@voltro/protocol 0.65.0 → 0.66.1

package/dist/index.js

@@ -1,47 +1,47 @@
 import { A as e, B as t, C as n, D as r, E as i, F as a, G as o, H as s, I as c, K as ee, L as te, M as ne, N as re, O as ie, P as l, R as ae, S as oe, T as se, U as ce, V as le, W as ue, _ as de, a as u, b as fe, c as pe, d as me, f as he, g as d, h as ge, i as _e, j as ve, k as ye, l as be, m as xe, n as Se, o as Ce, p as we, r as Te, s as Ee, t as De, u as Oe, v as ke, w as Ae, x as je, y as f, z as Me } from "./scopes-C86BDyNJ.js";
-import { a as Ne, c as Pe, i as p, l as Fe, n as Ie, o as Le, r as Re, s as ze, t as Be, u as Ve } from "./serverErrorBus-QQgyq6fV.js";
-import { Context as He, Layer as Ue, Schema as m } from "effect";
-import { Rpc as h } from "@effect/rpc";
+import { a as p, c as Ne, d as Pe, i as m, l as Fe, n as Ie, o as Le, r as Re, s as ze, t as Be, u as Ve } from "./serverErrorBus-BTnTpMqj.js";
+import { Context as He, Layer as Ue, Schema as h } from "effect";
+import { Rpc as g } from "@effect/rpc";
 import { VersionConflict as We } from "@voltro/database/wire";
 //#region src/rowPatch.ts
-var Ge = m.Union(m.String, m.Number), g = m.Record({
-	key: m.String,
-	value: m.Unknown
-}).pipe(m.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), _ = m.Union(m.Struct({
-	op: m.Literal("add"),
-	path: m.String,
-	value: g
-}), m.Struct({
-	op: m.Literal("replace"),
-	path: m.String,
-	value: g
-}), m.Struct({
-	op: m.Literal("remove"),
-	path: m.String
-}), m.Struct({
-	op: m.Literal("mergeCells"),
-	path: m.String,
-	value: m.Record({
-		key: m.String,
-		value: m.Unknown
+var Ge = h.Union(h.String, h.Number), _ = h.Record({
+	key: h.String,
+	value: h.Unknown
+}).pipe(h.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), v = h.Union(h.Struct({
+	op: h.Literal("add"),
+	path: h.String,
+	value: _
+}), h.Struct({
+	op: h.Literal("replace"),
+	path: h.String,
+	value: _
+}), h.Struct({
+	op: h.Literal("remove"),
+	path: h.String
+}), h.Struct({
+	op: h.Literal("mergeCells"),
+	path: h.String,
+	value: h.Record({
+		key: h.String,
+		value: h.Unknown
 	})
-})), v = m.Struct({
-	ops: m.Array(_),
-	order: m.Array(Ge)
-}), y = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, b = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), x = (e) => {
+})), y = h.Struct({
+	ops: h.Array(v),
+	order: h.Array(Ge)
+}), b = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, x = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), S = (e) => {
 	let t = Object.keys(e).sort(), n = {};
 	for (let r of t) n[r] = e[r];
 	return JSON.stringify(n);
-}, S = (e, t) => x(e) === x(t), Ke = (e, t) => {
+}, C = (e, t) => S(e) === S(t), Ke = (e, t) => {
 	if (e instanceof Uint8Array && t instanceof Uint8Array) {
 		if (e.length !== t.length) return !1;
 		for (let n = 0; n < e.length; n += 1) if (e[n] !== t[n]) return !1;
 		return !0;
 	}
-	return x({
+	return S({
 		id: 0,
 		v: e
-	}) === x({
+	}) === S({
 		id: 0,
 		v: t
 	});
@@ -70,29 +70,29 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 		let t = r.get(e.id);
 		if (t === void 0) i.push({
 			op: "add",
-			path: y(e.id),
+			path: b(e.id),
 			value: e
 		});
-		else if (!S(t, e)) {
+		else if (!C(t, e)) {
 			let n = c(t, e);
 			n === void 0 ? i.push({
 				op: "replace",
-				path: y(e.id),
+				path: b(e.id),
 				value: e
-			}) : (S(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
+			}) : (C(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
 				op: "replace",
-				path: y(e.id),
+				path: b(e.id),
 				value: n.scalars
 			}), i.push({
 				op: "mergeCells",
-				path: y(e.id),
+				path: b(e.id),
 				value: n.merges
 			}));
 		}
 	}
 	for (let t of e) o.has(t.id) || i.push({
 		op: "remove",
-		path: y(t.id)
+		path: b(t.id)
 	});
 	return {
 		ops: i,
@@ -106,7 +106,7 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 	for (let t of e) r.set(t.id, t);
 	for (let e of t.ops) {
 		if (e.op === "mergeCells") {
-			let t = b(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
+			let t = x(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
 			if (i === void 0) continue;
 			let o = { ...i };
 			for (let [t, r] of Object.entries(e.value)) o[t] = n.mergeCell === void 0 ? r : n.mergeCell(t, i[t], r);
@@ -121,56 +121,56 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 		t !== void 0 && i.push(t);
 	}
 	return i;
-}, C = (e) => m.Union(m.Struct({
-	_tag: m.Literal("snapshot"),
-	revision: m.Number,
+}, w = (e) => h.Union(h.Struct({
+	_tag: h.Literal("snapshot"),
+	revision: h.Number,
 	data: e,
-	computed: m.optional(m.Boolean)
-}), m.Struct({
-	_tag: m.Literal("delta"),
-	revision: m.Number,
-	emittedAt: m.Number,
-	patch: v
-}), m.Struct({
-	_tag: m.Literal("error"),
-	error: m.Unknown,
-	revision: m.optional(m.Number)
-})), w = (e, t) => {
+	computed: h.optional(h.Boolean)
+}), h.Struct({
+	_tag: h.Literal("delta"),
+	revision: h.Number,
+	emittedAt: h.Number,
+	patch: y
+}), h.Struct({
+	_tag: h.Literal("error"),
+	error: h.Unknown,
+	revision: h.optional(h.Number)
+})), T = (e, t) => {
 	let n = `${e ?? "this procedure"} input`;
 	return t === !0 ? `${n} (guarded — the guard did NOT run: the payload failed to decode first, so this says nothing about access)` : n;
 }, Xe = (e) => {
 	let t = e.ast;
 	return t._tag === "TypeLiteral" && (t.propertySignatures?.length ?? 0) === 0 && (t.indexSignatures?.length ?? 0) === 0;
-}, T = (e, t, n) => {
-	let r = w(t, n), i = e.annotations({
+}, E = (e, t, n) => {
+	let r = T(t, n), i = e.annotations({
 		parseOptions: { onExcessProperty: "error" },
 		parseIssueTitle: () => r
 	});
-	return Xe(e) ? m.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
-}, E = class extends m.TaggedError()("BusinessRuleViolation", {
-	rule: m.String,
-	params: m.optional(m.Record({
-		key: m.String,
-		value: m.Unknown
+	return Xe(e) ? h.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
+}, D = class extends h.TaggedError()("BusinessRuleViolation", {
+	rule: h.String,
+	params: h.optional(h.Record({
+		key: h.String,
+		value: h.Unknown
 	})),
-	field: m.optional(m.String),
-	message: m.optional(m.String),
-	severity: m.Literal("error", "warning")
-}) {}, D = m.Struct({
-	field: m.String,
-	message: m.String,
-	params: m.optional(m.Record({
-		key: m.String,
-		value: m.Unknown
+	field: h.optional(h.String),
+	message: h.optional(h.String),
+	severity: h.Literal("error", "warning")
+}) {}, O = h.Struct({
+	field: h.String,
+	message: h.String,
+	params: h.optional(h.Record({
+		key: h.String,
+		value: h.Unknown
 	}))
-}), O = class extends m.TaggedError()("ValidationError", {
-	field: m.String,
-	message: m.String,
-	params: m.optional(m.Record({
-		key: m.String,
-		value: m.Unknown
+}), Ze = class extends h.TaggedError()("ValidationError", {
+	field: h.String,
+	message: h.String,
+	params: h.optional(h.Record({
+		key: h.String,
+		value: h.Unknown
 	}))
-}) {}, Ze = class extends m.TaggedError()("ValidationErrors", { issues: m.Array(D).pipe(m.minItems(1)) }) {}, Qe = (e) => {
+}) {}, Qe = class extends h.TaggedError()("ValidationErrors", { issues: h.Array(O).pipe(h.minItems(1)) }) {}, $e = (e) => {
 	if (typeof e != "object" || !e) return [];
 	let t = e._tag;
