@voltro/protocol 0.69.1 → 0.71.0

package/dist/index.js

@@ -1,58 +1,58 @@
-import { A as e, B as t, C as n, D as r, E as i, F as a, G as o, H as s, I as c, K as ee, L as te, M as ne, N as re, O as ie, P as l, R as ae, S as oe, T as se, U as ce, V as le, W as ue, _ as de, a as u, b as fe, c as pe, d as me, f as he, g as d, h as ge, i as _e, j as ve, k as ye, l as be, m as xe, n as Se, o as Ce, p as we, q as Te, r as Ee, s as De, t as Oe, u as ke, v as Ae, w as je, x as Me, y as f, z as Ne } from "./scopes-DVtiKKsm.js";
-import { a as Pe, c as Fe, d as Ie, i as p, l as Le, n as Re, o as ze, r as Be, s as Ve, t as He, u as Ue } from "./serverErrorBus-BTnTpMqj.js";
-import { Context as We, Layer as Ge, Schema as m } from "effect";
-import { Rpc as h } from "@effect/rpc";
-import { VersionConflict as Ke } from "@voltro/database/wire";
+import { A as e, B as t, C as n, D as r, E as i, F as a, G as o, H as s, I as c, J as ee, K as te, L as ne, M as re, N as ie, O as ae, P as oe, R as se, S as ce, T as le, U as ue, V as de, W as fe, Y as pe, _ as me, a as l, b as he, c as ge, d as _e, f as ve, g as u, h as ye, i as be, j as xe, k as Se, l as Ce, m as we, n as Te, o as Ee, p as De, q as Oe, r as ke, s as Ae, t as je, u as Me, v as Ne, w as Pe, x as Fe, y as d, z as Ie } from "./scopes-CW9_LbDO.js";
+import { C as Le, D as Re, E as ze, S as Be, T as Ve, _ as He, a as Ue, b as We, c as Ge, d as Ke, f as qe, g as Je, h as Ye, i as Xe, l as Ze, m as Qe, n as $e, o as et, p as tt, r as nt, s as rt, t as it, u as at, v as ot, w as st, x as ct, y as lt } from "./restFormat-ChSVyufA.js";
+import { Context as ut, Layer as dt, Schema as f } from "effect";
+import { Rpc as p } from "@effect/rpc";
+import { VersionConflict as ft } from "@voltro/database/wire";
 //#region src/rowPatch.ts
-var qe = m.Union(m.String, m.Number), Je = m.Record({
-	key: m.String,
-	value: m.Unknown
-}).pipe(m.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), Ye = m.Union(m.Struct({
-	op: m.Literal("add"),
-	path: m.String,
-	value: Je
-}), m.Struct({
-	op: m.Literal("replace"),
-	path: m.String,
-	value: Je
-}), m.Struct({
-	op: m.Literal("remove"),
-	path: m.String
-}), m.Struct({
-	op: m.Literal("mergeCells"),
-	path: m.String,
-	value: m.Record({
-		key: m.String,
-		value: m.Unknown
+var pt = f.Union(f.String, f.Number), m = f.Record({
+	key: f.String,
+	value: f.Unknown
+}).pipe(f.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), mt = f.Union(f.Struct({
+	op: f.Literal("add"),
+	path: f.String,
+	value: m
+}), f.Struct({
+	op: f.Literal("replace"),
+	path: f.String,
+	value: m
+}), f.Struct({
+	op: f.Literal("remove"),
+	path: f.String
+}), f.Struct({
+	op: f.Literal("mergeCells"),
+	path: f.String,
+	value: f.Record({
+		key: f.String,
+		value: f.Unknown
 	})
-})), Xe = m.Struct({
-	ops: m.Array(Ye),
-	order: m.Array(qe)
-}), g = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, _ = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), v = (e) => {
+})), ht = f.Struct({
+	ops: f.Array(mt),
+	order: f.Array(pt)
+}), h = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, gt = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), g = (e) => {
 	let t = Object.keys(e).sort(), n = {};
 	for (let r of t) n[r] = e[r];
 	return JSON.stringify(n);
-}, y = (e, t) => v(e) === v(t), Ze = (e, t) => {
+}, _ = (e, t) => g(e) === g(t), _t = (e, t) => {
 	if (e instanceof Uint8Array && t instanceof Uint8Array) {
 		if (e.length !== t.length) return !1;
 		for (let n = 0; n < e.length; n += 1) if (e[n] !== t[n]) return !1;
 		return !0;
 	}
-	return v({
+	return g({
 		id: 0,
 		v: e
-	}) === v({
+	}) === g({
 		id: 0,
 		v: t
 	});
-}, Qe = (e, t, n = {}) => {
+}, vt = (e, t, n = {}) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) r.set(t.id, t);
 	let i = [], a = [], o = /* @__PURE__ */ new Set(), s = n.crdt, c = (e, t) => {
 		if (s === void 0 || s.columns.size === 0) return;
 		let n = {}, r = !1;
 		for (let i of s.columns) {
-			if (!(i in t) || Ze(e[i], t[i])) continue;
+			if (!(i in t) || _t(e[i], t[i])) continue;
 			let a = s.incremental(i, e[i], t[i]);
 			if (a === void 0) return;
 			n[i] = a, r = !0;
@@ -70,43 +70,43 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		let t = r.get(e.id);
 		if (t === void 0) i.push({
 			op: "add",
-			path: g(e.id),
+			path: h(e.id),
 			value: e
 		});
-		else if (!y(t, e)) {
+		else if (!_(t, e)) {
 			let n = c(t, e);
 			n === void 0 ? i.push({
 				op: "replace",
-				path: g(e.id),
+				path: h(e.id),
 				value: e
-			}) : (y(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
+			}) : (_(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
 				op: "replace",
-				path: g(e.id),
+				path: h(e.id),
 				value: n.scalars
 			}), i.push({
 				op: "mergeCells",
-				path: g(e.id),
+				path: h(e.id),
 				value: n.merges
 			}));
 		}
 	}
 	for (let t of e) o.has(t.id) || i.push({
 		op: "remove",
-		path: g(t.id)
+		path: h(t.id)
 	});
 	return {
 		ops: i,
 		order: a
 	};
-}, $e = (e) => e.every((e) => {
+}, yt = (e) => e.every((e) => {
 	let t = e.id;
 	return typeof t == "string" || typeof t == "number";
-}), et = (e, t, n = {}) => {
+}), bt = (e, t, n = {}) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) r.set(t.id, t);
 	for (let e of t.ops) {
 		if (e.op === "mergeCells") {
-			let t = _(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
+			let t = gt(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
 			if (i === void 0) continue;
 			let o = { ...i };
 			for (let [t, r] of Object.entries(e.value)) o[t] = n.mergeCell === void 0 ? r : n.mergeCell(t, i[t], r);
@@ -121,57 +121,57 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		t !== void 0 && i.push(t);
 	}
 	return i;
-}, b = (e) => m.Union(m.Struct({
-	_tag: m.Literal("snapshot"),
-	revision: m.Number,
+}, v = (e) => f.Union(f.Struct({
+	_tag: f.Literal("snapshot"),
+	revision: f.Number,
 	data: e,
-	computed: m.optional(m.Boolean),
-	reconciles: m.optional(m.String)
-}), m.Struct({
-	_tag: m.Literal("delta"),
-	revision: m.Number,
-	emittedAt: m.Number,
-	patch: Xe
-}), m.Struct({
-	_tag: m.Literal("error"),
-	error: m.Unknown,
-	revision: m.optional(m.Number)
-})), x = (e, t) => {
+	computed: f.optional(f.Boolean),
+	reconciles: f.optional(f.String)
+}), f.Struct({
+	_tag: f.Literal("delta"),
+	revision: f.Number,
+	emittedAt: f.Number,
+	patch: ht
+}), f.Struct({
+	_tag: f.Literal("error"),
+	error: f.Unknown,
+	revision: f.optional(f.Number)
+})), y = (e, t) => {
 	let n = `${e ?? "this procedure"} input`;
 	return t === !0 ? `${n} (guarded — the guard did NOT run: the payload failed to decode first, so this says nothing about access)` : n;
-}, tt = (e) => {
+}, xt = (e) => {
 	let t = e.ast;
 	return t._tag === "TypeLiteral" && (t.propertySignatures?.length ?? 0) === 0 && (t.indexSignatures?.length ?? 0) === 0;
-}, S = (e, t, n) => {
-	let r = x(t, n), i = e.annotations({
+}, b = (e, t, n) => {
+	let r = y(t, n), i = e.annotations({
 		parseOptions: { onExcessProperty: "error" },
 		parseIssueTitle: () => r
 	});
-	return tt(e) ? m.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
-}, nt = class extends m.TaggedError()("BusinessRuleViolation", {
-	rule: m.String,
-	params: m.optional(m.Record({
-		key: m.String,
-		value: m.Unknown
+	return xt(e) ? f.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
+}, x = class extends f.TaggedError()("BusinessRuleViolation", {
+	rule: f.String,
+	params: f.optional(f.Record({
+		key: f.String,
+		value: f.Unknown
 	})),
-	field: m.optional(m.String),
-	message: m.optional(m.String),
-	severity: m.Literal("error", "warning")
-}) {}, rt = m.Struct({
-	field: m.String,
-	message: m.String,
-	params: m.optional(m.Record({
-		key: m.String,
-		value: m.Unknown
+	field: f.optional(f.String),
+	message: f.optional(f.String),
+	severity: f.Literal("error", "warning")
+}) {}, St = f.Struct({
+	field: f.String,
+	message: f.String,
+	params: f.optional(f.Record({
+		key: f.String,
+		value: f.Unknown
 	}))
-}), it = class extends m.TaggedError()("ValidationError", {
-	field: m.String,
-	message: m.String,
-	params: m.optional(m.Record({
-		key: m.String,
-		value: m.Unknown
+}), Ct = class extends f.TaggedError()("ValidationError", {
+	field: f.String,
+	message: f.String,
+	params: f.optional(f.Record({
+		key: f.String,
+		value: f.Unknown
 	}))
-}) {}, at = class extends m.TaggedError()("ValidationErrors", { issues: m.Array(rt).pipe(m.minItems(1)) }) {}, ot = (e) => {
+}) {}, wt = class extends f.TaggedError()("ValidationErrors", { issues: f.Array(St).pipe(f.minItems(1)) }) {}, Tt = (e) => {
 	if (typeof e != "object" || !e) return [];
 	let t = e._tag;
 	if (t === "ValidationError") {
@@ -197,69 +197,69 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		}];
 	}
