@voltro/protocol 0.71.1 → 0.72.0

package/dist/index.js

@@ -1,58 +1,58 @@
-import { A as e, B as t, C as n, D as r, E as i, F as a, G as o, H as s, I as c, J as ee, K as te, L as ne, M as re, N as ie, O as ae, P as oe, R as se, S as ce, T as le, U as ue, V as de, W as fe, Y as pe, _ as me, a as l, b as he, c as ge, d as _e, f as ve, g as u, h as ye, i as be, j as xe, k as Se, l as Ce, m as we, n as Te, o as Ee, p as De, q as Oe, r as ke, s as Ae, t as je, u as Me, v as Ne, w as Pe, x as Fe, y as d, z as Ie } from "./scopes-CW9_LbDO.js";
-import { C as Le, D as Re, E as ze, S as Be, T as Ve, _ as He, a as Ue, b as We, c as Ge, d as Ke, f as qe, g as Je, h as Ye, i as Xe, l as Ze, m as Qe, n as $e, o as et, p as tt, r as nt, s as rt, t as it, u as at, v as ot, w as st, x as ct, y as lt } from "./restFormat-ChSVyufA.js";
-import { Context as ut, Layer as dt, Schema as f } from "effect";
-import { Rpc as p } from "@effect/rpc";
-import { VersionConflict as ft } from "@voltro/database/wire";
+import { $ as e, A as t, B as n, C as r, D as i, E as a, F as o, G as s, H as c, I as l, J as ee, K as te, L as ne, M as re, N as ie, O as ae, P as oe, Q as se, R as ce, S as le, T as ue, U as de, V as fe, W as pe, X as me, Y as he, Z as ge, _ as u, a as _e, b as d, c as ve, d as ye, f as be, g as xe, h as Se, i as Ce, j as we, k as Te, l as Ee, m as De, n as Oe, o as f, p as ke, q as Ae, r as je, s as Me, t as Ne, u as Pe, v as Fe, w as Ie, x as Le, y as Re, z as ze } from "./scopes-Dj7KCJab.js";
+import { C as Be, D as Ve, E as He, S as Ue, T as We, _ as Ge, a as Ke, b as qe, c as Je, d as Ye, f as Xe, g as Ze, h as Qe, i as $e, l as et, m as tt, n as nt, o as rt, p as it, r as at, s as ot, t as st, u as ct, v as lt, w as ut, x as dt, y as ft } from "./restFormat-ChSVyufA.js";
+import { Context as pt, Layer as mt, Schema as p } from "effect";
+import { Rpc as m } from "@effect/rpc";
+import { VersionConflict as ht } from "@voltro/database/wire";
 //#region src/rowPatch.ts
-var pt = f.Union(f.String, f.Number), m = f.Record({
-	key: f.String,
-	value: f.Unknown
-}).pipe(f.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), mt = f.Union(f.Struct({
-	op: f.Literal("add"),
-	path: f.String,
-	value: m
-}), f.Struct({
-	op: f.Literal("replace"),
-	path: f.String,
-	value: m
-}), f.Struct({
-	op: f.Literal("remove"),
-	path: f.String
-}), f.Struct({
-	op: f.Literal("mergeCells"),
-	path: f.String,
-	value: f.Record({
-		key: f.String,
-		value: f.Unknown
+var gt = p.Union(p.String, p.Number), h = p.Record({
+	key: p.String,
+	value: p.Unknown
+}).pipe(p.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), _t = p.Union(p.Struct({
+	op: p.Literal("add"),
+	path: p.String,
+	value: h
+}), p.Struct({
+	op: p.Literal("replace"),
+	path: p.String,
+	value: h
+}), p.Struct({
+	op: p.Literal("remove"),
+	path: p.String
+}), p.Struct({
+	op: p.Literal("mergeCells"),
+	path: p.String,
+	value: p.Record({
+		key: p.String,
+		value: p.Unknown
 	})
-})), ht = f.Struct({
-	ops: f.Array(mt),
-	order: f.Array(pt)
-}), h = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, gt = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), g = (e) => {
+})), vt = p.Struct({
+	ops: p.Array(_t),
+	order: p.Array(gt)
+}), g = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, yt = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), _ = (e) => {
 	let t = Object.keys(e).sort(), n = {};
 	for (let r of t) n[r] = e[r];
 	return JSON.stringify(n);
-}, _ = (e, t) => g(e) === g(t), _t = (e, t) => {
+}, v = (e, t) => _(e) === _(t), bt = (e, t) => {
 	if (e instanceof Uint8Array && t instanceof Uint8Array) {
 		if (e.length !== t.length) return !1;
 		for (let n = 0; n < e.length; n += 1) if (e[n] !== t[n]) return !1;
 		return !0;
 	}
-	return g({
+	return _({
 		id: 0,
 		v: e
-	}) === g({
+	}) === _({
 		id: 0,
 		v: t
 	});
-}, vt = (e, t, n = {}) => {
+}, xt = (e, t, n = {}) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) r.set(t.id, t);
 	let i = [], a = [], o = /* @__PURE__ */ new Set(), s = n.crdt, c = (e, t) => {
 		if (s === void 0 || s.columns.size === 0) return;
 		let n = {}, r = !1;
 		for (let i of s.columns) {
-			if (!(i in t) || _t(e[i], t[i])) continue;
+			if (!(i in t) || bt(e[i], t[i])) continue;
 			let a = s.incremental(i, e[i], t[i]);
 			if (a === void 0) return;
 			n[i] = a, r = !0;
@@ -70,43 +70,43 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 		let t = r.get(e.id);
 		if (t === void 0) i.push({
 			op: "add",
-			path: h(e.id),
+			path: g(e.id),
 			value: e
 		});
-		else if (!_(t, e)) {
+		else if (!v(t, e)) {
 			let n = c(t, e);
 			n === void 0 ? i.push({
 				op: "replace",
-				path: h(e.id),
+				path: g(e.id),
 				value: e
-			}) : (_(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
+			}) : (v(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
 				op: "replace",
-				path: h(e.id),
+				path: g(e.id),
 				value: n.scalars
 			}), i.push({
 				op: "mergeCells",
-				path: h(e.id),
+				path: g(e.id),
 				value: n.merges
 			}));
 		}
 	}
 	for (let t of e) o.has(t.id) || i.push({
 		op: "remove",
-		path: h(t.id)
+		path: g(t.id)
 	});
 	return {
 		ops: i,
 		order: a
 	};
-}, yt = (e) => e.every((e) => {
+}, St = (e) => e.every((e) => {
 	let t = e.id;
 	return typeof t == "string" || typeof t == "number";
-}), bt = (e, t, n = {}) => {
+}), Ct = (e, t, n = {}) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) r.set(t.id, t);
 	for (let e of t.ops) {
 		if (e.op === "mergeCells") {
-			let t = gt(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
+			let t = yt(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
 			if (i === void 0) continue;
 			let o = { ...i };
 			for (let [t, r] of Object.entries(e.value)) o[t] = n.mergeCell === void 0 ? r : n.mergeCell(t, i[t], r);
@@ -121,57 +121,57 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 		t !== void 0 && i.push(t);
 	}
 	return i;
-}, v = (e) => f.Union(f.Struct({
-	_tag: f.Literal("snapshot"),
-	revision: f.Number,
+}, y = (e) => p.Union(p.Struct({
+	_tag: p.Literal("snapshot"),
+	revision: p.Number,
 	data: e,
-	computed: f.optional(f.Boolean),
-	reconciles: f.optional(f.String)
-}), f.Struct({
-	_tag: f.Literal("delta"),
-	revision: f.Number,
-	emittedAt: f.Number,
-	patch: ht
-}), f.Struct({
-	_tag: f.Literal("error"),
-	error: f.Unknown,
-	revision: f.optional(f.Number)
-})), y = (e, t) => {
+	computed: p.optional(p.Boolean),
+	reconciles: p.optional(p.String)
+}), p.Struct({
+	_tag: p.Literal("delta"),
+	revision: p.Number,
+	emittedAt: p.Number,
+	patch: vt
+}), p.Struct({
+	_tag: p.Literal("error"),
+	error: p.Unknown,
+	revision: p.optional(p.Number)
+})), b = (e, t) => {
 	let n = `${e ?? "this procedure"} input`;
 	return t === !0 ? `${n} (guarded — the guard did NOT run: the payload failed to decode first, so this says nothing about access)` : n;
-}, xt = (e) => {
+}, wt = (e) => {
 	let t = e.ast;
 	return t._tag === "TypeLiteral" && (t.propertySignatures?.length ?? 0) === 0 && (t.indexSignatures?.length ?? 0) === 0;
-}, b = (e, t, n) => {
-	let r = y(t, n), i = e.annotations({
+}, x = (e, t, n) => {
+	let r = b(t, n), i = e.annotations({
 		parseOptions: { onExcessProperty: "error" },
 		parseIssueTitle: () => r
 	});
-	return xt(e) ? f.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
-}, x = class extends f.TaggedError()("BusinessRuleViolation", {
-	rule: f.String,
-	params: f.optional(f.Record({
-		key: f.String,
-		value: f.Unknown
+	return wt(e) ? p.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
+}, Tt = class extends p.TaggedError()("BusinessRuleViolation", {
+	rule: p.String,
+	params: p.optional(p.Record({
+		key: p.String,
+		value: p.Unknown
 	})),