 	if (t === "ValidationError") {
@@ -196,49 +196,49 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 		}];
 	}
 	return [];
-}, $e = class extends m.TaggedError()("ApprovalRequired", {
-	approvalId: m.String,
-	procedure: m.String,
-	expiresAt: m.String,
-	requiredScopes: m.Array(m.String),
-	reason: m.NullOr(m.String),
-	created: m.Boolean
-}) {}, et = class extends m.TaggedError()("ApprovalNotFound", { approvalId: m.String }) {}, tt = class extends m.TaggedError()("ApprovalSelfApproval", {
-	approvalId: m.String,
-	subjectId: m.NullOr(m.String)
-}) {}, nt = class extends m.TaggedError()("ApprovalRejected", {
-	approvalId: m.String,
-	decidedBy: m.NullOr(m.String),
-	note: m.NullOr(m.String)
-}) {}, k = class extends m.TaggedError()("ApprovalExpired", {
-	approvalId: m.String,
-	expiredAt: m.String
-}) {}, rt = class extends m.TaggedError()("ApprovalNotPending", {
-	approvalId: m.String,
-	status: m.String
-}) {}, it = class extends m.TaggedError()("ApprovalForbidden", {
-	approvalId: m.String,
-	required: m.NullOr(m.String),
-	message: m.String
-}) {}, A = class extends m.TaggedError()("ApprovalUnavailable", {
-	procedure: m.String,
-	message: m.String
-}) {}, at = m.Union($e, nt, k, A), ot = m.Union(et, tt, k, rt, it, A), st = m.Struct({
-	id: m.String,
-	procedure: m.String,
-	kind: m.Literal("mutation", "action"),
-	requestedBy: m.NullOr(m.String),
-	status: m.Literal("pending", "approved", "rejected", "expired", "consumed"),
-	reason: m.NullOr(m.String),
-	requiredScopes: m.Array(m.String),
-	requestedAt: m.String,
-	expiresAt: m.String,
-	decidedBy: m.NullOr(m.String),
-	decidedAt: m.NullOr(m.String),
-	note: m.NullOr(m.String),
-	relation: m.Literal("to-decide", "requested")
-}), j = "channel:", ct = Symbol.for("@voltro/protocol/reactivityChannels"), lt = globalThis, M = lt[ct] ?? (lt[ct] = /* @__PURE__ */ new Map()), ut = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, dt = (e) => {
-	if (!ut.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
+}, et = class extends h.TaggedError()("ApprovalRequired", {
+	approvalId: h.String,
+	procedure: h.String,
+	expiresAt: h.String,
+	requiredScopes: h.Array(h.String),
+	reason: h.NullOr(h.String),
+	created: h.Boolean
+}) {}, tt = class extends h.TaggedError()("ApprovalNotFound", { approvalId: h.String }) {}, nt = class extends h.TaggedError()("ApprovalSelfApproval", {
+	approvalId: h.String,
+	subjectId: h.NullOr(h.String)
+}) {}, rt = class extends h.TaggedError()("ApprovalRejected", {
+	approvalId: h.String,
+	decidedBy: h.NullOr(h.String),
+	note: h.NullOr(h.String)
+}) {}, k = class extends h.TaggedError()("ApprovalExpired", {
+	approvalId: h.String,
+	expiredAt: h.String
+}) {}, it = class extends h.TaggedError()("ApprovalNotPending", {
+	approvalId: h.String,
+	status: h.String
+}) {}, at = class extends h.TaggedError()("ApprovalForbidden", {
+	approvalId: h.String,
+	required: h.NullOr(h.String),
+	message: h.String
+}) {}, A = class extends h.TaggedError()("ApprovalUnavailable", {
+	procedure: h.String,
+	message: h.String
+}) {}, ot = h.Union(et, rt, k, A), st = h.Union(tt, nt, k, it, at, A), ct = h.Struct({
+	id: h.String,
+	procedure: h.String,
+	kind: h.Literal("mutation", "action"),
+	requestedBy: h.NullOr(h.String),
+	status: h.Literal("pending", "approved", "rejected", "expired", "consumed"),
+	reason: h.NullOr(h.String),
+	requiredScopes: h.Array(h.String),
+	requestedAt: h.String,
+	expiresAt: h.String,
+	decidedBy: h.NullOr(h.String),
+	decidedAt: h.NullOr(h.String),
+	note: h.NullOr(h.String),
+	relation: h.Literal("to-decide", "requested")
+}), j = "channel:", lt = Symbol.for("@voltro/protocol/reactivityChannels"), ut = globalThis, M = ut[lt] ?? (ut[lt] = /* @__PURE__ */ new Map()), dt = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, ft = (e) => {
+	if (!dt.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
   \`billing.usage\`. A \`:\` is refused because it is the namespace separator in
   the routing key (\`${j}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
   routes as two.`);
@@ -251,14 +251,14 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 		toString: () => n
 	});
 	return M.set(e, r), r;
-}, ft = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", pt = (e) => e.startsWith(j), mt = () => new Set([...M.values()].map((e) => e.key)), N = (e) => ft(e) ? e.key : e, ht = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(N) : [N(e)], gt = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(N) : N(e), _t = (e) => {
-	let t = mt(), n = [];
-	for (let r of e) for (let e of ht(r.source)) !pt(e) || t.has(e) || n.push({
+}, pt = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", mt = (e) => e.startsWith(j), ht = () => new Set([...M.values()].map((e) => e.key)), N = (e) => pt(e) ? e.key : e, gt = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(N) : [N(e)], _t = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(N) : N(e), vt = (e) => {
+	let t = ht(), n = [];
+	for (let r of e) for (let e of gt(r.source)) !mt(e) || t.has(e) || n.push({
 		procedure: r.name,
 		key: e
 	});
 	return n;
-}, vt = (e, t) => {
+}, yt = (e, t) => {
 	let n = e?.injectExternalChange;
 	return n !== void 0 && (n.call(e, {
 		table: t.key,
@@ -267,8 +267,10 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 		old: {},
 		origin: "inline"
 	}), !0);
-}, yt = (e) => e.internal !== !0, P = (e) => {
-	if (bt(e), Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
+}, bt = (e) => e.internal !== !0, P = (e) => {
+	if (xt(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
+	if (e.idempotencyScope === "connection" && (e.internal === !0 || e.publicApi !== void 0 || e.exposeAsTool !== void 0)) throw Error(`${e.name}: connection-scoped mutations require the native WebSocket RPC surface; internal, publicApi and exposeAsTool cannot establish its connection state`);
+	if (Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
   unguarded procedure, or list the scopes required to call it.`);
 	let t = typeof e.source == "string" ? [e.source] : Array.isArray(e.source) ? e.source : void 0;
 	if (t !== void 0 && (t.length === 0 || t.some((e) => String(e).trim() === ""))) throw Error(`${e.name}: \`source\` is empty, so this query declares reactivity and\n  subscribes to nothing — it serves one snapshot and never updates again,
@@ -285,7 +287,7 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 	let n = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
 	if (n.length === 0) return e;
 	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${n.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${n.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${n.join(" / ")} annotation if it is not.`);
-}, bt = (e) => {
+}, xt = (e) => {
 	let t = e.requiresApproval;
 	if (t !== void 0) {
 		if (!Array.isArray(t.approvers) || t.approvers.length === 0) throw Error(`${e.name}: \`requiresApproval.approvers\` is empty, so NOBODY can approve this\n  procedure and every call would park forever. Name the scope(s) an approver must hold
@@ -295,7 +297,7 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
   human from every other, and the second-pair-of-eyes control would enforce nothing.
