@voltro/protocol 0.66.1 → 0.68.0

package/dist/index.js

@@ -1,58 +1,58 @@
 import { A as e, B as t, C as n, D as r, E as i, F as a, G as o, H as s, I as c, K as ee, L as te, M as ne, N as re, O as ie, P as l, R as ae, S as oe, T as se, U as ce, V as le, W as ue, _ as de, a as u, b as fe, c as pe, d as me, f as he, g as d, h as ge, i as _e, j as ve, k as ye, l as be, m as xe, n as Se, o as Ce, p as we, r as Te, s as Ee, t as De, u as Oe, v as ke, w as Ae, x as je, y as f, z as Me } from "./scopes-C86BDyNJ.js";
-import { a as p, c as Ne, d as Pe, i as m, l as Fe, n as Ie, o as Le, r as Re, s as ze, t as Be, u as Ve } from "./serverErrorBus-BTnTpMqj.js";
-import { Context as He, Layer as Ue, Schema as h } from "effect";
-import { Rpc as g } from "@effect/rpc";
-import { VersionConflict as We } from "@voltro/database/wire";
+import { a as Ne, c as Pe, d as Fe, i as p, l as Ie, n as Le, o as Re, r as ze, s as Be, t as Ve, u as He } from "./serverErrorBus-BTnTpMqj.js";
+import { Context as Ue, Layer as We, Schema as m } from "effect";
+import { Rpc as h } from "@effect/rpc";
+import { VersionConflict as Ge } from "@voltro/database/wire";
 //#region src/rowPatch.ts
-var Ge = h.Union(h.String, h.Number), _ = h.Record({
-	key: h.String,
-	value: h.Unknown
-}).pipe(h.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), v = h.Union(h.Struct({
-	op: h.Literal("add"),
-	path: h.String,
-	value: _
-}), h.Struct({
-	op: h.Literal("replace"),
-	path: h.String,
-	value: _
-}), h.Struct({
-	op: h.Literal("remove"),
-	path: h.String
-}), h.Struct({
-	op: h.Literal("mergeCells"),
-	path: h.String,
-	value: h.Record({
-		key: h.String,
-		value: h.Unknown
+var Ke = m.Union(m.String, m.Number), qe = m.Record({
+	key: m.String,
+	value: m.Unknown
+}).pipe(m.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), Je = m.Union(m.Struct({
+	op: m.Literal("add"),
+	path: m.String,
+	value: qe
+}), m.Struct({
+	op: m.Literal("replace"),
+	path: m.String,
+	value: qe
+}), m.Struct({
+	op: m.Literal("remove"),
+	path: m.String
+}), m.Struct({
+	op: m.Literal("mergeCells"),
+	path: m.String,
+	value: m.Record({
+		key: m.String,
+		value: m.Unknown
 	})
-})), y = h.Struct({
-	ops: h.Array(v),
-	order: h.Array(Ge)
-}), b = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, x = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), S = (e) => {
+})), Ye = m.Struct({
+	ops: m.Array(Je),
+	order: m.Array(Ke)
+}), g = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, _ = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), v = (e) => {
 	let t = Object.keys(e).sort(), n = {};
 	for (let r of t) n[r] = e[r];
 	return JSON.stringify(n);
-}, C = (e, t) => S(e) === S(t), Ke = (e, t) => {
+}, y = (e, t) => v(e) === v(t), Xe = (e, t) => {
 	if (e instanceof Uint8Array && t instanceof Uint8Array) {
 		if (e.length !== t.length) return !1;
 		for (let n = 0; n < e.length; n += 1) if (e[n] !== t[n]) return !1;
 		return !0;
 	}
-	return S({
+	return v({
 		id: 0,
 		v: e
-	}) === S({
+	}) === v({
 		id: 0,
 		v: t
 	});
-}, qe = (e, t, n = {}) => {
+}, Ze = (e, t, n = {}) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) r.set(t.id, t);
 	let i = [], a = [], o = /* @__PURE__ */ new Set(), s = n.crdt, c = (e, t) => {
 		if (s === void 0 || s.columns.size === 0) return;
 		let n = {}, r = !1;
 		for (let i of s.columns) {
-			if (!(i in t) || Ke(e[i], t[i])) continue;
+			if (!(i in t) || Xe(e[i], t[i])) continue;
 			let a = s.incremental(i, e[i], t[i]);
 			if (a === void 0) return;
 			n[i] = a, r = !0;
@@ -70,43 +70,43 @@ var Ge = h.Union(h.String, h.Number), _ = h.Record({
 		let t = r.get(e.id);
 		if (t === void 0) i.push({
 			op: "add",
-			path: b(e.id),
+			path: g(e.id),
 			value: e
 		});
-		else if (!C(t, e)) {
+		else if (!y(t, e)) {
 			let n = c(t, e);
 			n === void 0 ? i.push({
 				op: "replace",
-				path: b(e.id),
+				path: g(e.id),
 				value: e
-			}) : (C(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
+			}) : (y(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
 				op: "replace",
-				path: b(e.id),
+				path: g(e.id),
 				value: n.scalars
 			}), i.push({
 				op: "mergeCells",
-				path: b(e.id),
+				path: g(e.id),
 				value: n.merges
 			}));
 		}
 	}
 	for (let t of e) o.has(t.id) || i.push({
 		op: "remove",
-		path: b(t.id)
+		path: g(t.id)
 	});
 	return {
 		ops: i,
 		order: a
 	};
-}, Je = (e) => e.every((e) => {
+}, Qe = (e) => e.every((e) => {
 	let t = e.id;
 	return typeof t == "string" || typeof t == "number";
-}), Ye = (e, t, n = {}) => {
+}), $e = (e, t, n = {}) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) r.set(t.id, t);
 	for (let e of t.ops) {
 		if (e.op === "mergeCells") {
-			let t = x(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
+			let t = _(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
 			if (i === void 0) continue;
 			let o = { ...i };
 			for (let [t, r] of Object.entries(e.value)) o[t] = n.mergeCell === void 0 ? r : n.mergeCell(t, i[t], r);
@@ -121,56 +121,57 @@ var Ge = h.Union(h.String, h.Number), _ = h.Record({
 		t !== void 0 && i.push(t);
 	}
 	return i;
-}, w = (e) => h.Union(h.Struct({
-	_tag: h.Literal("snapshot"),
-	revision: h.Number,
+}, b = (e) => m.Union(m.Struct({
+	_tag: m.Literal("snapshot"),
+	revision: m.Number,
 	data: e,
-	computed: h.optional(h.Boolean)
-}), h.Struct({
-	_tag: h.Literal("delta"),
-	revision: h.Number,
-	emittedAt: h.Number,
-	patch: y
-}), h.Struct({
-	_tag: h.Literal("error"),
-	error: h.Unknown,
-	revision: h.optional(h.Number)
-})), T = (e, t) => {
+	computed: m.optional(m.Boolean),
+	reconciles: m.optional(m.String)
+}), m.Struct({
+	_tag: m.Literal("delta"),
+	revision: m.Number,
+	emittedAt: m.Number,
+	patch: Ye
+}), m.Struct({
+	_tag: m.Literal("error"),
+	error: m.Unknown,
+	revision: m.optional(m.Number)
+})), x = (e, t) => {
 	let n = `${e ?? "this procedure"} input`;
 	return t === !0 ? `${n} (guarded — the guard did NOT run: the payload failed to decode first, so this says nothing about access)` : n;
-}, Xe = (e) => {
+}, et = (e) => {
 	let t = e.ast;
 	return t._tag === "TypeLiteral" && (t.propertySignatures?.length ?? 0) === 0 && (t.indexSignatures?.length ?? 0) === 0;
-}, E = (e, t, n) => {
-	let r = T(t, n), i = e.annotations({
+}, S = (e, t, n) => {
+	let r = x(t, n), i = e.annotations({
 		parseOptions: { onExcessProperty: "error" },
 		parseIssueTitle: () => r
 	});
-	return Xe(e) ? h.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
-}, D = class extends h.TaggedError()("BusinessRuleViolation", {
-	rule: h.String,
-	params: h.optional(h.Record({
-		key: h.String,
-		value: h.Unknown
+	return et(e) ? m.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
+}, tt = class extends m.TaggedError()("BusinessRuleViolation", {
+	rule: m.String,
+	params: m.optional(m.Record({
+		key: m.String,
+		value: m.Unknown
 	})),
-	field: h.optional(h.String),
-	message: h.optional(h.String),
-	severity: h.Literal("error", "warning")
-}) {}, O = h.Struct({
-	field: h.String,
-	message: h.String,
-	params: h.optional(h.Record({
-		key: h.String,
-		value: h.Unknown
+	field: m.optional(m.String),
+	message: m.optional(m.String),
+	severity: m.Literal("error", "warning")
+}) {}, nt = m.Struct({
+	field: m.String,
+	message: m.String,
+	params: m.optional(m.Record({
+		key: m.String,
+		value: m.Unknown
 	}))
-}), Ze = class extends h.TaggedError()("ValidationError", {
-	field: h.String,
-	message: h.String,
-	params: h.optional(h.Record({
-		key: h.String,
-		value: h.Unknown
