@voltro/protocol 0.63.0 → 0.65.0

package/dist/index.js

@@ -1,53 +1,54 @@
-import { A as e, B as t, C as n, D as r, E as i, F as a, G as o, H as s, I as ee, L as te, M as ne, N as c, O as re, P as ie, R as ae, S as oe, T as se, U as ce, V as le, W as ue, _ as de, a as l, b as fe, c as pe, d as me, f as he, g as ge, h as u, i as _e, j as ve, k as ye, l as be, m as xe, n as Se, o as Ce, p as we, r as Te, s as Ee, t as De, u as Oe, v as d, w as ke, x as Ae, y as je, z as Me } from "./scopes-B0kGvAnI.js";
-import { a as Ne, c as Pe, i as Fe, n as Ie, o as Le, r as Re, s as ze, t as Be } from "./serverErrorBus-BeN9pOpY.js";
-import { Context as Ve, Layer as He, Schema as f } from "effect";
-import { Rpc as p } from "@effect/rpc";
+import { A as e, B as t, C as n, D as r, E as i, F as a, G as o, H as s, I as c, K as ee, L as te, M as ne, N as re, O as ie, P as l, R as ae, S as oe, T as se, U as ce, V as le, W as ue, _ as de, a as u, b as fe, c as pe, d as me, f as he, g as d, h as ge, i as _e, j as ve, k as ye, l as be, m as xe, n as Se, o as Ce, p as we, r as Te, s as Ee, t as De, u as Oe, v as ke, w as Ae, x as je, y as f, z as Me } from "./scopes-C86BDyNJ.js";
+import { a as Ne, c as Pe, i as p, l as Fe, n as Ie, o as Le, r as Re, s as ze, t as Be, u as Ve } from "./serverErrorBus-QQgyq6fV.js";
+import { Context as He, Layer as Ue, Schema as m } from "effect";
+import { Rpc as h } from "@effect/rpc";
+import { VersionConflict as We } from "@voltro/database/wire";
 //#region src/rowPatch.ts
-var Ue = f.Union(f.String, f.Number), m = f.Record({
-	key: f.String,
-	value: f.Unknown
-}).pipe(f.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), h = f.Union(f.Struct({
-	op: f.Literal("add"),
-	path: f.String,
-	value: m
-}), f.Struct({
-	op: f.Literal("replace"),
-	path: f.String,
-	value: m
-}), f.Struct({
-	op: f.Literal("remove"),
-	path: f.String
-}), f.Struct({
-	op: f.Literal("mergeCells"),
-	path: f.String,
-	value: f.Record({
-		key: f.String,
-		value: f.Unknown
+var Ge = m.Union(m.String, m.Number), g = m.Record({
+	key: m.String,
+	value: m.Unknown
+}).pipe(m.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), _ = m.Union(m.Struct({
+	op: m.Literal("add"),
+	path: m.String,
+	value: g
+}), m.Struct({
+	op: m.Literal("replace"),
+	path: m.String,
+	value: g
+}), m.Struct({
+	op: m.Literal("remove"),
+	path: m.String
+}), m.Struct({
+	op: m.Literal("mergeCells"),
+	path: m.String,
+	value: m.Record({
+		key: m.String,
+		value: m.Unknown
 	})
-})), We = f.Struct({
-	ops: f.Array(h),
-	order: f.Array(Ue)
-}), g = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, Ge = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), _ = (e) => {
+})), v = m.Struct({
+	ops: m.Array(_),
+	order: m.Array(Ge)
+}), y = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, b = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), x = (e) => {
 	let t = Object.keys(e).sort(), n = {};
 	for (let r of t) n[r] = e[r];
 	return JSON.stringify(n);
-}, v = (e, t) => _(e) === _(t), Ke = (e, t) => {
+}, S = (e, t) => x(e) === x(t), Ke = (e, t) => {
 	if (e instanceof Uint8Array && t instanceof Uint8Array) {
 		if (e.length !== t.length) return !1;
 		for (let n = 0; n < e.length; n += 1) if (e[n] !== t[n]) return !1;
 		return !0;
 	}
-	return _({
+	return x({
 		id: 0,
 		v: e
-	}) === _({
+	}) === x({
 		id: 0,
 		v: t
 	});
 }, qe = (e, t, n = {}) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) r.set(t.id, t);
-	let i = [], a = [], o = /* @__PURE__ */ new Set(), s = n.crdt, ee = (e, t) => {
+	let i = [], a = [], o = /* @__PURE__ */ new Set(), s = n.crdt, c = (e, t) => {
 		if (s === void 0 || s.columns.size === 0) return;
 		let n = {}, r = !1;
 		for (let i of s.columns) {
@@ -69,29 +70,29 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 		let t = r.get(e.id);
 		if (t === void 0) i.push({
 			op: "add",
-			path: g(e.id),
+			path: y(e.id),
 			value: e
 		});
-		else if (!v(t, e)) {
-			let n = ee(t, e);
+		else if (!S(t, e)) {
+			let n = c(t, e);
 			n === void 0 ? i.push({
 				op: "replace",
-				path: g(e.id),
+				path: y(e.id),
 				value: e
-			}) : (v(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
+			}) : (S(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
 				op: "replace",
-				path: g(e.id),
+				path: y(e.id),
 				value: n.scalars
 			}), i.push({
 				op: "mergeCells",
-				path: g(e.id),
+				path: y(e.id),
 				value: n.merges
 			}));
 		}
 	}
 	for (let t of e) o.has(t.id) || i.push({
 		op: "remove",
-		path: g(t.id)
+		path: y(t.id)
 	});
 	return {
 		ops: i,
@@ -105,7 +106,7 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 	for (let t of e) r.set(t.id, t);
 	for (let e of t.ops) {
 		if (e.op === "mergeCells") {
-			let t = Ge(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
+			let t = b(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
 			if (i === void 0) continue;
 			let o = { ...i };
 			for (let [t, r] of Object.entries(e.value)) o[t] = n.mergeCell === void 0 ? r : n.mergeCell(t, i[t], r);
@@ -120,56 +121,56 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 		t !== void 0 && i.push(t);
 	}
 	return i;
-}, y = (e) => f.Union(f.Struct({
-	_tag: f.Literal("snapshot"),
-	revision: f.Number,
+}, C = (e) => m.Union(m.Struct({
+	_tag: m.Literal("snapshot"),
+	revision: m.Number,
 	data: e,
-	computed: f.optional(f.Boolean)
-}), f.Struct({
-	_tag: f.Literal("delta"),
-	revision: f.Number,
-	emittedAt: f.Number,
-	patch: We
-}), f.Struct({
-	_tag: f.Literal("error"),
-	error: f.Unknown,
-	revision: f.optional(f.Number)
-})), b = (e, t) => {
+	computed: m.optional(m.Boolean)
+}), m.Struct({
+	_tag: m.Literal("delta"),
+	revision: m.Number,
+	emittedAt: m.Number,
+	patch: v
+}), m.Struct({
+	_tag: m.Literal("error"),
+	error: m.Unknown,
+	revision: m.optional(m.Number)
+})), w = (e, t) => {
 	let n = `${e ?? "this procedure"} input`;
 	return t === !0 ? `${n} (guarded — the guard did NOT run: the payload failed to decode first, so this says nothing about access)` : n;
 }, Xe = (e) => {
 	let t = e.ast;
 	return t._tag === "TypeLiteral" && (t.propertySignatures?.length ?? 0) === 0 && (t.indexSignatures?.length ?? 0) === 0;
-}, x = (e, t, n) => {
-	let r = b(t, n), i = e.annotations({
+}, T = (e, t, n) => {
+	let r = w(t, n), i = e.annotations({
 		parseOptions: { onExcessProperty: "error" },
 		parseIssueTitle: () => r
 	});
-	return Xe(e) ? f.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
-}, S = class extends f.TaggedError()("BusinessRuleViolation", {
-	rule: f.String,
-	params: f.optional(f.Record({
-		key: f.String,
-		value: f.Unknown
+	return Xe(e) ? m.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
+}, E = class extends m.TaggedError()("BusinessRuleViolation", {
+	rule: m.String,
+	params: m.optional(m.Record({
+		key: m.String,
+		value: m.Unknown
 	})),
-	field: f.optional(f.String),
-	message: f.optional(f.String),
-	severity: f.Literal("error", "warning")
-}) {}, C = f.Struct({
-	field: f.String,
-	message: f.String,
-	params: f.optional(f.Record({
-		key: f.String,
-		value: f.Unknown
+	field: m.optional(m.String),
+	message: m.optional(m.String),
+	severity: m.Literal("error", "warning")
+}) {}, D = m.Struct({
+	field: m.String,
+	message: m.String,
+	params: m.optional(m.Record({
+		key: m.String,
+		value: m.Unknown
 	}))
-}), w = class extends f.TaggedError()("ValidationError", {
-	field: f.String,
-	message: f.String,
-	params: f.optional(f.Record({
-		key: f.String,
-		value: f.Unknown