 	return [];
-}, st = class extends m.TaggedError()("ApprovalRequired", {
-	approvalId: m.String,
-	procedure: m.String,
-	expiresAt: m.String,
-	requiredScopes: m.Array(m.String),
-	reason: m.NullOr(m.String),
-	created: m.Boolean
-}) {}, ct = class extends m.TaggedError()("ApprovalNotFound", { approvalId: m.String }) {}, lt = class extends m.TaggedError()("ApprovalSelfApproval", {
-	approvalId: m.String,
-	subjectId: m.NullOr(m.String)
-}) {}, ut = class extends m.TaggedError()("ApprovalRejected", {
-	approvalId: m.String,
-	decidedBy: m.NullOr(m.String),
-	note: m.NullOr(m.String)
-}) {}, C = class extends m.TaggedError()("ApprovalExpired", {
-	approvalId: m.String,
-	expiredAt: m.String
-}) {}, dt = class extends m.TaggedError()("ApprovalNotPending", {
-	approvalId: m.String,
-	status: m.String
-}) {}, ft = class extends m.TaggedError()("ApprovalForbidden", {
-	approvalId: m.String,
-	required: m.NullOr(m.String),
-	message: m.String
-}) {}, w = class extends m.TaggedError()("ApprovalUnavailable", {
-	procedure: m.String,
-	message: m.String
-}) {}, pt = m.Union(st, ut, C, w), mt = m.Union(ct, lt, C, dt, ft, w), ht = m.Struct({
-	id: m.String,
-	procedure: m.String,
-	kind: m.Literal("mutation", "action"),
-	requestedBy: m.NullOr(m.String),
-	status: m.Literal("pending", "approved", "rejected", "expired", "consumed"),
-	reason: m.NullOr(m.String),
-	requiredScopes: m.Array(m.String),
-	requestedAt: m.String,
-	expiresAt: m.String,
-	decidedBy: m.NullOr(m.String),
-	decidedAt: m.NullOr(m.String),
-	note: m.NullOr(m.String),
-	relation: m.Literal("to-decide", "requested")
-}), T = "channel:", gt = Symbol.for("@voltro/protocol/reactivityChannels"), _t = globalThis, E = _t[gt] ?? (_t[gt] = /* @__PURE__ */ new Map()), vt = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, yt = (e) => {
-	if (!vt.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
+}, Et = class extends f.TaggedError()("ApprovalRequired", {
+	approvalId: f.String,
+	procedure: f.String,
+	expiresAt: f.String,
+	requiredScopes: f.Array(f.String),
+	reason: f.NullOr(f.String),
+	created: f.Boolean
+}) {}, Dt = class extends f.TaggedError()("ApprovalNotFound", { approvalId: f.String }) {}, Ot = class extends f.TaggedError()("ApprovalSelfApproval", {
+	approvalId: f.String,
+	subjectId: f.NullOr(f.String)
+}) {}, kt = class extends f.TaggedError()("ApprovalRejected", {
+	approvalId: f.String,
+	decidedBy: f.NullOr(f.String),
+	note: f.NullOr(f.String)
+}) {}, S = class extends f.TaggedError()("ApprovalExpired", {
+	approvalId: f.String,
+	expiredAt: f.String
+}) {}, At = class extends f.TaggedError()("ApprovalNotPending", {
+	approvalId: f.String,
+	status: f.String
+}) {}, jt = class extends f.TaggedError()("ApprovalForbidden", {
+	approvalId: f.String,
+	required: f.NullOr(f.String),
+	message: f.String
+}) {}, C = class extends f.TaggedError()("ApprovalUnavailable", {
+	procedure: f.String,
+	message: f.String
+}) {}, Mt = f.Union(Et, kt, S, C), Nt = f.Union(Dt, Ot, S, At, jt, C), Pt = f.Struct({
+	id: f.String,
+	procedure: f.String,
+	kind: f.Literal("mutation", "action"),
+	requestedBy: f.NullOr(f.String),
+	status: f.Literal("pending", "approved", "rejected", "expired", "consumed"),
+	reason: f.NullOr(f.String),
+	requiredScopes: f.Array(f.String),
+	requestedAt: f.String,
+	expiresAt: f.String,
+	decidedBy: f.NullOr(f.String),
+	decidedAt: f.NullOr(f.String),
+	note: f.NullOr(f.String),
+	relation: f.Literal("to-decide", "requested")
+}), w = "channel:", Ft = Symbol.for("@voltro/protocol/reactivityChannels"), It = globalThis, T = It[Ft] ?? (It[Ft] = /* @__PURE__ */ new Map()), Lt = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, Rt = (e) => {
+	if (!Lt.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
   \`billing.usage\`. A \`:\` is refused because it is the namespace separator in
-  the routing key (\`${T}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
+  the routing key (\`${w}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
   routes as two.`);
-	let t = E.get(e);
+	let t = T.get(e);
 	if (t !== void 0) return t;
-	let n = `${T}${e}`, r = Object.freeze({
+	let n = `${w}${e}`, r = Object.freeze({
 		kind: "reactivity-channel",
 		name: e,
 		key: n,
 		toString: () => n
 	});
-	return E.set(e, r), r;
-}, D = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", O = (e) => e.startsWith(T), k = () => new Set([...E.values()].map((e) => e.key)), A = (e) => D(e) ? e.key : e, j = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(A) : [A(e)], M = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(A) : A(e), bt = (e) => {
-	let t = k(), n = [];
-	for (let r of e) for (let e of j(r.source)) O(e) && !t.has(e) && n.push({
+	return T.set(e, r), r;
+}, zt = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", Bt = (e) => e.startsWith(w), Vt = () => new Set([...T.values()].map((e) => e.key)), E = (e) => zt(e) ? e.key : e, D = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(E) : [E(e)], O = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(E) : E(e), Ht = (e) => {
+	let t = Vt(), n = [];
+	for (let r of e) for (let e of D(r.source)) Bt(e) && !t.has(e) && n.push({
 		procedure: r.name,
 		key: e
 	});
 	return n;
-}, xt = (e, t) => {
+}, Ut = (e, t) => {
 	let n = e?.injectExternalChange;
 	return n !== void 0 && (n.call(e, {
 		table: t.key,
@@ -268,13 +268,18 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		old: {},
 		origin: "inline"
 	}), !0);
-}, St = (e) => e.internal !== !0, N = (e) => {
-	if (Ct(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
+}, Wt = (e) => e.internal !== !0, k = (e) => {
+	if (Gt(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
+	let t = e.serialize;
+	if (t !== void 0) {
+		if (typeof t.key != "function") throw Error(`${e.name}: serialize.key must be a function of the input`);
+		if (t.maxPending !== void 0 && (!Number.isSafeInteger(t.maxPending) || t.maxPending < 1)) throw Error(`${e.name}: serialize.maxPending must be a positive integer`);
+	}
 	if (e.idempotencyScope === "connection" && (e.internal === !0 || e.publicApi !== void 0 || e.exposeAsTool !== void 0)) throw Error(`${e.name}: connection-scoped mutations require the native WebSocket RPC surface; internal, publicApi and exposeAsTool cannot establish its connection state`);
 	if (Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
   unguarded procedure, or list the scopes required to call it.`);
-	let t = typeof e.source == "string" ? [e.source] : Array.isArray(e.source) ? e.source : void 0;
-	if (t !== void 0 && (t.length === 0 || t.some((e) => String(e).trim() === ""))) throw Error(`${e.name}: \`source\` is empty, so this query declares reactivity and\n  subscribes to nothing — it serves one snapshot and never updates again,
+	let n = typeof e.source == "string" ? [e.source] : Array.isArray(e.source) ? e.source : void 0;
+	if (n !== void 0 && (n.length === 0 || n.some((e) => String(e).trim() === ""))) throw Error(`${e.name}: \`source\` is empty, so this query declares reactivity and\n  subscribes to nothing — it serves one snapshot and never updates again,
   which is indistinguishable from "nothing changed". Name the table(s) it
   reads, or omit \`source\` for a non-reactive query.`);
 	if (e.internal !== !0) return e;
@@ -285,10 +290,10 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	if (e.overridesPlugin === !0) throw Error(`${e.name}: \`internal: true\` cannot be combined with \`overridesPlugin\`.\n  The override REMOVES the plugin route, and an internal procedure is not
   wire-reachable — so the plugin's route would vanish with nothing callable
   in its place, and callers would get a 404 for something that used to work.`);
-	let n = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
-	if (n.length === 0) return e;
-	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${n.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${n.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${n.join(" / ")} annotation if it is not.`);
-}, Ct = (e) => {
+	let r = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
+	if (r.length === 0) return e;
+	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${r.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${r.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${r.join(" / ")} annotation if it is not.`);
+}, Gt = (e) => {
 	let t = e.requiresApproval;
 	if (t !== void 0) {
 		if (!Array.isArray(t.approvers) || t.approvers.length === 0) throw Error(`${e.name}: \`requiresApproval.approvers\` is empty, so NOBODY can approve this\n  procedure and every call would park forever. Name the scope(s) an approver must hold
@@ -298,49 +303,50 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
   human from every other, and the second-pair-of-eyes control would enforce nothing.