+}), rt = class extends m.TaggedError()("ValidationError", {
+	field: m.String,
+	message: m.String,
+	params: m.optional(m.Record({
+		key: m.String,
+		value: m.Unknown
 	}))
-}) {}, Qe = class extends h.TaggedError()("ValidationErrors", { issues: h.Array(O).pipe(h.minItems(1)) }) {}, $e = (e) => {
+}) {}, it = class extends m.TaggedError()("ValidationErrors", { issues: m.Array(nt).pipe(m.minItems(1)) }) {}, at = (e) => {
 	if (typeof e != "object" || !e) return [];
 	let t = e._tag;
 	if (t === "ValidationError") {
@@ -196,69 +197,69 @@ var Ge = h.Union(h.String, h.Number), _ = h.Record({
 		}];
 	}
 	return [];
-}, et = class extends h.TaggedError()("ApprovalRequired", {
-	approvalId: h.String,
-	procedure: h.String,
-	expiresAt: h.String,
-	requiredScopes: h.Array(h.String),
-	reason: h.NullOr(h.String),
-	created: h.Boolean
-}) {}, tt = class extends h.TaggedError()("ApprovalNotFound", { approvalId: h.String }) {}, nt = class extends h.TaggedError()("ApprovalSelfApproval", {
-	approvalId: h.String,
-	subjectId: h.NullOr(h.String)
-}) {}, rt = class extends h.TaggedError()("ApprovalRejected", {
-	approvalId: h.String,
-	decidedBy: h.NullOr(h.String),
-	note: h.NullOr(h.String)
-}) {}, k = class extends h.TaggedError()("ApprovalExpired", {
-	approvalId: h.String,
-	expiredAt: h.String
-}) {}, it = class extends h.TaggedError()("ApprovalNotPending", {
-	approvalId: h.String,
-	status: h.String
-}) {}, at = class extends h.TaggedError()("ApprovalForbidden", {
-	approvalId: h.String,
-	required: h.NullOr(h.String),
-	message: h.String
-}) {}, A = class extends h.TaggedError()("ApprovalUnavailable", {
-	procedure: h.String,
-	message: h.String
-}) {}, ot = h.Union(et, rt, k, A), st = h.Union(tt, nt, k, it, at, A), ct = h.Struct({
-	id: h.String,
-	procedure: h.String,
-	kind: h.Literal("mutation", "action"),
-	requestedBy: h.NullOr(h.String),
-	status: h.Literal("pending", "approved", "rejected", "expired", "consumed"),
-	reason: h.NullOr(h.String),
-	requiredScopes: h.Array(h.String),
-	requestedAt: h.String,
-	expiresAt: h.String,
-	decidedBy: h.NullOr(h.String),
-	decidedAt: h.NullOr(h.String),
-	note: h.NullOr(h.String),
-	relation: h.Literal("to-decide", "requested")
-}), j = "channel:", lt = Symbol.for("@voltro/protocol/reactivityChannels"), ut = globalThis, M = ut[lt] ?? (ut[lt] = /* @__PURE__ */ new Map()), dt = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, ft = (e) => {
-	if (!dt.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
+}, ot = class extends m.TaggedError()("ApprovalRequired", {
+	approvalId: m.String,
+	procedure: m.String,
+	expiresAt: m.String,
+	requiredScopes: m.Array(m.String),
+	reason: m.NullOr(m.String),
+	created: m.Boolean
+}) {}, st = class extends m.TaggedError()("ApprovalNotFound", { approvalId: m.String }) {}, ct = class extends m.TaggedError()("ApprovalSelfApproval", {
+	approvalId: m.String,
+	subjectId: m.NullOr(m.String)
+}) {}, lt = class extends m.TaggedError()("ApprovalRejected", {
+	approvalId: m.String,
+	decidedBy: m.NullOr(m.String),
+	note: m.NullOr(m.String)
+}) {}, C = class extends m.TaggedError()("ApprovalExpired", {
+	approvalId: m.String,
+	expiredAt: m.String
+}) {}, ut = class extends m.TaggedError()("ApprovalNotPending", {
+	approvalId: m.String,
+	status: m.String
+}) {}, dt = class extends m.TaggedError()("ApprovalForbidden", {
+	approvalId: m.String,
+	required: m.NullOr(m.String),
+	message: m.String
+}) {}, w = class extends m.TaggedError()("ApprovalUnavailable", {
+	procedure: m.String,
+	message: m.String
+}) {}, ft = m.Union(ot, lt, C, w), pt = m.Union(st, ct, C, ut, dt, w), mt = m.Struct({
+	id: m.String,
+	procedure: m.String,
+	kind: m.Literal("mutation", "action"),
+	requestedBy: m.NullOr(m.String),
+	status: m.Literal("pending", "approved", "rejected", "expired", "consumed"),
+	reason: m.NullOr(m.String),
+	requiredScopes: m.Array(m.String),
+	requestedAt: m.String,
+	expiresAt: m.String,
+	decidedBy: m.NullOr(m.String),
+	decidedAt: m.NullOr(m.String),
+	note: m.NullOr(m.String),
+	relation: m.Literal("to-decide", "requested")
+}), T = "channel:", ht = Symbol.for("@voltro/protocol/reactivityChannels"), gt = globalThis, E = gt[ht] ?? (gt[ht] = /* @__PURE__ */ new Map()), _t = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, vt = (e) => {
+	if (!_t.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
   \`billing.usage\`. A \`:\` is refused because it is the namespace separator in
-  the routing key (\`${j}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
+  the routing key (\`${T}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
   routes as two.`);
-	let t = M.get(e);
+	let t = E.get(e);
 	if (t !== void 0) return t;
-	let n = `${j}${e}`, r = Object.freeze({
+	let n = `${T}${e}`, r = Object.freeze({
 		kind: "reactivity-channel",
 		name: e,
 		key: n,
 		toString: () => n
 	});
-	return M.set(e, r), r;
-}, pt = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", mt = (e) => e.startsWith(j), ht = () => new Set([...M.values()].map((e) => e.key)), N = (e) => pt(e) ? e.key : e, gt = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(N) : [N(e)], _t = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(N) : N(e), vt = (e) => {
-	let t = ht(), n = [];
-	for (let r of e) for (let e of gt(r.source)) !mt(e) || t.has(e) || n.push({
+	return E.set(e, r), r;
+}, D = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", O = (e) => e.startsWith(T), k = () => new Set([...E.values()].map((e) => e.key)), A = (e) => D(e) ? e.key : e, j = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(A) : [A(e)], M = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(A) : A(e), yt = (e) => {
+	let t = k(), n = [];
+	for (let r of e) for (let e of j(r.source)) O(e) && !t.has(e) && n.push({
 		procedure: r.name,
 		key: e
 	});
 	return n;
-}, yt = (e, t) => {
+}, bt = (e, t) => {
 	let n = e?.injectExternalChange;
 	return n !== void 0 && (n.call(e, {
 		table: t.key,
@@ -267,8 +268,8 @@ var Ge = h.Union(h.String, h.Number), _ = h.Record({
 		old: {},
 		origin: "inline"
 	}), !0);
-}, bt = (e) => e.internal !== !0, P = (e) => {
-	if (xt(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
+}, xt = (e) => e.internal !== !0, N = (e) => {
+	if (St(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
 	if (e.idempotencyScope === "connection" && (e.internal === !0 || e.publicApi !== void 0 || e.exposeAsTool !== void 0)) throw Error(`${e.name}: connection-scoped mutations require the native WebSocket RPC surface; internal, publicApi and exposeAsTool cannot establish its connection state`);
 	if (Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
   unguarded procedure, or list the scopes required to call it.`);
@@ -287,7 +288,7 @@ var Ge = h.Union(h.String, h.Number), _ = h.Record({
 	let n = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
 	if (n.length === 0) return e;
 	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${n.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${n.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${n.join(" / ")} annotation if it is not.`);
-}, xt = (e) => {
+}, St = (e) => {
 	let t = e.requiresApproval;
 	if (t !== void 0) {
 		if (!Array.isArray(t.approvers) || t.approvers.length === 0) throw Error(`${e.name}: \`requiresApproval.approvers\` is empty, so NOBODY can approve this\n  procedure and every call would park forever. Name the scope(s) an approver must hold
@@ -297,49 +298,49 @@ var Ge = h.Union(h.String, h.Number), _ = h.Record({
   human from every other, and the second-pair-of-eyes control would enforce nothing.