-	field: f.optional(f.String),
-	message: f.optional(f.String),
-	severity: f.Literal("error", "warning")
-}) {}, St = f.Struct({
-	field: f.String,
-	message: f.String,
-	params: f.optional(f.Record({
-		key: f.String,
-		value: f.Unknown
+	field: p.optional(p.String),
+	message: p.optional(p.String),
+	severity: p.Literal("error", "warning")
+}) {}, Et = p.Struct({
+	field: p.String,
+	message: p.String,
+	params: p.optional(p.Record({
+		key: p.String,
+		value: p.Unknown
 	}))
-}), Ct = class extends f.TaggedError()("ValidationError", {
-	field: f.String,
-	message: f.String,
-	params: f.optional(f.Record({
-		key: f.String,
-		value: f.Unknown
+}), Dt = class extends p.TaggedError()("ValidationError", {
+	field: p.String,
+	message: p.String,
+	params: p.optional(p.Record({
+		key: p.String,
+		value: p.Unknown
 	}))
-}) {}, wt = class extends f.TaggedError()("ValidationErrors", { issues: f.Array(St).pipe(f.minItems(1)) }) {}, Tt = (e) => {
+}) {}, Ot = class extends p.TaggedError()("ValidationErrors", { issues: p.Array(Et).pipe(p.minItems(1)) }) {}, kt = (e) => {
 	if (typeof e != "object" || !e) return [];
 	let t = e._tag;
 	if (t === "ValidationError") {
@@ -197,49 +197,49 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 		}];
 	}
 	return [];
-}, Et = class extends f.TaggedError()("ApprovalRequired", {
-	approvalId: f.String,
-	procedure: f.String,
-	expiresAt: f.String,
-	requiredScopes: f.Array(f.String),
-	reason: f.NullOr(f.String),
-	created: f.Boolean
-}) {}, Dt = class extends f.TaggedError()("ApprovalNotFound", { approvalId: f.String }) {}, Ot = class extends f.TaggedError()("ApprovalSelfApproval", {
-	approvalId: f.String,
-	subjectId: f.NullOr(f.String)
-}) {}, kt = class extends f.TaggedError()("ApprovalRejected", {
-	approvalId: f.String,
-	decidedBy: f.NullOr(f.String),
-	note: f.NullOr(f.String)
-}) {}, S = class extends f.TaggedError()("ApprovalExpired", {
-	approvalId: f.String,
-	expiredAt: f.String
-}) {}, At = class extends f.TaggedError()("ApprovalNotPending", {
-	approvalId: f.String,
-	status: f.String
-}) {}, jt = class extends f.TaggedError()("ApprovalForbidden", {
-	approvalId: f.String,
-	required: f.NullOr(f.String),
-	message: f.String
-}) {}, C = class extends f.TaggedError()("ApprovalUnavailable", {
-	procedure: f.String,
-	message: f.String
-}) {}, Mt = f.Union(Et, kt, S, C), Nt = f.Union(Dt, Ot, S, At, jt, C), Pt = f.Struct({
-	id: f.String,
-	procedure: f.String,
-	kind: f.Literal("mutation", "action"),
-	requestedBy: f.NullOr(f.String),
-	status: f.Literal("pending", "approved", "rejected", "expired", "consumed"),
-	reason: f.NullOr(f.String),
-	requiredScopes: f.Array(f.String),
-	requestedAt: f.String,
-	expiresAt: f.String,
-	decidedBy: f.NullOr(f.String),
-	decidedAt: f.NullOr(f.String),
-	note: f.NullOr(f.String),
-	relation: f.Literal("to-decide", "requested")
-}), w = "channel:", Ft = Symbol.for("@voltro/protocol/reactivityChannels"), It = globalThis, T = It[Ft] ?? (It[Ft] = /* @__PURE__ */ new Map()), Lt = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, Rt = (e) => {
-	if (!Lt.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
+}, At = class extends p.TaggedError()("ApprovalRequired", {
+	approvalId: p.String,
+	procedure: p.String,
+	expiresAt: p.String,
+	requiredScopes: p.Array(p.String),
+	reason: p.NullOr(p.String),
+	created: p.Boolean
+}) {}, jt = class extends p.TaggedError()("ApprovalNotFound", { approvalId: p.String }) {}, Mt = class extends p.TaggedError()("ApprovalSelfApproval", {
+	approvalId: p.String,
+	subjectId: p.NullOr(p.String)
+}) {}, Nt = class extends p.TaggedError()("ApprovalRejected", {
+	approvalId: p.String,
+	decidedBy: p.NullOr(p.String),
+	note: p.NullOr(p.String)
+}) {}, S = class extends p.TaggedError()("ApprovalExpired", {
+	approvalId: p.String,
+	expiredAt: p.String
+}) {}, Pt = class extends p.TaggedError()("ApprovalNotPending", {
+	approvalId: p.String,
+	status: p.String
+}) {}, Ft = class extends p.TaggedError()("ApprovalForbidden", {
+	approvalId: p.String,
+	required: p.NullOr(p.String),
+	message: p.String
+}) {}, C = class extends p.TaggedError()("ApprovalUnavailable", {
+	procedure: p.String,
+	message: p.String
+}) {}, It = p.Union(At, Nt, S, C), Lt = p.Union(jt, Mt, S, Pt, Ft, C), Rt = p.Struct({
+	id: p.String,
+	procedure: p.String,
+	kind: p.Literal("mutation", "action"),
+	requestedBy: p.NullOr(p.String),
+	status: p.Literal("pending", "approved", "rejected", "expired", "consumed"),
+	reason: p.NullOr(p.String),
+	requiredScopes: p.Array(p.String),
+	requestedAt: p.String,
+	expiresAt: p.String,
+	decidedBy: p.NullOr(p.String),
+	decidedAt: p.NullOr(p.String),
+	note: p.NullOr(p.String),
+	relation: p.Literal("to-decide", "requested")
+}), w = "channel:", zt = Symbol.for("@voltro/protocol/reactivityChannels"), Bt = globalThis, T = Bt[zt] ?? (Bt[zt] = /* @__PURE__ */ new Map()), Vt = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, Ht = (e) => {
+	if (!Vt.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
   \`billing.usage\`. A \`:\` is refused because it is the namespace separator in
   the routing key (\`${w}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
   routes as two.`);
@@ -252,14 +252,14 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 		toString: () => n
 	});
 	return T.set(e, r), r;
-}, zt = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", Bt = (e) => e.startsWith(w), Vt = () => new Set([...T.values()].map((e) => e.key)), E = (e) => zt(e) ? e.key : e, D = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(E) : [E(e)], O = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(E) : E(e), Ht = (e) => {
-	let t = Vt(), n = [];
-	for (let r of e) for (let e of D(r.source)) Bt(e) && !t.has(e) && n.push({
+}, Ut = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", Wt = (e) => e.startsWith(w), Gt = () => new Set([...T.values()].map((e) => e.key)), E = (e) => Ut(e) ? e.key : e, D = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(E) : [E(e)], O = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(E) : E(e), Kt = (e) => {
+	let t = Gt(), n = [];
+	for (let r of e) for (let e of D(r.source)) Wt(e) && !t.has(e) && n.push({
 		procedure: r.name,
 		key: e
 	});
 	return n;
-}, Ut = (e, t) => {
+}, qt = (e, t) => {
 	let n = e?.injectExternalChange;
 	return n !== void 0 && (n.call(e, {
 		table: t.key,
@@ -268,8 +268,8 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 		old: {},
 		origin: "inline"
 	}), !0);
-}, Wt = (e) => e.internal !== !0, k = (e) => {
-	if (Gt(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
+}, Jt = (e) => e.internal !== !0, k = (e) => {
+	if (Yt(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
 	let t = e.serialize;
 	if (t !== void 0) {
 		if (typeof t.key != "function") throw Error(`${e.name}: serialize.key must be a function of the input`);
@@ -293,7 +293,7 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 	let r = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
 	if (r.length === 0) return e;
 	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${r.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${r.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${r.join(" / ")} annotation if it is not.`);
-}, Gt = (e) => {
+}, Yt = (e) => {
 	let t = e.requiresApproval;
 	if (t !== void 0) {
 		if (!Array.isArray(t.approvers) || t.approvers.length === 0) throw Error(`${e.name}: \`requiresApproval.approvers\` is empty, so NOBODY can approve this\n  procedure and every call would park forever. Name the scope(s) an approver must hold
@@ -303,7 +303,7 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
   human from every other, and the second-pair-of-eyes control would enforce nothing.