   Give the procedure a \`guards:\` decision, or drop \`requiresApproval\`.`);
 	}
-}, wt = (e) => e.action !== void 0 && e.resourceType !== void 0, Tt = (e) => e.authenticated === !0, Et = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, P = (e, t, n) => {
+}, Kt = (e) => e.action !== void 0 && e.resourceType !== void 0, qt = (e) => e.authenticated === !0, Jt = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, A = (e, t, n) => {
 	if (n === void 0) return t;
 	if (n.trim() === "") throw Error(`${e}: \`openAccess\` needs a REASON, not an empty string. It is the sentence a\n  reviewer reads to decide whether this procedure should really be callable
   without an authorization check — e.g. \`openAccess: 'public pricing, no caller data'\`.`);
 	if (t !== void 0 && t.length > 0) throw Error(`${e}: \`openAccess\` and \`guards\` are two different access decisions, so\n  declaring both says the procedure is protected AND open. Keep the guards if a
   caller must hold a scope; drop them if anyone may call it.`);
-	return [f(n.trim())];
-}, F = (e) => N({
+	return [d(n.trim())];
+}, j = (e) => k({
 	kind: "query",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? m.Never,
-	source: M(e.source),
+	error: e.error ?? f.Never,
+	source: O(e.source),
 	cache: e.cache,
-	guards: P(e.name, e.guards, e.openAccess),
+	guards: A(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	publicApi: e.publicApi,
 	exposeAsTool: e.exposeAsTool,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), I = (e) => N({
+}), M = (e) => k({
 	kind: "mutation",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? m.Never,
+	error: e.error ?? f.Never,
 	...e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope },
+	...e.serialize === void 0 ? {} : { serialize: e.serialize },
 	target: e.target,
-	guards: P(e.name, e.guards, e.openAccess),
+	guards: A(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	publicApi: e.publicApi,
 	exposeAsTool: e.exposeAsTool,
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), L = (e) => N({
+}), N = (e) => k({
 	kind: "action",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? m.Never,
-	guards: P(e.name, e.guards, e.openAccess),
+	error: e.error ?? f.Never,
+	guards: A(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	source: e.source,
 	target: e.target,
@@ -349,55 +355,55 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), Dt = (e) => N({
+}), Yt = (e) => k({
 	kind: "stream",
 	name: e.name,
 	input: e.input,
 	element: e.element,
-	error: e.error ?? m.Never,
+	error: e.error ?? f.Never,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin,
-	guards: P(e.name, e.guards, e.openAccess),
+	guards: A(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess
-}), R = (e, t) => t && t.length > 0 ? m.Union(e, ...t) : e, z = (e) => e !== void 0 && e.some((e) => !d(e)), Ot = (e, t) => z(t) ? m.Union(e, u, l) : e, kt = (e) => m.Union(e, nt), At = (e) => m.Union(e, it, at), jt = (e, t) => t === void 0 ? e : m.Union(e, pt), B = (e, t) => {
+}), P = (e, t) => t && t.length > 0 ? f.Union(e, ...t) : e, F = (e) => e !== void 0 && e.some((e) => !u(e)), Xt = (e, t) => F(t) ? f.Union(e, l, a) : e, Zt = (e) => f.Union(e, x), Qt = (e) => f.Union(e, Ct, wt), $t = (e, t) => t === void 0 ? e : f.Union(e, Mt), I = (e, t) => {
 	if (t === "stream") return e.error;
-	let n = Ot(e.error, e.guards);
+	let n = Xt(e.error, e.guards);
 	if (t === "query") return n;
-	let r = t === "mutation" ? m.Union(kt(n), Pe, Ke) : n;
-	return jt(At(t === "mutation" && e.idempotencyScope === "connection" ? m.Union(r, p) : r), e.requiresApproval);
-}, Mt = (e, t) => R(Ot(e.errorSchema, e.guards), t), Nt = (e, t) => ({
+	let r = t === "mutation" ? f.Union(Zt(n), ct, ft) : n;
+	return $t(Qt(t === "mutation" && e.idempotencyScope === "connection" ? f.Union(r, We) : r), e.requiresApproval);
+}, en = (e, t) => P(Xt(e.errorSchema, e.guards), t), tn = (e, t) => ({
 	...e,
 	name: t
-}), Pt = (e, t) => h.make(e.name, {
-	payload: S(e.input, e.name, z(e.guards)),
-	success: b(e.output),
-	error: R(B(e, "query"), t),
+}), nn = (e, t) => p.make(e.name, {
+	payload: b(e.input, e.name, F(e.guards)),
+	success: v(e.output),
+	error: P(I(e, "query"), t),
 	stream: !0
-}), Ft = (e, t) => h.make(e.name, {
-	payload: S(e.input, e.name, z(e.guards)),
+}), rn = (e, t) => p.make(e.name, {
+	payload: b(e.input, e.name, F(e.guards)),
 	success: e.output,
-	error: R(B(e, "mutation"), t)
-}), It = (e, t) => h.make(e.name, {
-	payload: S(e.input, e.name, z(e.guards)),
+	error: P(I(e, "mutation"), t)
+}), an = (e, t) => p.make(e.name, {
+	payload: b(e.input, e.name, F(e.guards)),
 	success: e.output,
-	error: R(B(e, "action"), t)
-}), Lt = (e, t) => h.make(e.name, {
-	payload: S(e.input, e.name, z(e.guards)),
+	error: P(I(e, "action"), t)
+}), on = (e, t) => p.make(e.name, {
+	payload: b(e.input, e.name, F(e.guards)),
 	success: e.element,
-	error: R(e.error, t),
+	error: P(e.error, t),
 	stream: !0
-}), Rt = (e) => {
+}), sn = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
 	return typeof t == "string" ? t : void 0;
-}, zt = (e) => {
+}, cn = (e) => {
 	switch (e.kind) {
-		case "query": return Pt(e);
-		case "mutation": return Ft(e);
-		case "action": return It(e);
-		case "stream": return Lt(e);
+		case "query": return nn(e);
+		case "mutation": return rn(e);
+		case "action": return an(e);
+		case "stream": return on(e);
 	}
-}, Bt = (e) => {
+}, ln = (e) => {
 	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
 	if (e.kind === "query") return {
 		kind: "query",
@@ -415,20 +421,22 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		...n,
 		...i
 	};
-	let a = e.target, o = e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope };
+	let a = e.target, o = e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope }, s = e.serialize === void 0 ? {} : { serialize: e.serialize };
 	if (a === void 0) return {
 		kind: "mutation",
 		...n,
 		...i,
-		...o
+		...o,
+		...s
 	};
-	let s = Array.isArray(a) ? a : [a];
+	let c = Array.isArray(a) ? a : [a];
 	return {
 		kind: "mutation",
 		...n,
 		...i,
 		...o,
-		targets: s.map((e) => ({
+		...s,
+		targets: c.map((e) => ({
 			table: e.table,
 			op: e.op,
 			..."order" in e && e.order !== void 0 ? { order: e.order } : {},
@@ -441,7 +449,7 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 			..."relations" in e && e.relations !== void 0 ? { relations: e.relations } : {}
 		}))
 	};
-}, Vt = 7500, Ht = (e) => typeof e == "object" && !!e && e.kind === "event", Ut = (e) => {
+}, un = 7500, dn = (e) => typeof e == "object" && !!e && e.kind === "event", fn = (e) => {
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -470,66 +478,66 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		name: e.name,
 		key: e.key,
 		payload: e.payload,
-		guards: e.openAccess === void 0 ? e.guards : [f(e.openAccess.trim())],
+		guards: e.openAccess === void 0 ? e.guards : [d(e.openAccess.trim())],
 		openAccess: e.openAccess,
 		rewind: e.rewind,
 		webhook: e.webhook,
 		delivery: e.delivery
 	};
-}, Wt = (e) => m.Struct({
-	_tag: m.Literal("event"),
-	origin: m.String,
-	n: m.Number,
-	emittedAt: m.Number,
+}, pn = (e) => f.Struct({
+	_tag: f.Literal("event"),
+	origin: f.String,
+	n: f.Number,
+	emittedAt: f.Number,
 	payload: e
-}), Gt = m.Struct({
-	_tag: m.Literal("gap"),
-	missed: m.Number,
-	reason: m.Literal("buffer", "resume")
-}), Kt = m.Struct({ _tag: m.Literal("attached") }), qt = (e) => m.Union(Kt, Wt(e), Gt), Jt = m.Struct({
-	origin: m.String,
-	n: m.Number
-}), Yt = (e) => m.Struct({
+}), mn = f.Struct({
+	_tag: f.Literal("gap"),
+	missed: f.Number,
+	reason: f.Literal("buffer", "resume")
+}), hn = f.Struct({ _tag: f.Literal("attached") }), gn = (e) => f.Union(hn, pn(e), mn), _n = f.Struct({
+	origin: f.String,
+	n: f.Number
+}), vn = (e) => f.Struct({
 	key: e,
-	resume: m.optional(m.Array(Jt))
-}), Xt = (e, t) => {
-	let n = e.guards !== void 0 && e.guards.some((e) => !d(e)) ? m.Union(u, l) : m.Never, r = t && t.length > 0 ? m.Union(n, ...t) : n;
-	return h.make(e.name, {
-		payload: S(Yt(e.key), e.name, z(e.guards)),
-		success: qt(e.payload),
+	resume: f.optional(f.Array(_n))
+}), yn = (e, t) => {
+	let n = e.guards !== void 0 && e.guards.some((e) => !u(e)) ? f.Union(l, a) : f.Never, r = t && t.length > 0 ? f.Union(n, ...t) : n;
+	return p.make(e.name, {
+		payload: b(vn(e.key), e.name, F(e.guards)),
+		success: gn(e.payload),
 		error: r,
 		stream: !0
 	});
-}, Zt = class extends m.TaggedError()("EventPayloadInvalid", {
-	event: m.String,
-	message: m.String