   Give the procedure a \`guards:\` decision, or drop \`requiresApproval\`.`);
 	}
-}, St = (e) => e.action !== void 0 && e.resourceType !== void 0, Ct = (e) => e.authenticated === !0, wt = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, F = (e, t, n) => {
+}, Ct = (e) => e.action !== void 0 && e.resourceType !== void 0, wt = (e) => e.authenticated === !0, Tt = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, P = (e, t, n) => {
 	if (n === void 0) return t;
 	if (n.trim() === "") throw Error(`${e}: \`openAccess\` needs a REASON, not an empty string. It is the sentence a\n  reviewer reads to decide whether this procedure should really be callable
   without an authorization check — e.g. \`openAccess: 'public pricing, no caller data'\`.`);
 	if (t !== void 0 && t.length > 0) throw Error(`${e}: \`openAccess\` and \`guards\` are two different access decisions, so\n  declaring both says the procedure is protected AND open. Keep the guards if a
   caller must hold a scope; drop them if anyone may call it.`);
 	return [f(n.trim())];
-}, I = (e) => P({
+}, F = (e) => N({
 	kind: "query",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? h.Never,
-	source: _t(e.source),
+	error: e.error ?? m.Never,
+	source: M(e.source),
 	cache: e.cache,
-	guards: F(e.name, e.guards, e.openAccess),
+	guards: P(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	publicApi: e.publicApi,
 	exposeAsTool: e.exposeAsTool,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), L = (e) => P({
+}), I = (e) => N({
 	kind: "mutation",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? h.Never,
+	error: e.error ?? m.Never,
 	...e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope },
 	target: e.target,
-	guards: F(e.name, e.guards, e.openAccess),
+	guards: P(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	publicApi: e.publicApi,
 	exposeAsTool: e.exposeAsTool,
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), R = (e) => P({
+}), L = (e) => N({
 	kind: "action",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? h.Never,
-	guards: F(e.name, e.guards, e.openAccess),
+	error: e.error ?? m.Never,
+	guards: P(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	source: e.source,
 	target: e.target,
@@ -348,55 +349,55 @@ var Ge = h.Union(h.String, h.Number), _ = h.Record({
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), Tt = (e) => P({
+}), Et = (e) => N({
 	kind: "stream",
 	name: e.name,
 	input: e.input,
 	element: e.element,
-	error: e.error ?? h.Never,
+	error: e.error ?? m.Never,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin,
-	guards: F(e.name, e.guards, e.openAccess),
+	guards: P(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess
-}), z = (e, t) => t && t.length > 0 ? h.Union(e, ...t) : e, B = (e) => e !== void 0 && e.some((e) => !d(e)), Et = (e, t) => B(t) ? h.Union(e, u, l) : e, Dt = (e) => h.Union(e, D), Ot = (e) => h.Union(e, Ze, Qe), kt = (e, t) => t === void 0 ? e : h.Union(e, ot), V = (e, t) => {
+}), R = (e, t) => t && t.length > 0 ? m.Union(e, ...t) : e, z = (e) => e !== void 0 && e.some((e) => !d(e)), Dt = (e, t) => z(t) ? m.Union(e, u, l) : e, Ot = (e) => m.Union(e, tt), kt = (e) => m.Union(e, rt, it), At = (e, t) => t === void 0 ? e : m.Union(e, ft), B = (e, t) => {
 	if (t === "stream") return e.error;
-	let n = Et(e.error, e.guards);
+	let n = Dt(e.error, e.guards);
 	if (t === "query") return n;
-	let r = t === "mutation" ? h.Union(Dt(n), p, We) : n;
-	return kt(Ot(t === "mutation" && e.idempotencyScope === "connection" ? h.Union(r, m) : r), e.requiresApproval);
-}, At = (e, t) => z(Et(e.errorSchema, e.guards), t), jt = (e, t) => ({
+	let r = t === "mutation" ? m.Union(Ot(n), Ne, Ge) : n;
+	return At(kt(t === "mutation" && e.idempotencyScope === "connection" ? m.Union(r, p) : r), e.requiresApproval);
+}, jt = (e, t) => R(Dt(e.errorSchema, e.guards), t), Mt = (e, t) => ({
 	...e,
 	name: t
-}), Mt = (e, t) => g.make(e.name, {
-	payload: E(e.input, e.name, B(e.guards)),
-	success: w(e.output),
-	error: z(V(e, "query"), t),
+}), Nt = (e, t) => h.make(e.name, {
+	payload: S(e.input, e.name, z(e.guards)),
+	success: b(e.output),
+	error: R(B(e, "query"), t),
 	stream: !0
-}), Nt = (e, t) => g.make(e.name, {
-	payload: E(e.input, e.name, B(e.guards)),
+}), Pt = (e, t) => h.make(e.name, {
+	payload: S(e.input, e.name, z(e.guards)),
 	success: e.output,
-	error: z(V(e, "mutation"), t)
-}), Pt = (e, t) => g.make(e.name, {
-	payload: E(e.input, e.name, B(e.guards)),
+	error: R(B(e, "mutation"), t)
+}), Ft = (e, t) => h.make(e.name, {
+	payload: S(e.input, e.name, z(e.guards)),
 	success: e.output,
-	error: z(V(e, "action"), t)
-}), Ft = (e, t) => g.make(e.name, {
-	payload: E(e.input, e.name, B(e.guards)),
+	error: R(B(e, "action"), t)
+}), It = (e, t) => h.make(e.name, {
+	payload: S(e.input, e.name, z(e.guards)),
 	success: e.element,
-	error: z(e.error, t),
+	error: R(e.error, t),
 	stream: !0
-}), It = (e) => {
+}), Lt = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
 	return typeof t == "string" ? t : void 0;
-}, Lt = (e) => {
+}, Rt = (e) => {
 	switch (e.kind) {
-		case "query": return Mt(e);
-		case "mutation": return Nt(e);
-		case "action": return Pt(e);
-		case "stream": return Ft(e);
+		case "query": return Nt(e);
+		case "mutation": return Pt(e);
+		case "action": return Ft(e);
+		case "stream": return It(e);
 	}
-}, Rt = (e) => {
+}, zt = (e) => {
 	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
 	if (e.kind === "query") return {
 		kind: "query",
@@ -440,7 +441,7 @@ var Ge = h.Union(h.String, h.Number), _ = h.Record({
 			..."relations" in e && e.relations !== void 0 ? { relations: e.relations } : {}
 		}))
 	};
-}, zt = 7500, Bt = (e) => typeof e == "object" && !!e && e.kind === "event", Vt = (e) => {
+}, Bt = 7500, Vt = (e) => typeof e == "object" && !!e && e.kind === "event", Ht = (e) => {
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -475,60 +476,60 @@ var Ge = h.Union(h.String, h.Number), _ = h.Record({
 		webhook: e.webhook,
 		delivery: e.delivery
 	};
-}, Ht = (e) => h.Struct({
-	_tag: h.Literal("event"),
-	origin: h.String,
-	n: h.Number,
-	emittedAt: h.Number,
+}, Ut = (e) => m.Struct({
+	_tag: m.Literal("event"),
+	origin: m.String,
+	n: m.Number,
+	emittedAt: m.Number,
 	payload: e
-}), Ut = h.Struct({
-	_tag: h.Literal("gap"),
-	missed: h.Number,
-	reason: h.Literal("buffer", "resume")
-}), Wt = h.Struct({ _tag: h.Literal("attached") }), H = (e) => h.Union(Wt, Ht(e), Ut), Gt = h.Struct({
-	origin: h.String,
-	n: h.Number
-}), Kt = (e) => h.Struct({
+}), Wt = m.Struct({
+	_tag: m.Literal("gap"),
+	missed: m.Number,
+	reason: m.Literal("buffer", "resume")
+}), Gt = m.Struct({ _tag: m.Literal("attached") }), Kt = (e) => m.Union(Gt, Ut(e), Wt), qt = m.Struct({
+	origin: m.String,
+	n: m.Number
+}), Jt = (e) => m.Struct({
 	key: e,
-	resume: h.optional(h.Array(Gt))
-}), qt = (e, t) => {
-	let n = e.guards !== void 0 && e.guards.some((e) => !d(e)) ? h.Union(u, l) : h.Never, r = t && t.length > 0 ? h.Union(n, ...t) : n;
-	return g.make(e.name, {
-		payload: E(Kt(e.key), e.name, B(e.guards)),
-		success: H(e.payload),
+	resume: m.optional(m.Array(qt))
+}), Yt = (e, t) => {
+	let n = e.guards !== void 0 && e.guards.some((e) => !d(e)) ? m.Union(u, l) : m.Never, r = t && t.length > 0 ? m.Union(n, ...t) : n;
+	return h.make(e.name, {
+		payload: S(Jt(e.key), e.name, z(e.guards)),
+		success: Kt(e.payload),
 		error: r,
 		stream: !0
 	});
-}, Jt = class extends h.TaggedError()("EventPayloadInvalid", {
-	event: h.String,
-	message: h.String
-}) {}, Yt = class extends h.TaggedError()("EventKeyInvalid", {
