, te as composeAuthStrategies, Zt as composeRpcInterceptors, dr as connectionDisconnectDescriptor, lr as connectionStartDescriptor, ur as connectionSubmitTokenDescriptor, cr as connectionsListQueryDescriptor, M as declaredReactivityChannelKeys, B as defineAction, Mt as defineEvent, z as defineMutation, Jt as definePlugin, Yt as definePluginRoute, Qt as definePluginService, R as defineQuery, _t as defineStream, hr as defineWebSocket, qe as diffRows, be as effectiveScopes, Ut as encodeEventKey, Dt as errorTag, Ft as eventAttached, Nt as eventEnvelope, Pt as eventGap, Lt as eventResumePoint, Gt as eventRoute, It as eventStreamEvent, Rt as eventSubscribeInput, zt as eventToRpc, Fe as failIdempotent, Qe as fieldIssuesOf, Oe as findAdvisoryResourceGuards, Ne as finishIdempotent, qt as formatEventRoute, me as getPolicyGuardResolver, he as getResourceScopeResolver, gt as hasAccessDecision, ae as hasCallbackRoutes, we as hasEffectiveScope, H as hasEnforcedGuard, xe as hasScope, g as idToPath, Le as idempotencyScope, b as inputLabel, jt as isEventDescriptor, Je as isIdKeyed, u as isOpenAccess, ge as isPolicyCheck, ht as isPolicyGuard, A as isReactivityChannel, j as isReactivityChannelKey, Me as isSystemSubject, pt as isWireReachable, t as makeScopeCache, ze as memoryIdempotencyStore, de as missingAccessDecision, wt as mutationToRpc, kt as normalizeDescriptor, F as normalizeSource, d as openAccessSpec, Kt as parseEventRoute, Ge as pathToId, tn as pluginAlias, Xt as pluginInstanceName, nn as pluginSlug, sn as pluginTag, ft as publishReactivity, Be as publishServerError, Ct as queryToRpc, le as rawImpersonationMark, ut as reactivityChannel, an as registerPluginAliases, je as requireScope, on as resetPluginAliases, h as rowPatchOpSchema, We as rowPatchSchema, s as scopeCacheKey, fe as setEffectiveScopes, Ae as setPolicyGuardResolver, oe as setResourceScopeResolver, P as sourceKeys, Et as streamToRpc, x as strictInput, ce as subjectIdentity, n as subjectScopes, Ie as subscribeServerErrors, y as subscriptionEvent, ue as systemSubject, o as tenantScopedSubject, Ot as toRpc, fr as tsMs, dt as undeclaredChannelKeys, Vn as undoApplyDescriptor, Bn as undoLogQueryDescriptor, Hn as undoRedoDescriptor, U as wireErrorUnion, St as withRpcTag, On as workflowCancelDescriptor, En as workflowDomainEventsQueryDescriptor, Dn as workflowEventDeliveriesQueryDescriptor, kn as workflowResumeDescriptor, Tn as workflowRunEventsQueryDescriptor, Sn as workflowRunQueryDescriptor, wn as workflowRunStepsQueryDescriptor, Cn as workflowRunsQueryDescriptor, An as workflowSignalDescriptor, jn as workflowUpdateDescriptor, Pe as wsMutationIdempotencyScope };
+export { De as ADMIN_SCOPE, Se as APIKEY_ISSUE_ORG_SCOPE, Te as APIKEY_ISSUE_OTHER_SCOPE, _e as APIKEY_ISSUE_SELF_SCOPE, sr as APPROVALS_DECIDE_TAG, or as APPROVALS_PENDING_TAG, at as ApprovalDecisionErrors, it as ApprovalErrors, k as ApprovalExpired, rt as ApprovalForbidden, $e as ApprovalNotFound, nt as ApprovalNotPending, tt as ApprovalRejected, Qe as ApprovalRequired, et as ApprovalSelfApproval, A as ApprovalUnavailable, ke as AuthMiddleware, T as BusinessRuleViolation, Z as CONNECTIONS_LIST_TAG, fr as CONNECTION_DISCONNECT_TAG, ur as CONNECTION_START_TAG, dr as CONNECTION_SUBMIT_TOKEN_TAG, vr as ConnectionHandshakeFailed, se as ConnectionInfo, i as ConnectionInfoMiddleware, Q as ConnectionKind, _r as ConnectionKindMismatch, hr as ConnectionNotDeclared, mr as ConnectionState, pr as ConnectionStatus, gr as ConnectionSubjectRequired, ar as ConstraintViolation, r as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, re as DEFAULT_SCOPE_CACHE_TTL_MS, Xt as EVENT_ROUTE_SEP, qt as EventKeyInvalid, Kt as EventPayloadInvalid, Jt as EventPayloadTooLarge, wr as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, ye as IMPERSONATION_METADATA_KEY, It as MAX_EVENT_ENVELOPE_BYTES, Re as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, f as MutationInFlight, Dr as PROTOCOL_VERSION, ot as PendingApproval, j as REACTIVITY_CHANNEL_PREFIX, l as ScopeError, ir as ServerOnlyColumnWrite, tr as StoreOperationFailed, e as Subject, ve as