   Give the procedure a \`guards:\` decision, or drop \`requiresApproval\`.`);
 	}
-}, Kt = (e) => e.action !== void 0 && e.resourceType !== void 0, qt = (e) => e.authenticated === !0, Jt = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, A = (e, t, n) => {
+}, Xt = (e) => e.action !== void 0 && e.resourceType !== void 0, Zt = (e) => e.authenticated === !0, Qt = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, A = (e, t, n) => {
 	if (n === void 0) return t;
 	if (n.trim() === "") throw Error(`${e}: \`openAccess\` needs a REASON, not an empty string. It is the sentence a\n  reviewer reads to decide whether this procedure should really be callable
   without an authorization check — e.g. \`openAccess: 'public pricing, no caller data'\`.`);
@@ -315,7 +315,7 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? f.Never,
+	error: e.error ?? p.Never,
 	source: O(e.source),
 	cache: e.cache,
 	guards: A(e.name, e.guards, e.openAccess),
@@ -329,7 +329,7 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? f.Never,
+	error: e.error ?? p.Never,
 	...e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope },
 	...e.serialize === void 0 ? {} : { serialize: e.serialize },
 	target: e.target,
@@ -345,7 +345,7 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? f.Never,
+	error: e.error ?? p.Never,
 	guards: A(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess,
 	source: e.source,
@@ -355,55 +355,55 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), Yt = (e) => k({
+}), $t = (e) => k({
 	kind: "stream",
 	name: e.name,
 	input: e.input,
 	element: e.element,
-	error: e.error ?? f.Never,
+	error: e.error ?? p.Never,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin,
 	guards: A(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess
-}), P = (e, t) => t && t.length > 0 ? f.Union(e, ...t) : e, F = (e) => e !== void 0 && e.some((e) => !u(e)), Xt = (e, t) => F(t) ? f.Union(e, l, a) : e, Zt = (e) => f.Union(e, x), Qt = (e) => f.Union(e, Ct, wt), $t = (e, t) => t === void 0 ? e : f.Union(e, Mt), I = (e, t) => {
+}), P = (e, t) => t && t.length > 0 ? p.Union(e, ...t) : e, F = (e) => e !== void 0 && e.some((e) => !u(e)), en = (e, t) => F(t) ? p.Union(e, f, l) : e, tn = (e) => p.Union(e, Tt), nn = (e) => p.Union(e, Dt, Ot), rn = (e, t) => t === void 0 ? e : p.Union(e, It), I = (e, t) => {
 	if (t === "stream") return e.error;
-	let n = Xt(e.error, e.guards);
+	let n = en(e.error, e.guards);
 	if (t === "query") return n;
-	let r = t === "mutation" ? f.Union(Zt(n), ct, ft) : n;
-	return $t(Qt(t === "mutation" && e.idempotencyScope === "connection" ? f.Union(r, We) : r), e.requiresApproval);
-}, en = (e, t) => P(Xt(e.errorSchema, e.guards), t), tn = (e, t) => ({
+	let r = t === "mutation" ? p.Union(tn(n), dt, ht) : n;
+	return rn(nn(t === "mutation" && e.idempotencyScope === "connection" ? p.Union(r, qe) : r), e.requiresApproval);
+}, an = (e, t) => P(en(e.errorSchema, e.guards), t), on = (e, t) => ({
 	...e,
 	name: t
-}), nn = (e, t) => p.make(e.name, {
-	payload: b(e.input, e.name, F(e.guards)),
-	success: v(e.output),
+}), sn = (e, t) => m.make(e.name, {
+	payload: x(e.input, e.name, F(e.guards)),
+	success: y(e.output),
 	error: P(I(e, "query"), t),
 	stream: !0
-}), rn = (e, t) => p.make(e.name, {
-	payload: b(e.input, e.name, F(e.guards)),
+}), cn = (e, t) => m.make(e.name, {
+	payload: x(e.input, e.name, F(e.guards)),
 	success: e.output,
 	error: P(I(e, "mutation"), t)
-}), an = (e, t) => p.make(e.name, {
-	payload: b(e.input, e.name, F(e.guards)),
+}), ln = (e, t) => m.make(e.name, {
+	payload: x(e.input, e.name, F(e.guards)),
 	success: e.output,
 	error: P(I(e, "action"), t)
-}), on = (e, t) => p.make(e.name, {
-	payload: b(e.input, e.name, F(e.guards)),
+}), un = (e, t) => m.make(e.name, {
+	payload: x(e.input, e.name, F(e.guards)),
 	success: e.element,
 	error: P(e.error, t),
 	stream: !0
-}), sn = (e) => {
+}), dn = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
 	return typeof t == "string" ? t : void 0;
-}, cn = (e) => {
+}, fn = (e) => {
 	switch (e.kind) {
-		case "query": return nn(e);
-		case "mutation": return rn(e);
-		case "action": return an(e);
-		case "stream": return on(e);
+		case "query": return sn(e);
+		case "mutation": return cn(e);
+		case "action": return ln(e);
+		case "stream": return un(e);
 	}
-}, ln = (e) => {
+}, pn = (e) => {
 	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
 	if (e.kind === "query") return {
 		kind: "query",
@@ -449,7 +449,7 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 			..."relations" in e && e.relations !== void 0 ? { relations: e.relations } : {}
 		}))
 	};
-}, un = 7500, dn = (e) => typeof e == "object" && !!e && e.kind === "event", fn = (e) => {
+}, mn = 7500, hn = (e) => typeof e == "object" && !!e && e.kind === "event", gn = (e) => {
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -484,60 +484,60 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 		webhook: e.webhook,
 		delivery: e.delivery
 	};
-}, pn = (e) => f.Struct({
-	_tag: f.Literal("event"),
-	origin: f.String,
-	n: f.Number,
-	emittedAt: f.Number,
+}, _n = (e) => p.Struct({
+	_tag: p.Literal("event"),
+	origin: p.String,
+	n: p.Number,
+	emittedAt: p.Number,
 	payload: e
-}), mn = f.Struct({
-	_tag: f.Literal("gap"),
-	missed: f.Number,
-	reason: f.Literal("buffer", "resume")
-}), hn = f.Struct({ _tag: f.Literal("attached") }), gn = (e) => f.Union(hn, pn(e), mn), _n = f.Struct({
-	origin: f.String,
-	n: f.Number
-}), vn = (e) => f.Struct({
+}), vn = p.Struct({
+	_tag: p.Literal("gap"),
+	missed: p.Number,
+	reason: p.Literal("buffer", "resume")
+}), yn = p.Struct({ _tag: p.Literal("attached") }), bn = (e) => p.Union(yn, _n(e), vn), xn = p.Struct({
+	origin: p.String,
+	n: p.Number
+}), Sn = (e) => p.Struct({
 	key: e,
-	resume: f.optional(f.Array(_n))
-}), yn = (e, t) => {
-	let n = e.guards !== void 0 && e.guards.some((e) => !u(e)) ? f.Union(l, a) : f.Never, r = t && t.length > 0 ? f.Union(n, ...t) : n;
-	return p.make(e.name, {
-		payload: b(vn(e.key), e.name, F(e.guards)),
-		success: gn(e.payload),
+	resume: p.optional(p.Array(xn))
+}), Cn = (e, t) => {
+	let n = e.guards !== void 0 && e.guards.some((e) => !u(e)) ? p.Union(f, l) : p.Never, r = t && t.length > 0 ? p.Union(n, ...t) : n;
+	return m.make(e.name, {
+		payload: x(Sn(e.key), e.name, F(e.guards)),
+		success: bn(e.payload),
 		error: r,
 		stream: !0
 	});
-}, bn = class extends f.TaggedError()("EventPayloadInvalid", {
-	event: f.String,
-	message: f.String
-}) {}, xn = class extends f.TaggedError()("EventKeyInvalid", {
-	event: f.String,
-	message: f.String
-}) {}, Sn = class extends f.TaggedError()("EventPayloadTooLarge", {
-	event: f.String,
-	bytes: f.Number,
-	limit: f.Number
-}) {}, Cn = (e) => {
+}, wn = class extends p.TaggedError()("EventPayloadInvalid", {
+	event: p.String,
+	message: p.String
+}) {}, Tn = class extends p.TaggedError()("EventKeyInvalid", {
+	event: p.String,
+	message: p.String
+}) {}, En = class extends p.TaggedError()("EventPayloadTooLarge", {
+	event: p.String,
+	bytes: p.Number,
+	limit: p.Number
+}) {}, Dn = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t));
 	return JSON.stringify(t);
-}, wn = "\0", Tn = (e, t, n) => [
+}, On = "\0", kn = (e, t, n) => [
 	e ?? "~",
 	t,
-	Cn(n)
-].join("\0"), En = (e) => {
+	Dn(n)
+].join("\0"), An = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, Dn = (e) => e.split("\0").join(" · "), L = Symbol.for("@voltro/protocol/workflow-access"), On = {
+}, jn = (e) => e.split("\0").join(" · "), L = Symbol.for("@voltro/protocol/workflow-access"), Mn = {
 	guards: void 0,
 	openAccess: void 0,
 	internal: !1
-}, kn = (e, t) => {
+}, Nn = (e, t) => {
 	let n = t.guards;
 	if (n !== void 0 && n.length === 0) throw Error(`workflow("${e}"): \`guards: []\` is empty, so it enforces nothing —\n  but it reads at the call site as if the start were protected. Omit the field
   and decide with \`openAccess\` or \`internal\`, or list the scopes that may start it.`);
@@ -557,16 +557,16 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 		openAccess: t.openAccess?.trim(),
 		internal: t.internal === !0
 	};
-}, An = (e, t) => {
+}, Pn = (e, t) => {
 	Object.defineProperty(e, L, {
 		value: t,
 		enumerable: !1
 	});
 }, R = (e) => {
-	if (typeof e != "object" || !e) return On;
+	if (typeof e != "object" || !e) return Mn;
 	let t = e[L];