-}) {}, Qt = class extends m.TaggedError()("EventKeyInvalid", {
-	event: m.String,
-	message: m.String
-}) {}, $t = class extends m.TaggedError()("EventPayloadTooLarge", {
-	event: m.String,
-	bytes: m.Number,
-	limit: m.Number
-}) {}, en = (e) => {
+}, bn = class extends f.TaggedError()("EventPayloadInvalid", {
+	event: f.String,
+	message: f.String
+}) {}, xn = class extends f.TaggedError()("EventKeyInvalid", {
+	event: f.String,
+	message: f.String
+}) {}, Sn = class extends f.TaggedError()("EventPayloadTooLarge", {
+	event: f.String,
+	bytes: f.Number,
+	limit: f.Number
+}) {}, Cn = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t));
 	return JSON.stringify(t);
-}, tn = "\0", nn = (e, t, n) => [
+}, wn = "\0", Tn = (e, t, n) => [
 	e ?? "~",
 	t,
-	en(n)
-].join("\0"), rn = (e) => {
+	Cn(n)
+].join("\0"), En = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, an = (e) => e.split("\0").join(" · "), V = Symbol.for("@voltro/protocol/workflow-access"), on = {
+}, Dn = (e) => e.split("\0").join(" · "), L = Symbol.for("@voltro/protocol/workflow-access"), On = {
 	guards: void 0,
 	openAccess: void 0,
 	internal: !1
-}, sn = (e, t) => {
+}, kn = (e, t) => {
 	let n = t.guards;
 	if (n !== void 0 && n.length === 0) throw Error(`workflow("${e}"): \`guards: []\` is empty, so it enforces nothing —\n  but it reads at the call site as if the start were protected. Omit the field
   and decide with \`openAccess\` or \`internal\`, or list the scopes that may start it.`);
@@ -545,96 +553,41 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
   \`internal: true\` if the workflow really is meant to be startable by clients.`);
 	}
 	return {
-		guards: t.openAccess === void 0 ? t.guards : [f(t.openAccess.trim())],
+		guards: t.openAccess === void 0 ? t.guards : [d(t.openAccess.trim())],
 		openAccess: t.openAccess?.trim(),
 		internal: t.internal === !0
 	};
-}, cn = (e, t) => {
-	Object.defineProperty(e, V, {
+}, An = (e, t) => {
+	Object.defineProperty(e, L, {
 		value: t,
 		enumerable: !1
 	});
-}, H = (e) => {
-	if (typeof e != "object" || !e) return on;
-	let t = e[V];
-	return t === void 0 ? on : t;
-}, ln = (e) => {
-	let t = H(e);
+}, R = (e) => {
+	if (typeof e != "object" || !e) return On;
+	let t = e[L];
+	return t === void 0 ? On : t;
+}, jn = (e) => {
+	let t = R(e);
 	return {
 		name: e.name,
 		internal: t.internal,
 		guards: t.guards,
 		openAccess: t.openAccess
 	};
-}, un = (e) => typeof e == "object" && !!e && typeof e._tag == "string", dn = 64, U = (e, t = 0) => {
-	if (!un(e)) return String(e);
-	if (t >= dn) return "…";
-	let n = t + 1, r = (t) => U(e[t], n), i = (t) => Array.isArray(e[t]) ? e[t] : [];
-	switch (e._tag) {
-		case "Transformation": return `T(${r("from")}->${r("to")})`;
-		case "Refinement": return `R(${r("from")})`;
-		case "Suspend": return "S(…)";
-		case "TypeLiteral": {
-			let e = i("propertySignatures").map((e) => {
-				let t = e;
-				return `${String(t.name)}${t.isOptional === !0 ? "?" : ""}:${U(t.type, n)}`;
-			}).join(","), t = i("indexSignatures").map((e) => {
-				let t = e;
-				return `[${U(t.parameter, n)}]:${U(t.type, n)}`;
-			}).join(",");
-			return t === "" ? `{${e}}` : `{${e};${t}}`;
-		}
-		case "Union": return `U(${i("types").map((e) => U(e, n)).join("|")})`;
-		case "TupleType": {
-			let e = i("elements").map((e) => {
-				let t = e;
-				return `${U(t.type, n)}${t.isOptional === !0 ? "?" : ""}`;
-			}).join(","), t = i("rest").map((e) => U(e.type, n)).join(",");
-			return `A(${e}${t === "" ? "" : `...${t}`})`;
-		}
-		case "Declaration": return `D(${i("typeParameters").map((e) => U(e, n)).join(",")})`;
-		default: return String(e);
-	}
-}, fn = (e) => {
-	let t = 2166136261;
-	for (let n = 0; n < e.length; n++) t ^= e.charCodeAt(n), t = Math.imul(t, 16777619) >>> 0;
-	return t.toString(16).padStart(8, "0");
-}, pn = (e) => fn([
-	U(e.payloadSchema?.ast),
-	U(e.successSchema?.ast),
-	U(e.errorSchema?.ast)
-].join("\0")), mn = (e) => {
-	let t = {}, n = e.requests, r = n instanceof Map ? n.entries() : Array.isArray(n) ? n.map((e, t) => [t, e]) : [];
-	for (let [, e] of r) {
-		if (typeof e != "object" && typeof e != "function" || e === null) continue;
-		let n = e;
-		typeof n._tag == "string" && (t[n._tag] = pn(n));
-	}
-	return t;
-}, hn = (e, t) => {
-	let n = [], r = [];
-	for (let [i, a] of Object.entries(t)) {
-		let t = e[i];
-		t === void 0 ? r.push(i) : t !== a && n.push(i);
-	}
-	return {
-		differing: n.sort(),
-		missingHere: r.sort()
-	};
-}, gn = (e) => e, _n = (e) => e, vn = (e) => {
+}, Mn = (e) => e, Nn = (e) => e, Pn = (e) => {
 	let t = e.alias?.trim(), n = e.instance?.trim(), r = t !== void 0 && t !== "" ? t : e.base;
 	return n !== void 0 && n !== "" ? `${r}#${n}` : r;
-}, yn = (e) => {
+}, Fn = (e) => {
 	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
-}, bn = (e, t) => {
-	let n = We.GenericTag(e);
+}, In = (e, t) => {
+	let n = ut.GenericTag(e);
 	return {
 		Tag: n,
-		Live: Ge.succeed(n, t)
+		Live: dt.succeed(n, t)
 	};
-}, xn = (e, t, n) => {
+}, Ln = (e, t, n) => {
 	if (!t) return { ok: !0 };
-	let r = n === void 0 ? null : W(n);
+	let r = n === void 0 ? null : z(n);
 	if (!r) return {
 		ok: !0,
 		unverified: `plugin "${e}" requires framework ${t}, but the running framework version is ${n === void 0 ? "unknown" : `unreadable ("${n}")`} — not checked.`
@@ -642,12 +595,12 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 	let i = t.trim();
 	if (i === "*" || i === "") return { ok: !0 };
 	let a = i.split(/\s+/).filter((e) => e.length > 0);
-	for (let i of a) if (!Sn(i, r)) return {
+	for (let i of a) if (!Rn(i, r)) return {
 		ok: !1,
 		reason: `plugin "${e}" requires framework ${t}, running ${n}`
 	};
 	return { ok: !0 };
-}, W = (e) => {
+}, z = (e) => {
 	let t = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9a-zA-Z.-]+))?$/.exec(e.trim());
 	return t ? {
 		major: Number(t[1]),
@@ -655,273 +608,368 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 		patch: Number(t[3]),
 		pre: t[4] ?? ""
 	} : null;
-}, G = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, Sn = (e, t) => {
+}, B = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, Rn = (e, t) => {
 	if (e === "*") return !0;
 	if (e.startsWith("^")) {
-		let n = W(e.slice(1));
-		return !n || t.major !== n.major ? !1 : G(t, n) >= 0;
+		let n = z(e.slice(1));
+		return !n || t.major !== n.major ? !1 : B(t, n) >= 0;
 	}
 	if (e.startsWith("~")) {
-		let n = W(e.slice(1));
-		return !n || t.major !== n.major || t.minor !== n.minor ? !1 : G(t, n) >= 0;
+		let n = z(e.slice(1));
+		return !n || t.major !== n.major || t.minor !== n.minor ? !1 : B(t, n) >= 0;
 	}
 	let n = /^(>=|<=|>|<)(.+)$/.exec(e);
 	if (n) {
-		let e = n[1], r = W(n[2]);
+		let e = n[1], r = z(n[2]);
 		if (!r) return !1;
-		let i = G(t, r);
+		let i = B(t, r);
 		if (e === ">=") return i >= 0;
 		if (e === "<=") return i <= 0;
 		if (e === ">") return i > 0;
 		if (e === "<") return i < 0;
 	}
-	let r = W(e);
-	return r ? G(t, r) === 0 : !1;
-}, Cn = (e) => {
+	let r = z(e);
+	return r ? B(t, r) === 0 : !1;
+}, zn = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/-([a-zA-Z0-9])/g, (e, t) => t.toUpperCase());
-}, wn = (e) => {
+}, Bn = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/#/g, "--").replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
-}, Tn = Symbol.for("@voltro/protocol/pluginAliases"), K = () => {
-	let e = globalThis, t = e[Tn];
+}, Vn = Symbol.for("@voltro/protocol/pluginAliases"), V = () => {
+	let e = globalThis, t = e[Vn];
 	if (t instanceof Map) return t;
 	let n = /* @__PURE__ */ new Map();
-	return e[Tn] = n, n;
-}, En = (e) => {
-	let t = K();
+	return e[Vn] = n, n;
+}, Hn = (e) => {
+	let t = V();
 	for (let [n, r] of Object.entries(e)) {
 		if (r === "") continue;
 		let e = t.get(n);
 		e === void 0 ? t.set(n, /* @__PURE__ */ new Set([r])) : e.add(r);
 	}
-}, Dn = () => {
-	K().clear();
-}, On = (e, t) => {
-	let n = K().get(e);
-	if (n === void 0 || n.size === 0) return `${Cn(e)}.${t}`;
+}, Un = () => {
+	V().clear();
+}, Wn = (e, t) => {
+	let n = V().get(e);
+	if (n === void 0 || n.size === 0) return `${zn(e)}.${t}`;
 	if (n.size === 1) return `${[...n][0]}.${t}`;
 	let r = [...n].filter((e) => !e.includes("#"));
 	if (r.length === 1) return `${r[0]}.${t}`;
 	throw Error(`[voltro] ${e} is installed more than once (${[...n].sort().join(", ")}) and no single install is the primary one, so a plugin hook cannot tell which of them it addresses. Call the route by its full tag instead — e.g. useSubscription(api, '${[...n].sort()[0]}.${t}').`);