+}), O = class extends m.TaggedError()("ValidationError", {
+	field: m.String,
+	message: m.String,
+	params: m.optional(m.Record({
+		key: m.String,
+		value: m.Unknown
 	}))
-}) {}, Ze = class extends f.TaggedError()("ValidationErrors", { issues: f.Array(C).pipe(f.minItems(1)) }) {}, Qe = (e) => {
+}) {}, Ze = class extends m.TaggedError()("ValidationErrors", { issues: m.Array(D).pipe(m.minItems(1)) }) {}, Qe = (e) => {
 	if (typeof e != "object" || !e) return [];
 	let t = e._tag;
 	if (t === "ValidationError") {
@@ -195,69 +196,69 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 		}];
 	}
 	return [];
-}, $e = class extends f.TaggedError()("ApprovalRequired", {
-	approvalId: f.String,
-	procedure: f.String,
-	expiresAt: f.String,
-	requiredScopes: f.Array(f.String),
-	reason: f.NullOr(f.String),
-	created: f.Boolean
-}) {}, et = class extends f.TaggedError()("ApprovalNotFound", { approvalId: f.String }) {}, tt = class extends f.TaggedError()("ApprovalSelfApproval", {
-	approvalId: f.String,
-	subjectId: f.NullOr(f.String)
-}) {}, nt = class extends f.TaggedError()("ApprovalRejected", {
-	approvalId: f.String,
-	decidedBy: f.NullOr(f.String),
-	note: f.NullOr(f.String)
-}) {}, T = class extends f.TaggedError()("ApprovalExpired", {
-	approvalId: f.String,
-	expiredAt: f.String
-}) {}, rt = class extends f.TaggedError()("ApprovalNotPending", {
-	approvalId: f.String,
-	status: f.String
-}) {}, it = class extends f.TaggedError()("ApprovalForbidden", {
-	approvalId: f.String,
-	required: f.NullOr(f.String),
-	message: f.String
-}) {}, E = class extends f.TaggedError()("ApprovalUnavailable", {
-	procedure: f.String,
-	message: f.String
-}) {}, at = f.Union($e, nt, T, E), ot = f.Union(et, tt, T, rt, it, E), st = f.Struct({
-	id: f.String,
-	procedure: f.String,
-	kind: f.Literal("mutation", "action"),
-	requestedBy: f.NullOr(f.String),
-	status: f.Literal("pending", "approved", "rejected", "expired", "consumed"),
-	reason: f.NullOr(f.String),
-	requiredScopes: f.Array(f.String),
-	requestedAt: f.String,
-	expiresAt: f.String,
-	decidedBy: f.NullOr(f.String),
-	decidedAt: f.NullOr(f.String),
-	note: f.NullOr(f.String),
-	relation: f.Literal("to-decide", "requested")
-}), D = "channel:", ct = Symbol.for("@voltro/protocol/reactivityChannels"), O = globalThis, k = O[ct] ?? (O[ct] = /* @__PURE__ */ new Map()), lt = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, ut = (e) => {
-	if (!lt.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
+}, $e = class extends m.TaggedError()("ApprovalRequired", {
+	approvalId: m.String,
+	procedure: m.String,
+	expiresAt: m.String,
+	requiredScopes: m.Array(m.String),
+	reason: m.NullOr(m.String),
+	created: m.Boolean
+}) {}, et = class extends m.TaggedError()("ApprovalNotFound", { approvalId: m.String }) {}, tt = class extends m.TaggedError()("ApprovalSelfApproval", {
+	approvalId: m.String,
+	subjectId: m.NullOr(m.String)
+}) {}, nt = class extends m.TaggedError()("ApprovalRejected", {
+	approvalId: m.String,
+	decidedBy: m.NullOr(m.String),
+	note: m.NullOr(m.String)
+}) {}, k = class extends m.TaggedError()("ApprovalExpired", {
+	approvalId: m.String,
+	expiredAt: m.String
+}) {}, rt = class extends m.TaggedError()("ApprovalNotPending", {
+	approvalId: m.String,
+	status: m.String
+}) {}, it = class extends m.TaggedError()("ApprovalForbidden", {
+	approvalId: m.String,
+	required: m.NullOr(m.String),
+	message: m.String
+}) {}, A = class extends m.TaggedError()("ApprovalUnavailable", {
+	procedure: m.String,
+	message: m.String
+}) {}, at = m.Union($e, nt, k, A), ot = m.Union(et, tt, k, rt, it, A), st = m.Struct({
+	id: m.String,
+	procedure: m.String,
+	kind: m.Literal("mutation", "action"),
+	requestedBy: m.NullOr(m.String),
+	status: m.Literal("pending", "approved", "rejected", "expired", "consumed"),
+	reason: m.NullOr(m.String),
+	requiredScopes: m.Array(m.String),
+	requestedAt: m.String,
+	expiresAt: m.String,
+	decidedBy: m.NullOr(m.String),
+	decidedAt: m.NullOr(m.String),
+	note: m.NullOr(m.String),
+	relation: m.Literal("to-decide", "requested")
+}), j = "channel:", ct = Symbol.for("@voltro/protocol/reactivityChannels"), lt = globalThis, M = lt[ct] ?? (lt[ct] = /* @__PURE__ */ new Map()), ut = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, dt = (e) => {
+	if (!ut.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
   \`billing.usage\`. A \`:\` is refused because it is the namespace separator in
-  the routing key (\`${D}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
+  the routing key (\`${j}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
   routes as two.`);
-	let t = k.get(e);
+	let t = M.get(e);
 	if (t !== void 0) return t;
-	let n = `${D}${e}`, r = Object.freeze({
+	let n = `${j}${e}`, r = Object.freeze({
 		kind: "reactivity-channel",
 		name: e,
 		key: n,
 		toString: () => n
 	});
-	return k.set(e, r), r;
-}, A = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", j = (e) => e.startsWith(D), M = () => new Set([...k.values()].map((e) => e.key)), N = (e) => A(e) ? e.key : e, P = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(N) : [N(e)], F = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(N) : N(e), dt = (e) => {
-	let t = M(), n = [];
-	for (let r of e) for (let e of P(r.source)) !j(e) || t.has(e) || n.push({
+	return M.set(e, r), r;
+}, ft = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", pt = (e) => e.startsWith(j), mt = () => new Set([...M.values()].map((e) => e.key)), N = (e) => ft(e) ? e.key : e, ht = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(N) : [N(e)], gt = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(N) : N(e), _t = (e) => {
+	let t = mt(), n = [];
+	for (let r of e) for (let e of ht(r.source)) !pt(e) || t.has(e) || n.push({
 		procedure: r.name,
 		key: e
 	});
 	return n;
-}, ft = (e, t) => {
+}, vt = (e, t) => {
 	let n = e?.injectExternalChange;
 	return n !== void 0 && (n.call(e, {
 		table: t.key,
@@ -266,8 +267,8 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 		old: {},
 		origin: "inline"
 	}), !0);
-}, pt = (e) => e.internal !== !0, I = (e) => {
-	if (mt(e), Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
+}, yt = (e) => e.internal !== !0, P = (e) => {
+	if (bt(e), Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
   unguarded procedure, or list the scopes required to call it.`);
 	let t = typeof e.source == "string" ? [e.source] : Array.isArray(e.source) ? e.source : void 0;
 	if (t !== void 0 && (t.length === 0 || t.some((e) => String(e).trim() === ""))) throw Error(`${e.name}: \`source\` is empty, so this query declares reactivity and\n  subscribes to nothing — it serves one snapshot and never updates again,
@@ -284,7 +285,7 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 	let n = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
 	if (n.length === 0) return e;
 	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${n.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${n.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${n.join(" / ")} annotation if it is not.`);
-}, mt = (e) => {
+}, bt = (e) => {
 	let t = e.requiresApproval;
 	if (t !== void 0) {
 		if (!Array.isArray(t.approvers) || t.approvers.length === 0) throw Error(`${e.name}: \`requiresApproval.approvers\` is empty, so NOBODY can approve this\n  procedure and every call would park forever. Name the scope(s) an approver must hold
@@ -294,48 +295,48 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
   human from every other, and the second-pair-of-eyes control would enforce nothing.