-	return t === void 0 ? On : t;
-}, jn = (e) => {
+	return t === void 0 ? Mn : t;
+}, Fn = (e) => {
 	let t = R(e);
 	return {
 		name: e.name,
@@ -574,18 +574,18 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 		guards: t.guards,
 		openAccess: t.openAccess
 	};
-}, Mn = (e) => e, Nn = (e) => e, Pn = (e) => {
+}, In = (e) => e, Ln = (e) => e, Rn = (e) => {
 	let t = e.alias?.trim(), n = e.instance?.trim(), r = t !== void 0 && t !== "" ? t : e.base;
 	return n !== void 0 && n !== "" ? `${r}#${n}` : r;
-}, Fn = (e) => {
+}, zn = (e) => {
 	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
-}, In = (e, t) => {
-	let n = ut.GenericTag(e);
+}, Bn = (e, t) => {
+	let n = pt.GenericTag(e);
 	return {
 		Tag: n,
-		Live: dt.succeed(n, t)
+		Live: mt.succeed(n, t)
 	};
-}, Ln = (e, t, n) => {
+}, Vn = (e, t, n) => {
 	if (!t) return { ok: !0 };
 	let r = n === void 0 ? null : z(n);
 	if (!r) return {
@@ -595,7 +595,7 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 	let i = t.trim();
 	if (i === "*" || i === "") return { ok: !0 };
 	let a = i.split(/\s+/).filter((e) => e.length > 0);
-	for (let i of a) if (!Rn(i, r)) return {
+	for (let i of a) if (!Hn(i, r)) return {
 		ok: !1,
 		reason: `plugin "${e}" requires framework ${t}, running ${n}`
 	};
@@ -608,7 +608,7 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 		patch: Number(t[3]),
 		pre: t[4] ?? ""
 	} : null;
-}, B = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, Rn = (e, t) => {
+}, B = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, Hn = (e, t) => {
 	if (e === "*") return !0;
 	if (e.startsWith("^")) {
 		let n = z(e.slice(1));
@@ -630,87 +630,87 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 	}
 	let r = z(e);
 	return r ? B(t, r) === 0 : !1;
-}, zn = (e) => {
+}, Un = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/-([a-zA-Z0-9])/g, (e, t) => t.toUpperCase());
-}, Bn = (e) => {
+}, Wn = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/#/g, "--").replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
-}, Vn = Symbol.for("@voltro/protocol/pluginAliases"), V = () => {
-	let e = globalThis, t = e[Vn];
+}, Gn = Symbol.for("@voltro/protocol/pluginAliases"), V = () => {
+	let e = globalThis, t = e[Gn];
 	if (t instanceof Map) return t;
 	let n = /* @__PURE__ */ new Map();
-	return e[Vn] = n, n;
-}, Hn = (e) => {
+	return e[Gn] = n, n;
+}, Kn = (e) => {
 	let t = V();
 	for (let [n, r] of Object.entries(e)) {
 		if (r === "") continue;
 		let e = t.get(n);
 		e === void 0 ? t.set(n, /* @__PURE__ */ new Set([r])) : e.add(r);
 	}
-}, Un = () => {
+}, qn = () => {
 	V().clear();
-}, Wn = (e, t) => {
+}, Jn = (e, t) => {
 	let n = V().get(e);
-	if (n === void 0 || n.size === 0) return `${zn(e)}.${t}`;
+	if (n === void 0 || n.size === 0) return `${Un(e)}.${t}`;
 	if (n.size === 1) return `${[...n][0]}.${t}`;
 	let r = [...n].filter((e) => !e.includes("#"));
 	if (r.length === 1) return `${r[0]}.${t}`;
 	throw Error(`[voltro] ${e} is installed more than once (${[...n].sort().join(", ")}) and no single install is the primary one, so a plugin hook cannot tell which of them it addresses. Call the route by its full tag instead — e.g. useSubscription(api, '${[...n].sort()[0]}.${t}').`);
-}, Gn = f.Union(f.Struct({
-	kind: f.Literal("dropped"),
-	at: f.Number,
-	retryAfterMs: f.Number
-}), f.Struct({
-	kind: f.Literal("skipped"),
-	at: f.Number,
-	executionId: f.String,
-	runId: f.String
-}), f.Struct({
-	kind: f.Literal("superseded"),
-	at: f.Number
-}), f.Struct({
-	kind: f.Literal("cancelled"),
-	at: f.Number
-}), f.Struct({
-	kind: f.Literal("abandoned"),
-	at: f.Number,
-	failureId: f.NonEmptyString
-})), H = f.Literal("running", "succeeded", "failed", "cancelled", "suspended"), U = f.Struct({
-	id: f.String,
-	workflowName: f.String,
-	executionId: f.String,
-	status: f.Union(H, f.Literal("unknown")),
-	output: f.optional(f.Unknown),
-	error: f.optional(f.Struct({
-		tag: f.NullOr(f.String),
-		message: f.String
+}, Yn = p.Union(p.Struct({
+	kind: p.Literal("dropped"),
+	at: p.Number,
+	retryAfterMs: p.Number
+}), p.Struct({
+	kind: p.Literal("skipped"),
+	at: p.Number,
+	executionId: p.String,
+	runId: p.String
+}), p.Struct({
+	kind: p.Literal("superseded"),
+	at: p.Number
+}), p.Struct({
+	kind: p.Literal("cancelled"),
+	at: p.Number
+}), p.Struct({
+	kind: p.Literal("abandoned"),
+	at: p.Number,
+	failureId: p.NonEmptyString
+})), H = p.Literal("running", "succeeded", "failed", "cancelled", "suspended"), U = p.Struct({
+	id: p.String,
+	workflowName: p.String,
+	executionId: p.String,
+	status: p.Union(H, p.Literal("unknown")),
+	output: p.optional(p.Unknown),
+	error: p.optional(p.Struct({
+		tag: p.NullOr(p.String),
+		message: p.String
 	}))
-}), W = f.Struct({
-	operation: f.Literal("cancel", "resume"),
-	kind: f.Literal("accepted", "confirmed", "unknown", "already-terminal"),
-	requestId: f.NullOr(f.NonEmptyString),
+}), W = p.Struct({
+	operation: p.Literal("cancel", "resume"),
+	kind: p.Literal("accepted", "confirmed", "unknown", "already-terminal"),
+	requestId: p.NullOr(p.NonEmptyString),
 	snapshot: U
-}).pipe(f.filter((e) => e.kind === "unknown" ? !0 : e.kind === "accepted" ? e.requestId !== null && (e.snapshot.status === "running" || e.snapshot.status === "suspended") : e.kind === "already-terminal" ? e.snapshot.status === "succeeded" || e.snapshot.status === "failed" || e.snapshot.status === "cancelled" : e.operation === "cancel" ? e.snapshot.status === "cancelled" : e.requestId !== null && e.snapshot.status === "running", { message: () => "Workflow control acknowledgement contradicts its observed state or receipt identity" })), G = f.Struct({
-	operation: f.Literal("cancel"),
-	workflowName: f.NonEmptyString,
-	receiptId: f.NonEmptyString,
-	requestId: f.NullOr(f.NonEmptyString),
-	kind: f.Literal("accepted", "confirmed", "unknown", "already-terminal"),
-	observation: f.Union(f.Struct({ kind: f.Literal("pending") }), f.Struct({
-		kind: f.Literal("admission"),
-		outcome: f.Union(Gn, f.Struct({
-			kind: f.Literal("rejected"),
-			failureId: f.NonEmptyString
+}).pipe(p.filter((e) => e.kind === "unknown" ? !0 : e.kind === "accepted" ? e.requestId !== null && (e.snapshot.status === "running" || e.snapshot.status === "suspended") : e.kind === "already-terminal" ? e.snapshot.status === "succeeded" || e.snapshot.status === "failed" || e.snapshot.status === "cancelled" : e.operation === "cancel" ? e.snapshot.status === "cancelled" : e.requestId !== null && e.snapshot.status === "running", { message: () => "Workflow control acknowledgement contradicts its observed state or receipt identity" })), G = p.Struct({
+	operation: p.Literal("cancel"),
+	workflowName: p.NonEmptyString,
+	receiptId: p.NonEmptyString,
+	requestId: p.NullOr(p.NonEmptyString),
+	kind: p.Literal("accepted", "confirmed", "unknown", "already-terminal"),
+	observation: p.Union(p.Struct({ kind: p.Literal("pending") }), p.Struct({
+		kind: p.Literal("admission"),
+		outcome: p.Union(Yn, p.Struct({
+			kind: p.Literal("rejected"),
+			failureId: p.NonEmptyString
 		}))
-	}), f.Struct({
-		kind: f.Literal("execution"),
+	}), p.Struct({
+		kind: p.Literal("execution"),
 		snapshot: U
-	}), f.Struct({
-		kind: f.Literal("unavailable"),
-		reason: f.Literal("missing-request", "missing-run", "unconfirmed-generation", "unbound-submission")
+	}), p.Struct({
+		kind: p.Literal("unavailable"),
+		reason: p.Literal("missing-request", "missing-run", "unconfirmed-generation", "unbound-submission")
 	}))
-}).pipe(f.filter((e) => {
+}).pipe(p.filter((e) => {
 	let t = e.observation;
 	if (t.kind === "unavailable") return e.kind === "unknown" && (t.reason === "missing-request" ? e.requestId === null : e.requestId !== null);
 	if (e.requestId === null) return !1;
@@ -718,258 +718,271 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 	if (t.kind === "admission") return e.kind === (t.outcome.kind === "cancelled" ? "confirmed" : "already-terminal");
 	let n = t.snapshot;
 	return n.workflowName !== e.workflowName || n.id.length === 0 || n.executionId.length === 0 ? !1 : e.kind === "accepted" ? n.status === "running" || n.status === "suspended" : e.kind === "confirmed" ? n.status === "cancelled" : e.kind === "already-terminal" && (n.status === "succeeded" || n.status === "failed" || n.status === "cancelled");