   Give the procedure a \`guards:\` decision, or drop \`requiresApproval\`.`);
 	}
-}, xt = (e) => e.action !== void 0 && e.resourceType !== void 0, St = (e) => e.authenticated === !0, Ct = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, F = (e, t, n) => {
+}, St = (e) => e.action !== void 0 && e.resourceType !== void 0, Ct = (e) => e.authenticated === !0, wt = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, F = (e, t, n) => {
 	if (n === void 0) return t;
 	if (n.trim() === "") throw Error(`${e}: \`openAccess\` needs a REASON, not an empty string. It is the sentence a\n  reviewer reads to decide whether this procedure should really be callable
   without an authorization check — e.g. \`openAccess: 'public pricing, no caller data'\`.`);
@@ -307,8 +309,8 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? m.Never,
-	source: gt(e.source),
+	error: e.error ?? h.Never,
+	source: _t(e.source),
 	cache: e.cache,
 	guards: F(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
@@ -321,7 +323,8 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? m.Never,
+	error: e.error ?? h.Never,
+	...e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope },
 	target: e.target,
 	guards: F(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
@@ -335,7 +338,7 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? m.Never,
+	error: e.error ?? h.Never,
 	guards: F(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	source: e.source,
@@ -345,53 +348,55 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), wt = (e) => P({
+}), Tt = (e) => P({
 	kind: "stream",
 	name: e.name,
 	input: e.input,
 	element: e.element,
-	error: e.error ?? m.Never,
+	error: e.error ?? h.Never,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin,
 	guards: F(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess
-}), z = (e, t) => t && t.length > 0 ? m.Union(e, ...t) : e, B = (e) => e !== void 0 && e.some((e) => !d(e)), V = (e, t) => B(t) ? m.Union(e, u, l) : e, Tt = (e) => m.Union(e, E), Et = (e) => m.Union(e, O, Ze), Dt = (e, t) => t === void 0 ? e : m.Union(e, at), H = (e, t) => {
+}), z = (e, t) => t && t.length > 0 ? h.Union(e, ...t) : e, B = (e) => e !== void 0 && e.some((e) => !d(e)), Et = (e, t) => B(t) ? h.Union(e, u, l) : e, Dt = (e) => h.Union(e, D), Ot = (e) => h.Union(e, Ze, Qe), kt = (e, t) => t === void 0 ? e : h.Union(e, ot), V = (e, t) => {
 	if (t === "stream") return e.error;
-	let n = V(e.error, e.guards);
-	return t === "query" ? n : Dt(Et(t === "mutation" ? m.Union(Tt(n), p, We) : n), e.requiresApproval);
-}, Ot = (e, t) => z(V(e.errorSchema, e.guards), t), kt = (e, t) => ({
+	let n = Et(e.error, e.guards);
+	if (t === "query") return n;
+	let r = t === "mutation" ? h.Union(Dt(n), p, We) : n;
+	return kt(Ot(t === "mutation" && e.idempotencyScope === "connection" ? h.Union(r, m) : r), e.requiresApproval);
+}, At = (e, t) => z(Et(e.errorSchema, e.guards), t), jt = (e, t) => ({
 	...e,
 	name: t
-}), At = (e, t) => h.make(e.name, {
-	payload: T(e.input, e.name, B(e.guards)),
-	success: C(e.output),
-	error: z(H(e, "query"), t),
+}), Mt = (e, t) => g.make(e.name, {
+	payload: E(e.input, e.name, B(e.guards)),
+	success: w(e.output),
+	error: z(V(e, "query"), t),
 	stream: !0
-}), jt = (e, t) => h.make(e.name, {
-	payload: T(e.input, e.name, B(e.guards)),
+}), Nt = (e, t) => g.make(e.name, {
+	payload: E(e.input, e.name, B(e.guards)),
 	success: e.output,
-	error: z(H(e, "mutation"), t)
-}), Mt = (e, t) => h.make(e.name, {
-	payload: T(e.input, e.name, B(e.guards)),
+	error: z(V(e, "mutation"), t)
+}), Pt = (e, t) => g.make(e.name, {
+	payload: E(e.input, e.name, B(e.guards)),
 	success: e.output,
-	error: z(H(e, "action"), t)
-}), Nt = (e, t) => h.make(e.name, {
-	payload: T(e.input, e.name, B(e.guards)),
+	error: z(V(e, "action"), t)
+}), Ft = (e, t) => g.make(e.name, {
+	payload: E(e.input, e.name, B(e.guards)),
 	success: e.element,
 	error: z(e.error, t),
 	stream: !0
-}), Pt = (e) => {
+}), It = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
 	return typeof t == "string" ? t : void 0;
-}, Ft = (e) => {
+}, Lt = (e) => {
 	switch (e.kind) {
-		case "query": return At(e);
-		case "mutation": return jt(e);
-		case "action": return Mt(e);
-		case "stream": return Nt(e);
+		case "query": return Mt(e);
+		case "mutation": return Nt(e);
+		case "action": return Pt(e);
+		case "stream": return Ft(e);
 	}
-}, It = (e) => {
+}, Rt = (e) => {
 	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
 	if (e.kind === "query") return {
 		kind: "query",
@@ -409,18 +414,20 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 		...n,
 		...i
 	};
-	let a = e.target;
+	let a = e.target, o = e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope };
 	if (a === void 0) return {
 		kind: "mutation",
 		...n,
-		...i
+		...i,
+		...o
 	};
-	let o = Array.isArray(a) ? a : [a];
+	let s = Array.isArray(a) ? a : [a];
 	return {
 		kind: "mutation",
 		...n,
 		...i,
-		targets: o.map((e) => ({
+		...o,
+		targets: s.map((e) => ({
 			table: e.table,
 			op: e.op,
 			..."order" in e && e.order !== void 0 ? { order: e.order } : {},
@@ -433,7 +440,7 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 			..."relations" in e && e.relations !== void 0 ? { relations: e.relations } : {}
 		}))
 	};
-}, Lt = 7500, Rt = (e) => typeof e == "object" && !!e && e.kind === "event", zt = (e) => {
+}, zt = 7500, Bt = (e) => typeof e == "object" && !!e && e.kind === "event", Vt = (e) => {
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -468,60 +475,60 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 		webhook: e.webhook,
 		delivery: e.delivery
 	};
-}, Bt = (e) => m.Struct({
-	_tag: m.Literal("event"),
-	origin: m.String,
-	n: m.Number,
-	emittedAt: m.Number,
+}, Ht = (e) => h.Struct({
+	_tag: h.Literal("event"),
+	origin: h.String,
+	n: h.Number,
+	emittedAt: h.Number,
 	payload: e
-}), Vt = m.Struct({
-	_tag: m.Literal("gap"),
-	missed: m.Number,
-	reason: m.Literal("buffer", "resume")
-}), Ht = m.Struct({ _tag: m.Literal("attached") }), Ut = (e) => m.Union(Ht, Bt(e), Vt), Wt = m.Struct({
-	origin: m.String,
-	n: m.Number
-}), Gt = (e) => m.Struct({
+}), Ut = h.Struct({
+	_tag: h.Literal("gap"),
+	missed: h.Number,
+	reason: h.Literal("buffer", "resume")
+}), Wt = h.Struct({ _tag: h.Literal("attached") }), H = (e) => h.Union(Wt, Ht(e), Ut), Gt = h.Struct({
+	origin: h.String,
+	n: h.Number
+}), Kt = (e) => h.Struct({
 	key: e,
-	resume: m.optional(m.Array(Wt))
-}), Kt = (e, t) => {
-	let n = e.guards !== void 0 && e.guards.some((e) => !d(e)) ? m.Union(u, l) : m.Never, r = t && t.length > 0 ? m.Union(n, ...t) : n;
-	return h.make(e.name, {
-		payload: T(Gt(e.key), e.name, B(e.guards)),
-		success: Ut(e.payload),
+	resume: h.optional(h.Array(Gt))
+}), qt = (e, t) => {
+	let n = e.guards !== void 0 && e.guards.some((e) => !d(e)) ? h.Union(u, l) : h.Never, r = t && t.length > 0 ? h.Union(n, ...t) : n;
+	return g.make(e.name, {
+		payload: E(Kt(e.key), e.name, B(e.guards)),