-	event: h.String,
-	message: h.String
-}) {}, Xt = class extends h.TaggedError()("EventPayloadTooLarge", {
-	event: h.String,
-	bytes: h.Number,
-	limit: h.Number
-}) {}, Zt = (e) => {
+}, Xt = class extends m.TaggedError()("EventPayloadInvalid", {
+	event: m.String,
+	message: m.String
+}) {}, Zt = class extends m.TaggedError()("EventKeyInvalid", {
+	event: m.String,
+	message: m.String
+}) {}, Qt = class extends m.TaggedError()("EventPayloadTooLarge", {
+	event: m.String,
+	bytes: m.Number,
+	limit: m.Number
+}) {}, $t = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t));
 	return JSON.stringify(t);
-}, Qt = "\0", $t = (e, t, n) => [
+}, en = "\0", tn = (e, t, n) => [
 	e ?? "~",
 	t,
-	Zt(n)
-].join("\0"), en = (e) => {
+	$t(n)
+].join("\0"), nn = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, tn = (e) => e.split("\0").join(" · "), U = Symbol.for("@voltro/protocol/workflow-access"), nn = {
+}, rn = (e) => e.split("\0").join(" · "), V = Symbol.for("@voltro/protocol/workflow-access"), an = {
 	guards: void 0,
 	openAccess: void 0,
 	internal: !1
-}, rn = (e, t) => {
+}, on = (e, t) => {
 	let n = t.guards;
 	if (n !== void 0 && n.length === 0) throw Error(`workflow("${e}"): \`guards: []\` is empty, so it enforces nothing —\n  but it reads at the call site as if the start were protected. Omit the field
   and decide with \`openAccess\` or \`internal\`, or list the scopes that may start it.`);
@@ -548,37 +549,92 @@ var Ge = h.Union(h.String, h.Number), _ = h.Record({
 		openAccess: t.openAccess?.trim(),
 		internal: t.internal === !0
 	};
-}, an = (e, t) => {
-	Object.defineProperty(e, U, {
+}, sn = (e, t) => {
+	Object.defineProperty(e, V, {
 		value: t,
 		enumerable: !1
 	});
-}, W = (e) => {
-	if (typeof e != "object" || !e) return nn;
-	let t = e[U];
-	return t === void 0 ? nn : t;
-}, on = (e) => {
-	let t = W(e);
+}, H = (e) => {
+	if (typeof e != "object" || !e) return an;
+	let t = e[V];
+	return t === void 0 ? an : t;
+}, cn = (e) => {
+	let t = H(e);
 	return {
 		name: e.name,
 		internal: t.internal,
 		guards: t.guards,
 		openAccess: t.openAccess
 	};
-}, sn = (e) => e, cn = (e) => e, ln = (e) => {
+}, ln = (e) => typeof e == "object" && !!e && typeof e._tag == "string", un = 64, U = (e, t = 0) => {
+	if (!ln(e)) return String(e);
+	if (t >= un) return "…";
+	let n = t + 1, r = (t) => U(e[t], n), i = (t) => Array.isArray(e[t]) ? e[t] : [];
+	switch (e._tag) {
+		case "Transformation": return `T(${r("from")}->${r("to")})`;
+		case "Refinement": return `R(${r("from")})`;
+		case "Suspend": return "S(…)";
+		case "TypeLiteral": {
+			let e = i("propertySignatures").map((e) => {
+				let t = e;
+				return `${String(t.name)}${t.isOptional === !0 ? "?" : ""}:${U(t.type, n)}`;
+			}).join(","), t = i("indexSignatures").map((e) => {
+				let t = e;
+				return `[${U(t.parameter, n)}]:${U(t.type, n)}`;
+			}).join(",");
+			return t === "" ? `{${e}}` : `{${e};${t}}`;
+		}
+		case "Union": return `U(${i("types").map((e) => U(e, n)).join("|")})`;
+		case "TupleType": {
+			let e = i("elements").map((e) => {
+				let t = e;
+				return `${U(t.type, n)}${t.isOptional === !0 ? "?" : ""}`;
+			}).join(","), t = i("rest").map((e) => U(e.type, n)).join(",");
+			return `A(${e}${t === "" ? "" : `...${t}`})`;
+		}
+		case "Declaration": return `D(${i("typeParameters").map((e) => U(e, n)).join(",")})`;
+		default: return String(e);
+	}
+}, dn = (e) => {
+	let t = 2166136261;
+	for (let n = 0; n < e.length; n++) t ^= e.charCodeAt(n), t = Math.imul(t, 16777619) >>> 0;
+	return t.toString(16).padStart(8, "0");
+}, fn = (e) => dn([
+	U(e.payloadSchema?.ast),
+	U(e.successSchema?.ast),
+	U(e.errorSchema?.ast)
+].join("\0")), pn = (e) => {
+	let t = {}, n = e.requests, r = n instanceof Map ? n.entries() : Array.isArray(n) ? n.map((e, t) => [t, e]) : [];
+	for (let [, e] of r) {
+		if (typeof e != "object" && typeof e != "function" || e === null) continue;
+		let n = e;
+		typeof n._tag == "string" && (t[n._tag] = fn(n));
+	}
+	return t;
+}, mn = (e, t) => {
+	let n = [], r = [];
+	for (let [i, a] of Object.entries(t)) {
+		let t = e[i];
+		t === void 0 ? r.push(i) : t !== a && n.push(i);
+	}
+	return {
+		differing: n.sort(),
+		missingHere: r.sort()
+	};
+}, hn = (e) => e, gn = (e) => e, _n = (e) => {
 	let t = e.alias?.trim(), n = e.instance?.trim(), r = t !== void 0 && t !== "" ? t : e.base;
 	return n !== void 0 && n !== "" ? `${r}#${n}` : r;
-}, un = (e) => {
+}, vn = (e) => {
 	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
-}, dn = (e, t) => {
-	let n = He.GenericTag(e);
+}, yn = (e, t) => {
+	let n = Ue.GenericTag(e);
 	return {
 		Tag: n,
-		Live: Ue.succeed(n, t)
+		Live: We.succeed(n, t)
 	};
-}, fn = (e, t, n) => {
+}, bn = (e, t, n) => {
 	if (!t) return { ok: !0 };
-	let r = n === void 0 ? null : G(n);
+	let r = n === void 0 ? null : W(n);
 	if (!r) return {
 		ok: !0,
 		unverified: `plugin "${e}" requires framework ${t}, but the running framework version is ${n === void 0 ? "unknown" : `unreadable ("${n}")`} — not checked.`
@@ -586,12 +642,12 @@ var Ge = h.Union(h.String, h.Number), _ = h.Record({
 	let i = t.trim();
 	if (i === "*" || i === "") return { ok: !0 };
 	let a = i.split(/\s+/).filter((e) => e.length > 0);
-	for (let i of a) if (!pn(i, r)) return {
+	for (let i of a) if (!xn(i, r)) return {
 		ok: !1,
 		reason: `plugin "${e}" requires framework ${t}, running ${n}`
 	};
 	return { ok: !0 };
-}, G = (e) => {
+}, W = (e) => {
 	let t = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9a-zA-Z.-]+))?$/.exec(e.trim());
 	return t ? {
 		major: Number(t[1]),
@@ -599,273 +655,273 @@ var Ge = h.Union(h.String, h.Number), _ = h.Record({
 		patch: Number(t[3]),
 		pre: t[4] ?? ""
 	} : null;
-}, K = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, pn = (e, t) => {
+}, G = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, xn = (e, t) => {
 	if (e === "*") return !0;
 	if (e.startsWith("^")) {
-		let n = G(e.slice(1));
-		return !n || t.major !== n.major ? !1 : K(t, n) >= 0;
+		let n = W(e.slice(1));
+		return !n || t.major !== n.major ? !1 : G(t, n) >= 0;
 	}
 	if (e.startsWith("~")) {
-		let n = G(e.slice(1));
-		return !n || t.major !== n.major || t.minor !== n.minor ? !1 : K(t, n) >= 0;
+		let n = W(e.slice(1));
+		return !n || t.major !== n.major || t.minor !== n.minor ? !1 : G(t, n) >= 0;
 	}
 	let n = /^(>=|<=|>|<)(.+)$/.exec(e);
 	if (n) {
-		let e = n[1], r = G(n[2]);
+		let e = n[1], r = W(n[2]);
 		if (!r) return !1;
-		let i = K(t, r);
+		let i = G(t, r);
 		if (e === ">=") return i >= 0;
 		if (e === "<=") return i <= 0;
 		if (e === ">") return i > 0;
 		if (e === "<") return i < 0;
 	}
-	let r = G(e);
-	return r ? K(t, r) === 0 : !1;
-}, mn = (e) => {
+	let r = W(e);
+	return r ? G(t, r) === 0 : !1;
+}, Sn = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/-([a-zA-Z0-9])/g, (e, t) => t.toUpperCase());
-}, hn = (e) => {
+}, Cn = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/#/g, "--").replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
-}, gn = Symbol.for("@voltro/protocol/pluginAliases"), q = () => {
-	let e = globalThis, t = e[gn];
+}, wn = Symbol.for("@voltro/protocol/pluginAliases"), K = () => {
+	let e = globalThis, t = e[wn];
 	if (t instanceof Map) return t;
 	let n = /* @__PURE__ */ new Map();
-	return e[gn] = n, n;
-}, _n = (e) => {
-	let t = q();
+	return e[wn] = n, n;
+}, Tn = (e) => {
+	let t = K();
 	for (let [n, r] of Object.entries(e)) {
 		if (r === "") continue;
 		let e = t.get(n);
 		e === void 0 ? t.set(n, /* @__PURE__ */ new Set([r])) : e.add(r);