-}, { message: () => "Queued cancellation acknowledgement contradicts its receipt or observation" })), Kn = f.Literal("cancel", "terminate", "abandon"), qn = f.Struct({
-	mode: f.String,
-	dueAt: f.NullOr(f.Number),
-	retryAfterMs: f.NullOr(f.Number),
-	intentId: f.NullOr(f.String)
-}), Jn = f.Struct({
-	id: f.String,
-	workflowName: f.String,
-	executionId: f.NullOr(f.String),
-	status: f.Literal("running", "succeeded", "queued", "dropped", "skipped", "replayed"),
-	deferral: f.optional(qn)
-}), Yn = (e, t) => {
+}, { message: () => "Queued cancellation acknowledgement contradicts its receipt or observation" })), Xn = p.Literal("cancel", "terminate", "abandon"), Zn = p.Struct({
+	mode: p.String,
+	dueAt: p.NullOr(p.Number),
+	retryAfterMs: p.NullOr(p.Number),
+	intentId: p.NullOr(p.String)
+}), Qn = p.Struct({
+	id: p.String,
+	workflowName: p.String,
+	executionId: p.NullOr(p.String),
+	status: p.Literal("running", "succeeded", "queued", "dropped", "skipped", "replayed"),
+	deferral: p.optional(Zn)
+}), $n = (e, t) => {
 	let n = R(e);
-	return p.make(e.name, {
-		payload: b(e.payloadSchema, e.name, F(n.guards)),
-		success: Jn,
-		error: en({
+	return m.make(e.name, {
+		payload: x(e.payloadSchema, e.name, F(n.guards)),
+		success: Qn,
+		error: an({
 			errorSchema: e.errorSchema,
 			guards: n.guards
 		}, t)
 	});
-}, K = f.Struct({
-	id: f.String,
-	tag: f.String,
-	executionId: f.String,
+}, K = p.Struct({
+	id: p.String,
+	tag: p.String,
+	executionId: p.String,
 	status: H,
-	payload: f.Unknown,
-	workflowVersion: f.NullOr(f.String),
-	workflowPatches: f.NullOr(f.Unknown),
-	output: f.NullOr(f.Unknown),
-	subject: f.NullOr(f.Unknown),
-	source: f.NullOr(f.String),
-	errorTag: f.NullOr(f.String),
-	errorMessage: f.NullOr(f.String),
-	cancelled: f.Boolean,
-	startedAt: f.Date,
-	completedAt: f.NullOr(f.Date),
-	durationMs: f.NullOr(f.Number),
-	traceId: f.NullOr(f.String),
-	parentExecutionId: f.NullOr(f.String),
-	parentClosePolicy: f.NullOr(Kn)
-}), Xn = f.Struct({
-	tag: f.optional(f.String),
-	status: f.optional(H),
-	limit: f.optional(f.Number)
-}), Zn = f.Struct({
-	id: f.String,
-	runId: f.String,
-	stepName: f.String,
-	attempt: f.Number,
-	status: f.Literal("running", "succeeded", "failed"),
-	input: f.NullOr(f.Unknown),
-	retryPolicy: f.NullOr(f.Unknown),
-	output: f.NullOr(f.Unknown),
-	errorTag: f.NullOr(f.String),
-	errorMessage: f.NullOr(f.String),
-	errorCause: f.NullOr(f.Unknown),
-	startedAt: f.Date,
-	completedAt: f.NullOr(f.Date),
-	durationMs: f.NullOr(f.Number)
-}), Qn = f.Struct({
-	id: f.String,
-	runId: f.String,
-	eventType: f.String,
-	payload: f.NullOr(f.Unknown),
-	occurredAt: f.Date,
-	stepName: f.NullOr(f.String),
-	attempt: f.NullOr(f.Number)
-}), $n = f.Struct({
-	id: f.String,
-	name: f.String,
-	payload: f.Unknown,
-	source: f.String,
-	subject: f.NullOr(f.Unknown),
-	traceId: f.NullOr(f.String),
-	occurredAt: f.Date
-}), er = f.Struct({
-	id: f.String,
-	eventId: f.String,
-	eventName: f.String,
-	triggerId: f.String,
-	workflowName: f.String,
-	executionId: f.NullOr(f.String),
-	status: f.Literal("starting", "started", "skipped", "failed"),
-	idempotencyKey: f.String,
-	skipped: f.Boolean,
-	errorMessage: f.NullOr(f.String),
-	createdAt: f.Date,
-	completedAt: f.NullOr(f.Date)
-}), tr = f.Struct({ id: f.String }), q = f.Struct({ runId: f.String }), nr = f.Struct({
-	name: f.optional(f.String),
-	limit: f.optional(f.Number)
-}), rr = f.Struct({ eventId: f.String }), J = f.Struct({
-	requestId: f.NonEmptyString,
-	cause: f.optionalWith(f.Struct({
-		reason: f.NonEmptyString,
-		detail: f.optional(f.Record({
-			key: f.String,
-			value: f.Unknown
+	payload: p.Unknown,
+	workflowVersion: p.NullOr(p.String),
+	workflowPatches: p.NullOr(p.Unknown),
+	output: p.NullOr(p.Unknown),
+	subject: p.NullOr(p.Unknown),
+	source: p.NullOr(p.String),
+	errorTag: p.NullOr(p.String),
+	errorMessage: p.NullOr(p.String),
+	cancelled: p.Boolean,
+	startedAt: p.Date,
+	completedAt: p.NullOr(p.Date),
+	durationMs: p.NullOr(p.Number),
+	traceId: p.NullOr(p.String),
+	parentExecutionId: p.NullOr(p.String),
+	parentClosePolicy: p.NullOr(Xn)
+}), er = p.Struct({
+	tag: p.optional(p.String),
+	status: p.optional(H),
+	limit: p.optional(p.Number)
+}), tr = p.Struct({
+	id: p.String,
+	runId: p.String,
+	stepName: p.String,
+	attempt: p.Number,
+	status: p.Literal("running", "succeeded", "failed"),
+	input: p.NullOr(p.Unknown),
+	retryPolicy: p.NullOr(p.Unknown),
+	output: p.NullOr(p.Unknown),
+	errorTag: p.NullOr(p.String),
+	errorMessage: p.NullOr(p.String),
+	errorCause: p.NullOr(p.Unknown),
+	startedAt: p.Date,
+	completedAt: p.NullOr(p.Date),
+	durationMs: p.NullOr(p.Number)
+}), nr = p.Struct({
+	id: p.String,
+	runId: p.String,
+	eventType: p.String,
+	payload: p.NullOr(p.Unknown),
+	occurredAt: p.Date,
+	stepName: p.NullOr(p.String),
+	attempt: p.NullOr(p.Number)
+}), rr = p.Struct({
+	id: p.String,
+	name: p.String,
+	payload: p.Unknown,
+	source: p.String,
+	subject: p.NullOr(p.Unknown),
+	traceId: p.NullOr(p.String),
+	occurredAt: p.Date
+}), ir = p.Struct({
+	id: p.String,
+	eventId: p.String,
+	eventName: p.String,
+	triggerId: p.String,
+	workflowName: p.String,
+	executionId: p.NullOr(p.String),
+	status: p.Literal("starting", "started", "skipped", "failed"),
+	idempotencyKey: p.String,
+	skipped: p.Boolean,
+	errorMessage: p.NullOr(p.String),
+	createdAt: p.Date,
+	completedAt: p.NullOr(p.Date)
+}), ar = p.Struct({ id: p.String }), q = p.Struct({ runId: p.String }), or = p.Struct({
+	name: p.optional(p.String),
+	limit: p.optional(p.Number)
+}), sr = p.Struct({ eventId: p.String }), J = p.Struct({
+	requestId: p.NonEmptyString,
+	cause: p.optionalWith(p.Struct({
+		reason: p.NonEmptyString,
+		detail: p.optional(p.Record({
+			key: p.String,
+			value: p.Unknown
 		}))
 	}), { exact: !0 })
-}), Y = f.Struct({
-	workflowName: f.String,
-	executionId: f.String,
-	control: f.optional(J)
-}), ir = f.Struct({
-	workflowName: f.NonEmptyString,
-	executionId: f.NonEmptyString,
-	operation: f.Literal("cancel", "resume"),
-	requestId: f.NonEmptyString
-}), X = f.Struct({
-	workflowName: f.NonEmptyString,
-	receiptId: f.NonEmptyString,
-	requestId: f.NonEmptyString
-}), ar = f.Struct({
+}), Y = p.Struct({
+	workflowName: p.String,
+	executionId: p.String,
+	control: p.optional(J)
+}), cr = p.Struct({
+	workflowName: p.NonEmptyString,
+	executionId: p.NonEmptyString,
+	operation: p.Literal("cancel", "resume"),
+	requestId: p.NonEmptyString
+}), X = p.Struct({
+	workflowName: p.NonEmptyString,
+	receiptId: p.NonEmptyString,
+	requestId: p.NonEmptyString
+}), lr = p.Struct({
 	...X.fields,
 	cause: J.fields.cause
-}), or = N({
+}), ur = N({
 	name: "__voltro.workflow.queued.cancel",
-	input: ar,
-	output: G
-}), sr = j({
+	input: lr,
+	output: G,
+	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
+}), dr = j({
 	name: "__voltro.workflow.queued.control",
 	input: X,
-	output: G
-}), cr = j({
-	name: "__voltro.workflow.control",
-	input: ir,
-	output: W
-}), lr = f.Struct({
-	id: f.String,
-	signalName: f.String,
-	payload: f.optional(f.Unknown)
-}), ur = f.Struct({
-	id: f.String,
-	updateName: f.String,
-	payload: f.optional(f.Unknown),
-	timeoutMs: f.optional(f.Number)
-}), dr = f.Struct({
-	eventId: f.String,
-	updateId: f.String,
-	completedEventId: f.String,
-	result: f.Unknown
+	output: G,
+	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
 }), fr = j({
+	name: "__voltro.workflow.control",
+	input: cr,
+	output: W,
+	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
+}), pr = p.Struct({
+	id: p.String,
+	signalName: p.String,
+	payload: p.optional(p.Unknown)
+}), mr = p.Struct({
+	id: p.String,
+	updateName: p.String,
+	payload: p.optional(p.Unknown),
+	timeoutMs: p.optional(p.Number)
+}), hr = p.Struct({
+	eventId: p.String,
+	updateId: p.String,
+	completedEventId: p.String,
+	result: p.Unknown
+}), gr = j({
 	name: "__voltro.workflow.run",
 	source: "_voltro_workflow_runs",
-	input: tr,
-	output: f.Array(K)
-}), pr = j({
+	input: ar,
+	output: p.Array(K),
+	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
+}), _r = j({
 	name: "__voltro.workflow.runs",
 	source: "_voltro_workflow_runs",
-	input: Xn,
-	output: f.Array(K)
-}), mr = j({
+	input: er,
+	output: p.Array(K),
+	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
+}), vr = j({
 	name: "__voltro.workflow.run.steps",
 	source: "_voltro_workflow_run_steps",
 	input: q,