+		success: H(e.payload),
 		error: r,
 		stream: !0
 	});
-}, qt = class extends m.TaggedError()("EventPayloadInvalid", {
-	event: m.String,
-	message: m.String
-}) {}, Jt = class extends m.TaggedError()("EventKeyInvalid", {
-	event: m.String,
-	message: m.String
-}) {}, Yt = class extends m.TaggedError()("EventPayloadTooLarge", {
-	event: m.String,
-	bytes: m.Number,
-	limit: m.Number
-}) {}, Xt = (e) => {
+}, Jt = class extends h.TaggedError()("EventPayloadInvalid", {
+	event: h.String,
+	message: h.String
+}) {}, Yt = class extends h.TaggedError()("EventKeyInvalid", {
+	event: h.String,
+	message: h.String
+}) {}, Xt = class extends h.TaggedError()("EventPayloadTooLarge", {
+	event: h.String,
+	bytes: h.Number,
+	limit: h.Number
+}) {}, Zt = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t));
 	return JSON.stringify(t);
-}, Zt = "\0", Qt = (e, t, n) => [
+}, Qt = "\0", $t = (e, t, n) => [
 	e ?? "~",
 	t,
-	Xt(n)
-].join("\0"), $t = (e) => {
+	Zt(n)
+].join("\0"), en = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, en = (e) => e.split("\0").join(" · "), U = Symbol.for("@voltro/protocol/workflow-access"), tn = {
+}, tn = (e) => e.split("\0").join(" · "), U = Symbol.for("@voltro/protocol/workflow-access"), nn = {
 	guards: void 0,
 	openAccess: void 0,
 	internal: !1
-}, nn = (e, t) => {
+}, rn = (e, t) => {
 	let n = t.guards;
 	if (n !== void 0 && n.length === 0) throw Error(`workflow("${e}"): \`guards: []\` is empty, so it enforces nothing —\n  but it reads at the call site as if the start were protected. Omit the field
   and decide with \`openAccess\` or \`internal\`, or list the scopes that may start it.`);
@@ -541,16 +548,16 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 		openAccess: t.openAccess?.trim(),
 		internal: t.internal === !0
 	};
-}, rn = (e, t) => {
+}, an = (e, t) => {
 	Object.defineProperty(e, U, {
 		value: t,
 		enumerable: !1
 	});
 }, W = (e) => {
-	if (typeof e != "object" || !e) return tn;
+	if (typeof e != "object" || !e) return nn;
 	let t = e[U];
-	return t === void 0 ? tn : t;
-}, an = (e) => {
+	return t === void 0 ? nn : t;
+}, on = (e) => {
 	let t = W(e);
 	return {
 		name: e.name,
@@ -558,18 +565,18 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 		guards: t.guards,
 		openAccess: t.openAccess
 	};
-}, on = (e) => e, sn = (e) => e, cn = (e) => {
+}, sn = (e) => e, cn = (e) => e, ln = (e) => {
 	let t = e.alias?.trim(), n = e.instance?.trim(), r = t !== void 0 && t !== "" ? t : e.base;
 	return n !== void 0 && n !== "" ? `${r}#${n}` : r;
-}, ln = (e) => {
+}, un = (e) => {
 	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
-}, un = (e, t) => {
+}, dn = (e, t) => {
 	let n = He.GenericTag(e);
 	return {
 		Tag: n,
 		Live: Ue.succeed(n, t)
 	};
-}, dn = (e, t, n) => {
+}, fn = (e, t, n) => {
 	if (!t) return { ok: !0 };
 	let r = n === void 0 ? null : G(n);
 	if (!r) return {
@@ -579,7 +586,7 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 	let i = t.trim();
 	if (i === "*" || i === "") return { ok: !0 };
 	let a = i.split(/\s+/).filter((e) => e.length > 0);
-	for (let i of a) if (!fn(i, r)) return {
+	for (let i of a) if (!pn(i, r)) return {
 		ok: !1,
 		reason: `plugin "${e}" requires framework ${t}, running ${n}`
 	};
@@ -592,7 +599,7 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 		patch: Number(t[3]),
 		pre: t[4] ?? ""
 	} : null;
-}, K = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, fn = (e, t) => {
+}, K = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, pn = (e, t) => {
 	if (e === "*") return !0;
 	if (e.startsWith("^")) {
 		let n = G(e.slice(1));
@@ -614,251 +621,251 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 	}
 	let r = G(e);
 	return r ? K(t, r) === 0 : !1;
-}, pn = (e) => {
+}, mn = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/-([a-zA-Z0-9])/g, (e, t) => t.toUpperCase());
-}, mn = (e) => {
+}, hn = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/#/g, "--").replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
-}, hn = Symbol.for("@voltro/protocol/pluginAliases"), q = () => {
-	let e = globalThis, t = e[hn];
+}, gn = Symbol.for("@voltro/protocol/pluginAliases"), q = () => {
+	let e = globalThis, t = e[gn];
 	if (t instanceof Map) return t;
 	let n = /* @__PURE__ */ new Map();
-	return e[hn] = n, n;
-}, gn = (e) => {
+	return e[gn] = n, n;
+}, _n = (e) => {
 	let t = q();
 	for (let [n, r] of Object.entries(e)) {
 		if (r === "") continue;
 		let e = t.get(n);
 		e === void 0 ? t.set(n, /* @__PURE__ */ new Set([r])) : e.add(r);
 	}
-}, _n = () => {
+}, vn = () => {
 	q().clear();
-}, vn = (e, t) => {
+}, yn = (e, t) => {
 	let n = q().get(e);
-	if (n === void 0 || n.size === 0) return `${pn(e)}.${t}`;
+	if (n === void 0 || n.size === 0) return `${mn(e)}.${t}`;
 	if (n.size === 1) return `${[...n][0]}.${t}`;
 	let r = [...n].filter((e) => !e.includes("#"));
 	if (r.length === 1) return `${r[0]}.${t}`;
 	throw Error(`[voltro] ${e} is installed more than once (${[...n].sort().join(", ")}) and no single install is the primary one, so a plugin hook cannot tell which of them it addresses. Call the route by its full tag instead — e.g. useSubscription(api, '${[...n].sort()[0]}.${t}').`);
-}, J = m.Literal("running", "succeeded", "failed", "cancelled", "suspended"), yn = m.Literal("cancel", "terminate", "abandon"), bn = m.Struct({
-	mode: m.String,
-	dueAt: m.NullOr(m.Number),
-	retryAfterMs: m.NullOr(m.Number),
-	intentId: m.NullOr(m.String)
-}), xn = m.Struct({
-	id: m.String,
-	workflowName: m.String,
-	executionId: m.NullOr(m.String),
-	status: m.Literal("running", "queued", "dropped", "skipped", "replayed"),
-	deferral: m.optional(bn)
-}), Sn = (e, t) => {
+}, J = h.Literal("running", "succeeded", "failed", "cancelled", "suspended"), bn = h.Literal("cancel", "terminate", "abandon"), xn = h.Struct({
+	mode: h.String,
+	dueAt: h.NullOr(h.Number),
+	retryAfterMs: h.NullOr(h.Number),
+	intentId: h.NullOr(h.String)
+}), Sn = h.Struct({
+	id: h.String,
+	workflowName: h.String,
+	executionId: h.NullOr(h.String),
+	status: h.Literal("running", "queued", "dropped", "skipped", "replayed"),
+	deferral: h.optional(xn)
+}), Cn = (e, t) => {
 	let n = W(e);
-	return h.make(e.name, {
-		payload: T(e.payloadSchema, e.name, B(n.guards)),
-		success: xn,
-		error: Ot({
+	return g.make(e.name, {
+		payload: E(e.payloadSchema, e.name, B(n.guards)),
+		success: Sn,
+		error: At({
 			errorSchema: e.errorSchema,
 			guards: n.guards
 		}, t)
 	});
-}, Y = m.Struct({
-	id: m.String,
-	tag: m.String,
-	executionId: m.String,
+}, Y = h.Struct({
+	id: h.String,
+	tag: h.String,
+	executionId: h.String,
 	status: J,
-	payload: m.Unknown,
-	workflowVersion: m.NullOr(m.String),
-	workflowPatches: m.NullOr(m.Unknown),
-	output: m.NullOr(m.Unknown),
-	subject: m.NullOr(m.Unknown),
-	source: m.NullOr(m.String),
-	errorTag: m.NullOr(m.String),
-	errorMessage: m.NullOr(m.String),
-	cancelled: m.Boolean,
-	startedAt: m.Date,