-}, q = m.Literal("running", "succeeded", "failed", "cancelled", "suspended"), kn = m.Literal("cancel", "terminate", "abandon"), An = m.Struct({
-	mode: m.String,
-	dueAt: m.NullOr(m.Number),
-	retryAfterMs: m.NullOr(m.Number),
-	intentId: m.NullOr(m.String)
-}), jn = m.Struct({
-	id: m.String,
-	workflowName: m.String,
-	executionId: m.NullOr(m.String),
-	status: m.Literal("running", "queued", "dropped", "skipped", "replayed"),
-	deferral: m.optional(An)
-}), Mn = (e, t) => {
-	let n = H(e);
-	return h.make(e.name, {
-		payload: S(e.payloadSchema, e.name, z(n.guards)),
-		success: jn,
-		error: Mt({
+}, Gn = f.Union(f.Struct({
+	kind: f.Literal("dropped"),
+	at: f.Number,
+	retryAfterMs: f.Number
+}), f.Struct({
+	kind: f.Literal("skipped"),
+	at: f.Number,
+	executionId: f.String,
+	runId: f.String
+}), f.Struct({
+	kind: f.Literal("superseded"),
+	at: f.Number
+}), f.Struct({
+	kind: f.Literal("cancelled"),
+	at: f.Number
+}), f.Struct({
+	kind: f.Literal("abandoned"),
+	at: f.Number,
+	failureId: f.NonEmptyString
+})), H = f.Literal("running", "succeeded", "failed", "cancelled", "suspended"), U = f.Struct({
+	id: f.String,
+	workflowName: f.String,
+	executionId: f.String,
+	status: f.Union(H, f.Literal("unknown")),
+	output: f.optional(f.Unknown),
+	error: f.optional(f.Struct({
+		tag: f.NullOr(f.String),
+		message: f.String
+	}))
+}), W = f.Struct({
+	operation: f.Literal("cancel", "resume"),
+	kind: f.Literal("accepted", "confirmed", "unknown", "already-terminal"),
+	requestId: f.NullOr(f.NonEmptyString),
+	snapshot: U
+}).pipe(f.filter((e) => e.kind === "unknown" ? !0 : e.kind === "accepted" ? e.requestId !== null && (e.snapshot.status === "running" || e.snapshot.status === "suspended") : e.kind === "already-terminal" ? e.snapshot.status === "succeeded" || e.snapshot.status === "failed" || e.snapshot.status === "cancelled" : e.operation === "cancel" ? e.snapshot.status === "cancelled" : e.requestId !== null && e.snapshot.status === "running", { message: () => "Workflow control acknowledgement contradicts its observed state or receipt identity" })), G = f.Struct({
+	operation: f.Literal("cancel"),
+	workflowName: f.NonEmptyString,
+	receiptId: f.NonEmptyString,
+	requestId: f.NullOr(f.NonEmptyString),
+	kind: f.Literal("accepted", "confirmed", "unknown", "already-terminal"),
+	observation: f.Union(f.Struct({ kind: f.Literal("pending") }), f.Struct({
+		kind: f.Literal("admission"),
+		outcome: f.Union(Gn, f.Struct({
+			kind: f.Literal("rejected"),
+			failureId: f.NonEmptyString
+		}))
+	}), f.Struct({
+		kind: f.Literal("execution"),
+		snapshot: U
+	}), f.Struct({
+		kind: f.Literal("unavailable"),
+		reason: f.Literal("missing-request", "missing-run", "unconfirmed-generation", "unbound-submission")
+	}))
+}).pipe(f.filter((e) => {
+	let t = e.observation;
+	if (t.kind === "unavailable") return e.kind === "unknown" && (t.reason === "missing-request" ? e.requestId === null : e.requestId !== null);
+	if (e.requestId === null) return !1;
+	if (t.kind === "pending") return e.kind === "accepted";
+	if (t.kind === "admission") return e.kind === (t.outcome.kind === "cancelled" ? "confirmed" : "already-terminal");
+	let n = t.snapshot;
+	return n.workflowName !== e.workflowName || n.id.length === 0 || n.executionId.length === 0 ? !1 : e.kind === "accepted" ? n.status === "running" || n.status === "suspended" : e.kind === "confirmed" ? n.status === "cancelled" : e.kind === "already-terminal" && (n.status === "succeeded" || n.status === "failed" || n.status === "cancelled");
+}, { message: () => "Queued cancellation acknowledgement contradicts its receipt or observation" })), Kn = f.Literal("cancel", "terminate", "abandon"), qn = f.Struct({
+	mode: f.String,
+	dueAt: f.NullOr(f.Number),
+	retryAfterMs: f.NullOr(f.Number),
+	intentId: f.NullOr(f.String)
+}), Jn = f.Struct({
+	id: f.String,
+	workflowName: f.String,
+	executionId: f.NullOr(f.String),
+	status: f.Literal("running", "succeeded", "queued", "dropped", "skipped", "replayed"),
+	deferral: f.optional(qn)
+}), Yn = (e, t) => {
+	let n = R(e);
+	return p.make(e.name, {
+		payload: b(e.payloadSchema, e.name, F(n.guards)),
+		success: Jn,
+		error: en({
 			errorSchema: e.errorSchema,
 			guards: n.guards
 		}, t)
 	});
-}, J = m.Struct({
-	id: m.String,
-	tag: m.String,
-	executionId: m.String,
-	status: q,
-	payload: m.Unknown,
-	workflowVersion: m.NullOr(m.String),
-	workflowPatches: m.NullOr(m.Unknown),
-	output: m.NullOr(m.Unknown),
-	subject: m.NullOr(m.Unknown),
-	source: m.NullOr(m.String),
-	errorTag: m.NullOr(m.String),
-	errorMessage: m.NullOr(m.String),
-	cancelled: m.Boolean,
-	startedAt: m.Date,
-	completedAt: m.NullOr(m.Date),
-	durationMs: m.NullOr(m.Number),
-	traceId: m.NullOr(m.String),
-	parentExecutionId: m.NullOr(m.String),
-	parentClosePolicy: m.NullOr(kn)
-}), Nn = m.Struct({
-	tag: m.optional(m.String),
-	status: m.optional(q),
-	limit: m.optional(m.Number)
-}), Pn = m.Struct({
-	id: m.String,
-	runId: m.String,
-	stepName: m.String,
-	attempt: m.Number,
-	status: m.Literal("running", "succeeded", "failed"),
-	input: m.NullOr(m.Unknown),
-	retryPolicy: m.NullOr(m.Unknown),
-	output: m.NullOr(m.Unknown),
-	errorTag: m.NullOr(m.String),
-	errorMessage: m.NullOr(m.String),
-	errorCause: m.NullOr(m.Unknown),
-	startedAt: m.Date,
-	completedAt: m.NullOr(m.Date),
-	durationMs: m.NullOr(m.Number)
-}), Fn = m.Struct({
-	id: m.String,
-	runId: m.String,
-	eventType: m.String,
-	payload: m.NullOr(m.Unknown),
-	occurredAt: m.Date,
-	stepName: m.NullOr(m.String),
-	attempt: m.NullOr(m.Number)
-}), In = m.Struct({
-	id: m.String,
-	name: m.String,
-	payload: m.Unknown,
-	source: m.String,
-	subject: m.NullOr(m.Unknown),
-	traceId: m.NullOr(m.String),
-	occurredAt: m.Date
-}), Ln = m.Struct({
-	id: m.String,
-	eventId: m.String,
-	eventName: m.String,
-	triggerId: m.String,
-	workflowName: m.String,
-	executionId: m.NullOr(m.String),
-	status: m.Literal("starting", "started", "skipped", "failed"),
-	idempotencyKey: m.String,
-	skipped: m.Boolean,
-	errorMessage: m.NullOr(m.String),
-	createdAt: m.Date,
-	completedAt: m.NullOr(m.Date)
-}), Rn = m.Struct({ id: m.String }), Y = m.Struct({ runId: m.String }), zn = m.Struct({
-	name: m.optional(m.String),
-	limit: m.optional(m.Number)
-}), Bn = m.Struct({ eventId: m.String }), X = m.Struct({
-	workflowName: m.String,
-	executionId: m.String
-}), Vn = m.Struct({
-	id: m.String,
-	signalName: m.String,
-	payload: m.optional(m.Unknown)
-}), Hn = m.Struct({
-	id: m.String,
-	updateName: m.String,
-	payload: m.optional(m.Unknown),
-	timeoutMs: m.optional(m.Number)
-}), Un = m.Struct({
-	eventId: m.String,
-	updateId: m.String,
-	completedEventId: m.String,
-	result: m.Unknown
-}), Wn = F({
+}, K = f.Struct({
+	id: f.String,
+	tag: f.String,
+	executionId: f.String,
+	status: H,
+	payload: f.Unknown,
+	workflowVersion: f.NullOr(f.String),
+	workflowPatches: f.NullOr(f.Unknown),
+	output: f.NullOr(f.Unknown),
+	subject: f.NullOr(f.Unknown),
+	source: f.NullOr(f.String),
+	errorTag: f.NullOr(f.String),
+	errorMessage: f.NullOr(f.String),
+	cancelled: f.Boolean,
+	startedAt: f.Date,
+	completedAt: f.NullOr(f.Date),
+	durationMs: f.NullOr(f.Number),
+	traceId: f.NullOr(f.String),
+	parentExecutionId: f.NullOr(f.String),
+	parentClosePolicy: f.NullOr(Kn)
+}), Xn = f.Struct({
+	tag: f.optional(f.String),
+	status: f.optional(H),
+	limit: f.optional(f.Number)
+}), Zn = f.Struct({
+	id: f.String,
+	runId: f.String,
+	stepName: f.String,
+	attempt: f.Number,
+	status: f.Literal("running", "succeeded", "failed"),
+	input: f.NullOr(f.Unknown),
+	retryPolicy: f.NullOr(f.Unknown),
+	output: f.NullOr(f.Unknown),
+	errorTag: f.NullOr(f.String),
+	errorMessage: f.NullOr(f.String),
+	errorCause: f.NullOr(f.Unknown),
+	startedAt: f.Date,
+	completedAt: f.NullOr(f.Date),
+	durationMs: f.NullOr(f.Number)
+}), Qn = f.Struct({
+	id: f.String,
+	runId: f.String,
+	eventType: f.String,
+	payload: f.NullOr(f.Unknown),
+	occurredAt: f.Date,
+	stepName: f.NullOr(f.String),
+	attempt: f.NullOr(f.Number)
+}), $n = f.Struct({
+	id: f.String,
+	name: f.String,
+	payload: f.Unknown,
+	source: f.String,
+	subject: f.NullOr(f.Unknown),
+	traceId: f.NullOr(f.String),
+	occurredAt: f.Date
+}), er = f.Struct({
+	id: f.String,
+	eventId: f.String,
+	eventName: f.String,
+	triggerId: f.String,
+	workflowName: f.String,
+	executionId: f.NullOr(f.String),
+	status: f.Literal("starting", "started", "skipped", "failed"),
+	idempotencyKey: f.String,
+	skipped: f.Boolean,
+	errorMessage: f.NullOr(f.String),
+	createdAt: f.Date,
+	completedAt: f.NullOr(f.Date)