-	output: f.Array(Zn)
-}), hr = j({
+	output: p.Array(tr),
+	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
+}), yr = j({
 	name: "__voltro.workflow.run.events",
 	source: "_voltro_workflow_run_events",
 	input: q,
-	output: f.Array(Qn)
-}), gr = j({
+	output: p.Array(nr),
+	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
+}), br = j({
 	name: "__voltro.workflow.domainEvents",
 	source: "_voltro_workflow_events",
-	input: nr,
-	output: f.Array($n)
-}), _r = j({
+	input: or,
+	output: p.Array(rr),
+	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
+}), xr = j({
 	name: "__voltro.workflow.event.deliveries",
 	source: "_voltro_workflow_event_deliveries",
-	input: rr,
-	output: f.Array(er)
-}), vr = N({
+	input: sr,
+	output: p.Array(ir),
+	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
+}), Sr = N({
 	name: "__voltro.workflow.cancel",
 	input: Y,
-	output: W
-}), yr = N({
+	output: W,
+	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
+}), Cr = N({
 	name: "__voltro.workflow.resume",
 	input: Y,
-	output: W
-}), br = N({
+	output: W,
+	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
+}), wr = N({
 	name: "__voltro.workflow.signal",
-	input: lr,
-	output: f.Struct({ eventId: f.String })
-}), xr = N({
+	input: pr,
+	output: p.Struct({ eventId: p.String }),
+	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
+}), Tr = N({
 	name: "__voltro.workflow.update",
-	input: ur,
-	output: dr
-}), Sr = "__voltro.undo.log", Cr = "__voltro.undo.apply", wr = "__voltro.undo.redo", Tr = f.Struct({
-	id: f.String,
-	tag: f.String,
-	label: f.NullOr(f.String),
-	undone: f.Boolean,
-	crossesAction: f.Boolean,
-	createdAt: f.String
-}), Er = class extends f.TaggedError()("UndoNotFound", { invocationId: f.String }) {}, Dr = class extends f.TaggedError()("UndoForbidden", { invocationId: f.String }) {}, Or = class extends f.TaggedError()("UndoConflict", {
-	invocationId: f.String,
-	reason: f.Literal("conflict", "action")
-}) {}, kr = f.Union(Er, Dr, Or), Ar = j({
-	name: Sr,
+	input: mr,
+	output: hr,
+	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
+}), Er = "__voltro.undo.log", Dr = "__voltro.undo.apply", Or = "__voltro.undo.redo", kr = p.Struct({
+	id: p.String,
+	tag: p.String,
+	label: p.NullOr(p.String),
+	undone: p.Boolean,
+	crossesAction: p.Boolean,
+	createdAt: p.String
+}), Ar = class extends p.TaggedError()("UndoNotFound", { invocationId: p.String }) {}, jr = class extends p.TaggedError()("UndoForbidden", { invocationId: p.String }) {}, Mr = class extends p.TaggedError()("UndoConflict", {
+	invocationId: p.String,
+	reason: p.Literal("conflict", "action")
+}) {}, Nr = p.Union(Ar, jr, Mr), Pr = j({
+	name: Er,
 	source: "_voltro_undo_log",
-	input: f.Struct({ limit: f.optional(f.Number) }),
-	output: f.Array(Tr),
+	input: p.Struct({ limit: p.optional(p.Number) }),
+	output: p.Array(kr),
 	openAccess: "subject-scoped by construction: lists only the calling subject's own undoable actions"
-}), jr = M({
-	name: Cr,
-	input: f.Struct({ invocationId: f.String }),
-	output: f.Struct({ ok: f.Boolean }),
-	error: kr,
+}), Fr = M({
+	name: Dr,
+	input: p.Struct({ invocationId: p.String }),
+	output: p.Struct({ ok: p.Boolean }),
+	error: Nr,
 	openAccess: "subject-scoped by construction: undo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), Mr = M({
-	name: wr,
-	input: f.Struct({ invocationId: f.String }),
-	output: f.Struct({ ok: f.Boolean }),
-	error: kr,
+}), Ir = M({
+	name: Or,
+	input: p.Struct({ invocationId: p.String }),
+	output: p.Struct({ ok: p.Boolean }),
+	error: Nr,
 	openAccess: "subject-scoped by construction: redo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), Nr = class extends f.TaggedError()("TenantScopeViolation", {
-	table: f.String,
-	reason: f.String
-}) {}, Pr = class extends f.TaggedError()("StoreOperationFailed", {
-	operation: f.String,
-	table: f.String,
-	cause: f.String
-}) {}, Fr = class extends f.TaggedError()("NoRowFound", {
-	table: f.String,
-	found: f.Number
+}), Lr = class extends p.TaggedError()("TenantScopeViolation", {
+	table: p.String,
+	reason: p.String
+}) {}, Rr = class extends p.TaggedError()("StoreOperationFailed", {
+	operation: p.String,
+	table: p.String,
+	cause: p.String
+}) {}, zr = class extends p.TaggedError()("NoRowFound", {
+	table: p.String,
+	found: p.Number
 }) {
 	get message() {
 		return this.found === 0 ? `expected exactly one row in '${this.table}', found none` : `expected exactly one row in '${this.table}', found more than one`;
 	}
-}, Ir = class extends f.TaggedError()("TableValidationFailed", {
-	table: f.String,
-	summary: f.String,
-	issues: f.Array(f.Struct({
-		path: f.String,
-		message: f.String
+}, Br = class extends p.TaggedError()("TableValidationFailed", {
+	table: p.String,
+	summary: p.String,
+	issues: p.Array(p.Struct({
+		path: p.String,
+		message: p.String
 	}))
-}) {}, Lr = class extends f.TaggedError()("TenantRowNotFound", {
-	table: f.String,
-	id: f.String,
-	reason: f.String
-}) {}, Rr = class extends f.TaggedError()("ServerOnlyColumnWrite", {
-	table: f.String,
-	columns: f.Array(f.String)
-}) {}, zr = class extends f.TaggedError()("ConstraintViolation", {
-	kind: f.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
-	table: f.String,
-	operation: f.String,
-	constraint: f.optional(f.String),
-	column: f.optional(f.String),
-	detail: f.optional(f.String)
+}) {}, Vr = class extends p.TaggedError()("TenantRowNotFound", {
+	table: p.String,
+	id: p.String,
+	reason: p.String
+}) {}, Hr = class extends p.TaggedError()("ServerOnlyColumnWrite", {
+	table: p.String,
+	columns: p.Array(p.String)
+}) {}, Ur = class extends p.TaggedError()("ConstraintViolation", {
+	kind: p.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
+	table: p.String,
+	operation: p.String,
+	constraint: p.optional(p.String),
+	column: p.optional(p.String),
+	detail: p.optional(p.String)
 }) {
 	get message() {
 		if (this.detail !== void 0) return this.detail;
@@ -982,85 +995,85 @@ var pt = f.Union(f.String, f.Number), m = f.Record({
 			case "check": return `check constraint ${t}: the row does not satisfy it`;
 		}
 	}
-}, Br = "__voltro.approvals.pending", Vr = "__voltro.approvals.decide", Hr = j({
-	name: Br,
+}, Wr = "__voltro.approvals.pending", Gr = "__voltro.approvals.decide", Kr = j({
+	name: Wr,
 	source: "_voltro_approvals",
-	input: f.Struct({ limit: f.optional(f.Number) }),
-	output: f.Array(Pt),
+	input: p.Struct({ limit: p.optional(p.Number) }),
+	output: p.Array(Rt),
 	openAccess: "the answer is scoped to the caller — a row appears only if they requested it or hold its recorded approver scopes, so an anonymous caller sees nothing"
-}), Ur = M({
-	name: Vr,
-	input: f.Struct({
-		approvalId: f.String,
-		decision: f.Literal("approve", "reject"),
-		note: f.optional(f.String)
+}), qr = M({
+	name: Gr,
+	input: p.Struct({
+		approvalId: p.String,
+		decision: p.Literal("approve", "reject"),
+		note: p.optional(p.String)
 	}),
-	output: f.Struct({
-		approvalId: f.String,
-		status: f.Literal("approved", "rejected")
+	output: p.Struct({
+		approvalId: p.String,
+		status: p.Literal("approved", "rejected")
 	}),
-	error: Nt,
+	error: Lt,
 	openAccess: "the approver authority is the PENDING ROW's own recorded scopes (plus an unconditional self-approval refusal), checked in-handler — a descriptor-level scope would have to be the union of every approval-requiring procedure in the app"
-}), Wr = "__voltro.connections.list", Gr = "__voltro.connections.start", Kr = "__voltro.connections.submitToken", qr = "__voltro.connections.disconnect", Z = f.Literal("oauth2", "pat"), Jr = f.Literal("disconnected", "connected", "expired", "revoked", "error"), Yr = f.Struct({
-	connectionId: f.String,
-	kind: Z,
-	label: f.String,
-	status: Jr,
-	accountId: f.NullOr(f.String),
-	accountLabel: f.NullOr(f.String),
-	scopes: f.Array(f.String),
-	expiresAt: f.NullOr(f.String),
-	lastError: f.NullOr(f.String),
-	connectedAt: f.NullOr(f.String)
-}), Xr = class extends f.TaggedError()("ConnectionNotDeclared", { connectionId: f.String }) {}, Zr = class extends f.TaggedError()("ConnectionSubjectRequired", { connectionId: f.String }) {}, Qr = class extends f.TaggedError()("ConnectionKindMismatch", {
-	connectionId: f.String,
-	expected: Z,
-	actual: Z
-}) {}, Q = class extends f.TaggedError()("ConnectionHandshakeFailed", {
-	connectionId: f.String,