   Give the procedure a \`guards:\` decision, or drop \`requiresApproval\`.`);
 	}
-}, ht = (e) => e.action !== void 0 && e.resourceType !== void 0, gt = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, L = (e, t, n) => {
+}, xt = (e) => e.action !== void 0 && e.resourceType !== void 0, St = (e) => e.authenticated === !0, Ct = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, F = (e, t, n) => {
 	if (n === void 0) return t;
 	if (n.trim() === "") throw Error(`${e}: \`openAccess\` needs a REASON, not an empty string. It is the sentence a\n  reviewer reads to decide whether this procedure should really be callable
   without an authorization check — e.g. \`openAccess: 'public pricing, no caller data'\`.`);
 	if (t !== void 0 && t.length > 0) throw Error(`${e}: \`openAccess\` and \`guards\` are two different access decisions, so\n  declaring both says the procedure is protected AND open. Keep the guards if a
   caller must hold a scope; drop them if anyone may call it.`);
-	return [d(n.trim())];
-}, R = (e) => I({
+	return [f(n.trim())];
+}, I = (e) => P({
 	kind: "query",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? f.Never,
-	source: F(e.source),
+	error: e.error ?? m.Never,
+	source: gt(e.source),
 	cache: e.cache,
-	guards: L(e.name, e.guards, e.openAccess),
+	guards: F(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	publicApi: e.publicApi,
 	exposeAsTool: e.exposeAsTool,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), z = (e) => I({
+}), L = (e) => P({
 	kind: "mutation",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? f.Never,
+	error: e.error ?? m.Never,
 	target: e.target,
-	guards: L(e.name, e.guards, e.openAccess),
+	guards: F(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	publicApi: e.publicApi,
 	exposeAsTool: e.exposeAsTool,
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), B = (e) => I({
+}), R = (e) => P({
 	kind: "action",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? f.Never,
-	guards: L(e.name, e.guards, e.openAccess),
+	error: e.error ?? m.Never,
+	guards: F(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	source: e.source,
 	target: e.target,
@@ -344,53 +345,53 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), _t = (e) => I({
+}), wt = (e) => P({
 	kind: "stream",
 	name: e.name,
 	input: e.input,
 	element: e.element,
-	error: e.error ?? f.Never,
+	error: e.error ?? m.Never,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin,
-	guards: L(e.name, e.guards, e.openAccess),
+	guards: F(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess
-}), V = (e, t) => t && t.length > 0 ? f.Union(e, ...t) : e, H = (e) => e !== void 0 && e.some((e) => !u(e)), vt = (e, t) => H(t) ? f.Union(e, l, c) : e, yt = (e) => f.Union(e, S), bt = (e) => f.Union(e, w, Ze), xt = (e, t) => t === void 0 ? e : f.Union(e, at), U = (e, t) => {
+}), z = (e, t) => t && t.length > 0 ? m.Union(e, ...t) : e, B = (e) => e !== void 0 && e.some((e) => !d(e)), V = (e, t) => B(t) ? m.Union(e, u, l) : e, Tt = (e) => m.Union(e, E), Et = (e) => m.Union(e, O, Ze), Dt = (e, t) => t === void 0 ? e : m.Union(e, at), H = (e, t) => {
 	if (t === "stream") return e.error;
-	let n = vt(e.error, e.guards);
-	return t === "query" ? n : xt(bt(t === "mutation" ? yt(n) : n), e.requiresApproval);
-}, St = (e, t) => ({
+	let n = V(e.error, e.guards);
+	return t === "query" ? n : Dt(Et(t === "mutation" ? m.Union(Tt(n), p, We) : n), e.requiresApproval);
+}, Ot = (e, t) => z(V(e.errorSchema, e.guards), t), kt = (e, t) => ({
 	...e,
 	name: t
-}), Ct = (e, t) => p.make(e.name, {
-	payload: x(e.input, e.name, H(e.guards)),
-	success: y(e.output),
-	error: V(U(e, "query"), t),
+}), At = (e, t) => h.make(e.name, {
+	payload: T(e.input, e.name, B(e.guards)),
+	success: C(e.output),
+	error: z(H(e, "query"), t),
 	stream: !0
-}), wt = (e, t) => p.make(e.name, {
-	payload: x(e.input, e.name, H(e.guards)),
+}), jt = (e, t) => h.make(e.name, {
+	payload: T(e.input, e.name, B(e.guards)),
 	success: e.output,
-	error: V(U(e, "mutation"), t)
-}), Tt = (e, t) => p.make(e.name, {
-	payload: x(e.input, e.name, H(e.guards)),
+	error: z(H(e, "mutation"), t)
+}), Mt = (e, t) => h.make(e.name, {
+	payload: T(e.input, e.name, B(e.guards)),
 	success: e.output,
-	error: V(U(e, "action"), t)
-}), Et = (e, t) => p.make(e.name, {
-	payload: x(e.input, e.name, H(e.guards)),
+	error: z(H(e, "action"), t)
+}), Nt = (e, t) => h.make(e.name, {
+	payload: T(e.input, e.name, B(e.guards)),
 	success: e.element,
-	error: V(e.error, t),
+	error: z(e.error, t),
 	stream: !0
-}), Dt = (e) => {
+}), Pt = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
 	return typeof t == "string" ? t : void 0;
-}, Ot = (e) => {
+}, Ft = (e) => {
 	switch (e.kind) {
-		case "query": return Ct(e);
-		case "mutation": return wt(e);
-		case "action": return Tt(e);
-		case "stream": return Et(e);
+		case "query": return At(e);
+		case "mutation": return jt(e);
+		case "action": return Mt(e);
+		case "stream": return Nt(e);
 	}
-}, kt = (e) => {
+}, It = (e) => {
 	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
 	if (e.kind === "query") return {
 		kind: "query",
@@ -432,7 +433,7 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 			..."relations" in e && e.relations !== void 0 ? { relations: e.relations } : {}
 		}))
 	};
-}, At = 7500, jt = (e) => typeof e == "object" && !!e && e.kind === "event", Mt = (e) => {
+}, Lt = 7500, Rt = (e) => typeof e == "object" && !!e && e.kind === "event", zt = (e) => {
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -461,75 +462,116 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 		name: e.name,
 		key: e.key,
 		payload: e.payload,
-		guards: e.openAccess === void 0 ? e.guards : [d(e.openAccess.trim())],
+		guards: e.openAccess === void 0 ? e.guards : [f(e.openAccess.trim())],
 		openAccess: e.openAccess,
 		rewind: e.rewind,
 		webhook: e.webhook,
 		delivery: e.delivery
 	};
-}, Nt = (e) => f.Struct({
-	_tag: f.Literal("event"),
-	origin: f.String,
-	n: f.Number,
-	emittedAt: f.Number,
+}, Bt = (e) => m.Struct({
+	_tag: m.Literal("event"),
+	origin: m.String,
+	n: m.Number,
+	emittedAt: m.Number,
 	payload: e
-}), Pt = f.Struct({
-	_tag: f.Literal("gap"),
-	missed: f.Number,
-	reason: f.Literal("buffer", "resume")
-}), Ft = f.Struct({ _tag: f.Literal("attached") }), It = (e) => f.Union(Ft, Nt(e), Pt), Lt = f.Struct({
-	origin: f.String,
-	n: f.Number
-}), Rt = (e) => f.Struct({
+}), Vt = m.Struct({
+	_tag: m.Literal("gap"),
+	missed: m.Number,
+	reason: m.Literal("buffer", "resume")
+}), Ht = m.Struct({ _tag: m.Literal("attached") }), Ut = (e) => m.Union(Ht, Bt(e), Vt), Wt = m.Struct({
+	origin: m.String,
+	n: m.Number
+}), Gt = (e) => m.Struct({
 	key: e,
-	resume: f.optional(f.Array(Lt))
-}), zt = (e, t) => {
-	let n = e.guards !== void 0 && e.guards.some((e) => !u(e)) ? f.Union(l, c) : f.Never, r = t && t.length > 0 ? f.Union(n, ...t) : n;
-	return p.make(e.name, {
-		payload: x(Rt(e.key), e.name, H(e.guards)),
-		success: It(e.payload),
+	resume: m.optional(m.Array(Wt))
+}), Kt = (e, t) => {
+	let n = e.guards !== void 0 && e.guards.some((e) => !d(e)) ? m.Union(u, l) : m.Never, r = t && t.length > 0 ? m.Union(n, ...t) : n;
+	return h.make(e.name, {