 	}
-}, vn = () => {
-	q().clear();
-}, yn = (e, t) => {
-	let n = q().get(e);
-	if (n === void 0 || n.size === 0) return `${mn(e)}.${t}`;
+}, En = () => {
+	K().clear();
+}, Dn = (e, t) => {
+	let n = K().get(e);
+	if (n === void 0 || n.size === 0) return `${Sn(e)}.${t}`;
 	if (n.size === 1) return `${[...n][0]}.${t}`;
 	let r = [...n].filter((e) => !e.includes("#"));
 	if (r.length === 1) return `${r[0]}.${t}`;
 	throw Error(`[voltro] ${e} is installed more than once (${[...n].sort().join(", ")}) and no single install is the primary one, so a plugin hook cannot tell which of them it addresses. Call the route by its full tag instead — e.g. useSubscription(api, '${[...n].sort()[0]}.${t}').`);
-}, J = h.Literal("running", "succeeded", "failed", "cancelled", "suspended"), bn = h.Literal("cancel", "terminate", "abandon"), xn = h.Struct({
-	mode: h.String,
-	dueAt: h.NullOr(h.Number),
-	retryAfterMs: h.NullOr(h.Number),
-	intentId: h.NullOr(h.String)
-}), Sn = h.Struct({
-	id: h.String,
-	workflowName: h.String,
-	executionId: h.NullOr(h.String),
-	status: h.Literal("running", "queued", "dropped", "skipped", "replayed"),
-	deferral: h.optional(xn)
-}), Cn = (e, t) => {
-	let n = W(e);
-	return g.make(e.name, {
-		payload: E(e.payloadSchema, e.name, B(n.guards)),
-		success: Sn,
-		error: At({
+}, q = m.Literal("running", "succeeded", "failed", "cancelled", "suspended"), On = m.Literal("cancel", "terminate", "abandon"), kn = m.Struct({
+	mode: m.String,
+	dueAt: m.NullOr(m.Number),
+	retryAfterMs: m.NullOr(m.Number),
+	intentId: m.NullOr(m.String)
+}), An = m.Struct({
+	id: m.String,
+	workflowName: m.String,
+	executionId: m.NullOr(m.String),
+	status: m.Literal("running", "queued", "dropped", "skipped", "replayed"),
+	deferral: m.optional(kn)
+}), jn = (e, t) => {
+	let n = H(e);
+	return h.make(e.name, {
+		payload: S(e.payloadSchema, e.name, z(n.guards)),
+		success: An,
+		error: jt({
 			errorSchema: e.errorSchema,
 			guards: n.guards
 		}, t)
 	});
-}, Y = h.Struct({
-	id: h.String,
-	tag: h.String,
-	executionId: h.String,
-	status: J,
-	payload: h.Unknown,
-	workflowVersion: h.NullOr(h.String),
-	workflowPatches: h.NullOr(h.Unknown),
-	output: h.NullOr(h.Unknown),
-	subject: h.NullOr(h.Unknown),
-	source: h.NullOr(h.String),
-	errorTag: h.NullOr(h.String),
-	errorMessage: h.NullOr(h.String),
-	cancelled: h.Boolean,
-	startedAt: h.Date,
-	completedAt: h.NullOr(h.Date),
-	durationMs: h.NullOr(h.Number),
-	traceId: h.NullOr(h.String),
-	parentExecutionId: h.NullOr(h.String),
-	parentClosePolicy: h.NullOr(bn)
-}), wn = h.Struct({
-	tag: h.optional(h.String),
-	status: h.optional(J),
-	limit: h.optional(h.Number)
-}), Tn = h.Struct({
-	id: h.String,
-	runId: h.String,
-	stepName: h.String,
-	attempt: h.Number,
-	status: h.Literal("running", "succeeded", "failed"),
-	input: h.NullOr(h.Unknown),
-	retryPolicy: h.NullOr(h.Unknown),
-	output: h.NullOr(h.Unknown),
-	errorTag: h.NullOr(h.String),
-	errorMessage: h.NullOr(h.String),
-	errorCause: h.NullOr(h.Unknown),
-	startedAt: h.Date,
-	completedAt: h.NullOr(h.Date),
-	durationMs: h.NullOr(h.Number)
-}), En = h.Struct({
-	id: h.String,
-	runId: h.String,
-	eventType: h.String,
-	payload: h.NullOr(h.Unknown),
-	occurredAt: h.Date,
-	stepName: h.NullOr(h.String),
-	attempt: h.NullOr(h.Number)
-}), Dn = h.Struct({
-	id: h.String,
-	name: h.String,
-	payload: h.Unknown,
-	source: h.String,
-	subject: h.NullOr(h.Unknown),
-	traceId: h.NullOr(h.String),
-	occurredAt: h.Date
-}), On = h.Struct({
-	id: h.String,
-	eventId: h.String,
-	eventName: h.String,
-	triggerId: h.String,
-	workflowName: h.String,
-	executionId: h.NullOr(h.String),
-	status: h.Literal("starting", "started", "skipped", "failed"),
-	idempotencyKey: h.String,
-	skipped: h.Boolean,
-	errorMessage: h.NullOr(h.String),
-	createdAt: h.Date,
-	completedAt: h.NullOr(h.Date)
-}), kn = h.Struct({ id: h.String }), X = h.Struct({ runId: h.String }), An = h.Struct({
-	name: h.optional(h.String),
-	limit: h.optional(h.Number)
-}), jn = h.Struct({ eventId: h.String }), Z = h.Struct({
-	workflowName: h.String,
-	executionId: h.String
-}), Mn = h.Struct({
-	id: h.String,
-	signalName: h.String,
-	payload: h.optional(h.Unknown)
-}), Nn = h.Struct({
-	id: h.String,
-	updateName: h.String,
-	payload: h.optional(h.Unknown),
-	timeoutMs: h.optional(h.Number)
-}), Pn = h.Struct({
-	eventId: h.String,
-	updateId: h.String,
-	completedEventId: h.String,
-	result: h.Unknown
-}), Fn = I({
+}, J = m.Struct({
+	id: m.String,
+	tag: m.String,
+	executionId: m.String,
+	status: q,
+	payload: m.Unknown,
+	workflowVersion: m.NullOr(m.String),
+	workflowPatches: m.NullOr(m.Unknown),
+	output: m.NullOr(m.Unknown),
+	subject: m.NullOr(m.Unknown),
+	source: m.NullOr(m.String),
+	errorTag: m.NullOr(m.String),
+	errorMessage: m.NullOr(m.String),
+	cancelled: m.Boolean,
+	startedAt: m.Date,
+	completedAt: m.NullOr(m.Date),
+	durationMs: m.NullOr(m.Number),
+	traceId: m.NullOr(m.String),
+	parentExecutionId: m.NullOr(m.String),
+	parentClosePolicy: m.NullOr(On)
+}), Mn = m.Struct({
+	tag: m.optional(m.String),
+	status: m.optional(q),
+	limit: m.optional(m.Number)
+}), Nn = m.Struct({
+	id: m.String,
+	runId: m.String,
+	stepName: m.String,
+	attempt: m.Number,
+	status: m.Literal("running", "succeeded", "failed"),
+	input: m.NullOr(m.Unknown),
+	retryPolicy: m.NullOr(m.Unknown),
+	output: m.NullOr(m.Unknown),
+	errorTag: m.NullOr(m.String),
+	errorMessage: m.NullOr(m.String),
+	errorCause: m.NullOr(m.Unknown),
+	startedAt: m.Date,
+	completedAt: m.NullOr(m.Date),
+	durationMs: m.NullOr(m.Number)
+}), Pn = m.Struct({
+	id: m.String,
+	runId: m.String,
+	eventType: m.String,
+	payload: m.NullOr(m.Unknown),
+	occurredAt: m.Date,
+	stepName: m.NullOr(m.String),
+	attempt: m.NullOr(m.Number)
+}), Fn = m.Struct({
+	id: m.String,
+	name: m.String,
+	payload: m.Unknown,
+	source: m.String,
+	subject: m.NullOr(m.Unknown),
+	traceId: m.NullOr(m.String),
+	occurredAt: m.Date
+}), In = m.Struct({
+	id: m.String,
+	eventId: m.String,
+	eventName: m.String,
+	triggerId: m.String,
+	workflowName: m.String,
+	executionId: m.NullOr(m.String),
+	status: m.Literal("starting", "started", "skipped", "failed"),
+	idempotencyKey: m.String,
+	skipped: m.Boolean,
+	errorMessage: m.NullOr(m.String),
+	createdAt: m.Date,
+	completedAt: m.NullOr(m.Date)
+}), Ln = m.Struct({ id: m.String }), Y = m.Struct({ runId: m.String }), Rn = m.Struct({
+	name: m.optional(m.String),
+	limit: m.optional(m.Number)
+}), zn = m.Struct({ eventId: m.String }), X = m.Struct({
+	workflowName: m.String,
+	executionId: m.String
+}), Bn = m.Struct({
+	id: m.String,
+	signalName: m.String,
+	payload: m.optional(m.Unknown)
+}), Vn = m.Struct({
+	id: m.String,
+	updateName: m.String,
+	payload: m.optional(m.Unknown),
+	timeoutMs: m.optional(m.Number)
+}), Hn = m.Struct({
+	eventId: m.String,
+	updateId: m.String,
+	completedEventId: m.String,
+	result: m.Unknown
+}), Un = F({
 	name: "__voltro.workflow.run",
 	source: "_voltro_workflow_runs",
-	input: kn,
-	output: h.Array(Y)
-}), In = I({
+	input: Ln,
+	output: m.Array(J)
+}), Wn = F({
 	name: "__voltro.workflow.runs",
 	source: "_voltro_workflow_runs",
-	input: wn,
-	output: h.Array(Y)
-}), Ln = I({
+	input: Mn,
+	output: m.Array(J)
+}), Gn = F({
 	name: "__voltro.workflow.run.steps",
 	source: "_voltro_workflow_run_steps",
-	input: X,
-	output: h.Array(Tn)
-}), Rn = I({
+	input: Y,
+	output: m.Array(Nn)
+}), Kn = F({
 	name: "__voltro.workflow.run.events",
 	source: "_voltro_workflow_run_events",
-	input: X,
-	output: h.Array(En)
-}), zn = I({
+	input: Y,
+	output: m.Array(Pn)