-	completedAt: m.NullOr(m.Date),
-	durationMs: m.NullOr(m.Number),
-	traceId: m.NullOr(m.String),
-	parentExecutionId: m.NullOr(m.String),
-	parentClosePolicy: m.NullOr(yn)
-}), Cn = m.Struct({
-	tag: m.optional(m.String),
-	status: m.optional(J),
-	limit: m.optional(m.Number)
-}), wn = m.Struct({
-	id: m.String,
-	runId: m.String,
-	stepName: m.String,
-	attempt: m.Number,
-	status: m.Literal("running", "succeeded", "failed"),
-	input: m.NullOr(m.Unknown),
-	retryPolicy: m.NullOr(m.Unknown),
-	output: m.NullOr(m.Unknown),
-	errorTag: m.NullOr(m.String),
-	errorMessage: m.NullOr(m.String),
-	errorCause: m.NullOr(m.Unknown),
-	startedAt: m.Date,
-	completedAt: m.NullOr(m.Date),
-	durationMs: m.NullOr(m.Number)
-}), Tn = m.Struct({
-	id: m.String,
-	runId: m.String,
-	eventType: m.String,
-	payload: m.NullOr(m.Unknown),
-	occurredAt: m.Date,
-	stepName: m.NullOr(m.String),
-	attempt: m.NullOr(m.Number)
-}), En = m.Struct({
-	id: m.String,
-	name: m.String,
-	payload: m.Unknown,
-	source: m.String,
-	subject: m.NullOr(m.Unknown),
-	traceId: m.NullOr(m.String),
-	occurredAt: m.Date
-}), Dn = m.Struct({
-	id: m.String,
-	eventId: m.String,
-	eventName: m.String,
-	triggerId: m.String,
-	workflowName: m.String,
-	executionId: m.NullOr(m.String),
-	status: m.Literal("starting", "started", "skipped", "failed"),
-	idempotencyKey: m.String,
-	skipped: m.Boolean,
-	errorMessage: m.NullOr(m.String),
-	createdAt: m.Date,
-	completedAt: m.NullOr(m.Date)
-}), On = m.Struct({ id: m.String }), X = m.Struct({ runId: m.String }), kn = m.Struct({
-	name: m.optional(m.String),
-	limit: m.optional(m.Number)
-}), An = m.Struct({ eventId: m.String }), Z = m.Struct({
-	workflowName: m.String,
-	executionId: m.String
-}), jn = m.Struct({
-	id: m.String,
-	signalName: m.String,
-	payload: m.optional(m.Unknown)
-}), Mn = m.Struct({
-	id: m.String,
-	updateName: m.String,
-	payload: m.optional(m.Unknown),
-	timeoutMs: m.optional(m.Number)
-}), Nn = m.Struct({
-	eventId: m.String,
-	updateId: m.String,
-	completedEventId: m.String,
-	result: m.Unknown
-}), Pn = I({
+	payload: h.Unknown,
+	workflowVersion: h.NullOr(h.String),
+	workflowPatches: h.NullOr(h.Unknown),
+	output: h.NullOr(h.Unknown),
+	subject: h.NullOr(h.Unknown),
+	source: h.NullOr(h.String),
+	errorTag: h.NullOr(h.String),
+	errorMessage: h.NullOr(h.String),
+	cancelled: h.Boolean,
+	startedAt: h.Date,
+	completedAt: h.NullOr(h.Date),
+	durationMs: h.NullOr(h.Number),
+	traceId: h.NullOr(h.String),
+	parentExecutionId: h.NullOr(h.String),
+	parentClosePolicy: h.NullOr(bn)
+}), wn = h.Struct({
+	tag: h.optional(h.String),
+	status: h.optional(J),
+	limit: h.optional(h.Number)
+}), Tn = h.Struct({
+	id: h.String,
+	runId: h.String,
+	stepName: h.String,
+	attempt: h.Number,
+	status: h.Literal("running", "succeeded", "failed"),
+	input: h.NullOr(h.Unknown),
+	retryPolicy: h.NullOr(h.Unknown),
+	output: h.NullOr(h.Unknown),
+	errorTag: h.NullOr(h.String),
+	errorMessage: h.NullOr(h.String),
+	errorCause: h.NullOr(h.Unknown),
+	startedAt: h.Date,
+	completedAt: h.NullOr(h.Date),
+	durationMs: h.NullOr(h.Number)
+}), En = h.Struct({
+	id: h.String,
+	runId: h.String,
+	eventType: h.String,
+	payload: h.NullOr(h.Unknown),
+	occurredAt: h.Date,
+	stepName: h.NullOr(h.String),
+	attempt: h.NullOr(h.Number)
+}), Dn = h.Struct({
+	id: h.String,
+	name: h.String,
+	payload: h.Unknown,
+	source: h.String,
+	subject: h.NullOr(h.Unknown),
+	traceId: h.NullOr(h.String),
+	occurredAt: h.Date
+}), On = h.Struct({
+	id: h.String,
+	eventId: h.String,
+	eventName: h.String,
+	triggerId: h.String,
+	workflowName: h.String,
+	executionId: h.NullOr(h.String),
+	status: h.Literal("starting", "started", "skipped", "failed"),
+	idempotencyKey: h.String,
+	skipped: h.Boolean,
+	errorMessage: h.NullOr(h.String),
+	createdAt: h.Date,
+	completedAt: h.NullOr(h.Date)
+}), kn = h.Struct({ id: h.String }), X = h.Struct({ runId: h.String }), An = h.Struct({
+	name: h.optional(h.String),
+	limit: h.optional(h.Number)
+}), jn = h.Struct({ eventId: h.String }), Z = h.Struct({
+	workflowName: h.String,
+	executionId: h.String
+}), Mn = h.Struct({
+	id: h.String,
+	signalName: h.String,
+	payload: h.optional(h.Unknown)
+}), Nn = h.Struct({
+	id: h.String,
+	updateName: h.String,
+	payload: h.optional(h.Unknown),
+	timeoutMs: h.optional(h.Number)
+}), Pn = h.Struct({
+	eventId: h.String,
+	updateId: h.String,
+	completedEventId: h.String,
+	result: h.Unknown
+}), Fn = I({
 	name: "__voltro.workflow.run",
 	source: "_voltro_workflow_runs",
-	input: On,
-	output: m.Array(Y)
-}), Fn = I({
+	input: kn,
+	output: h.Array(Y)
+}), In = I({
 	name: "__voltro.workflow.runs",
 	source: "_voltro_workflow_runs",
-	input: Cn,
-	output: m.Array(Y)
-}), In = I({
+	input: wn,
+	output: h.Array(Y)
+}), Ln = I({
 	name: "__voltro.workflow.run.steps",
 	source: "_voltro_workflow_run_steps",
 	input: X,
-	output: m.Array(wn)
-}), Ln = I({
+	output: h.Array(Tn)
+}), Rn = I({
 	name: "__voltro.workflow.run.events",
 	source: "_voltro_workflow_run_events",
 	input: X,
-	output: m.Array(Tn)
-}), Rn = I({
+	output: h.Array(En)
+}), zn = I({
 	name: "__voltro.workflow.domainEvents",
 	source: "_voltro_workflow_events",
-	input: kn,
-	output: m.Array(En)
-}), zn = I({
+	input: An,
+	output: h.Array(Dn)
+}), Bn = I({
 	name: "__voltro.workflow.event.deliveries",
 	source: "_voltro_workflow_event_deliveries",
-	input: An,
-	output: m.Array(Dn)
-}), Bn = R({
+	input: jn,
+	output: h.Array(On)
+}), Vn = R({
 	name: "__voltro.workflow.cancel",
 	input: Z,
-	output: m.Struct({ ok: m.Boolean })
-}), Vn = R({
+	output: h.Struct({ ok: h.Boolean })
+}), Hn = R({
 	name: "__voltro.workflow.resume",
 	input: Z,
-	output: m.Struct({ ok: m.Boolean })
-}), Hn = R({
-	name: "__voltro.workflow.signal",
-	input: jn,
-	output: m.Struct({ eventId: m.String })
+	output: h.Struct({ ok: h.Boolean })
 }), Un = R({
-	name: "__voltro.workflow.update",
+	name: "__voltro.workflow.signal",
 	input: Mn,
-	output: Nn
-}), Wn = "__voltro.undo.log", Gn = "__voltro.undo.apply", Kn = "__voltro.undo.redo", qn = m.Struct({
-	id: m.String,
-	tag: m.String,
-	label: m.NullOr(m.String),
-	undone: m.Boolean,
-	crossesAction: m.Boolean,
-	createdAt: m.String
-}), Jn = class extends m.TaggedError()("UndoNotFound", { invocationId: m.String }) {}, Yn = class extends m.TaggedError()("UndoForbidden", { invocationId: m.String }) {}, Xn = class extends m.TaggedError()("UndoConflict", {
-	invocationId: m.String,
-	reason: m.Literal("conflict", "action")
-}) {}, Zn = m.Union(Jn, Yn, Xn), Qn = I({
-	name: Wn,
+	output: h.Struct({ eventId: h.String })
+}), Wn = R({
+	name: "__voltro.workflow.update",
+	input: Nn,
+	output: Pn
+}), Gn = "__voltro.undo.log", Kn = "__voltro.undo.apply", qn = "__voltro.undo.redo", Jn = h.Struct({
+	id: h.String,
+	tag: h.String,
+	label: h.NullOr(h.String),
+	undone: h.Boolean,
+	crossesAction: h.Boolean,
+	createdAt: h.String