SubjectIdentity, ne as SubjectService, nr as TableValidationFailed, rr as TenantRowNotFound, er as TenantScopeViolation, Wn as UNDO_APPLY_TAG, Un as UNDO_LOG_TAG, Gn as UNDO_REDO_TAG, c as Unauthenticated, Yn as UndoConflict, Jn as UndoForbidden, Kn as UndoLogEntry, qn as UndoNotFound, D as ValidationError, O as ValidationErrors, E as ValidationIssue, H as WorkflowAccessProperty, X as WorkflowControlInputSchema, Tn as WorkflowDomainEventRowSchema, On as WorkflowDomainEventsInputSchema, kn as WorkflowEventDeliveriesInputSchema, En as WorkflowEventDeliveryRowSchema, vn as WorkflowParentClosePolicySchema, wn as WorkflowRunEventRowSchema, bn as WorkflowRunHandleSchema, Dn as WorkflowRunRefSchema, J as WorkflowRunRowSchema, q as WorkflowRunStatusSchema, Cn as WorkflowRunStepRowSchema, Y as WorkflowRunTableRefSchema, Sn as WorkflowRunsInputSchema, An as WorkflowSignalInputSchema, yn as WorkflowStartDeferralSchema, jn as WorkflowUpdateInputSchema, Mn as WorkflowUpdateResultSchema, jt as actionToRpc, Ce as advisoryResourceGuardWarning, ie as anonymousSubject, Ye as applyRowPatch, a as applyScopeDecision, lr as approvalsDecideDescriptor, cr as approvalsPendingQueryDescriptor, ee as assertAuthenticated, nn as attachWorkflowAccess, Ne as beginIdempotent, un as checkFrameworkCompat, Ee as checkGuards, pe as checkGuardsEffect, te as composeAuthStrategies, cn as composeRpcInterceptors, Sr as connectionDisconnectDescriptor, br as connectionStartDescriptor, xr as connectionSubmitTokenDescriptor, yr as connectionsListQueryDescriptor, pt as declaredReactivityChannelKeys, R as defineAction, Rt as defineEvent, L as defineMutation, an as definePlugin, on as definePluginRoute, ln as definePluginService, I as defineQuery, St as defineStream, Er as defineWebSocket, qe as diffRows, be as effectiveScopes, Yt as encodeEventKey, Nt as errorTag, Vt as eventAttached, zt as eventEnvelope, Bt as eventGap, Ut as eventResumePoint, Zt as eventRoute, Ht as eventStreamEvent, Wt as eventSubscribeInput, Gt as eventToRpc, Le as failIdempotent, Ze as fieldIssuesOf, Oe as findAdvisoryResourceGuards, ze as finishIdempotent, $t as formatEventRoute, me as getPolicyGuardResolver, he as getResourceScopeResolver, U as getWorkflowAccess, xt as hasAccessDecision, ae as hasCallbackRoutes, we as hasEffectiveScope, B as hasEnforcedGuard, xe as hasScope, v as idToPath, Pe as idempotencyScope, C as inputLabel, Lt as isEventDescriptor, Je as isIdKeyed, u as isOpenAccess, ge as isPolicyCheck, bt as isPolicyGuard, dt as isReactivityChannel, ft as isReactivityChannelKey, Me as isSystemSubject, vt as isWireReachable, t as makeScopeCache, Fe as memoryIdempotencyStore, de as missingAccessDecision, At as mutationToRpc, Ft as normalizeDescriptor, ht as normalizeSource, d as openAccessSpec, Qt as parseEventRoute, y as pathToId, fn as pluginAlias, sn as pluginInstanceName, pn as pluginSlug, _n as pluginTag, _t as publishReactivity, Be as publishServerError, kt as queryToRpc, le as rawImpersonationMark, ut as reactivityChannel, hn as registerPluginAliases, je as requireScope, gn as resetPluginAliases, tn as resolveWorkflowAccess, g as rowPatchOpSchema, _ as rowPatchSchema, s as scopeCacheKey, fe as setEffectiveScopes, Ae as setPolicyGuardResolver, oe as setResourceScopeResolver, mt as sourceKeys, Mt as streamToRpc, w as strictInput, ce as subjectIdentity, n as subjectScopes, Ie as subscribeServerErrors, S as subscriptionEvent, ue as systemSubject, o as tenantScopedSubject, Pt as toRpc, Cr as tsMs, gt as undeclaredChannelKeys, Qn as undoApplyDescriptor, Zn as undoLogQueryDescriptor, $n as undoRedoDescriptor, V as wireErrorUnion, Ot as withRpcTag, rn as workflowAccessDescriptor, zn as workflowCancelDescriptor, Ln as workflowDomainEventsQueryDescriptor, Rn as workflowEventDeliveriesQueryDescriptor, Bn as workflowResumeDescriptor, In as workflowRunEventsQueryDescriptor, Nn as workflowRunQueryDescriptor, Fn as workflowRunStepsQueryDescriptor, Pn as workflowRunsQueryDescriptor, Vn as workflowSignalDescriptor, xn as workflowToRpc, Hn as workflowUpdateDescriptor, Dt as workflowWireErrorUnion, Ve as wsMutationIdempotencyScope };