+}), tr = f.Struct({ id: f.String }), q = f.Struct({ runId: f.String }), nr = f.Struct({
+	name: f.optional(f.String),
+	limit: f.optional(f.Number)
+}), rr = f.Struct({ eventId: f.String }), J = f.Struct({
+	requestId: f.NonEmptyString,
+	cause: f.optionalWith(f.Struct({
+		reason: f.NonEmptyString,
+		detail: f.optional(f.Record({
+			key: f.String,
+			value: f.Unknown
+		}))
+	}), { exact: !0 })
+}), Y = f.Struct({
+	workflowName: f.String,
+	executionId: f.String,
+	control: f.optional(J)
+}), ir = f.Struct({
+	workflowName: f.NonEmptyString,
+	executionId: f.NonEmptyString,
+	operation: f.Literal("cancel", "resume"),
+	requestId: f.NonEmptyString
+}), X = f.Struct({
+	workflowName: f.NonEmptyString,
+	receiptId: f.NonEmptyString,
+	requestId: f.NonEmptyString
+}), ar = f.Struct({
+	...X.fields,
+	cause: J.fields.cause
+}), or = N({
+	name: "__voltro.workflow.queued.cancel",
+	input: ar,
+	output: G
+}), sr = j({
+	name: "__voltro.workflow.queued.control",
+	input: X,
+	output: G
+}), cr = j({
+	name: "__voltro.workflow.control",
+	input: ir,
+	output: W
+}), lr = f.Struct({
+	id: f.String,
+	signalName: f.String,
+	payload: f.optional(f.Unknown)
+}), ur = f.Struct({
+	id: f.String,
+	updateName: f.String,
+	payload: f.optional(f.Unknown),
+	timeoutMs: f.optional(f.Number)
+}), dr = f.Struct({
+	eventId: f.String,
+	updateId: f.String,
+	completedEventId: f.String,
+	result: f.Unknown
+}), fr = j({
 	name: "__voltro.workflow.run",
 	source: "_voltro_workflow_runs",
-	input: Rn,
-	output: m.Array(J)
-}), Gn = F({
+	input: tr,
+	output: f.Array(K)
+}), pr = j({
 	name: "__voltro.workflow.runs",
 	source: "_voltro_workflow_runs",
-	input: Nn,
-	output: m.Array(J)
-}), Kn = F({
+	input: Xn,
+	output: f.Array(K)
+}), mr = j({
 	name: "__voltro.workflow.run.steps",
 	source: "_voltro_workflow_run_steps",
-	input: Y,
-	output: m.Array(Pn)
-}), qn = F({
+	input: q,
+	output: f.Array(Zn)
+}), hr = j({
 	name: "__voltro.workflow.run.events",
 	source: "_voltro_workflow_run_events",
-	input: Y,
-	output: m.Array(Fn)
-}), Jn = F({
+	input: q,
+	output: f.Array(Qn)
+}), gr = j({
 	name: "__voltro.workflow.domainEvents",
 	source: "_voltro_workflow_events",
-	input: zn,
-	output: m.Array(In)
-}), Yn = F({
+	input: nr,
+	output: f.Array($n)
+}), _r = j({
 	name: "__voltro.workflow.event.deliveries",
 	source: "_voltro_workflow_event_deliveries",
-	input: Bn,
-	output: m.Array(Ln)
-}), Xn = L({
+	input: rr,
+	output: f.Array(er)
+}), vr = N({
 	name: "__voltro.workflow.cancel",
-	input: X,
-	output: m.Struct({ ok: m.Boolean })
-}), Zn = L({
+	input: Y,
+	output: W
+}), yr = N({
 	name: "__voltro.workflow.resume",
-	input: X,
-	output: m.Struct({ ok: m.Boolean })
-}), Qn = L({
+	input: Y,
+	output: W
+}), br = N({
 	name: "__voltro.workflow.signal",
-	input: Vn,
-	output: m.Struct({ eventId: m.String })
-}), $n = L({
+	input: lr,
+	output: f.Struct({ eventId: f.String })
+}), xr = N({
 	name: "__voltro.workflow.update",
-	input: Hn,
-	output: Un
-}), er = "__voltro.undo.log", tr = "__voltro.undo.apply", nr = "__voltro.undo.redo", rr = m.Struct({
-	id: m.String,
-	tag: m.String,
-	label: m.NullOr(m.String),
-	undone: m.Boolean,
-	crossesAction: m.Boolean,
-	createdAt: m.String
-}), ir = class extends m.TaggedError()("UndoNotFound", { invocationId: m.String }) {}, ar = class extends m.TaggedError()("UndoForbidden", { invocationId: m.String }) {}, or = class extends m.TaggedError()("UndoConflict", {
-	invocationId: m.String,
-	reason: m.Literal("conflict", "action")
-}) {}, Z = m.Union(ir, ar, or), sr = F({
-	name: er,
+	input: ur,
+	output: dr
+}), Sr = "__voltro.undo.log", Cr = "__voltro.undo.apply", wr = "__voltro.undo.redo", Tr = f.Struct({
+	id: f.String,
+	tag: f.String,
+	label: f.NullOr(f.String),
+	undone: f.Boolean,
+	crossesAction: f.Boolean,
+	createdAt: f.String
+}), Er = class extends f.TaggedError()("UndoNotFound", { invocationId: f.String }) {}, Dr = class extends f.TaggedError()("UndoForbidden", { invocationId: f.String }) {}, Or = class extends f.TaggedError()("UndoConflict", {
+	invocationId: f.String,
+	reason: f.Literal("conflict", "action")
+}) {}, kr = f.Union(Er, Dr, Or), Ar = j({
+	name: Sr,
 	source: "_voltro_undo_log",
-	input: m.Struct({ limit: m.optional(m.Number) }),
-	output: m.Array(rr),
+	input: f.Struct({ limit: f.optional(f.Number) }),
+	output: f.Array(Tr),
 	openAccess: "subject-scoped by construction: lists only the calling subject's own undoable actions"
-}), cr = I({
-	name: tr,
-	input: m.Struct({ invocationId: m.String }),
-	output: m.Struct({ ok: m.Boolean }),
-	error: Z,
+}), jr = M({
+	name: Cr,
+	input: f.Struct({ invocationId: f.String }),
+	output: f.Struct({ ok: f.Boolean }),
+	error: kr,
 	openAccess: "subject-scoped by construction: undo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), lr = I({
-	name: nr,
-	input: m.Struct({ invocationId: m.String }),
-	output: m.Struct({ ok: m.Boolean }),
-	error: Z,
+}), Mr = M({
+	name: wr,
+	input: f.Struct({ invocationId: f.String }),
+	output: f.Struct({ ok: f.Boolean }),
+	error: kr,
 	openAccess: "subject-scoped by construction: redo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), ur = class extends m.TaggedError()("TenantScopeViolation", {
-	table: m.String,
-	reason: m.String
-}) {}, dr = class extends m.TaggedError()("StoreOperationFailed", {
-	operation: m.String,
-	table: m.String,
-	cause: m.String
-}) {}, fr = class extends m.TaggedError()("NoRowFound", {
-	table: m.String,
-	found: m.Number
+}), Nr = class extends f.TaggedError()("TenantScopeViolation", {
+	table: f.String,
+	reason: f.String
+}) {}, Pr = class extends f.TaggedError()("StoreOperationFailed", {
+	operation: f.String,
+	table: f.String,
+	cause: f.String
+}) {}, Fr = class extends f.TaggedError()("NoRowFound", {
+	table: f.String,
+	found: f.Number
 }) {
 	get message() {
 		return this.found === 0 ? `expected exactly one row in '${this.table}', found none` : `expected exactly one row in '${this.table}', found more than one`;
 	}
-}, pr = class extends m.TaggedError()("TableValidationFailed", {
-	table: m.String,
-	summary: m.String,
-	issues: m.Array(m.Struct({
-		path: m.String,
-		message: m.String
+}, Ir = class extends f.TaggedError()("TableValidationFailed", {
+	table: f.String,
+	summary: f.String,
+	issues: f.Array(f.Struct({
+		path: f.String,
+		message: f.String
 	}))
-}) {}, mr = class extends m.TaggedError()("TenantRowNotFound", {
-	table: m.String,
-	id: m.String,
-	reason: m.String
-}) {}, hr = class extends m.TaggedError()("ServerOnlyColumnWrite", {
-	table: m.String,
-	columns: m.Array(m.String)
-}) {}, gr = class extends m.TaggedError()("ConstraintViolation", {
-	kind: m.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
-	table: m.String,
-	operation: m.String,
-	constraint: m.optional(m.String),
-	column: m.optional(m.String),
-	detail: m.optional(m.String)
+}) {}, Lr = class extends f.TaggedError()("TenantRowNotFound", {
+	table: f.String,
+	id: f.String,
+	reason: f.String
+}) {}, Rr = class extends f.TaggedError()("ServerOnlyColumnWrite", {
+	table: f.String,
+	columns: f.Array(f.String)
+}) {}, zr = class extends f.TaggedError()("ConstraintViolation", {
+	kind: f.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
+	table: f.String,
+	operation: f.String,
+	constraint: f.optional(f.String),
+	column: f.optional(f.String),
+	detail: f.optional(f.String)
 }) {
 	get message() {
 		if (this.detail !== void 0) return this.detail;
@@ -934,85 +982,85 @@ var qe = m.Union(m.String, m.Number), Je = m.Record({
 			case "check": return `check constraint ${t}: the row does not satisfy it`;
 		}
 	}
-}, _r = "__voltro.approvals.pending", vr = "__voltro.approvals.decide", yr = F({
-	name: _r,
+}, Br = "__voltro.approvals.pending", Vr = "__voltro.approvals.decide", Hr = j({
+	name: Br,
 	source: "_voltro_approvals",
-	input: m.Struct({ limit: m.optional(m.Number) }),
-	output: m.Array(ht),
+	input: f.Struct({ limit: f.optional(f.Number) }),
+	output: f.Array(Pt),
 	openAccess: "the answer is scoped to the caller — a row appears only if they requested it or hold its recorded approver scopes, so an anonymous caller sees nothing"
-}), br = I({
-	name: vr,
-	input: m.Struct({
-		approvalId: m.String,
-		decision: m.Literal("approve", "reject"),
-		note: m.optional(m.String)
+}), Ur = M({
+	name: Vr,
+	input: f.Struct({
+		approvalId: f.String,
+		decision: f.Literal("approve", "reject"),
+		note: f.optional(f.String)
 	}),
-	output: m.Struct({
-		approvalId: m.String,
-		status: m.Literal("approved", "rejected")
+	output: f.Struct({
+		approvalId: f.String,