+		payload: T(Gt(e.key), e.name, B(e.guards)),
+		success: Ut(e.payload),
 		error: r,
 		stream: !0
 	});
-}, Bt = class extends f.TaggedError()("EventPayloadInvalid", {
-	event: f.String,
-	message: f.String
-}) {}, Vt = class extends f.TaggedError()("EventKeyInvalid", {
-	event: f.String,
-	message: f.String
-}) {}, Ht = class extends f.TaggedError()("EventPayloadTooLarge", {
-	event: f.String,
-	bytes: f.Number,
-	limit: f.Number
-}) {}, Ut = (e) => {
+}, qt = class extends m.TaggedError()("EventPayloadInvalid", {
+	event: m.String,
+	message: m.String
+}) {}, Jt = class extends m.TaggedError()("EventKeyInvalid", {
+	event: m.String,
+	message: m.String
+}) {}, Yt = class extends m.TaggedError()("EventPayloadTooLarge", {
+	event: m.String,
+	bytes: m.Number,
+	limit: m.Number
+}) {}, Xt = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t));
 	return JSON.stringify(t);
-}, Wt = "\0", Gt = (e, t, n) => [
+}, Zt = "\0", Qt = (e, t, n) => [
 	e ?? "~",
 	t,
-	Ut(n)
-].join("\0"), Kt = (e) => {
+	Xt(n)
+].join("\0"), $t = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, qt = (e) => e.split("\0").join(" · "), Jt = (e) => e, Yt = (e) => e, Xt = (e) => {
+}, en = (e) => e.split("\0").join(" · "), U = Symbol.for("@voltro/protocol/workflow-access"), tn = {
+	guards: void 0,
+	openAccess: void 0,
+	internal: !1
+}, nn = (e, t) => {
+	let n = t.guards;
+	if (n !== void 0 && n.length === 0) throw Error(`workflow("${e}"): \`guards: []\` is empty, so it enforces nothing —\n  but it reads at the call site as if the start were protected. Omit the field
+  and decide with \`openAccess\` or \`internal\`, or list the scopes that may start it.`);
+	if (t.openAccess !== void 0) {
+		if (t.openAccess.trim() === "") throw Error(`workflow("${e}"): \`openAccess\` needs a REASON, not an empty string. It is\n  the sentence a reviewer reads to decide whether anyone should really be able to
+  start durable work without an authorization check — e.g. \`openAccess: 'public
+  newsletter signup; the payload carries only the address being confirmed'\`.`);
+		if (n !== void 0 && n.length > 0) throw Error(`workflow("${e}"): \`openAccess\` and \`guards\` are two different access\n  decisions, so declaring both says the start is protected AND open. Keep the
+  guards if a caller must hold a scope; drop them if anyone may start it.`);
+		if (t.internal === !0) throw Error(`workflow("${e}"): \`internal: true\` cannot be combined with \`openAccess\`.\n  \`internal\` takes the start OFF the wire, and \`openAccess\` declares who may
+  start it over the wire — a decision about a door that does not exist. Drop
+  \`openAccess\` (an internal workflow needs no wire decision), or drop
+  \`internal: true\` if the workflow really is meant to be startable by clients.`);
+	}
+	return {
+		guards: t.openAccess === void 0 ? t.guards : [f(t.openAccess.trim())],
+		openAccess: t.openAccess?.trim(),
+		internal: t.internal === !0
+	};
+}, rn = (e, t) => {
+	Object.defineProperty(e, U, {
+		value: t,
+		enumerable: !1
+	});
+}, W = (e) => {
+	if (typeof e != "object" || !e) return tn;
+	let t = e[U];
+	return t === void 0 ? tn : t;
+}, an = (e) => {
+	let t = W(e);
+	return {
+		name: e.name,
+		internal: t.internal,
+		guards: t.guards,
+		openAccess: t.openAccess
+	};
+}, on = (e) => e, sn = (e) => e, cn = (e) => {
 	let t = e.alias?.trim(), n = e.instance?.trim(), r = t !== void 0 && t !== "" ? t : e.base;
 	return n !== void 0 && n !== "" ? `${r}#${n}` : r;
-}, Zt = (e) => {
+}, ln = (e) => {
 	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
-}, Qt = (e, t) => {
-	let n = Ve.GenericTag(e);
+}, un = (e, t) => {
+	let n = He.GenericTag(e);
 	return {
 		Tag: n,
-		Live: He.succeed(n, t)
+		Live: Ue.succeed(n, t)
 	};
-}, $t = (e, t, n) => {
+}, dn = (e, t, n) => {
 	if (!t) return { ok: !0 };
-	let r = n === void 0 ? null : W(n);
+	let r = n === void 0 ? null : G(n);
 	if (!r) return {
 		ok: !0,
 		unverified: `plugin "${e}" requires framework ${t}, but the running framework version is ${n === void 0 ? "unknown" : `unreadable ("${n}")`} — not checked.`
@@ -537,12 +579,12 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 	let i = t.trim();
 	if (i === "*" || i === "") return { ok: !0 };
 	let a = i.split(/\s+/).filter((e) => e.length > 0);
-	for (let i of a) if (!en(i, r)) return {
+	for (let i of a) if (!fn(i, r)) return {
 		ok: !1,
 		reason: `plugin "${e}" requires framework ${t}, running ${n}`
 	};
 	return { ok: !0 };
-}, W = (e) => {
+}, G = (e) => {
 	let t = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9a-zA-Z.-]+))?$/.exec(e.trim());
 	return t ? {
 		major: Number(t[1]),
@@ -550,256 +592,273 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 		patch: Number(t[3]),
 		pre: t[4] ?? ""
 	} : null;
-}, G = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, en = (e, t) => {
+}, K = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, fn = (e, t) => {
 	if (e === "*") return !0;
 	if (e.startsWith("^")) {
-		let n = W(e.slice(1));
-		return !n || t.major !== n.major ? !1 : G(t, n) >= 0;
+		let n = G(e.slice(1));
+		return !n || t.major !== n.major ? !1 : K(t, n) >= 0;
 	}
 	if (e.startsWith("~")) {
-		let n = W(e.slice(1));
-		return !n || t.major !== n.major || t.minor !== n.minor ? !1 : G(t, n) >= 0;
+		let n = G(e.slice(1));
+		return !n || t.major !== n.major || t.minor !== n.minor ? !1 : K(t, n) >= 0;
 	}
 	let n = /^(>=|<=|>|<)(.+)$/.exec(e);
 	if (n) {
-		let e = n[1], r = W(n[2]);
+		let e = n[1], r = G(n[2]);
 		if (!r) return !1;
-		let i = G(t, r);
+		let i = K(t, r);
 		if (e === ">=") return i >= 0;
 		if (e === "<=") return i <= 0;
 		if (e === ">") return i > 0;
 		if (e === "<") return i < 0;
 	}
-	let r = W(e);
-	return r ? G(t, r) === 0 : !1;
-}, tn = (e) => {
+	let r = G(e);
+	return r ? K(t, r) === 0 : !1;
+}, pn = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/-([a-zA-Z0-9])/g, (e, t) => t.toUpperCase());
-}, nn = (e) => {
+}, mn = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/#/g, "--").replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
-}, rn = Symbol.for("@voltro/protocol/pluginAliases"), K = () => {
-	let e = globalThis, t = e[rn];
+}, hn = Symbol.for("@voltro/protocol/pluginAliases"), q = () => {
+	let e = globalThis, t = e[hn];
 	if (t instanceof Map) return t;
 	let n = /* @__PURE__ */ new Map();
-	return e[rn] = n, n;
-}, an = (e) => {
-	let t = K();
+	return e[hn] = n, n;
+}, gn = (e) => {
+	let t = q();
 	for (let [n, r] of Object.entries(e)) {
 		if (r === "") continue;
 		let e = t.get(n);
 		e === void 0 ? t.set(n, /* @__PURE__ */ new Set([r])) : e.add(r);
 	}
-}, on = () => {
-	K().clear();
-}, sn = (e, t) => {
-	let n = K().get(e);
-	if (n === void 0 || n.size === 0) return `${tn(e)}.${t}`;
+}, _n = () => {
+	q().clear();
+}, vn = (e, t) => {
+	let n = q().get(e);
+	if (n === void 0 || n.size === 0) return `${pn(e)}.${t}`;
 	if (n.size === 1) return `${[...n][0]}.${t}`;
 	let r = [...n].filter((e) => !e.includes("#"));
 	if (r.length === 1) return `${r[0]}.${t}`;
 	throw Error(`[voltro] ${e} is installed more than once (${[...n].sort().join(", ")}) and no single install is the primary one, so a plugin hook cannot tell which of them it addresses. Call the route by its full tag instead — e.g. useSubscription(api, '${[...n].sort()[0]}.${t}').`);