-	reason: f.String,
-	transient: f.Boolean
-}) {}, $ = f.Union(Xr, Zr, Qr, Q), $r = j({
-	name: Wr,
+}), Jr = "__voltro.connections.list", Yr = "__voltro.connections.start", Xr = "__voltro.connections.submitToken", Z = "__voltro.connections.disconnect", Q = p.Literal("oauth2", "pat"), Zr = p.Literal("disconnected", "connected", "expired", "revoked", "error"), Qr = p.Struct({
+	connectionId: p.String,
+	kind: Q,
+	label: p.String,
+	status: Zr,
+	accountId: p.NullOr(p.String),
+	accountLabel: p.NullOr(p.String),
+	scopes: p.Array(p.String),
+	expiresAt: p.NullOr(p.String),
+	lastError: p.NullOr(p.String),
+	connectedAt: p.NullOr(p.String)
+}), $r = class extends p.TaggedError()("ConnectionNotDeclared", { connectionId: p.String }) {}, ei = class extends p.TaggedError()("ConnectionSubjectRequired", { connectionId: p.String }) {}, ti = class extends p.TaggedError()("ConnectionKindMismatch", {
+	connectionId: p.String,
+	expected: Q,
+	actual: Q
+}) {}, ni = class extends p.TaggedError()("ConnectionHandshakeFailed", {
+	connectionId: p.String,
+	reason: p.String,
+	transient: p.Boolean
+}) {}, $ = p.Union($r, ei, ti, ni), ri = j({
+	name: Jr,
 	source: "_voltro_connections",
-	input: f.Struct({}),
-	output: f.Array(Yr),
+	input: p.Struct({}),
+	output: p.Array(Qr),
 	openAccess: "self-scoped read: projects the declared connections for the calling subject only (its own connect/disconnect state)"
-}), ei = N({
-	name: Gr,
-	input: f.Struct({
-		connectionId: f.String,
-		redirectTo: f.optional(f.String)
+}), ii = N({
+	name: Yr,
+	input: p.Struct({
+		connectionId: p.String,
+		redirectTo: p.optional(p.String)
 	}),
-	output: f.Struct({
-		authorizeUrl: f.String,
-		state: f.String
+	output: p.Struct({
+		authorizeUrl: p.String,
+		state: p.String
 	}),
 	error: $,
 	openAccess: "self-service: begins an oauth handshake that stores a credential for the calling subject only; anonymous callers fail typed with ConnectionSubjectRequired"
-}), ti = M({
-	name: Kr,
-	input: f.Struct({
-		connectionId: f.String,
-		token: f.String
+}), ai = M({
+	name: Xr,
+	input: p.Struct({
+		connectionId: p.String,
+		token: p.String
 	}),
-	output: f.Struct({ ok: f.Boolean }),
+	output: p.Struct({ ok: p.Boolean }),
 	error: $,
 	openAccess: "self-service: stores a pasted token as the calling subject's own credential; anonymous callers fail typed with ConnectionSubjectRequired"
-}), ni = M({
-	name: qr,
-	input: f.Struct({ connectionId: f.String }),
-	output: f.Struct({ ok: f.Boolean }),
+}), oi = M({
+	name: Z,
+	input: p.Struct({ connectionId: p.String }),
+	output: p.Struct({ ok: p.Boolean }),
 	error: $,
 	openAccess: "self-service: deletes only the calling subject's own credential row for this connection"
-}), ri = (e) => {
+}), si = (e) => {
 	let t = e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : 0;
 	return Number.isNaN(t) ? 0 : t;
-}, ii = 4001, ai = /* @__PURE__ */ new Set(["/rpc", "/ws"]), oi = (e) => {
+}, ci = 4001, li = /* @__PURE__ */ new Set(["/rpc", "/ws"]), ui = (e) => {
 	if (!e.path.startsWith("/")) throw Error(`defineWebSocket: path must be absolute, got '${e.path}'`);
-	if (ai.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
+	if (li.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
 	if (e.auth !== "subject" && e.auth !== "public") throw Error(`defineWebSocket: auth must be 'subject' or 'public' (explicitly — an unauthenticated socket has to be a decision somebody wrote down), got '${String(e.auth)}'`);
 	return e;
-}, si = 1;
+}, di = 1;
 //#endregion
-export { je as ADMIN_SCOPE, Te as APIKEY_ISSUE_ORG_SCOPE, ke as APIKEY_ISSUE_OTHER_SCOPE, be as APIKEY_ISSUE_SELF_SCOPE, Vr as APPROVALS_DECIDE_TAG, Br as APPROVALS_PENDING_TAG, Nt as ApprovalDecisionErrors, Mt as ApprovalErrors, S as ApprovalExpired, jt as ApprovalForbidden, Dt as ApprovalNotFound, At as ApprovalNotPending, kt as ApprovalRejected, Et as ApprovalRequired, Ot as ApprovalSelfApproval, C as ApprovalUnavailable, i as AuthMiddleware, x as BusinessRuleViolation, Wr as CONNECTIONS_LIST_TAG, qr as CONNECTION_DISCONNECT_TAG, Gr as CONNECTION_START_TAG, Kr as CONNECTION_SUBMIT_TOKEN_TAG, Q as ConnectionHandshakeFailed, r as ConnectionInfo, ae as ConnectionInfoMiddleware, Z as ConnectionKind, Qr as ConnectionKindMismatch, Xr as ConnectionNotDeclared, Yr as ConnectionState, Jr as ConnectionStatus, Zr as ConnectionSubjectRequired, zr as ConstraintViolation, Se as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, e as DEFAULT_SCOPE_CACHE_TTL_MS, wn as EVENT_ROUTE_SEP, xn as EventKeyInvalid, bn as EventPayloadInvalid, Sn as EventPayloadTooLarge, ii as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, xe as IMPERSONATION_METADATA_KEY, it as JSONAPI_MEDIA_TYPE, un as MAX_EVENT_ENVELOPE_BYTES, lt as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, We as MutationConnectionRequired, ct as MutationInFlight, Fr as NoRowFound, $e as PROBLEM_JSON, si as PROTOCOL_VERSION, Pt as PendingApproval, w as REACTIVITY_CHANNEL_PREFIX, nt as REST_PROFILE_NAMES, l as ScopeError, Rr as ServerOnlyColumnWrite, Pr as StoreOperationFailed, re as Subject, ie as SubjectIdentity, oe as SubjectService, Ir as TableValidationFailed, Lr as TenantRowNotFound, Nr as TenantScopeViolation, Cr as UNDO_APPLY_TAG, Sr as UNDO_LOG_TAG, wr as UNDO_REDO_TAG, a as Unauthenticated, Or as UndoConflict, Dr as UndoForbidden, Tr as UndoLogEntry, Er as UndoNotFound, Ct as ValidationError, wt as ValidationErrors, St as ValidationIssue, L as WorkflowAccessProperty, Y as WorkflowControlInputSchema, J as WorkflowControlIntentSchema, ir as WorkflowControlReadInputSchema, W as WorkflowControlResultSchema, $n as WorkflowDomainEventRowSchema, nr as WorkflowDomainEventsInputSchema, rr as WorkflowEventDeliveriesInputSchema, er as WorkflowEventDeliveryRowSchema, Kn as WorkflowParentClosePolicySchema, ar as WorkflowQueuedCancelInputSchema, G as WorkflowQueuedCancellationResultSchema, X as WorkflowQueuedControlTargetSchema, Qn as WorkflowRunEventRowSchema, Jn as WorkflowRunHandleSchema, tr as WorkflowRunRefSchema, K as WorkflowRunRowSchema, U as WorkflowRunSnapshotSchema, H as WorkflowRunStatusSchema, Zn as WorkflowRunStepRowSchema, q as WorkflowRunTableRefSchema, Xn as WorkflowRunsInputSchema, lr as WorkflowSignalInputSchema, qn as WorkflowStartDeferralSchema, Gn as WorkflowStartTerminalOutcomeSchema, ur as WorkflowUpdateInputSchema, dr as WorkflowUpdateResultSchema, an as actionToRpc, Ee as advisoryResourceGuardWarning, c as anonymousSubject, bt as applyRowPatch, ne as applyScopeDecision, Ur as approvalsDecideDescriptor, Hr as approvalsPendingQueryDescriptor, se as assertAuthenticated, An as attachWorkflowAccess, Be as beginIdempotent, Ln as checkFrameworkCompat, Ae as checkGuards, ge as checkGuardsEffect, Qe as compareSurfaces, Ie as composeAuthStrategies, Fn as composeRpcInterceptors, ni as connectionDisconnectDescriptor, ei as connectionStartDescriptor, ti as connectionSubmitTokenDescriptor, $r as connectionsListQueryDescriptor, Vt as declaredReactivityChannelKeys, N as defineAction, fn as defineEvent, M as defineMutation, Mn as definePlugin, Nn as definePluginRoute, In as definePluginService, j as defineQuery, Yt as defineStream, oi as defineWebSocket, vt as diffRows, Ce as effectiveScopes, Cn as encodeEventKey, Xe as encodeRestError, Ue as encodeRestSuccess, sn as errorTag, hn as eventAttached, pn as eventEnvelope, mn as eventGap, _n as eventResumePoint, Tn as eventRoute, gn as eventStreamEvent, vn as eventSubscribeInput, yn as eventToRpc, Le as failIdempotent, Tt as fieldIssuesOf, Me as findAdvisoryResourceGuards, st as finishIdempotent, Dn as formatEventRoute, _e as getPolicyGuardResolver, ve as getResourceScopeResolver, R as getWorkflowAccess, Ye as groupShapeDigests, Jt as hasAccessDecision, t as hasCallbackRoutes, De as hasEffectiveScope, F as hasEnforcedGuard, we as hasScope, h as idToPath, Ve as idempotencyScope, y as inputLabel, ye as isAuthenticatedCheck, qt as isAuthenticatedGuard, dn as isEventDescriptor, yt as isIdKeyed, u as isOpenAccess, me as isPolicyCheck, Kt as isPolicyGuard, zt as isReactivityChannel, Bt as isReactivityChannelKey, de as isSystemSubject, Wt as isWireReachable, s as makeScopeCache, ze as memoryIdempotencyStore, Ne as missingAccessDecision, rn as mutationToRpc, et as nextLink, ln as normalizeDescriptor, O as normalizeSource, d as openAccessSpec, ue as orderByBearerPrefix, En