@voltro/protocol 0.81.0 → 0.83.0

package/dist/index.js

@@ -1,58 +1,67 @@
-import { $ as e, A as t, B as n, C as r, D as i, E as a, F as o, G as s, H as c, I as ee, J as te, K as ne, L as re, M as ie, N as ae, O as oe, P as se, Q as ce, R as le, S as ue, T as de, U as fe, V as pe, W as me, X as he, Y as ge, Z as _e, _ as l, a as ve, at as ye, b as be, c as xe, d as Se, et as Ce, f as we, g as Te, h as Ee, i as De, it as Oe, j as ke, k as Ae, l as je, m as Me, n as Ne, nt as Pe, o as u, p as Fe, q as Ie, r as Le, rt as Re, s as ze, t as Be, tt as Ve, u as He, v as Ue, w as d, x as f, y as We, z as p } from "./scopes-CvU5QBQ4.js";
-import { A as Ge, C as Ke, D as qe, E as Je, O as Ye, S as Xe, T as Ze, _ as Qe, a as $e, b as et, c as tt, d as nt, f as rt, g as it, h as at, i as ot, k as st, l as ct, m as lt, n as ut, o as dt, p as ft, r as pt, s as mt, t as ht, u as gt, v as _t, w as vt, x as yt, y as bt } from "./restFormat-CzdGVkuB.js";
-import { Context as xt, Layer as St, Schema as m } from "effect";
-import { Rpc as h } from "@effect/rpc";
-import { VersionConflict as Ct } from "@voltro/database/wire";
+import { $ as e, A as t, B as n, C as r, D as i, E as a, F as o, G as s, H as c, I as ee, J as te, K as ne, L as re, M as ie, N as ae, O as oe, P as se, Q as ce, R as le, S as ue, T as de, U as fe, V as l, W as pe, X as me, Y as he, Z as ge, _ as _e, a as ve, at as ye, b as be, c as xe, d as u, et as Se, f as Ce, g as we, h as Te, i as Ee, it as De, j as Oe, k as ke, l as Ae, m as je, n as Me, nt as Ne, o as d, ot as Pe, p as Fe, q as Ie, r as Le, rt as Re, s as f, st as ze, t as Be, tt as Ve, u as He, v as Ue, w as We, x as Ge, y as p, z as Ke } from "./scopes-Di756ENh.js";
+import { A as qe, C as m, D as Je, E as Ye, O as Xe, S as Ze, T as Qe, _ as $e, a as et, b as tt, c as nt, d as rt, f as it, g as at, h as ot, i as st, j as ct, k as lt, l as ut, m as dt, n as ft, o as pt, p as mt, r as ht, s as gt, t as _t, u as vt, v as yt, w as bt, x as xt, y as St } from "./restFormat-EZ8k9ZcQ.js";
+import { n as Ct, t as wt } from "./sessionHeader-DriTZhmv.js";
+import { Context as Tt, Either as Et, Encoding as Dt, Layer as Ot, Schema as h } from "effect";
+import { Rpc as g } from "@effect/rpc";
+import { VersionConflict as kt } from "@voltro/database/wire";
 //#region src/rowPatch.ts
-var wt = m.Union(m.String, m.Number), Tt = m.Record({
-	key: m.String,
-	value: m.Unknown
-}).pipe(m.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), Et = m.Union(m.Struct({
-	op: m.Literal("add"),
-	path: m.String,
-	value: Tt
-}), m.Struct({
-	op: m.Literal("replace"),
-	path: m.String,
-	value: Tt
-}), m.Struct({
-	op: m.Literal("remove"),
-	path: m.String
-}), m.Struct({
-	op: m.Literal("mergeCells"),
-	path: m.String,
-	value: m.Record({
-		key: m.String,
-		value: m.Unknown
+var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e && !Array.isArray(e) && Object.keys(e).length === 1 && typeof e.$bytes == "string", _ = h.transform(h.Unknown, h.Unknown, {
+	strict: !0,
+	decode: (e) => {
+		if (!jt(e)) return e;
+		let t = Dt.decodeBase64(e.$bytes);
+		return Et.isRight(t) ? t.right : e;
+	},
+	encode: (e) => e instanceof Uint8Array ? { $bytes: Dt.encodeBase64(e) } : e
+}), Mt = h.Record({
+	key: h.String,
+	value: _
+}).pipe(h.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), Nt = h.Union(h.Struct({
+	op: h.Literal("add"),
+	path: h.String,
+	value: Mt
+}), h.Struct({
+	op: h.Literal("replace"),
+	path: h.String,
+	value: Mt
+}), h.Struct({
+	op: h.Literal("remove"),
+	path: h.String
+}), h.Struct({
+	op: h.Literal("mergeCells"),
+	path: h.String,
+	value: h.Record({
+		key: h.String,
+		value: _
 	})
-})), Dt = m.Struct({
-	ops: m.Array(Et),
-	order: m.Array(wt)
-}), g = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, Ot = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), _ = (e) => {
+})), Pt = h.Struct({