+		status: f.Literal("approved", "rejected")
 	}),
-	error: mt,
+	error: Nt,
 	openAccess: "the approver authority is the PENDING ROW's own recorded scopes (plus an unconditional self-approval refusal), checked in-handler — a descriptor-level scope would have to be the union of every approval-requiring procedure in the app"
-}), xr = "__voltro.connections.list", Sr = "__voltro.connections.start", Cr = "__voltro.connections.submitToken", wr = "__voltro.connections.disconnect", Q = m.Literal("oauth2", "pat"), Tr = m.Literal("disconnected", "connected", "expired", "revoked", "error"), Er = m.Struct({
-	connectionId: m.String,
-	kind: Q,
-	label: m.String,
-	status: Tr,
-	accountId: m.NullOr(m.String),
-	accountLabel: m.NullOr(m.String),
-	scopes: m.Array(m.String),
-	expiresAt: m.NullOr(m.String),
-	lastError: m.NullOr(m.String),
-	connectedAt: m.NullOr(m.String)
-}), Dr = class extends m.TaggedError()("ConnectionNotDeclared", { connectionId: m.String }) {}, Or = class extends m.TaggedError()("ConnectionSubjectRequired", { connectionId: m.String }) {}, kr = class extends m.TaggedError()("ConnectionKindMismatch", {
-	connectionId: m.String,
-	expected: Q,
-	actual: Q
-}) {}, Ar = class extends m.TaggedError()("ConnectionHandshakeFailed", {
-	connectionId: m.String,
-	reason: m.String,
-	transient: m.Boolean
-}) {}, $ = m.Union(Dr, Or, kr, Ar), jr = F({
-	name: xr,
+}), Wr = "__voltro.connections.list", Gr = "__voltro.connections.start", Kr = "__voltro.connections.submitToken", qr = "__voltro.connections.disconnect", Z = f.Literal("oauth2", "pat"), Jr = f.Literal("disconnected", "connected", "expired", "revoked", "error"), Yr = f.Struct({
+	connectionId: f.String,
+	kind: Z,
+	label: f.String,
+	status: Jr,
+	accountId: f.NullOr(f.String),
+	accountLabel: f.NullOr(f.String),
+	scopes: f.Array(f.String),
+	expiresAt: f.NullOr(f.String),
+	lastError: f.NullOr(f.String),
+	connectedAt: f.NullOr(f.String)
+}), Xr = class extends f.TaggedError()("ConnectionNotDeclared", { connectionId: f.String }) {}, Zr = class extends f.TaggedError()("ConnectionSubjectRequired", { connectionId: f.String }) {}, Qr = class extends f.TaggedError()("ConnectionKindMismatch", {
+	connectionId: f.String,
+	expected: Z,
+	actual: Z
+}) {}, Q = class extends f.TaggedError()("ConnectionHandshakeFailed", {
+	connectionId: f.String,
+	reason: f.String,
+	transient: f.Boolean
+}) {}, $ = f.Union(Xr, Zr, Qr, Q), $r = j({
+	name: Wr,
 	source: "_voltro_connections",
-	input: m.Struct({}),
-	output: m.Array(Er),
+	input: f.Struct({}),
+	output: f.Array(Yr),
 	openAccess: "self-scoped read: projects the declared connections for the calling subject only (its own connect/disconnect state)"
-}), Mr = L({
-	name: Sr,
-	input: m.Struct({
-		connectionId: m.String,
-		redirectTo: m.optional(m.String)
+}), ei = N({
+	name: Gr,
+	input: f.Struct({
+		connectionId: f.String,
+		redirectTo: f.optional(f.String)
 	}),
-	output: m.Struct({
-		authorizeUrl: m.String,
-		state: m.String
+	output: f.Struct({
+		authorizeUrl: f.String,
+		state: f.String
 	}),
 	error: $,
 	openAccess: "self-service: begins an oauth handshake that stores a credential for the calling subject only; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Nr = I({
-	name: Cr,
-	input: m.Struct({
-		connectionId: m.String,
-		token: m.String
+}), ti = M({
+	name: Kr,
+	input: f.Struct({
+		connectionId: f.String,
+		token: f.String
 	}),
-	output: m.Struct({ ok: m.Boolean }),
+	output: f.Struct({ ok: f.Boolean }),
 	error: $,
 	openAccess: "self-service: stores a pasted token as the calling subject's own credential; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Pr = I({
-	name: wr,
-	input: m.Struct({ connectionId: m.String }),
-	output: m.Struct({ ok: m.Boolean }),
+}), ni = M({
+	name: qr,
+	input: f.Struct({ connectionId: f.String }),
+	output: f.Struct({ ok: f.Boolean }),
 	error: $,
 	openAccess: "self-service: deletes only the calling subject's own credential row for this connection"
-}), Fr = (e) => {
+}), ri = (e) => {
 	let t = e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : 0;
 	return Number.isNaN(t) ? 0 : t;
-}, Ir = 4001, Lr = /* @__PURE__ */ new Set(["/rpc", "/ws"]), Rr = (e) => {
+}, ii = 4001, ai = /* @__PURE__ */ new Set(["/rpc", "/ws"]), oi = (e) => {
 	if (!e.path.startsWith("/")) throw Error(`defineWebSocket: path must be absolute, got '${e.path}'`);
-	if (Lr.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
+	if (ai.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
 	if (e.auth !== "subject" && e.auth !== "public") throw Error(`defineWebSocket: auth must be 'subject' or 'public' (explicitly — an unauthenticated socket has to be a decision somebody wrote down), got '${String(e.auth)}'`);
 	return e;
-}, zr = 1;
+}, si = 1;
 //#endregion
-export { Oe as ADMIN_SCOPE, Se as APIKEY_ISSUE_ORG_SCOPE, Ee as APIKEY_ISSUE_OTHER_SCOPE, _e as APIKEY_ISSUE_SELF_SCOPE, vr as APPROVALS_DECIDE_TAG, _r as APPROVALS_PENDING_TAG, mt as ApprovalDecisionErrors, pt as ApprovalErrors, C as ApprovalExpired, ft as ApprovalForbidden, ct as ApprovalNotFound, dt as ApprovalNotPending, ut as ApprovalRejected, st as ApprovalRequired, lt as ApprovalSelfApproval, w as ApprovalUnavailable, se as AuthMiddleware, nt as BusinessRuleViolation, xr as CONNECTIONS_LIST_TAG, wr as CONNECTION_DISCONNECT_TAG, Sr as CONNECTION_START_TAG, Cr as CONNECTION_SUBMIT_TOKEN_TAG, Ar as ConnectionHandshakeFailed, i as ConnectionInfo, r as ConnectionInfoMiddleware, Q as ConnectionKind, kr as ConnectionKindMismatch, Dr as ConnectionNotDeclared, Er as ConnectionState, Tr as ConnectionStatus, Or as ConnectionSubjectRequired, gr as ConstraintViolation, ie as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ye as DEFAULT_SCOPE_CACHE_TTL_MS, tn as EVENT_ROUTE_SEP, Qt as EventKeyInvalid, Zt as EventPayloadInvalid, $t as EventPayloadTooLarge, Ir as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, e as IMPERSONATION_METADATA_KEY, Vt as MAX_EVENT_ENVELOPE_BYTES, Be as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, p as MutationConnectionRequired, Pe as MutationInFlight, fr as NoRowFound, zr as PROTOCOL_VERSION, ht as PendingApproval, T as REACTIVITY_CHANNEL_PREFIX, u as ScopeError, hr as ServerOnlyColumnWrite, dr as StoreOperationFailed, ve as Subject, ne as SubjectIdentity, re as SubjectService, pr as TableValidationFailed, mr as TenantRowNotFound, ur as TenantScopeViolation, tr as UNDO_APPLY_TAG, er as UNDO_LOG_TAG, nr as UNDO_REDO_TAG, l as Unauthenticated, or as UndoConflict, ar as UndoForbidden, rr as UndoLogEntry, ir as UndoNotFound, it as ValidationError, at as ValidationErrors, rt as ValidationIssue, V as WorkflowAccessProperty, X as WorkflowControlInputSchema, In as WorkflowDomainEventRowSchema, zn as WorkflowDomainEventsInputSchema, Bn as WorkflowEventDeliveriesInputSchema, Ln as WorkflowEventDeliveryRowSchema, kn as WorkflowParentClosePolicySchema, Fn as WorkflowRunEventRowSchema, jn as WorkflowRunHandleSchema, Rn as WorkflowRunRefSchema, J as WorkflowRunRowSchema, q as WorkflowRunStatusSchema, Pn as WorkflowRunStepRowSchema, Y as WorkflowRunTableRefSchema, Nn as WorkflowRunsInputSchema, Vn as WorkflowSignalInputSchema, An as WorkflowStartDeferralSchema, Hn as WorkflowUpdateInputSchema, Un as WorkflowUpdateResultSchema, It as actionToRpc, Ce as advisoryResourceGuardWarning, a as anonymousSubject, et as applyRowPatch, c as applyScopeDecision, br as approvalsDecideDescriptor, yr as approvalsPendingQueryDescriptor, te as assertAuthenticated, cn as attachWorkflowAccess, ze as beginIdempotent, xn as checkFrameworkCompat, De as checkGuards, pe as checkGuardsEffect, hn as compareSurfaces, ae as composeAuthStrategies, yn as composeRpcInterceptors, Pr as connectionDisconnectDescriptor, Mr as connectionStartDescriptor, Nr as connectionSubmitTokenDescriptor, jr as connectionsListQueryDescriptor, k as declaredReactivityChannelKeys, L as defineAction, Ut as defineEvent, I as defineMutation, gn as definePlugin, _n as definePluginRoute, bn as definePluginService, F as defineQuery, Dt as defineStream, Rr as defineWebSocket, Qe as diffRows, be as effectiveScopes, en as encodeEventKey, Rt as errorTag, Kt as eventAttached, Wt as eventEnvelope, Gt as eventGap, Jt as eventResumePoint, nn as eventRoute, qt as eventStreamEvent, Yt as eventSubscribeInput, Xt as eventToRpc, Ve as failIdempotent, ot as fieldIssuesOf, ke as findAdvisoryResourceGuards, Fe as finishIdempotent, an as formatEventRoute, me as getPolicyGuardResolver, he as getResourceScopeResolver, H as getWorkflowAccess, mn as groupShapeDigests, Et as hasAccessDecision, Ne