+}), qn = F({
 	name: "__voltro.workflow.domainEvents",
 	source: "_voltro_workflow_events",
-	input: An,
-	output: h.Array(Dn)
-}), Bn = I({
+	input: Rn,
+	output: m.Array(Fn)
+}), Jn = F({
 	name: "__voltro.workflow.event.deliveries",
 	source: "_voltro_workflow_event_deliveries",
-	input: jn,
-	output: h.Array(On)
-}), Vn = R({
+	input: zn,
+	output: m.Array(In)
+}), Yn = L({
 	name: "__voltro.workflow.cancel",
-	input: Z,
-	output: h.Struct({ ok: h.Boolean })
-}), Hn = R({
+	input: X,
+	output: m.Struct({ ok: m.Boolean })
+}), Xn = L({
 	name: "__voltro.workflow.resume",
-	input: Z,
-	output: h.Struct({ ok: h.Boolean })
-}), Un = R({
+	input: X,
+	output: m.Struct({ ok: m.Boolean })
+}), Zn = L({
 	name: "__voltro.workflow.signal",
-	input: Mn,
-	output: h.Struct({ eventId: h.String })
-}), Wn = R({
+	input: Bn,
+	output: m.Struct({ eventId: m.String })
+}), Qn = L({
 	name: "__voltro.workflow.update",
-	input: Nn,
-	output: Pn
-}), Gn = "__voltro.undo.log", Kn = "__voltro.undo.apply", qn = "__voltro.undo.redo", Jn = h.Struct({
-	id: h.String,
-	tag: h.String,
-	label: h.NullOr(h.String),
-	undone: h.Boolean,
-	crossesAction: h.Boolean,
-	createdAt: h.String
-}), Yn = class extends h.TaggedError()("UndoNotFound", { invocationId: h.String }) {}, Xn = class extends h.TaggedError()("UndoForbidden", { invocationId: h.String }) {}, Zn = class extends h.TaggedError()("UndoConflict", {
-	invocationId: h.String,
-	reason: h.Literal("conflict", "action")
-}) {}, Qn = h.Union(Yn, Xn, Zn), $n = I({
-	name: Gn,
+	input: Vn,
+	output: Hn
+}), $n = "__voltro.undo.log", er = "__voltro.undo.apply", tr = "__voltro.undo.redo", nr = m.Struct({
+	id: m.String,
+	tag: m.String,
+	label: m.NullOr(m.String),
+	undone: m.Boolean,
+	crossesAction: m.Boolean,
+	createdAt: m.String
+}), rr = class extends m.TaggedError()("UndoNotFound", { invocationId: m.String }) {}, ir = class extends m.TaggedError()("UndoForbidden", { invocationId: m.String }) {}, ar = class extends m.TaggedError()("UndoConflict", {
+	invocationId: m.String,
+	reason: m.Literal("conflict", "action")
+}) {}, Z = m.Union(rr, ir, ar), or = F({
+	name: $n,
 	source: "_voltro_undo_log",
-	input: h.Struct({ limit: h.optional(h.Number) }),
-	output: h.Array(Jn),
+	input: m.Struct({ limit: m.optional(m.Number) }),
+	output: m.Array(nr),
 	openAccess: "subject-scoped by construction: lists only the calling subject's own undoable actions"
-}), er = L({
-	name: Kn,
-	input: h.Struct({ invocationId: h.String }),
-	output: h.Struct({ ok: h.Boolean }),
-	error: Qn,
+}), sr = I({
+	name: er,
+	input: m.Struct({ invocationId: m.String }),
+	output: m.Struct({ ok: m.Boolean }),
+	error: Z,
 	openAccess: "subject-scoped by construction: undo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), tr = L({
-	name: qn,
-	input: h.Struct({ invocationId: h.String }),
-	output: h.Struct({ ok: h.Boolean }),
-	error: Qn,
+}), cr = I({
+	name: tr,
+	input: m.Struct({ invocationId: m.String }),
+	output: m.Struct({ ok: m.Boolean }),
+	error: Z,
 	openAccess: "subject-scoped by construction: redo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), nr = class extends h.TaggedError()("TenantScopeViolation", {
-	table: h.String,
-	reason: h.String
-}) {}, rr = class extends h.TaggedError()("StoreOperationFailed", {
-	operation: h.String,
-	table: h.String,
-	cause: h.String
-}) {}, ir = class extends h.TaggedError()("NoRowFound", {
-	table: h.String,
-	found: h.Number
+}), lr = class extends m.TaggedError()("TenantScopeViolation", {
+	table: m.String,
+	reason: m.String
+}) {}, ur = class extends m.TaggedError()("StoreOperationFailed", {
+	operation: m.String,
+	table: m.String,
+	cause: m.String
+}) {}, dr = class extends m.TaggedError()("NoRowFound", {
+	table: m.String,
+	found: m.Number
 }) {
 	get message() {
 		return this.found === 0 ? `expected exactly one row in '${this.table}', found none` : `expected exactly one row in '${this.table}', found more than one`;
 	}
-}, ar = class extends h.TaggedError()("TableValidationFailed", {
-	table: h.String,
-	summary: h.String,
-	issues: h.Array(h.Struct({
-		path: h.String,
-		message: h.String
+}, fr = class extends m.TaggedError()("TableValidationFailed", {
+	table: m.String,
+	summary: m.String,
+	issues: m.Array(m.Struct({
+		path: m.String,
+		message: m.String
 	}))
-}) {}, or = class extends h.TaggedError()("TenantRowNotFound", {
-	table: h.String,
-	id: h.String,
-	reason: h.String
-}) {}, sr = class extends h.TaggedError()("ServerOnlyColumnWrite", {
-	table: h.String,
-	columns: h.Array(h.String)
-}) {}, cr = class extends h.TaggedError()("ConstraintViolation", {
-	kind: h.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
-	table: h.String,
-	operation: h.String,
-	constraint: h.optional(h.String),
-	column: h.optional(h.String),
-	detail: h.optional(h.String)
+}) {}, pr = class extends m.TaggedError()("TenantRowNotFound", {
+	table: m.String,
+	id: m.String,
+	reason: m.String
+}) {}, mr = class extends m.TaggedError()("ServerOnlyColumnWrite", {
+	table: m.String,
+	columns: m.Array(m.String)
+}) {}, hr = class extends m.TaggedError()("ConstraintViolation", {
+	kind: m.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
+	table: m.String,
+	operation: m.String,
+	constraint: m.optional(m.String),
+	column: m.optional(m.String),
+	detail: m.optional(m.String)
 }) {
 	get message() {
 		if (this.detail !== void 0) return this.detail;
@@ -878,85 +934,85 @@ var Ge = h.Union(h.String, h.Number), _ = h.Record({
 			case "check": return `check constraint ${t}: the row does not satisfy it`;
 		}
 	}
-}, lr = "__voltro.approvals.pending", ur = "__voltro.approvals.decide", dr = I({
-	name: lr,
+}, gr = "__voltro.approvals.pending", _r = "__voltro.approvals.decide", vr = F({
+	name: gr,
 	source: "_voltro_approvals",
-	input: h.Struct({ limit: h.optional(h.Number) }),
-	output: h.Array(ct),
+	input: m.Struct({ limit: m.optional(m.Number) }),
+	output: m.Array(mt),
 	openAccess: "the answer is scoped to the caller — a row appears only if they requested it or hold its recorded approver scopes, so an anonymous caller sees nothing"
-}), fr = L({
-	name: ur,
-	input: h.Struct({
-		approvalId: h.String,
-		decision: h.Literal("approve", "reject"),
-		note: h.optional(h.String)
+}), yr = I({
+	name: _r,
+	input: m.Struct({
+		approvalId: m.String,
+		decision: m.Literal("approve", "reject"),
+		note: m.optional(m.String)
 	}),
-	output: h.Struct({
-		approvalId: h.String,
-		status: h.Literal("approved", "rejected")
+	output: m.Struct({
+		approvalId: m.String,
+		status: m.Literal("approved", "rejected")
 	}),
-	error: st,
+	error: pt,
 	openAccess: "the approver authority is the PENDING ROW's own recorded scopes (plus an unconditional self-approval refusal), checked in-handler — a descriptor-level scope would have to be the union of every approval-requiring procedure in the app"
-}), pr = "__voltro.connections.list", mr = "__voltro.connections.start", hr = "__voltro.connections.submitToken", gr = "__voltro.connections.disconnect", Q = h.Literal("oauth2", "pat"), _r = h.Literal("disconnected", "connected", "expired", "revoked", "error"), vr = h.Struct({
-	connectionId: h.String,
+}), br = "__voltro.connections.list", xr = "__voltro.connections.start", Sr = "__voltro.connections.submitToken", Cr = "__voltro.connections.disconnect", Q = m.Literal("oauth2", "pat"), wr = m.Literal("disconnected", "connected", "expired", "revoked", "error"), Tr = m.Struct({
+	connectionId: m.String,
 	kind: Q,
-	label: h.String,
-	status: _r,
-	accountId: h.NullOr(h.String),
-	accountLabel: h.NullOr(h.String),