-}, q = f.Literal("running", "succeeded", "failed", "cancelled", "suspended"), cn = f.Literal("cancel", "terminate", "abandon"), ln = f.Struct({
-	mode: f.String,
-	dueAt: f.NullOr(f.Number),
-	retryAfterMs: f.NullOr(f.Number),
-	intentId: f.NullOr(f.String)
-}), un = f.Struct({
-	id: f.String,
-	workflowName: f.String,
-	executionId: f.NullOr(f.String),
-	status: f.Literal("running", "queued", "dropped", "skipped"),
-	deferral: f.optional(ln)
-}), J = f.Struct({
-	id: f.String,
-	tag: f.String,
-	executionId: f.String,
-	status: q,
-	payload: f.Unknown,
-	workflowVersion: f.NullOr(f.String),
-	workflowPatches: f.NullOr(f.Unknown),
-	output: f.NullOr(f.Unknown),
-	subject: f.NullOr(f.Unknown),
-	source: f.NullOr(f.String),
-	errorTag: f.NullOr(f.String),
-	errorMessage: f.NullOr(f.String),
-	cancelled: f.Boolean,
-	startedAt: f.Date,
-	completedAt: f.NullOr(f.Date),
-	durationMs: f.NullOr(f.Number),
-	traceId: f.NullOr(f.String),
-	parentExecutionId: f.NullOr(f.String),
-	parentClosePolicy: f.NullOr(cn)
-}), dn = f.Struct({
-	tag: f.optional(f.String),
-	status: f.optional(q),
-	limit: f.optional(f.Number)
-}), fn = f.Struct({
-	id: f.String,
-	runId: f.String,
-	stepName: f.String,
-	attempt: f.Number,
-	status: f.Literal("running", "succeeded", "failed"),
-	input: f.NullOr(f.Unknown),
-	retryPolicy: f.NullOr(f.Unknown),
-	output: f.NullOr(f.Unknown),
-	errorTag: f.NullOr(f.String),
-	errorMessage: f.NullOr(f.String),
-	errorCause: f.NullOr(f.Unknown),
-	startedAt: f.Date,
-	completedAt: f.NullOr(f.Date),
-	durationMs: f.NullOr(f.Number)
-}), pn = f.Struct({
-	id: f.String,
-	runId: f.String,
-	eventType: f.String,
-	payload: f.NullOr(f.Unknown),
-	occurredAt: f.Date,
-	stepName: f.NullOr(f.String),
-	attempt: f.NullOr(f.Number)
-}), mn = f.Struct({
-	id: f.String,
-	name: f.String,
-	payload: f.Unknown,
-	source: f.String,
-	subject: f.NullOr(f.Unknown),
-	traceId: f.NullOr(f.String),
-	occurredAt: f.Date
-}), hn = f.Struct({
-	id: f.String,
-	eventId: f.String,
-	eventName: f.String,
-	triggerId: f.String,
-	workflowName: f.String,
-	executionId: f.NullOr(f.String),
-	status: f.Literal("starting", "started", "skipped", "failed"),
-	idempotencyKey: f.String,
-	skipped: f.Boolean,
-	errorMessage: f.NullOr(f.String),
-	createdAt: f.Date,
-	completedAt: f.NullOr(f.Date)
-}), gn = f.Struct({ id: f.String }), Y = f.Struct({ runId: f.String }), _n = f.Struct({
-	name: f.optional(f.String),
-	limit: f.optional(f.Number)
-}), vn = f.Struct({ eventId: f.String }), X = f.Struct({
-	workflowName: f.String,
-	executionId: f.String
-}), yn = f.Struct({
-	id: f.String,
-	signalName: f.String,
-	payload: f.optional(f.Unknown)
-}), bn = f.Struct({
-	id: f.String,
-	updateName: f.String,
-	payload: f.optional(f.Unknown),
-	timeoutMs: f.optional(f.Number)
-}), xn = f.Struct({
-	eventId: f.String,
-	updateId: f.String,
-	completedEventId: f.String,
-	result: f.Unknown
-}), Sn = R({
+}, J = m.Literal("running", "succeeded", "failed", "cancelled", "suspended"), yn = m.Literal("cancel", "terminate", "abandon"), bn = m.Struct({
+	mode: m.String,
+	dueAt: m.NullOr(m.Number),
+	retryAfterMs: m.NullOr(m.Number),
+	intentId: m.NullOr(m.String)
+}), xn = m.Struct({
+	id: m.String,
+	workflowName: m.String,
+	executionId: m.NullOr(m.String),
+	status: m.Literal("running", "queued", "dropped", "skipped", "replayed"),
+	deferral: m.optional(bn)
+}), Sn = (e, t) => {
+	let n = W(e);
+	return h.make(e.name, {
+		payload: T(e.payloadSchema, e.name, B(n.guards)),
+		success: xn,
+		error: Ot({
+			errorSchema: e.errorSchema,
+			guards: n.guards
+		}, t)
+	});
+}, Y = m.Struct({
+	id: m.String,
+	tag: m.String,
+	executionId: m.String,
+	status: J,
+	payload: m.Unknown,
+	workflowVersion: m.NullOr(m.String),
+	workflowPatches: m.NullOr(m.Unknown),
+	output: m.NullOr(m.Unknown),
+	subject: m.NullOr(m.Unknown),
+	source: m.NullOr(m.String),
+	errorTag: m.NullOr(m.String),
+	errorMessage: m.NullOr(m.String),
+	cancelled: m.Boolean,
+	startedAt: m.Date,
+	completedAt: m.NullOr(m.Date),
+	durationMs: m.NullOr(m.Number),
+	traceId: m.NullOr(m.String),
+	parentExecutionId: m.NullOr(m.String),
+	parentClosePolicy: m.NullOr(yn)
+}), Cn = m.Struct({
+	tag: m.optional(m.String),
+	status: m.optional(J),
+	limit: m.optional(m.Number)
+}), wn = m.Struct({
+	id: m.String,
+	runId: m.String,
+	stepName: m.String,
+	attempt: m.Number,
+	status: m.Literal("running", "succeeded", "failed"),
+	input: m.NullOr(m.Unknown),
+	retryPolicy: m.NullOr(m.Unknown),
+	output: m.NullOr(m.Unknown),
+	errorTag: m.NullOr(m.String),
+	errorMessage: m.NullOr(m.String),
+	errorCause: m.NullOr(m.Unknown),
+	startedAt: m.Date,
+	completedAt: m.NullOr(m.Date),
+	durationMs: m.NullOr(m.Number)
+}), Tn = m.Struct({
+	id: m.String,
+	runId: m.String,
+	eventType: m.String,
+	payload: m.NullOr(m.Unknown),
+	occurredAt: m.Date,
+	stepName: m.NullOr(m.String),
+	attempt: m.NullOr(m.Number)
+}), En = m.Struct({
+	id: m.String,
+	name: m.String,
+	payload: m.Unknown,
+	source: m.String,
+	subject: m.NullOr(m.Unknown),
+	traceId: m.NullOr(m.String),
+	occurredAt: m.Date
+}), Dn = m.Struct({
+	id: m.String,
+	eventId: m.String,
+	eventName: m.String,
+	triggerId: m.String,
+	workflowName: m.String,
+	executionId: m.NullOr(m.String),
+	status: m.Literal("starting", "started", "skipped", "failed"),
+	idempotencyKey: m.String,
+	skipped: m.Boolean,
+	errorMessage: m.NullOr(m.String),
+	createdAt: m.Date,
+	completedAt: m.NullOr(m.Date)
+}), On = m.Struct({ id: m.String }), X = m.Struct({ runId: m.String }), kn = m.Struct({
+	name: m.optional(m.String),
+	limit: m.optional(m.Number)
+}), An = m.Struct({ eventId: m.String }), Z = m.Struct({
+	workflowName: m.String,
+	executionId: m.String
+}), jn = m.Struct({
+	id: m.String,
+	signalName: m.String,
+	payload: m.optional(m.Unknown)
+}), Mn = m.Struct({
+	id: m.String,
+	updateName: m.String,
+	payload: m.optional(m.Unknown),
+	timeoutMs: m.optional(m.Number)
+}), Nn = m.Struct({
+	eventId: m.String,
+	updateId: m.String,
+	completedEventId: m.String,
+	result: m.Unknown
+}), Pn = I({
 	name: "__voltro.workflow.run",
 	source: "_voltro_workflow_runs",
-	input: gn,
-	output: f.Array(J)
-}), Cn = R({
+	input: On,
+	output: m.Array(Y)
+}), Fn = I({
 	name: "__voltro.workflow.runs",
 	source: "_voltro_workflow_runs",
-	input: dn,
-	output: f.Array(J)
-}), wn = R({
+	input: Cn,
+	output: m.Array(Y)
+}), In = I({
 	name: "__voltro.workflow.run.steps",
 	source: "_voltro_workflow_run_steps",
-	input: Y,
-	output: f.Array(fn)
-}), Tn = R({
+	input: X,
+	output: m.Array(wn)
+}), Ln = I({
 	name: "__voltro.workflow.run.events",
 	source: "_voltro_workflow_run_events",
-	input: Y,
-	output: f.Array(pn)
-}), En = R({
+	input: X,
+	output: m.Array(Tn)
+}), Rn = I({
 	name: "__voltro.workflow.domainEvents",
 	source: "_voltro_workflow_events",
-	input: _n,
-	output: f.Array(mn)
-}), Dn = R({
+	input: kn,
+	output: m.Array(En)
+}), zn = I({
 	name: "__voltro.workflow.event.deliveries",
 	source: "_voltro_workflow_event_deliveries",
-	input: vn,
-	output: f.Array(hn)
-}), On = B({
+	input: An,
+	output: m.Array(Dn)
+}), Bn = R({
 	name: "__voltro.workflow.cancel",
-	input: X,
-	output: f.Struct({ ok: f.Boolean })