+}), Yn = class extends h.TaggedError()("UndoNotFound", { invocationId: h.String }) {}, Xn = class extends h.TaggedError()("UndoForbidden", { invocationId: h.String }) {}, Zn = class extends h.TaggedError()("UndoConflict", {
+	invocationId: h.String,
+	reason: h.Literal("conflict", "action")
+}) {}, Qn = h.Union(Yn, Xn, Zn), $n = I({
+	name: Gn,
 	source: "_voltro_undo_log",
-	input: m.Struct({ limit: m.optional(m.Number) }),
-	output: m.Array(qn),
+	input: h.Struct({ limit: h.optional(h.Number) }),
+	output: h.Array(Jn),
 	openAccess: "subject-scoped by construction: lists only the calling subject's own undoable actions"
-}), $n = L({
-	name: Gn,
-	input: m.Struct({ invocationId: m.String }),
-	output: m.Struct({ ok: m.Boolean }),
-	error: Zn,
-	openAccess: "subject-scoped by construction: undo is per-actor — another subject's invocation fails typed with UndoForbidden"
 }), er = L({
 	name: Kn,
-	input: m.Struct({ invocationId: m.String }),
-	output: m.Struct({ ok: m.Boolean }),
-	error: Zn,
+	input: h.Struct({ invocationId: h.String }),
+	output: h.Struct({ ok: h.Boolean }),
+	error: Qn,
+	openAccess: "subject-scoped by construction: undo is per-actor — another subject's invocation fails typed with UndoForbidden"
+}), tr = L({
+	name: qn,
+	input: h.Struct({ invocationId: h.String }),
+	output: h.Struct({ ok: h.Boolean }),
+	error: Qn,
 	openAccess: "subject-scoped by construction: redo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), tr = class extends m.TaggedError()("TenantScopeViolation", {
-	table: m.String,
-	reason: m.String
-}) {}, nr = class extends m.TaggedError()("StoreOperationFailed", {
-	operation: m.String,
-	table: m.String,
-	cause: m.String
-}) {}, rr = class extends m.TaggedError()("NoRowFound", {
-	table: m.String,
-	found: m.Number
+}), nr = class extends h.TaggedError()("TenantScopeViolation", {
+	table: h.String,
+	reason: h.String
+}) {}, rr = class extends h.TaggedError()("StoreOperationFailed", {
+	operation: h.String,
+	table: h.String,
+	cause: h.String
+}) {}, ir = class extends h.TaggedError()("NoRowFound", {
+	table: h.String,
+	found: h.Number
 }) {
 	get message() {
 		return this.found === 0 ? `expected exactly one row in '${this.table}', found none` : `expected exactly one row in '${this.table}', found more than one`;
 	}
-}, ir = class extends m.TaggedError()("TableValidationFailed", {
-	table: m.String,
-	summary: m.String,
-	issues: m.Array(m.Struct({
-		path: m.String,
-		message: m.String
+}, ar = class extends h.TaggedError()("TableValidationFailed", {
+	table: h.String,
+	summary: h.String,
+	issues: h.Array(h.Struct({
+		path: h.String,
+		message: h.String
 	}))
-}) {}, ar = class extends m.TaggedError()("TenantRowNotFound", {
-	table: m.String,
-	id: m.String,
-	reason: m.String
-}) {}, or = class extends m.TaggedError()("ServerOnlyColumnWrite", {
-	table: m.String,
-	columns: m.Array(m.String)
-}) {}, sr = class extends m.TaggedError()("ConstraintViolation", {
-	kind: m.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
-	table: m.String,
-	operation: m.String,
-	constraint: m.optional(m.String),
-	column: m.optional(m.String),
-	detail: m.optional(m.String)
+}) {}, or = class extends h.TaggedError()("TenantRowNotFound", {
+	table: h.String,
+	id: h.String,
+	reason: h.String
+}) {}, sr = class extends h.TaggedError()("ServerOnlyColumnWrite", {
+	table: h.String,
+	columns: h.Array(h.String)
+}) {}, cr = class extends h.TaggedError()("ConstraintViolation", {
+	kind: h.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
+	table: h.String,
+	operation: h.String,
+	constraint: h.optional(h.String),
+	column: h.optional(h.String),
+	detail: h.optional(h.String)
 }) {
 	get message() {
 		if (this.detail !== void 0) return this.detail;
@@ -871,85 +878,85 @@ var Ge = m.Union(m.String, m.Number), g = m.Record({
 			case "check": return `check constraint ${t}: the row does not satisfy it`;
 		}
 	}
-}, cr = "__voltro.approvals.pending", lr = "__voltro.approvals.decide", ur = I({
-	name: cr,
+}, lr = "__voltro.approvals.pending", ur = "__voltro.approvals.decide", dr = I({
+	name: lr,
 	source: "_voltro_approvals",
-	input: m.Struct({ limit: m.optional(m.Number) }),
-	output: m.Array(st),
+	input: h.Struct({ limit: h.optional(h.Number) }),
+	output: h.Array(ct),
 	openAccess: "the answer is scoped to the caller — a row appears only if they requested it or hold its recorded approver scopes, so an anonymous caller sees nothing"
-}), dr = L({
-	name: lr,
-	input: m.Struct({
-		approvalId: m.String,
-		decision: m.Literal("approve", "reject"),
-		note: m.optional(m.String)
+}), fr = L({
+	name: ur,
+	input: h.Struct({
+		approvalId: h.String,
+		decision: h.Literal("approve", "reject"),
+		note: h.optional(h.String)
 	}),
-	output: m.Struct({
-		approvalId: m.String,
-		status: m.Literal("approved", "rejected")
+	output: h.Struct({
+		approvalId: h.String,
+		status: h.Literal("approved", "rejected")
 	}),
-	error: ot,
+	error: st,
 	openAccess: "the approver authority is the PENDING ROW's own recorded scopes (plus an unconditional self-approval refusal), checked in-handler — a descriptor-level scope would have to be the union of every approval-requiring procedure in the app"
-}), fr = "__voltro.connections.list", pr = "__voltro.connections.start", mr = "__voltro.connections.submitToken", hr = "__voltro.connections.disconnect", Q = m.Literal("oauth2", "pat"), gr = m.Literal("disconnected", "connected", "expired", "revoked", "error"), _r = m.Struct({
-	connectionId: m.String,
+}), pr = "__voltro.connections.list", mr = "__voltro.connections.start", hr = "__voltro.connections.submitToken", gr = "__voltro.connections.disconnect", Q = h.Literal("oauth2", "pat"), _r = h.Literal("disconnected", "connected", "expired", "revoked", "error"), vr = h.Struct({
+	connectionId: h.String,
 	kind: Q,
-	label: m.String,
-	status: gr,
-	accountId: m.NullOr(m.String),
-	accountLabel: m.NullOr(m.String),
-	scopes: m.Array(m.String),
-	expiresAt: m.NullOr(m.String),
-	lastError: m.NullOr(m.String),
-	connectedAt: m.NullOr(m.String)
-}), vr = class extends m.TaggedError()("ConnectionNotDeclared", { connectionId: m.String }) {}, yr = class extends m.TaggedError()("ConnectionSubjectRequired", { connectionId: m.String }) {}, br = class extends m.TaggedError()("ConnectionKindMismatch", {
-	connectionId: m.String,
+	label: h.String,
+	status: _r,
+	accountId: h.NullOr(h.String),
+	accountLabel: h.NullOr(h.String),
+	scopes: h.Array(h.String),
+	expiresAt: h.NullOr(h.String),
+	lastError: h.NullOr(h.String),
+	connectedAt: h.NullOr(h.String)
+}), yr = class extends h.TaggedError()("ConnectionNotDeclared", { connectionId: h.String }) {}, br = class extends h.TaggedError()("ConnectionSubjectRequired", { connectionId: h.String }) {}, xr = class extends h.TaggedError()("ConnectionKindMismatch", {
+	connectionId: h.String,
 	expected: Q,
 	actual: Q
-}) {}, xr = class extends m.TaggedError()("ConnectionHandshakeFailed", {
-	connectionId: m.String,
-	reason: m.String,
-	transient: m.Boolean