-	scopes: h.Array(h.String),
-	expiresAt: h.NullOr(h.String),
-	lastError: h.NullOr(h.String),
-	connectedAt: h.NullOr(h.String)
-}), yr = class extends h.TaggedError()("ConnectionNotDeclared", { connectionId: h.String }) {}, br = class extends h.TaggedError()("ConnectionSubjectRequired", { connectionId: h.String }) {}, xr = class extends h.TaggedError()("ConnectionKindMismatch", {
-	connectionId: h.String,
+	label: m.String,
+	status: wr,
+	accountId: m.NullOr(m.String),
+	accountLabel: m.NullOr(m.String),
+	scopes: m.Array(m.String),
+	expiresAt: m.NullOr(m.String),
+	lastError: m.NullOr(m.String),
+	connectedAt: m.NullOr(m.String)
+}), Er = class extends m.TaggedError()("ConnectionNotDeclared", { connectionId: m.String }) {}, Dr = class extends m.TaggedError()("ConnectionSubjectRequired", { connectionId: m.String }) {}, Or = class extends m.TaggedError()("ConnectionKindMismatch", {
+	connectionId: m.String,
 	expected: Q,
 	actual: Q
-}) {}, Sr = class extends h.TaggedError()("ConnectionHandshakeFailed", {
-	connectionId: h.String,
-	reason: h.String,
-	transient: h.Boolean
-}) {}, $ = h.Union(yr, br, xr, Sr), Cr = I({
-	name: pr,
+}) {}, kr = class extends m.TaggedError()("ConnectionHandshakeFailed", {
+	connectionId: m.String,
+	reason: m.String,
+	transient: m.Boolean
+}) {}, $ = m.Union(Er, Dr, Or, kr), Ar = F({
+	name: br,
 	source: "_voltro_connections",
-	input: h.Struct({}),
-	output: h.Array(vr),
+	input: m.Struct({}),
+	output: m.Array(Tr),
 	openAccess: "self-scoped read: projects the declared connections for the calling subject only (its own connect/disconnect state)"
-}), wr = R({
-	name: mr,
-	input: h.Struct({
-		connectionId: h.String,
-		redirectTo: h.optional(h.String)
+}), jr = L({
+	name: xr,
+	input: m.Struct({
+		connectionId: m.String,
+		redirectTo: m.optional(m.String)
 	}),
-	output: h.Struct({
-		authorizeUrl: h.String,
-		state: h.String
+	output: m.Struct({
+		authorizeUrl: m.String,
+		state: m.String
 	}),
 	error: $,
 	openAccess: "self-service: begins an oauth handshake that stores a credential for the calling subject only; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Tr = L({
-	name: hr,
-	input: h.Struct({
-		connectionId: h.String,
-		token: h.String
+}), Mr = I({
+	name: Sr,
+	input: m.Struct({
+		connectionId: m.String,
+		token: m.String
 	}),
-	output: h.Struct({ ok: h.Boolean }),
+	output: m.Struct({ ok: m.Boolean }),
 	error: $,
 	openAccess: "self-service: stores a pasted token as the calling subject's own credential; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Er = L({
-	name: gr,
-	input: h.Struct({ connectionId: h.String }),
-	output: h.Struct({ ok: h.Boolean }),
+}), Nr = I({
+	name: Cr,
+	input: m.Struct({ connectionId: m.String }),
+	output: m.Struct({ ok: m.Boolean }),
 	error: $,
 	openAccess: "self-service: deletes only the calling subject's own credential row for this connection"
-}), Dr = (e) => {
+}), Pr = (e) => {
 	let t = e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : 0;
 	return Number.isNaN(t) ? 0 : t;
-}, Or = 4001, kr = /* @__PURE__ */ new Set(["/rpc", "/ws"]), Ar = (e) => {
+}, Fr = 4001, Ir = /* @__PURE__ */ new Set(["/rpc", "/ws"]), Lr = (e) => {
 	if (!e.path.startsWith("/")) throw Error(`defineWebSocket: path must be absolute, got '${e.path}'`);
-	if (kr.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
+	if (Ir.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
 	if (e.auth !== "subject" && e.auth !== "public") throw Error(`defineWebSocket: auth must be 'subject' or 'public' (explicitly — an unauthenticated socket has to be a decision somebody wrote down), got '${String(e.auth)}'`);
 	return e;
-}, jr = 1;
+}, Rr = 1;
 //#endregion
-export { De as ADMIN_SCOPE, Se as APIKEY_ISSUE_ORG_SCOPE, Te as APIKEY_ISSUE_OTHER_SCOPE, _e as APIKEY_ISSUE_SELF_SCOPE, ur as APPROVALS_DECIDE_TAG, lr as APPROVALS_PENDING_TAG, st as ApprovalDecisionErrors, ot as ApprovalErrors, k as ApprovalExpired, at as ApprovalForbidden, tt as ApprovalNotFound, it as ApprovalNotPending, rt as ApprovalRejected, et as ApprovalRequired, nt as ApprovalSelfApproval, A as ApprovalUnavailable, se as AuthMiddleware, D as BusinessRuleViolation, pr as CONNECTIONS_LIST_TAG, gr as CONNECTION_DISCONNECT_TAG, mr as CONNECTION_START_TAG, hr as CONNECTION_SUBMIT_TOKEN_TAG, Sr as ConnectionHandshakeFailed, i as ConnectionInfo, r as ConnectionInfoMiddleware, Q as ConnectionKind, xr as ConnectionKindMismatch, yr as ConnectionNotDeclared, vr as ConnectionState, _r as ConnectionStatus, br as ConnectionSubjectRequired, cr as ConstraintViolation, ie as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ye as DEFAULT_SCOPE_CACHE_TTL_MS, Qt as EVENT_ROUTE_SEP, Yt as EventKeyInvalid, Jt as EventPayloadInvalid, Xt as EventPayloadTooLarge, Or as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, e as IMPERSONATION_METADATA_KEY, zt as MAX_EVENT_ENVELOPE_BYTES, Re as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, m as MutationConnectionRequired, p as MutationInFlight, ir as NoRowFound, jr as PROTOCOL_VERSION, ct as PendingApproval, j as REACTIVITY_CHANNEL_PREFIX, u as ScopeError, sr as ServerOnlyColumnWrite, rr as StoreOperationFailed, ve as Subject, ne as SubjectIdentity, re as SubjectService, ar as TableValidationFailed, or as TenantRowNotFound, nr as TenantScopeViolation, Kn as UNDO_APPLY_TAG, Gn as UNDO_LOG_TAG, qn as UNDO_REDO_TAG, l as Unauthenticated, Zn as UndoConflict, Xn as UndoForbidden, Jn as UndoLogEntry, Yn as UndoNotFound, Ze as ValidationError, Qe as ValidationErrors, O as ValidationIssue, U as WorkflowAccessProperty, Z as WorkflowControlInputSchema, Dn as WorkflowDomainEventRowSchema, An as WorkflowDomainEventsInputSchema, jn as WorkflowEventDeliveriesInputSchema, On as WorkflowEventDeliveryRowSchema, bn as WorkflowParentClosePolicySchema, En as WorkflowRunEventRowSchema, Sn as WorkflowRunHandleSchema, kn as WorkflowRunRefSchema, Y as WorkflowRunRowSchema, J as WorkflowRunStatusSchema, Tn as WorkflowRunStepRowSchema, X as WorkflowRunTableRefSchema, wn as WorkflowRunsInputSchema, Mn as WorkflowSignalInputSchema, xn as WorkflowStartDeferralSchema, Nn as WorkflowUpdateInputSchema, Pn as WorkflowUpdateResultSchema, Pt as actionToRpc, Ce as advisoryResourceGuardWarning, a as anonymousSubject, Ye as applyRowPatch, c as applyScopeDecision, fr as approvalsDecideDescriptor, dr as approvalsPendingQueryDescriptor, te as assertAuthenticated, an as attachWorkflowAccess, Le as beginIdempotent, fn as checkFrameworkCompat, Ee as checkGuards, pe as checkGuardsEffect, ae as composeAuthStrategies, un as composeRpcInterceptors, Er as connectionDisconnectDescriptor, wr as connectionStartDescriptor, Tr as connectionSubmitTokenDescriptor, Cr as connectionsListQueryDescriptor, ht as declaredReactivityChannelKeys, R as defineAction, Vt as defineEvent, L as defineMutation, sn as definePlugin, cn as definePluginRoute, dn as definePluginService, I as defineQuery, Tt as defineStream, Ar as defineWebSocket, qe as diffRows, be as effectiveScopes, Zt as encodeEventKey, It as errorTag, Wt as eventAttached, Ht as eventEnvelope, Ut as eventGap, Gt as eventResumePoint, $t as eventRoute, H as eventStreamEvent, Kt as eventSubscribeInput, qt as eventToRpc, ze as failIdempotent, $e as fieldIssuesOf, Oe as findAdvisoryResourceGuards, Ne as finishIdempotent, tn as formatEventRoute, me as getPolicyGuardResolver, he as getResourceScopeResolver, W as getWorkflowAccess, wt as hasAccessDecision, Me as hasCallbackRoutes, we as hasEffectiveScope, B as hasEnforcedGuard, xe as hasScope, b as idToPath, Fe as idempotencyScope, T as