-}), kn = B({
+	input: Z,
+	output: m.Struct({ ok: m.Boolean })
+}), Vn = R({
 	name: "__voltro.workflow.resume",
-	input: X,
-	output: f.Struct({ ok: f.Boolean })
-}), An = B({
+	input: Z,
+	output: m.Struct({ ok: m.Boolean })
+}), Hn = R({
 	name: "__voltro.workflow.signal",
-	input: yn,
-	output: f.Struct({ eventId: f.String })
-}), jn = B({
+	input: jn,
+	output: m.Struct({ eventId: m.String })
+}), Un = R({
 	name: "__voltro.workflow.update",
-	input: bn,
-	output: xn
-}), Mn = "__voltro.undo.log", Nn = "__voltro.undo.apply", Pn = "__voltro.undo.redo", Fn = f.Struct({
-	id: f.String,
-	tag: f.String,
-	label: f.NullOr(f.String),
-	undone: f.Boolean,
-	crossesAction: f.Boolean,
-	createdAt: f.String
-}), In = class extends f.TaggedError()("UndoNotFound", { invocationId: f.String }) {}, Ln = class extends f.TaggedError()("UndoForbidden", { invocationId: f.String }) {}, Rn = class extends f.TaggedError()("UndoConflict", {
-	invocationId: f.String,
-	reason: f.Literal("conflict", "action")
-}) {}, zn = f.Union(In, Ln, Rn), Bn = R({
-	name: Mn,
+	input: Mn,
+	output: Nn
+}), Wn = "__voltro.undo.log", Gn = "__voltro.undo.apply", Kn = "__voltro.undo.redo", qn = m.Struct({
+	id: m.String,
+	tag: m.String,
+	label: m.NullOr(m.String),
+	undone: m.Boolean,
+	crossesAction: m.Boolean,
+	createdAt: m.String
+}), Jn = class extends m.TaggedError()("UndoNotFound", { invocationId: m.String }) {}, Yn = class extends m.TaggedError()("UndoForbidden", { invocationId: m.String }) {}, Xn = class extends m.TaggedError()("UndoConflict", {
+	invocationId: m.String,
+	reason: m.Literal("conflict", "action")
+}) {}, Zn = m.Union(Jn, Yn, Xn), Qn = I({
+	name: Wn,
 	source: "_voltro_undo_log",
-	input: f.Struct({ limit: f.optional(f.Number) }),
-	output: f.Array(Fn),
+	input: m.Struct({ limit: m.optional(m.Number) }),
+	output: m.Array(qn),
 	openAccess: "subject-scoped by construction: lists only the calling subject's own undoable actions"
-}), Vn = z({
-	name: Nn,
-	input: f.Struct({ invocationId: f.String }),
-	output: f.Struct({ ok: f.Boolean }),
-	error: zn,
+}), $n = L({
+	name: Gn,
+	input: m.Struct({ invocationId: m.String }),
+	output: m.Struct({ ok: m.Boolean }),
+	error: Zn,
 	openAccess: "subject-scoped by construction: undo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), Hn = z({
-	name: Pn,
-	input: f.Struct({ invocationId: f.String }),
-	output: f.Struct({ ok: f.Boolean }),
-	error: zn,
+}), er = L({
+	name: Kn,
+	input: m.Struct({ invocationId: m.String }),
+	output: m.Struct({ ok: m.Boolean }),
+	error: Zn,
 	openAccess: "subject-scoped by construction: redo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), Un = class extends f.TaggedError()("TenantScopeViolation", {
-	table: f.String,
-	reason: f.String
-}) {}, Wn = class extends f.TaggedError()("StoreOperationFailed", {
-	operation: f.String,
-	table: f.String,
-	cause: f.String
-}) {}, Gn = class extends f.TaggedError()("TableValidationFailed", {
-	table: f.String,
-	summary: f.String,
-	issues: f.Array(f.Struct({
-		path: f.String,
-		message: f.String
+}), tr = class extends m.TaggedError()("TenantScopeViolation", {
+	table: m.String,
+	reason: m.String
+}) {}, nr = class extends m.TaggedError()("StoreOperationFailed", {
+	operation: m.String,
+	table: m.String,
+	cause: m.String
+}) {}, rr = class extends m.TaggedError()("NoRowFound", {
+	table: m.String,
+	found: m.Number
+}) {
+	get message() {
+		return this.found === 0 ? `expected exactly one row in '${this.table}', found none` : `expected exactly one row in '${this.table}', found more than one`;
+	}
+}, ir = class extends m.TaggedError()("TableValidationFailed", {
+	table: m.String,
+	summary: m.String,
+	issues: m.Array(m.Struct({
+		path: m.String,
+		message: m.String
 	}))
-}) {}, Kn = class extends f.TaggedError()("TenantRowNotFound", {
-	table: f.String,
-	id: f.String,
-	reason: f.String
-}) {}, qn = class extends f.TaggedError()("ServerOnlyColumnWrite", {
-	table: f.String,
-	columns: f.Array(f.String)
-}) {}, Jn = class extends f.TaggedError()("ConstraintViolation", {
-	kind: f.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
-	table: f.String,
-	operation: f.String,
-	constraint: f.optional(f.String),
-	column: f.optional(f.String),
-	detail: f.optional(f.String)
+}) {}, ar = class extends m.TaggedError()("TenantRowNotFound", {
+	table: m.String,
+	id: m.String,
+	reason: m.String
+}) {}, or = class extends m.TaggedError()("ServerOnlyColumnWrite", {
+	table: m.String,
+	columns: m.Array(m.String)
+}) {}, sr = class extends m.TaggedError()("ConstraintViolation", {
+	kind: m.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
+	table: m.String,
+	operation: m.String,
+	constraint: m.optional(m.String),
+	column: m.optional(m.String),
+	detail: m.optional(m.String)
 }) {
 	get message() {
 		if (this.detail !== void 0) return this.detail;
@@ -812,85 +871,85 @@ var Ue = f.Union(f.String, f.Number), m = f.Record({
 			case "check": return `check constraint ${t}: the row does not satisfy it`;
 		}
 	}
-}, Yn = "__voltro.approvals.pending", Xn = "__voltro.approvals.decide", Zn = R({
-	name: Yn,
+}, cr = "__voltro.approvals.pending", lr = "__voltro.approvals.decide", ur = I({
+	name: cr,
 	source: "_voltro_approvals",
-	input: f.Struct({ limit: f.optional(f.Number) }),
-	output: f.Array(st),
+	input: m.Struct({ limit: m.optional(m.Number) }),
+	output: m.Array(st),
 	openAccess: "the answer is scoped to the caller — a row appears only if they requested it or hold its recorded approver scopes, so an anonymous caller sees nothing"
-}), Qn = z({
-	name: Xn,
-	input: f.Struct({
-		approvalId: f.String,
-		decision: f.Literal("approve", "reject"),
-		note: f.optional(f.String)
+}), dr = L({
+	name: lr,
+	input: m.Struct({
+		approvalId: m.String,
+		decision: m.Literal("approve", "reject"),
+		note: m.optional(m.String)
 	}),
-	output: f.Struct({
-		approvalId: f.String,
-		status: f.Literal("approved", "rejected")
+	output: m.Struct({
+		approvalId: m.String,
+		status: m.Literal("approved", "rejected")
 	}),
 	error: ot,
 	openAccess: "the approver authority is the PENDING ROW's own recorded scopes (plus an unconditional self-approval refusal), checked in-handler — a descriptor-level scope would have to be the union of every approval-requiring procedure in the app"
-}), $n = "__voltro.connections.list", er = "__voltro.connections.start", Z = "__voltro.connections.submitToken", tr = "__voltro.connections.disconnect", Q = f.Literal("oauth2", "pat"), nr = f.Literal("disconnected", "connected", "expired", "revoked", "error"), rr = f.Struct({
-	connectionId: f.String,
+}), fr = "__voltro.connections.list", pr = "__voltro.connections.start", mr = "__voltro.connections.submitToken", hr = "__voltro.connections.disconnect", Q = m.Literal("oauth2", "pat"), gr = m.Literal("disconnected", "connected", "expired", "revoked", "error"), _r = m.Struct({
+	connectionId: m.String,
 	kind: Q,
-	label: f.String,
-	status: nr,
-	accountId: f.NullOr(f.String),
-	accountLabel: f.NullOr(f.String),
-	scopes: f.Array(f.String),
-	expiresAt: f.NullOr(f.String),
-	lastError: f.NullOr(f.String),
-	connectedAt: f.NullOr(f.String)