-}) {}, $ = m.Union(vr, yr, br, xr), Sr = I({
-	name: fr,
+}) {}, Sr = class extends h.TaggedError()("ConnectionHandshakeFailed", {
+	connectionId: h.String,
+	reason: h.String,
+	transient: h.Boolean
+}) {}, $ = h.Union(yr, br, xr, Sr), Cr = I({
+	name: pr,
 	source: "_voltro_connections",
-	input: m.Struct({}),
-	output: m.Array(_r),
+	input: h.Struct({}),
+	output: h.Array(vr),
 	openAccess: "self-scoped read: projects the declared connections for the calling subject only (its own connect/disconnect state)"
-}), Cr = R({
-	name: pr,
-	input: m.Struct({
-		connectionId: m.String,
-		redirectTo: m.optional(m.String)
+}), wr = R({
+	name: mr,
+	input: h.Struct({
+		connectionId: h.String,
+		redirectTo: h.optional(h.String)
 	}),
-	output: m.Struct({
-		authorizeUrl: m.String,
-		state: m.String
+	output: h.Struct({
+		authorizeUrl: h.String,
+		state: h.String
 	}),
 	error: $,
 	openAccess: "self-service: begins an oauth handshake that stores a credential for the calling subject only; anonymous callers fail typed with ConnectionSubjectRequired"
-}), wr = L({
-	name: mr,
-	input: m.Struct({
-		connectionId: m.String,
-		token: m.String
+}), Tr = L({
+	name: hr,
+	input: h.Struct({
+		connectionId: h.String,
+		token: h.String
 	}),
-	output: m.Struct({ ok: m.Boolean }),
+	output: h.Struct({ ok: h.Boolean }),
 	error: $,
 	openAccess: "self-service: stores a pasted token as the calling subject's own credential; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Tr = L({
-	name: hr,
-	input: m.Struct({ connectionId: m.String }),
-	output: m.Struct({ ok: m.Boolean }),
+}), Er = L({
+	name: gr,
+	input: h.Struct({ connectionId: h.String }),
+	output: h.Struct({ ok: h.Boolean }),
 	error: $,
 	openAccess: "self-service: deletes only the calling subject's own credential row for this connection"
-}), Er = (e) => {
+}), Dr = (e) => {
 	let t = e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : 0;
 	return Number.isNaN(t) ? 0 : t;
-}, Dr = 4001, Or = /* @__PURE__ */ new Set(["/rpc", "/ws"]), kr = (e) => {
+}, Or = 4001, kr = /* @__PURE__ */ new Set(["/rpc", "/ws"]), Ar = (e) => {
 	if (!e.path.startsWith("/")) throw Error(`defineWebSocket: path must be absolute, got '${e.path}'`);
-	if (Or.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
+	if (kr.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
 	if (e.auth !== "subject" && e.auth !== "public") throw Error(`defineWebSocket: auth must be 'subject' or 'public' (explicitly — an unauthenticated socket has to be a decision somebody wrote down), got '${String(e.auth)}'`);
 	return e;
-}, Ar = 1;
+}, jr = 1;
 //#endregion
-export { De as ADMIN_SCOPE, Se as APIKEY_ISSUE_ORG_SCOPE, Te as APIKEY_ISSUE_OTHER_SCOPE, _e as APIKEY_ISSUE_SELF_SCOPE, lr as APPROVALS_DECIDE_TAG, cr as APPROVALS_PENDING_TAG, ot as ApprovalDecisionErrors, at as ApprovalErrors, k as ApprovalExpired, it as ApprovalForbidden, et as ApprovalNotFound, rt as ApprovalNotPending, nt as ApprovalRejected, $e as ApprovalRequired, tt as ApprovalSelfApproval, A as ApprovalUnavailable, se as AuthMiddleware, E as BusinessRuleViolation, fr as CONNECTIONS_LIST_TAG, hr as CONNECTION_DISCONNECT_TAG, pr as CONNECTION_START_TAG, mr as CONNECTION_SUBMIT_TOKEN_TAG, xr as ConnectionHandshakeFailed, i as ConnectionInfo, r as ConnectionInfoMiddleware, Q as ConnectionKind, br as ConnectionKindMismatch, vr as ConnectionNotDeclared, _r as ConnectionState, gr as ConnectionStatus, yr as ConnectionSubjectRequired, sr as ConstraintViolation, ie as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ye as DEFAULT_SCOPE_CACHE_TTL_MS, Zt as EVENT_ROUTE_SEP, Jt as EventKeyInvalid, qt as EventPayloadInvalid, Yt as EventPayloadTooLarge, Dr as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, e as IMPERSONATION_METADATA_KEY, Lt as MAX_EVENT_ENVELOPE_BYTES, Re as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, p as MutationInFlight, rr as NoRowFound, Ar as PROTOCOL_VERSION, st as PendingApproval, j as REACTIVITY_CHANNEL_PREFIX, u as ScopeError, or as ServerOnlyColumnWrite, nr as StoreOperationFailed, ve as Subject, ne as SubjectIdentity, re as SubjectService, ir as TableValidationFailed, ar as TenantRowNotFound, tr as TenantScopeViolation, Gn as UNDO_APPLY_TAG, Wn as UNDO_LOG_TAG, Kn as UNDO_REDO_TAG, l as Unauthenticated, Xn as UndoConflict, Yn as UndoForbidden, qn as UndoLogEntry, Jn as UndoNotFound, O as ValidationError, Ze as ValidationErrors, D as ValidationIssue, U as WorkflowAccessProperty, Z as WorkflowControlInputSchema, En as WorkflowDomainEventRowSchema, kn as WorkflowDomainEventsInputSchema, An as WorkflowEventDeliveriesInputSchema, Dn as WorkflowEventDeliveryRowSchema, yn as WorkflowParentClosePolicySchema, Tn as WorkflowRunEventRowSchema, xn as WorkflowRunHandleSchema, On as WorkflowRunRefSchema, Y as WorkflowRunRowSchema, J as WorkflowRunStatusSchema, wn as WorkflowRunStepRowSchema, X as WorkflowRunTableRefSchema, Cn as WorkflowRunsInputSchema, jn as WorkflowSignalInputSchema, bn as WorkflowStartDeferralSchema, Mn as WorkflowUpdateInputSchema, Nn as WorkflowUpdateResultSchema, Mt as actionToRpc, Ce as advisoryResourceGuardWarning, a as anonymousSubject, Ye as applyRowPatch, c as applyScopeDecision, dr as approvalsDecideDescriptor, ur as approvalsPendingQueryDescriptor, te as assertAuthenticated, rn as attachWorkflowAccess, Ne as beginIdempotent, dn as checkFrameworkCompat, Ee as checkGuards, pe as checkGuardsEffect, ae as composeAuthStrategies, ln as composeRpcInterceptors, Tr as connectionDisconnectDescriptor, Cr as connectionStartDescriptor, wr as connectionSubmitTokenDescriptor, Sr as connectionsListQueryDescriptor, mt as declaredReactivityChannelKeys, R as defineAction, zt as defineEvent, L as defineMutation, on as definePlugin, sn as definePluginRoute, un as definePluginService, I as defineQuery, wt as defineStream, kr as defineWebSocket, qe as diffRows, be as effectiveScopes, Xt as encodeEventKey, Pt as errorTag, Ht as eventAttached, Bt as eventEnvelope, Vt as eventGap, Wt as eventResumePoint, Qt as eventRoute, Ut as eventStreamEvent, Gt as eventSubscribeInput, Kt as eventToRpc, Le as failIdempotent, Qe as fieldIssuesOf, Oe as findAdvisoryResourceGuards, ze as finishIdempotent, en as formatEventRoute, me as getPolicyGuardResolver, he as getResourceScopeResolver, W as getWorkflowAccess, Ct as hasAccessDecision, Me as hasCallbackRoutes, we as hasEffectiveScope, B as hasEnforcedGuard, xe as hasScope, y as idToPath, Pe as idempotencyScope, w as inputLabel, ge as isAuthenticatedCheck, St as isAuthenticatedGuard, Rt as isEventDescriptor, Je as isIdKeyed, d as isOpenAccess, de as isPolicyCheck, xt as isPolicyGuard, ft as isReactivityChannel, pt as isReactivityChannelKey, t as isSystemSubject, yt as isWireReachable, le as makeScopeCache, Fe as memoryIdempotencyStore, ke as missingAccessDecision, jt as mutationToRpc, It as normalizeDescriptor, gt as normalizeSource, f as openAccessSpec, $t as parseEventRoute, b as pathToId, pn as pluginAlias, cn as