as parseEventRoute, gt as pathToId, zn as pluginAlias, Pn as pluginInstanceName, Bn as pluginSlug, Wn as pluginTag, rt as problemDetails, Ge as problemTypeOf, Je as procedureShapeDigest, Ut as publishReactivity, qe as publishServerError, nn as queryToRpc, fe as rawImpersonationMark, Rt as reactivityChannel, Hn as registerPluginAliases, he as requireScope, Un as resetPluginAliases, Fe as resolvePolicyAction, Ze as resolveRestFormat, kn as resolveWorkflowAccess, at as restViewSchema, mt as rowPatchOpSchema, ht as rowPatchSchema, He as schemaShape, o as scopeCacheKey, ce as setEffectiveScopes, n as setPolicyGuardResolver, Pe as setResourceScopeResolver, ot as shapeDigest, D as sourceKeys, on as streamToRpc, b as strictInput, te as subjectAuditActorId, Oe as subjectIdentity, le as subjectScopes, tt as subscribeServerErrors, v as subscriptionEvent, ee as systemSubject, pe as tenantScopedSubject, cn as toRpc, Ke as toSnakeCase, ri as tsMs, Ht as undeclaredChannelKeys, jr as undoApplyDescriptor, Ar as undoLogQueryDescriptor, Mr as undoRedoDescriptor, I as wireErrorUnion, tn as withRpcTag, jn as workflowAccessDescriptor, vr as workflowCancelDescriptor, cr as workflowControlQueryDescriptor, gr as workflowDomainEventsQueryDescriptor, _r as workflowEventDeliveriesQueryDescriptor, or as workflowQueuedCancelDescriptor, sr as workflowQueuedControlQueryDescriptor, yr as workflowResumeDescriptor, hr as workflowRunEventsQueryDescriptor, fr as workflowRunQueryDescriptor, mr as workflowRunStepsQueryDescriptor, pr as workflowRunsQueryDescriptor, br as workflowSignalDescriptor, Yn as workflowToRpc, xr as workflowUpdateDescriptor, en as workflowWireErrorUnion, Re as wsMutationIdempotencyScope };
+export { Ne as ADMIN_SCOPE, Oe as APIKEY_ISSUE_ORG_SCOPE, je as APIKEY_ISSUE_OTHER_SCOPE, Ce as APIKEY_ISSUE_SELF_SCOPE, Gr as APPROVALS_DECIDE_TAG, Wr as APPROVALS_PENDING_TAG, Lt as ApprovalDecisionErrors, It as ApprovalErrors, S as ApprovalExpired, Ft as ApprovalForbidden, jt as ApprovalNotFound, Pt as ApprovalNotPending, Nt as ApprovalRejected, At as ApprovalRequired, Mt as ApprovalSelfApproval, C as ApprovalUnavailable, i as AuthMiddleware, Tt as BusinessRuleViolation, Jr as CONNECTIONS_LIST_TAG, Z as CONNECTION_DISCONNECT_TAG, Yr as CONNECTION_START_TAG, Xr as CONNECTION_SUBMIT_TOKEN_TAG, ni as ConnectionHandshakeFailed, ae as ConnectionInfo, Te as ConnectionInfoMiddleware, Q as ConnectionKind, ti as ConnectionKindMismatch, $r as ConnectionNotDeclared, Qr as ConnectionState, Zr as ConnectionStatus, ei as ConnectionSubjectRequired, Ur as ConstraintViolation, t as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, we as DEFAULT_SCOPE_CACHE_TTL_MS, _e as DEVICES_MANAGE_SCOPE, On as EVENT_ROUTE_SEP, Tn as EventKeyInvalid, wn as EventPayloadInvalid, En as EventPayloadTooLarge, ci as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, re as IMPERSONATION_METADATA_KEY, st as JSONAPI_MEDIA_TYPE, mn as MAX_EVENT_ENVELOPE_BYTES, ft as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, qe as MutationConnectionRequired, dt as MutationInFlight, zr as NoRowFound, nt as PROBLEM_JSON, di as PROTOCOL_VERSION, Rt as PendingApproval, w as REACTIVITY_CHANNEL_PREFIX, at as REST_PROFILE_NAMES, f as ScopeError, Hr as ServerOnlyColumnWrite, Rr as StoreOperationFailed, ie as Subject, oe as SubjectIdentity, o as SubjectService, Br as TableValidationFailed, Vr as TenantRowNotFound, Lr as TenantScopeViolation, ge as TenantSelectionRefused, Dr as UNDO_APPLY_TAG, Er as UNDO_LOG_TAG, Or as UNDO_REDO_TAG, l as Unauthenticated, Mr as UndoConflict, jr as UndoForbidden, kr as UndoLogEntry, Ar as UndoNotFound, Dt as ValidationError, Ot as ValidationErrors, Et as ValidationIssue, L as WorkflowAccessProperty, Y as WorkflowControlInputSchema, J as WorkflowControlIntentSchema, cr as WorkflowControlReadInputSchema, W as WorkflowControlResultSchema, rr as WorkflowDomainEventRowSchema, or as WorkflowDomainEventsInputSchema, sr as WorkflowEventDeliveriesInputSchema, ir as WorkflowEventDeliveryRowSchema, Xn as WorkflowParentClosePolicySchema, lr as WorkflowQueuedCancelInputSchema, G as WorkflowQueuedCancellationResultSchema, X as WorkflowQueuedControlTargetSchema, nr as WorkflowRunEventRowSchema, Qn as WorkflowRunHandleSchema, ar as WorkflowRunRefSchema, K as WorkflowRunRowSchema, U as WorkflowRunSnapshotSchema, H as WorkflowRunStatusSchema, tr as WorkflowRunStepRowSchema, q as WorkflowRunTableRefSchema, er as WorkflowRunsInputSchema, pr as WorkflowSignalInputSchema, Zn as WorkflowStartDeferralSchema, Yn as WorkflowStartTerminalOutcomeSchema, mr as WorkflowUpdateInputSchema, hr as WorkflowUpdateResultSchema, ln as actionToRpc, Me as advisoryResourceGuardWarning, ne as anonymousSubject, Ct as applyRowPatch, ce as applyScopeDecision, qr as approvalsDecideDescriptor, Kr as approvalsPendingQueryDescriptor, ze as assertAuthenticated, Pn as attachWorkflowAccess, Ue as beginIdempotent, Vn as checkFrameworkCompat, ve as checkGuards, Ee as checkGuardsEffect, tt as compareSurfaces, n as composeAuthStrategies, zn as composeRpcInterceptors, oi as connectionDisconnectDescriptor, ii as connectionStartDescriptor, ai as connectionSubmitTokenDescriptor, ri as connectionsListQueryDescriptor, Gt as declaredReactivityChannelKeys, N as defineAction, gn as defineEvent, M as defineMutation, In as definePlugin, Ln as definePluginRoute, Bn as definePluginService, j as defineQuery, $t as defineStream, ui as defineWebSocket, xt as diffRows, Pe as effectiveScopes, Dn as encodeEventKey, $e as encodeRestError, Ke as encodeRestSuccess, dn as errorTag, yn as eventAttached, _n as eventEnvelope, vn as eventGap, xn as eventResumePoint, kn as eventRoute, bn as eventStreamEvent, Sn as eventSubscribeInput, Cn as eventToRpc, Be as failIdempotent, kt as fieldIssuesOf, ye as findAdvisoryResourceGuards, ut as finishIdempotent, jn as formatEventRoute, be as getPolicyGuardResolver, ke as getResourceScopeResolver, R as getWorkflowAccess, Qe as groupShapeDigests, Qt as hasAccessDecision, fe as hasCallbackRoutes, De as hasEffectiveScope, F as hasEnforcedGuard, Se as hasScope, g as idToPath, We as idempotencyScope, b as inputLabel, xe as isAuthenticatedCheck, Zt as isAuthenticatedGuard, hn as isEventDescriptor, St as isIdKeyed, u as isOpenAccess, Fe as isPolicyCheck, Xt as isPolicyGuard, Ut as isReactivityChannel, Wt as isReactivityChannelKey, c as isSystemSubject, se as isTenantSelectable, Jt as isWireReachable, de as makeScopeCache, He as memoryIdempotencyStore, Re as missingAccessDecision, cn as mutationToRpc, rt as nextLink, pn as normalizeDescriptor, O as normalizeSource, d as openAccessSpec, pe as orderByBearerPrefix, An as parseEventRoute, yt as pathToId, Un as pluginAlias, Rn as pluginInstanceName, Wn as pluginSlug, Jn as pluginTag, ot as problemDetails, Je as problemTypeOf, Ze as procedureShapeDigest, qt as publishReactivity, Xe as publishServerError, sn as queryToRpc, s as rawImpersonationMark, Ht as reactivityChannel, Kn as registerPluginAliases, Le as requireScope, qn as resetPluginAliases, le as resolvePolicyAction, et as resolveRestFormat, Nn as resolveWorkflowAccess, ct as restViewSchema, _t as rowPatchOpSchema, vt as rowPatchSchema, Ge as schemaShape, te as scopeCacheKey, e as selectSubjectTenant, r as setEffectiveScopes, Ie as setPolicyGuardResolver, ue as setResourceScopeResolver, lt as shapeDigest, D as sourceKeys, un as streamToRpc, x as strictInput, Ae as subjectAuditActorId, ee as subjectIdentity, a as subjectScopes, it as subscribeServerErrors, y as subscriptionEvent, he as systemSubject, me as tenantScopedSubject, fn as toRpc, Ye as toSnakeCase, si as tsMs, Kt as undeclaredChannelKeys, Fr as undoApplyDescriptor, Pr as undoLogQueryDescriptor, Ir as undoRedoDescriptor, I as wireErrorUnion, on as withRpcTag, Fn as workflowAccessDescriptor, Sr as workflowCancelDescriptor, fr as workflowControlQueryDescriptor, br as workflowDomainEventsQueryDescriptor, xr as workflowEventDeliveriesQueryDescriptor, ur as workflowQueuedCancelDescriptor, dr as workflowQueuedControlQueryDescriptor, Cr as workflowResumeDescriptor, yr as workflowRunEventsQueryDescriptor, gr as workflowRunQueryDescriptor, vr as workflowRunStepsQueryDescriptor, _r as workflowRunsQueryDescriptor, wr as workflowSignalDescriptor, $n as workflowToRpc, Tr as workflowUpdateDescriptor, an as workflowWireErrorUnion, Ve as wsMutationIdempotencyScope };