-}), ir = class extends f.TaggedError()("ConnectionNotDeclared", { connectionId: f.String }) {}, ar = class extends f.TaggedError()("ConnectionSubjectRequired", { connectionId: f.String }) {}, or = class extends f.TaggedError()("ConnectionKindMismatch", {
-	connectionId: f.String,
+	label: m.String,
+	status: gr,
+	accountId: m.NullOr(m.String),
+	accountLabel: m.NullOr(m.String),
+	scopes: m.Array(m.String),
+	expiresAt: m.NullOr(m.String),
+	lastError: m.NullOr(m.String),
+	connectedAt: m.NullOr(m.String)
+}), vr = class extends m.TaggedError()("ConnectionNotDeclared", { connectionId: m.String }) {}, yr = class extends m.TaggedError()("ConnectionSubjectRequired", { connectionId: m.String }) {}, br = class extends m.TaggedError()("ConnectionKindMismatch", {
+	connectionId: m.String,
 	expected: Q,
 	actual: Q
-}) {}, sr = class extends f.TaggedError()("ConnectionHandshakeFailed", {
-	connectionId: f.String,
-	reason: f.String,
-	transient: f.Boolean
-}) {}, $ = f.Union(ir, ar, or, sr), cr = R({
-	name: $n,
+}) {}, xr = class extends m.TaggedError()("ConnectionHandshakeFailed", {
+	connectionId: m.String,
+	reason: m.String,
+	transient: m.Boolean
+}) {}, $ = m.Union(vr, yr, br, xr), Sr = I({
+	name: fr,
 	source: "_voltro_connections",
-	input: f.Struct({}),
-	output: f.Array(rr),
+	input: m.Struct({}),
+	output: m.Array(_r),
 	openAccess: "self-scoped read: projects the declared connections for the calling subject only (its own connect/disconnect state)"
-}), lr = B({
-	name: er,
-	input: f.Struct({
-		connectionId: f.String,
-		redirectTo: f.optional(f.String)
+}), Cr = R({
+	name: pr,
+	input: m.Struct({
+		connectionId: m.String,
+		redirectTo: m.optional(m.String)
 	}),
-	output: f.Struct({
-		authorizeUrl: f.String,
-		state: f.String
+	output: m.Struct({
+		authorizeUrl: m.String,
+		state: m.String
 	}),
 	error: $,
 	openAccess: "self-service: begins an oauth handshake that stores a credential for the calling subject only; anonymous callers fail typed with ConnectionSubjectRequired"
-}), ur = z({
-	name: Z,
-	input: f.Struct({
-		connectionId: f.String,
-		token: f.String
+}), wr = L({
+	name: mr,
+	input: m.Struct({
+		connectionId: m.String,
+		token: m.String
 	}),
-	output: f.Struct({ ok: f.Boolean }),
+	output: m.Struct({ ok: m.Boolean }),
 	error: $,
 	openAccess: "self-service: stores a pasted token as the calling subject's own credential; anonymous callers fail typed with ConnectionSubjectRequired"
-}), dr = z({
-	name: tr,
-	input: f.Struct({ connectionId: f.String }),
-	output: f.Struct({ ok: f.Boolean }),
+}), Tr = L({
+	name: hr,
+	input: m.Struct({ connectionId: m.String }),
+	output: m.Struct({ ok: m.Boolean }),
 	error: $,
 	openAccess: "self-service: deletes only the calling subject's own credential row for this connection"
-}), fr = (e) => {
+}), Er = (e) => {
 	let t = e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : 0;
 	return Number.isNaN(t) ? 0 : t;
-}, pr = 4001, mr = /* @__PURE__ */ new Set(["/rpc", "/ws"]), hr = (e) => {
+}, Dr = 4001, Or = /* @__PURE__ */ new Set(["/rpc", "/ws"]), kr = (e) => {
 	if (!e.path.startsWith("/")) throw Error(`defineWebSocket: path must be absolute, got '${e.path}'`);
-	if (mr.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
+	if (Or.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
 	if (e.auth !== "subject" && e.auth !== "public") throw Error(`defineWebSocket: auth must be 'subject' or 'public' (explicitly — an unauthenticated socket has to be a decision somebody wrote down), got '${String(e.auth)}'`);
 	return e;
-}, gr = 1;
+}, Ar = 1;
 //#endregion
-export { De as ADMIN_SCOPE, Se as APIKEY_ISSUE_ORG_SCOPE, Te as APIKEY_ISSUE_OTHER_SCOPE, _e as APIKEY_ISSUE_SELF_SCOPE, Xn as APPROVALS_DECIDE_TAG, Yn as APPROVALS_PENDING_TAG, ot as ApprovalDecisionErrors, at as ApprovalErrors, T as ApprovalExpired, it as ApprovalForbidden, et as ApprovalNotFound, rt as ApprovalNotPending, nt as ApprovalRejected, $e as ApprovalRequired, tt as ApprovalSelfApproval, E as ApprovalUnavailable, ke as AuthMiddleware, S as BusinessRuleViolation, $n as CONNECTIONS_LIST_TAG, tr as CONNECTION_DISCONNECT_TAG, er as CONNECTION_START_TAG, Z as CONNECTION_SUBMIT_TOKEN_TAG, sr as ConnectionHandshakeFailed, se as ConnectionInfo, i as ConnectionInfoMiddleware, Q as ConnectionKind, or as ConnectionKindMismatch, ir as ConnectionNotDeclared, rr as ConnectionState, nr as ConnectionStatus, ar as ConnectionSubjectRequired, Jn as ConstraintViolation, r as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, re as DEFAULT_SCOPE_CACHE_TTL_MS, Wt as EVENT_ROUTE_SEP, Vt as EventKeyInvalid, Bt as EventPayloadInvalid, Ht as EventPayloadTooLarge, pr as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, ye as IMPERSONATION_METADATA_KEY, At as MAX_EVENT_ENVELOPE_BYTES, gr as PROTOCOL_VERSION, st as PendingApproval, D as REACTIVITY_CHANNEL_PREFIX, l as ScopeError, qn as ServerOnlyColumnWrite, Wn as StoreOperationFailed, e as Subject, ve as SubjectIdentity, ne as SubjectService, Gn as TableValidationFailed, Kn as TenantRowNotFound, Un as TenantScopeViolation, Nn as UNDO_APPLY_TAG, Mn as UNDO_LOG_TAG, Pn as UNDO_REDO_TAG, c as Unauthenticated, Rn as UndoConflict, Ln as UndoForbidden, Fn as UndoLogEntry, In as UndoNotFound, w as ValidationError, Ze as ValidationErrors, C as ValidationIssue, X as WorkflowControlInputSchema, mn as WorkflowDomainEventRowSchema, _n as WorkflowDomainEventsInputSchema, vn as WorkflowEventDeliveriesInputSchema, hn as WorkflowEventDeliveryRowSchema, cn as WorkflowParentClosePolicySchema, pn as WorkflowRunEventRowSchema, un as WorkflowRunHandleSchema, gn as WorkflowRunRefSchema, J as WorkflowRunRowSchema, q as WorkflowRunStatusSchema, fn as WorkflowRunStepRowSchema, Y as WorkflowRunTableRefSchema, dn as WorkflowRunsInputSchema, yn as WorkflowSignalInputSchema, ln as WorkflowStartDeferralSchema, bn as WorkflowUpdateInputSchema, xn as WorkflowUpdateResultSchema, Tt as actionToRpc, Ce as advisoryResourceGuardWarning, ie as anonymousSubject, Ye as applyRowPatch, a as applyScopeDecision, Qn as approvalsDecideDescriptor, Zn as approvalsPendingQueryDescriptor, ee as assertAuthenticated, Re as beginIdempotent, $t as checkFrameworkCompat, Ee as checkGuards, pe as checkGuardsEffect, te as composeAuthStrategies, Zt as composeRpcInterceptors, dr as connectionDisconnectDescriptor, lr as connectionStartDescriptor, ur as connectionSubmitTokenDescriptor, cr as connectionsListQueryDescriptor, M as declaredReactivityChannelKeys, B as defineAction, Mt as defineEvent, z as defineMutation, Jt as definePlugin, Yt as definePluginRoute, Qt as definePluginService, R as defineQuery, _t as defineStream, hr as defineWebSocket, qe as diffRows, be as effectiveScopes, Ut as encodeEventKey, Dt as errorTag, Ft as eventAttached, Nt as eventEnvelope, Pt as eventGap, Lt as eventResumePoint, Gt as eventRoute, It as eventStreamEvent, Rt as eventSubscribeInput, zt as eventToRpc, Fe as failIdempotent, Qe as fieldIssuesOf, Oe as findAdvisoryResourceGuards, Ne as finishIdempotent, qt as formatEventRoute, me as getPolicyGuardResolver, he as getResourceScopeResolver, gt as hasAccessDecision, ae as hasCallbackRoutes, we as hasEffectiveScope, H as hasEnforcedGuard, xe as hasScope, g as idToPath, Le as idempotencyScope, b as inputLabel, jt as isEventDescriptor, Je as