as hasCallbackRoutes, we as hasEffectiveScope, z as hasEnforcedGuard, xe as hasScope, g as idToPath, Le as idempotencyScope, x as inputLabel, ge as isAuthenticatedCheck, Tt as isAuthenticatedGuard, Ht as isEventDescriptor, $e as isIdKeyed, d as isOpenAccess, de as isPolicyCheck, wt as isPolicyGuard, D as isReactivityChannel, O as isReactivityChannelKey, t as isSystemSubject, St as isWireReachable, le as makeScopeCache, Ue as memoryIdempotencyStore, Ae as missingAccessDecision, Ft as mutationToRpc, Bt as normalizeDescriptor, M as normalizeSource, f as openAccessSpec, s as orderByBearerPrefix, rn as parseEventRoute, _ as pathToId, Cn as pluginAlias, vn as pluginInstanceName, wn as pluginSlug, On as pluginTag, pn as procedureShapeDigest, xt as publishReactivity, He as publishServerError, Pt as queryToRpc, ce as rawImpersonationMark, yt as reactivityChannel, En as registerPluginAliases, fe as requireScope, Dn as resetPluginAliases, sn as resolveWorkflowAccess, Ye as rowPatchOpSchema, Xe as rowPatchSchema, U as schemaShape, ue as scopeCacheKey, Me as setEffectiveScopes, oe as setPolicyGuardResolver, n as setResourceScopeResolver, fn as shapeDigest, j as sourceKeys, Lt as streamToRpc, S as strictInput, o as subjectIdentity, je as subjectScopes, Re as subscribeServerErrors, b as subscriptionEvent, ee as systemSubject, Te as tenantScopedSubject, zt as toRpc, Fr as tsMs, bt as undeclaredChannelKeys, cr as undoApplyDescriptor, sr as undoLogQueryDescriptor, lr as undoRedoDescriptor, B as wireErrorUnion, Nt as withRpcTag, ln as workflowAccessDescriptor, Xn as workflowCancelDescriptor, Jn as workflowDomainEventsQueryDescriptor, Yn as workflowEventDeliveriesQueryDescriptor, Zn as workflowResumeDescriptor, qn as workflowRunEventsQueryDescriptor, Wn as workflowRunQueryDescriptor, Kn as workflowRunStepsQueryDescriptor, Gn as workflowRunsQueryDescriptor, Qn as workflowSignalDescriptor, Mn as workflowToRpc, $n as workflowUpdateDescriptor, Mt as workflowWireErrorUnion, Ie as wsMutationIdempotencyScope };
+export { je as ADMIN_SCOPE, Te as APIKEY_ISSUE_ORG_SCOPE, ke as APIKEY_ISSUE_OTHER_SCOPE, be as APIKEY_ISSUE_SELF_SCOPE, Vr as APPROVALS_DECIDE_TAG, Br as APPROVALS_PENDING_TAG, Nt as ApprovalDecisionErrors, Mt as ApprovalErrors, S as ApprovalExpired, jt as ApprovalForbidden, Dt as ApprovalNotFound, At as ApprovalNotPending, kt as ApprovalRejected, Et as ApprovalRequired, Ot as ApprovalSelfApproval, C as ApprovalUnavailable, i as AuthMiddleware, x as BusinessRuleViolation, Wr as CONNECTIONS_LIST_TAG, qr as CONNECTION_DISCONNECT_TAG, Gr as CONNECTION_START_TAG, Kr as CONNECTION_SUBMIT_TOKEN_TAG, Q as ConnectionHandshakeFailed, r as ConnectionInfo, ae as ConnectionInfoMiddleware, Z as ConnectionKind, Qr as ConnectionKindMismatch, Xr as ConnectionNotDeclared, Yr as ConnectionState, Jr as ConnectionStatus, Zr as ConnectionSubjectRequired, zr as ConstraintViolation, Se as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, e as DEFAULT_SCOPE_CACHE_TTL_MS, wn as EVENT_ROUTE_SEP, xn as EventKeyInvalid, bn as EventPayloadInvalid, Sn as EventPayloadTooLarge, ii as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, xe as IMPERSONATION_METADATA_KEY, it as JSONAPI_MEDIA_TYPE, un as MAX_EVENT_ENVELOPE_BYTES, lt as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, We as MutationConnectionRequired, ct as MutationInFlight, Fr as NoRowFound, $e as PROBLEM_JSON, si as PROTOCOL_VERSION, Pt as PendingApproval, w as REACTIVITY_CHANNEL_PREFIX, nt as REST_PROFILE_NAMES, l as ScopeError, Rr as ServerOnlyColumnWrite, Pr as StoreOperationFailed, re as Subject, ie as SubjectIdentity, oe as SubjectService, Ir as TableValidationFailed, Lr as TenantRowNotFound, Nr as TenantScopeViolation, Cr as UNDO_APPLY_TAG, Sr as UNDO_LOG_TAG, wr as UNDO_REDO_TAG, a as Unauthenticated, Or as UndoConflict, Dr as UndoForbidden, Tr as UndoLogEntry, Er as UndoNotFound, Ct as ValidationError, wt as ValidationErrors, St as ValidationIssue, L as WorkflowAccessProperty, Y as WorkflowControlInputSchema, J as WorkflowControlIntentSchema, ir as WorkflowControlReadInputSchema, W as WorkflowControlResultSchema, $n as WorkflowDomainEventRowSchema, nr as WorkflowDomainEventsInputSchema, rr as WorkflowEventDeliveriesInputSchema, er as WorkflowEventDeliveryRowSchema, Kn as WorkflowParentClosePolicySchema, ar as WorkflowQueuedCancelInputSchema, G as WorkflowQueuedCancellationResultSchema, X as WorkflowQueuedControlTargetSchema, Qn as WorkflowRunEventRowSchema, Jn as WorkflowRunHandleSchema, tr as WorkflowRunRefSchema, K as WorkflowRunRowSchema, U as WorkflowRunSnapshotSchema, H as WorkflowRunStatusSchema, Zn as WorkflowRunStepRowSchema, q as WorkflowRunTableRefSchema, Xn as WorkflowRunsInputSchema, lr as WorkflowSignalInputSchema, qn as WorkflowStartDeferralSchema, Gn as WorkflowStartTerminalOutcomeSchema, ur as WorkflowUpdateInputSchema, dr as WorkflowUpdateResultSchema, an as actionToRpc, Ee as advisoryResourceGuardWarning, c as anonymousSubject, bt as applyRowPatch, ne as applyScopeDecision, Ur as approvalsDecideDescriptor, Hr as approvalsPendingQueryDescriptor, se as assertAuthenticated, An as attachWorkflowAccess, Be as beginIdempotent, Ln as checkFrameworkCompat, Ae as checkGuards, ge as checkGuardsEffect, Qe as compareSurfaces, Ie as composeAuthStrategies, Fn as composeRpcInterceptors, ni as connectionDisconnectDescriptor, ei as connectionStartDescriptor, ti as connectionSubmitTokenDescriptor, $r as connectionsListQueryDescriptor, Vt as declaredReactivityChannelKeys, N as defineAction, fn as defineEvent, M as defineMutation, Mn as definePlugin, Nn as definePluginRoute, In as definePluginService, j as defineQuery, Yt as defineStream, oi as defineWebSocket, vt as diffRows, Ce as effectiveScopes, Cn as encodeEventKey, Xe as encodeRestError, Ue as encodeRestSuccess, sn as errorTag, hn as eventAttached, pn as eventEnvelope, mn as eventGap, _n as eventResumePoint, Tn as eventRoute, gn as eventStreamEvent, vn as eventSubscribeInput, yn as eventToRpc, Le as failIdempotent, Tt as fieldIssuesOf, Me as findAdvisoryResourceGuards, st as finishIdempotent, Dn as formatEventRoute, _e as getPolicyGuardResolver, ve as getResourceScopeResolver, R as getWorkflowAccess, Ye as groupShapeDigests, Jt as hasAccessDecision, t as hasCallbackRoutes, De as hasEffectiveScope, F as hasEnforcedGuard, we as hasScope, h as idToPath, Ve as idempotencyScope, y as inputLabel, ye as isAuthenticatedCheck, qt as isAuthenticatedGuard, dn as isEventDescriptor, yt as isIdKeyed, u as isOpenAccess, me as isPolicyCheck, Kt as isPolicyGuard, zt as isReactivityChannel, Bt as isReactivityChannelKey, de as isSystemSubject, Wt as isWireReachable, s as makeScopeCache, ze as memoryIdempotencyStore, Ne as missingAccessDecision, rn as mutationToRpc, et as nextLink, ln as normalizeDescriptor, O as normalizeSource, d as openAccessSpec, ue as orderByBearerPrefix, En as parseEventRoute, gt as pathToId, zn as pluginAlias, Pn as pluginInstanceName, Bn as pluginSlug, Wn as pluginTag, rt as problemDetails, Ge as problemTypeOf, Je as procedureShapeDigest, Ut as publishReactivity, qe as publishServerError, nn as queryToRpc, fe as rawImpersonationMark, Rt as reactivityChannel, Hn as registerPluginAliases, he as requireScope, Un as resetPluginAliases, Fe as resolvePolicyAction, Ze as resolveRestFormat, kn as resolveWorkflowAccess, at as restViewSchema, mt as rowPatchOpSchema, ht as rowPatchSchema, He as schemaShape, o as scopeCacheKey, ce as setEffectiveScopes, n as setPolicyGuardResolver, Pe as setResourceScopeResolver, ot as shapeDigest, D as sourceKeys, on as streamToRpc, b as strictInput, te as subjectAuditActorId, Oe as subjectIdentity, le as subjectScopes, tt as subscribeServerErrors, v as subscriptionEvent, ee as systemSubject, pe as tenantScopedSubject, cn as toRpc, Ke as toSnakeCase, ri as tsMs, Ht as undeclaredChannelKeys, jr as undoApplyDescriptor, Ar as undoLogQueryDescriptor, Mr as undoRedoDescriptor, I as wireErrorUnion, tn as withRpcTag, jn as workflowAccessDescriptor, vr as workflowCancelDescriptor, cr as workflowControlQueryDescriptor, gr as workflowDomainEventsQueryDescriptor, _r as workflowEventDeliveriesQueryDescriptor, or as workflowQueuedCancelDescriptor, sr as workflowQueuedControlQueryDescriptor, yr as workflowResumeDescriptor, hr as workflowRunEventsQueryDescriptor, fr as workflowRunQueryDescriptor, mr as workflowRunStepsQueryDescriptor, pr as workflowRunsQueryDescriptor, br as workflowSignalDescriptor, Yn as workflowToRpc, xr as workflowUpdateDescriptor, en as workflowWireErrorUnion, Re as wsMutationIdempotencyScope };