pluginInstanceName, mn as pluginSlug, vn as pluginTag, vt as publishReactivity, Be as publishServerError, At as queryToRpc, s as rawImpersonationMark, dt as reactivityChannel, gn as registerPluginAliases, fe as requireScope, _n as resetPluginAliases, nn as resolveWorkflowAccess, _ as rowPatchOpSchema, v as rowPatchSchema, ce as scopeCacheKey, je as setEffectiveScopes, oe as setPolicyGuardResolver, n as setResourceScopeResolver, ht as sourceKeys, Nt as streamToRpc, T as strictInput, ue as subjectIdentity, Ae as subjectScopes, Ie as subscribeServerErrors, C as subscriptionEvent, o as systemSubject, ee as tenantScopedSubject, Ft as toRpc, Er as tsMs, _t as undeclaredChannelKeys, $n as undoApplyDescriptor, Qn as undoLogQueryDescriptor, er as undoRedoDescriptor, H as wireErrorUnion, kt as withRpcTag, an as workflowAccessDescriptor, Bn as workflowCancelDescriptor, Rn as workflowDomainEventsQueryDescriptor, zn as workflowEventDeliveriesQueryDescriptor, Vn as workflowResumeDescriptor, Ln as workflowRunEventsQueryDescriptor, Pn as workflowRunQueryDescriptor, In as workflowRunStepsQueryDescriptor, Fn as workflowRunsQueryDescriptor, Hn as workflowSignalDescriptor, Sn as workflowToRpc, Un as workflowUpdateDescriptor, Ot as workflowWireErrorUnion, Ve as wsMutationIdempotencyScope };
+export { De as ADMIN_SCOPE, Se as APIKEY_ISSUE_ORG_SCOPE, Te as APIKEY_ISSUE_OTHER_SCOPE, _e as APIKEY_ISSUE_SELF_SCOPE, ur as APPROVALS_DECIDE_TAG, lr as APPROVALS_PENDING_TAG, st as ApprovalDecisionErrors, ot as ApprovalErrors, k as ApprovalExpired, at as ApprovalForbidden, tt as ApprovalNotFound, it as ApprovalNotPending, rt as ApprovalRejected, et as ApprovalRequired, nt as ApprovalSelfApproval, A as ApprovalUnavailable, se as AuthMiddleware, D as BusinessRuleViolation, pr as CONNECTIONS_LIST_TAG, gr as CONNECTION_DISCONNECT_TAG, mr as CONNECTION_START_TAG, hr as CONNECTION_SUBMIT_TOKEN_TAG, Sr as ConnectionHandshakeFailed, i as ConnectionInfo, r as ConnectionInfoMiddleware, Q as ConnectionKind, xr as ConnectionKindMismatch, yr as ConnectionNotDeclared, vr as ConnectionState, _r as ConnectionStatus, br as ConnectionSubjectRequired, cr as ConstraintViolation, ie as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ye as DEFAULT_SCOPE_CACHE_TTL_MS, Qt as EVENT_ROUTE_SEP, Yt as EventKeyInvalid, Jt as EventPayloadInvalid, Xt as EventPayloadTooLarge, Or as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, e as IMPERSONATION_METADATA_KEY, zt as MAX_EVENT_ENVELOPE_BYTES, Re as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, m as MutationConnectionRequired, p as MutationInFlight, ir as NoRowFound, jr as PROTOCOL_VERSION, ct as PendingApproval, j as REACTIVITY_CHANNEL_PREFIX, u as ScopeError, sr as ServerOnlyColumnWrite, rr as StoreOperationFailed, ve as Subject, ne as SubjectIdentity, re as SubjectService, ar as TableValidationFailed, or as TenantRowNotFound, nr as TenantScopeViolation, Kn as UNDO_APPLY_TAG, Gn as UNDO_LOG_TAG, qn as UNDO_REDO_TAG, l as Unauthenticated, Zn as UndoConflict, Xn as UndoForbidden, Jn as UndoLogEntry, Yn as UndoNotFound, Ze as ValidationError, Qe as ValidationErrors, O as ValidationIssue, U as WorkflowAccessProperty, Z as WorkflowControlInputSchema, Dn as WorkflowDomainEventRowSchema, An as WorkflowDomainEventsInputSchema, jn as WorkflowEventDeliveriesInputSchema, On as WorkflowEventDeliveryRowSchema, bn as WorkflowParentClosePolicySchema, En as WorkflowRunEventRowSchema, Sn as WorkflowRunHandleSchema, kn as WorkflowRunRefSchema, Y as WorkflowRunRowSchema, J as WorkflowRunStatusSchema, Tn as WorkflowRunStepRowSchema, X as WorkflowRunTableRefSchema, wn as WorkflowRunsInputSchema, Mn as WorkflowSignalInputSchema, xn as WorkflowStartDeferralSchema, Nn as WorkflowUpdateInputSchema, Pn as WorkflowUpdateResultSchema, Pt as actionToRpc, Ce as advisoryResourceGuardWarning, a as anonymousSubject, Ye as applyRowPatch, c as applyScopeDecision, fr as approvalsDecideDescriptor, dr as approvalsPendingQueryDescriptor, te as assertAuthenticated, an as attachWorkflowAccess, Le as beginIdempotent, fn as checkFrameworkCompat, Ee as checkGuards, pe as checkGuardsEffect, ae as composeAuthStrategies, un as composeRpcInterceptors, Er as connectionDisconnectDescriptor, wr as connectionStartDescriptor, Tr as connectionSubmitTokenDescriptor, Cr as connectionsListQueryDescriptor, ht as declaredReactivityChannelKeys, R as defineAction, Vt as defineEvent, L as defineMutation, sn as definePlugin, cn as definePluginRoute, dn as definePluginService, I as defineQuery, Tt as defineStream, Ar as defineWebSocket, qe as diffRows, be as effectiveScopes, Zt as encodeEventKey, It as errorTag, Wt as eventAttached, Ht as eventEnvelope, Ut as eventGap, Gt as eventResumePoint, $t as eventRoute, H as eventStreamEvent, Kt as eventSubscribeInput, qt as eventToRpc, ze as failIdempotent, $e as fieldIssuesOf, Oe as findAdvisoryResourceGuards, Ne as finishIdempotent, tn as formatEventRoute, me as getPolicyGuardResolver, he as getResourceScopeResolver, W as getWorkflowAccess, wt as hasAccessDecision, Me as hasCallbackRoutes, we as hasEffectiveScope, B as hasEnforcedGuard, xe as hasScope, b as idToPath, Fe as idempotencyScope, T as inputLabel, ge as isAuthenticatedCheck, Ct as isAuthenticatedGuard, Bt as isEventDescriptor, Je as isIdKeyed, d as isOpenAccess, de as isPolicyCheck, St as isPolicyGuard, pt as isReactivityChannel, mt as isReactivityChannelKey, t as isSystemSubject, bt as isWireReachable, le as makeScopeCache, Ve as memoryIdempotencyStore, ke as missingAccessDecision, Nt as mutationToRpc, Rt as normalizeDescriptor, _t as normalizeSource, f as openAccessSpec, en as parseEventRoute, x as pathToId, mn as pluginAlias, ln as pluginInstanceName, hn as pluginSlug, yn as pluginTag, yt as publishReactivity, Be as publishServerError, Mt as queryToRpc, s as rawImpersonationMark, ft as reactivityChannel, _n as registerPluginAliases, fe as requireScope, vn as resetPluginAliases, rn as resolveWorkflowAccess, v as rowPatchOpSchema, y as rowPatchSchema, ce as scopeCacheKey, je as setEffectiveScopes, oe as setPolicyGuardResolver, n as setResourceScopeResolver, gt as sourceKeys, Ft as streamToRpc, E as strictInput, ue as subjectIdentity, Ae as subjectScopes, Ie as subscribeServerErrors, w as subscriptionEvent, o as systemSubject, ee as tenantScopedSubject, Lt as toRpc, Dr as tsMs, vt as undeclaredChannelKeys, er as undoApplyDescriptor, $n as undoLogQueryDescriptor, tr as undoRedoDescriptor, V as wireErrorUnion, jt as withRpcTag, on as workflowAccessDescriptor, Vn as workflowCancelDescriptor, zn as workflowDomainEventsQueryDescriptor, Bn as workflowEventDeliveriesQueryDescriptor, Hn as workflowResumeDescriptor, Rn as workflowRunEventsQueryDescriptor, Fn as workflowRunQueryDescriptor, Ln as workflowRunStepsQueryDescriptor, In as workflowRunsQueryDescriptor, Un as workflowSignalDescriptor, Cn as workflowToRpc, Wn as workflowUpdateDescriptor, At as workflowWireErrorUnion, Pe as wsMutationIdempotencyScope };