isIdKeyed, u as isOpenAccess, ge as isPolicyCheck, ht as isPolicyGuard, A as isReactivityChannel, j as isReactivityChannelKey, Me as isSystemSubject, pt as isWireReachable, t as makeScopeCache, ze as memoryIdempotencyStore, de as missingAccessDecision, wt as mutationToRpc, kt as normalizeDescriptor, F as normalizeSource, d as openAccessSpec, Kt as parseEventRoute, Ge as pathToId, tn as pluginAlias, Xt as pluginInstanceName, nn as pluginSlug, sn as pluginTag, ft as publishReactivity, Be as publishServerError, Ct as queryToRpc, le as rawImpersonationMark, ut as reactivityChannel, an as registerPluginAliases, je as requireScope, on as resetPluginAliases, h as rowPatchOpSchema, We as rowPatchSchema, s as scopeCacheKey, fe as setEffectiveScopes, Ae as setPolicyGuardResolver, oe as setResourceScopeResolver, P as sourceKeys, Et as streamToRpc, x as strictInput, ce as subjectIdentity, n as subjectScopes, Ie as subscribeServerErrors, y as subscriptionEvent, ue as systemSubject, o as tenantScopedSubject, Ot as toRpc, fr as tsMs, dt as undeclaredChannelKeys, Vn as undoApplyDescriptor, Bn as undoLogQueryDescriptor, Hn as undoRedoDescriptor, U as wireErrorUnion, St as withRpcTag, On as workflowCancelDescriptor, En as workflowDomainEventsQueryDescriptor, Dn as workflowEventDeliveriesQueryDescriptor, kn as workflowResumeDescriptor, Tn as workflowRunEventsQueryDescriptor, Sn as workflowRunQueryDescriptor, wn as workflowRunStepsQueryDescriptor, Cn as workflowRunsQueryDescriptor, An as workflowSignalDescriptor, jn as workflowUpdateDescriptor, Pe as wsMutationIdempotencyScope };
+export { De as ADMIN_SCOPE, Se as APIKEY_ISSUE_ORG_SCOPE, Te as APIKEY_ISSUE_OTHER_SCOPE, _e as APIKEY_ISSUE_SELF_SCOPE, lr as APPROVALS_DECIDE_TAG, cr as APPROVALS_PENDING_TAG, ot as ApprovalDecisionErrors, at as ApprovalErrors, k as ApprovalExpired, it as ApprovalForbidden, et as ApprovalNotFound, rt as ApprovalNotPending, nt as ApprovalRejected, $e as ApprovalRequired, tt as ApprovalSelfApproval, A as ApprovalUnavailable, se as AuthMiddleware, E as BusinessRuleViolation, fr as CONNECTIONS_LIST_TAG, hr as CONNECTION_DISCONNECT_TAG, pr as CONNECTION_START_TAG, mr as CONNECTION_SUBMIT_TOKEN_TAG, xr as ConnectionHandshakeFailed, i as ConnectionInfo, r as ConnectionInfoMiddleware, Q as ConnectionKind, br as ConnectionKindMismatch, vr as ConnectionNotDeclared, _r as ConnectionState, gr as ConnectionStatus, yr as ConnectionSubjectRequired, sr as ConstraintViolation, ie as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ye as DEFAULT_SCOPE_CACHE_TTL_MS, Zt as EVENT_ROUTE_SEP, Jt as EventKeyInvalid, qt as EventPayloadInvalid, Yt as EventPayloadTooLarge, Dr as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, e as IMPERSONATION_METADATA_KEY, Lt as MAX_EVENT_ENVELOPE_BYTES, Re as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, p as MutationInFlight, rr as NoRowFound, Ar as PROTOCOL_VERSION, st as PendingApproval, j as REACTIVITY_CHANNEL_PREFIX, u as ScopeError, or as ServerOnlyColumnWrite, nr as StoreOperationFailed, ve as Subject, ne as SubjectIdentity, re as SubjectService, ir as TableValidationFailed, ar as TenantRowNotFound, tr as TenantScopeViolation, Gn as UNDO_APPLY_TAG, Wn as UNDO_LOG_TAG, Kn as UNDO_REDO_TAG, l as Unauthenticated, Xn as UndoConflict, Yn as UndoForbidden, qn as UndoLogEntry, Jn as UndoNotFound, O as ValidationError, Ze as ValidationErrors, D as ValidationIssue, U as WorkflowAccessProperty, Z as WorkflowControlInputSchema, En as WorkflowDomainEventRowSchema, kn as WorkflowDomainEventsInputSchema, An as WorkflowEventDeliveriesInputSchema, Dn as WorkflowEventDeliveryRowSchema, yn as WorkflowParentClosePolicySchema, Tn as WorkflowRunEventRowSchema, xn as WorkflowRunHandleSchema, On as WorkflowRunRefSchema, Y as WorkflowRunRowSchema, J as WorkflowRunStatusSchema, wn as WorkflowRunStepRowSchema, X as WorkflowRunTableRefSchema, Cn as WorkflowRunsInputSchema, jn as WorkflowSignalInputSchema, bn as WorkflowStartDeferralSchema, Mn as WorkflowUpdateInputSchema, Nn as WorkflowUpdateResultSchema, Mt as actionToRpc, Ce as advisoryResourceGuardWarning, a as anonymousSubject, Ye as applyRowPatch, c as applyScopeDecision, dr as approvalsDecideDescriptor, ur as approvalsPendingQueryDescriptor, te as assertAuthenticated, rn as attachWorkflowAccess, Ne as beginIdempotent, dn as checkFrameworkCompat, Ee as checkGuards, pe as checkGuardsEffect, ae as composeAuthStrategies, ln as composeRpcInterceptors, Tr as connectionDisconnectDescriptor, Cr as connectionStartDescriptor, wr as connectionSubmitTokenDescriptor, Sr as connectionsListQueryDescriptor, mt as declaredReactivityChannelKeys, R as defineAction, zt as defineEvent, L as defineMutation, on as definePlugin, sn as definePluginRoute, un as definePluginService, I as defineQuery, wt as defineStream, kr as defineWebSocket, qe as diffRows, be as effectiveScopes, Xt as encodeEventKey, Pt as errorTag, Ht as eventAttached, Bt as eventEnvelope, Vt as eventGap, Wt as eventResumePoint, Qt as eventRoute, Ut as eventStreamEvent, Gt as eventSubscribeInput, Kt as eventToRpc, Le as failIdempotent, Qe as fieldIssuesOf, Oe as findAdvisoryResourceGuards, ze as finishIdempotent, en as formatEventRoute, me as getPolicyGuardResolver, he as getResourceScopeResolver, W as getWorkflowAccess, Ct as hasAccessDecision, Me as hasCallbackRoutes, we as hasEffectiveScope, B as hasEnforcedGuard, xe as hasScope, y as idToPath, Pe as idempotencyScope, w as inputLabel, ge as isAuthenticatedCheck, St as isAuthenticatedGuard, Rt as isEventDescriptor, Je as isIdKeyed, d as isOpenAccess, de as isPolicyCheck, xt as isPolicyGuard, ft as isReactivityChannel, pt as isReactivityChannelKey, t as isSystemSubject, yt as isWireReachable, le as makeScopeCache, Fe as memoryIdempotencyStore, ke as missingAccessDecision, jt as mutationToRpc, It as normalizeDescriptor, gt as normalizeSource, f as openAccessSpec, $t as parseEventRoute, b as pathToId, pn as pluginAlias, cn as pluginInstanceName, mn as pluginSlug, vn as pluginTag, vt as publishReactivity, Be as publishServerError, At as queryToRpc, s as rawImpersonationMark, dt as reactivityChannel, gn as registerPluginAliases, fe as requireScope, _n as resetPluginAliases, nn as resolveWorkflowAccess, _ as rowPatchOpSchema, v as rowPatchSchema, ce as scopeCacheKey, je as setEffectiveScopes, oe as setPolicyGuardResolver, n as setResourceScopeResolver, ht as sourceKeys, Nt as streamToRpc, T as strictInput, ue as subjectIdentity, Ae as subjectScopes, Ie as subscribeServerErrors, C as subscriptionEvent, o as systemSubject, ee as tenantScopedSubject, Ft as toRpc, Er as tsMs, _t as undeclaredChannelKeys, $n as undoApplyDescriptor, Qn as undoLogQueryDescriptor, er as undoRedoDescriptor, H as wireErrorUnion, kt as withRpcTag, an as workflowAccessDescriptor, Bn as workflowCancelDescriptor, Rn as workflowDomainEventsQueryDescriptor, zn as workflowEventDeliveriesQueryDescriptor, Vn as workflowResumeDescriptor, Ln as workflowRunEventsQueryDescriptor, Pn as workflowRunQueryDescriptor, In as workflowRunStepsQueryDescriptor, Fn as workflowRunsQueryDescriptor, Hn as workflowSignalDescriptor, Sn as workflowToRpc, Un as workflowUpdateDescriptor, Ot as workflowWireErrorUnion, Ve as wsMutationIdempotencyScope };