inputLabel, ge as isAuthenticatedCheck, Ct as isAuthenticatedGuard, Bt as isEventDescriptor, Je as isIdKeyed, d as isOpenAccess, de as isPolicyCheck, St as isPolicyGuard, pt as isReactivityChannel, mt as isReactivityChannelKey, t as isSystemSubject, bt as isWireReachable, le as makeScopeCache, Ve as memoryIdempotencyStore, ke as missingAccessDecision, Nt as mutationToRpc, Rt as normalizeDescriptor, _t as normalizeSource, f as openAccessSpec, en as parseEventRoute, x as pathToId, mn as pluginAlias, ln as pluginInstanceName, hn as pluginSlug, yn as pluginTag, yt as publishReactivity, Be as publishServerError, Mt as queryToRpc, s as rawImpersonationMark, ft as reactivityChannel, _n as registerPluginAliases, fe as requireScope, vn as resetPluginAliases, rn as resolveWorkflowAccess, v as rowPatchOpSchema, y as rowPatchSchema, ce as scopeCacheKey, je as setEffectiveScopes, oe as setPolicyGuardResolver, n as setResourceScopeResolver, gt as sourceKeys, Ft as streamToRpc, E as strictInput, ue as subjectIdentity, Ae as subjectScopes, Ie as subscribeServerErrors, w as subscriptionEvent, o as systemSubject, ee as tenantScopedSubject, Lt as toRpc, Dr as tsMs, vt as undeclaredChannelKeys, er as undoApplyDescriptor, $n as undoLogQueryDescriptor, tr as undoRedoDescriptor, V as wireErrorUnion, jt as withRpcTag, on as workflowAccessDescriptor, Vn as workflowCancelDescriptor, zn as workflowDomainEventsQueryDescriptor, Bn as workflowEventDeliveriesQueryDescriptor, Hn as workflowResumeDescriptor, Rn as workflowRunEventsQueryDescriptor, Fn as workflowRunQueryDescriptor, Ln as workflowRunStepsQueryDescriptor, In as workflowRunsQueryDescriptor, Un as workflowSignalDescriptor, Cn as workflowToRpc, Wn as workflowUpdateDescriptor, At as workflowWireErrorUnion, Pe as wsMutationIdempotencyScope };
+export { De as ADMIN_SCOPE, Se as APIKEY_ISSUE_ORG_SCOPE, Te as APIKEY_ISSUE_OTHER_SCOPE, _e as APIKEY_ISSUE_SELF_SCOPE, _r as APPROVALS_DECIDE_TAG, gr as APPROVALS_PENDING_TAG, pt as ApprovalDecisionErrors, ft as ApprovalErrors, C as ApprovalExpired, dt as ApprovalForbidden, st as ApprovalNotFound, ut as ApprovalNotPending, lt as ApprovalRejected, ot as ApprovalRequired, ct as ApprovalSelfApproval, w as ApprovalUnavailable, se as AuthMiddleware, tt as BusinessRuleViolation, br as CONNECTIONS_LIST_TAG, Cr as CONNECTION_DISCONNECT_TAG, xr as CONNECTION_START_TAG, Sr as CONNECTION_SUBMIT_TOKEN_TAG, kr as ConnectionHandshakeFailed, i as ConnectionInfo, r as ConnectionInfoMiddleware, Q as ConnectionKind, Or as ConnectionKindMismatch, Er as ConnectionNotDeclared, Tr as ConnectionState, wr as ConnectionStatus, Dr as ConnectionSubjectRequired, hr as ConstraintViolation, ie as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ye as DEFAULT_SCOPE_CACHE_TTL_MS, en as EVENT_ROUTE_SEP, Zt as EventKeyInvalid, Xt as EventPayloadInvalid, Qt as EventPayloadTooLarge, Fr as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, e as IMPERSONATION_METADATA_KEY, Bt as MAX_EVENT_ENVELOPE_BYTES, ze as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, p as MutationConnectionRequired, Ne as MutationInFlight, dr as NoRowFound, Rr as PROTOCOL_VERSION, mt as PendingApproval, T as REACTIVITY_CHANNEL_PREFIX, u as ScopeError, mr as ServerOnlyColumnWrite, ur as StoreOperationFailed, ve as Subject, ne as SubjectIdentity, re as SubjectService, fr as TableValidationFailed, pr as TenantRowNotFound, lr as TenantScopeViolation, er as UNDO_APPLY_TAG, $n as UNDO_LOG_TAG, tr as UNDO_REDO_TAG, l as Unauthenticated, ar as UndoConflict, ir as UndoForbidden, nr as UndoLogEntry, rr as UndoNotFound, rt as ValidationError, it as ValidationErrors, nt as ValidationIssue, V as WorkflowAccessProperty, X as WorkflowControlInputSchema, Fn as WorkflowDomainEventRowSchema, Rn as WorkflowDomainEventsInputSchema, zn as WorkflowEventDeliveriesInputSchema, In as WorkflowEventDeliveryRowSchema, On as WorkflowParentClosePolicySchema, Pn as WorkflowRunEventRowSchema, An as WorkflowRunHandleSchema, Ln as WorkflowRunRefSchema, J as WorkflowRunRowSchema, q as WorkflowRunStatusSchema, Nn as WorkflowRunStepRowSchema, Y as WorkflowRunTableRefSchema, Mn as WorkflowRunsInputSchema, Bn as WorkflowSignalInputSchema, kn as WorkflowStartDeferralSchema, Vn as WorkflowUpdateInputSchema, Hn as WorkflowUpdateResultSchema, Ft as actionToRpc, Ce as advisoryResourceGuardWarning, a as anonymousSubject, $e as applyRowPatch, c as applyScopeDecision, yr as approvalsDecideDescriptor, vr as approvalsPendingQueryDescriptor, te as assertAuthenticated, sn as attachWorkflowAccess, Re as beginIdempotent, bn as checkFrameworkCompat, Ee as checkGuards, pe as checkGuardsEffect, mn as compareSurfaces, ae as composeAuthStrategies, vn as composeRpcInterceptors, Nr as connectionDisconnectDescriptor, jr as connectionStartDescriptor, Mr as connectionSubmitTokenDescriptor, Ar as connectionsListQueryDescriptor, k as declaredReactivityChannelKeys, L as defineAction, Ht as defineEvent, I as defineMutation, hn as definePlugin, gn as definePluginRoute, yn as definePluginService, F as defineQuery, Et as defineStream, Lr as defineWebSocket, Ze as diffRows, be as effectiveScopes, $t as encodeEventKey, Lt as errorTag, Gt as eventAttached, Ut as eventEnvelope, Wt as eventGap, qt as eventResumePoint, tn as eventRoute, Kt as eventStreamEvent, Jt as eventSubscribeInput, Yt as eventToRpc, Be as failIdempotent, at as fieldIssuesOf, Oe as findAdvisoryResourceGuards, Pe as finishIdempotent, rn as formatEventRoute, me as getPolicyGuardResolver, he as getResourceScopeResolver, H as getWorkflowAccess, pn as groupShapeDigests, Tt as hasAccessDecision, Me as hasCallbackRoutes, we as hasEffectiveScope, z as hasEnforcedGuard, xe as hasScope, g as idToPath, Ie as idempotencyScope, x as inputLabel, ge as isAuthenticatedCheck, wt as isAuthenticatedGuard, Vt as isEventDescriptor, Qe as isIdKeyed, d as isOpenAccess, de as isPolicyCheck, Ct as isPolicyGuard, D as isReactivityChannel, O as isReactivityChannelKey, t as isSystemSubject, xt as isWireReachable, le as makeScopeCache, He as memoryIdempotencyStore, ke as missingAccessDecision, Pt as mutationToRpc, zt as normalizeDescriptor, M as normalizeSource, f as openAccessSpec, nn as parseEventRoute, _ as pathToId, Sn as pluginAlias, _n as pluginInstanceName, Cn as pluginSlug, Dn as pluginTag, fn as procedureShapeDigest, bt as publishReactivity, Ve as publishServerError, Nt as queryToRpc, s as rawImpersonationMark, vt as reactivityChannel, Tn as registerPluginAliases, fe as requireScope, En as resetPluginAliases, on as resolveWorkflowAccess, Je as rowPatchOpSchema, Ye as rowPatchSchema, U as schemaShape, ce as scopeCacheKey, je as setEffectiveScopes, oe as setPolicyGuardResolver, n as setResourceScopeResolver, dn as shapeDigest, j as sourceKeys, It as streamToRpc, S as strictInput, ue as subjectIdentity, Ae as subjectScopes, Le as subscribeServerErrors, b as subscriptionEvent, o as systemSubject, ee as tenantScopedSubject, Rt as toRpc, Pr as tsMs, yt as undeclaredChannelKeys, sr as undoApplyDescriptor, or as undoLogQueryDescriptor, cr as undoRedoDescriptor, B as wireErrorUnion, Mt as withRpcTag, cn as workflowAccessDescriptor, Yn as workflowCancelDescriptor, qn as workflowDomainEventsQueryDescriptor, Jn as workflowEventDeliveriesQueryDescriptor, Xn as workflowResumeDescriptor, Kn as workflowRunEventsQueryDescriptor, Un as workflowRunQueryDescriptor, Gn as workflowRunStepsQueryDescriptor, Wn as workflowRunsQueryDescriptor, Zn as workflowSignalDescriptor, jn as workflowToRpc, Qn as workflowUpdateDescriptor, jt as workflowWireErrorUnion, Fe as wsMutationIdempotencyScope };