+	ops: h.Array(Nt),
+	order: h.Array(At)
+}), v = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, y = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), b = (e) => {
 	let t = Object.keys(e).sort(), n = {};
 	for (let r of t) n[r] = e[r];
 	return JSON.stringify(n);
-}, v = (e, t) => _(e) === _(t), kt = (e, t) => {
+}, Ft = (e, t) => b(e) === b(t), It = (e, t) => {
 	if (e instanceof Uint8Array && t instanceof Uint8Array) {
 		if (e.length !== t.length) return !1;
 		for (let n = 0; n < e.length; n += 1) if (e[n] !== t[n]) return !1;
 		return !0;
 	}
-	return _({
+	return b({
 		id: 0,
 		v: e
-	}) === _({
+	}) === b({
 		id: 0,
 		v: t
 	});
-}, At = (e, t, n = {}) => {
+}, Lt = (e, t, n = {}) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) r.set(t.id, t);
 	let i = [], a = [], o = /* @__PURE__ */ new Set(), s = n.crdt, c = (e, t) => {
 		if (s === void 0 || s.columns.size === 0) return;
 		let n = {}, r = !1;
 		for (let i of s.columns) {
-			if (!(i in t) || kt(e[i], t[i])) continue;
+			if (!(i in t) || It(e[i], t[i])) continue;
 			let a = s.incremental(i, e[i], t[i]);
 			if (a === void 0) return;
 			n[i] = a, r = !0;
@@ -70,120 +79,125 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 		let t = r.get(e.id);
 		if (t === void 0) i.push({
 			op: "add",
-			path: g(e.id),
+			path: v(e.id),
 			value: e
 		});
-		else if (!v(t, e)) {
+		else if (!Ft(t, e)) {
 			let n = c(t, e);
 			n === void 0 ? i.push({
 				op: "replace",
-				path: g(e.id),
+				path: v(e.id),
 				value: e
-			}) : (v(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
+			}) : (Ft(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
 				op: "replace",
-				path: g(e.id),
+				path: v(e.id),
 				value: n.scalars
 			}), i.push({
 				op: "mergeCells",
-				path: g(e.id),
+				path: v(e.id),
 				value: n.merges
 			}));
 		}
 	}
 	for (let t of e) o.has(t.id) || i.push({
 		op: "remove",
-		path: g(t.id)
+		path: v(t.id)
 	});
 	return {
 		ops: i,
 		order: a
 	};
-}, jt = (e) => e.every((e) => {
+}, Rt = (e) => e.every((e) => {
 	let t = e.id;
 	return typeof t == "string" || typeof t == "number";
-}), Mt = (e, t, n = {}) => {
+}), zt = (e, t, n = {}) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) r.set(t.id, t);
+	let i = /* @__PURE__ */ new Map();
+	for (let e of t.ops) e.op === "mergeCells" && i.set(y(e.path), Object.keys(e.value));
 	for (let e of t.ops) {
 		if (e.op === "mergeCells") {
-			let t = Ot(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
+			let t = y(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
 			if (i === void 0) continue;
 			let o = { ...i };
 			for (let [t, r] of Object.entries(e.value)) o[t] = n.mergeCell === void 0 ? r : n.mergeCell(t, i[t], r);
 			r.set(a, o);
 			continue;
 		}
-		(e.op === "add" || e.op === "replace") && r.set(e.value.id, e.value);
+		if (e.op === "add" && r.set(e.value.id, e.value), e.op === "replace") {
+			let t = r.get(e.value.id), n = (t === void 0 ? [] : i.get(String(e.value.id)) ?? []).filter((n) => !(n in e.value) && n in t);
+			r.set(e.value.id, n.length === 0 ? e.value : {
+				...e.value,
+				...Object.fromEntries(n.map((e) => [e, t[e]]))
+			});
+		}
 	}
-	let i = [];
+	let a = [];
 	for (let e of t.order) {
 		let t = r.get(e);
-		t !== void 0 && i.push(t);
+		t !== void 0 && a.push(t);
 	}
-	return i;
-}, Nt = (e) => m.Union(m.Struct({
-	_tag: m.Literal("snapshot"),
-	revision: m.Number,
+	return a;
+}, Bt = (e) => h.Union(h.Struct({
+	_tag: h.Literal("snapshot"),
+	revision: h.Number,
 	data: e,
-	computed: m.optional(m.Boolean),
-	reconciles: m.optional(m.String)
-}), m.Struct({
-	_tag: m.Literal("delta"),
-	revision: m.Number,
-	emittedAt: m.Number,
-	patch: Dt
-}), m.Struct({
-	_tag: m.Literal("error"),
-	error: m.Unknown,
-	revision: m.optional(m.Number)
-})), Pt = (e, t, n) => {
+	computed: h.optional(h.Boolean),
+	reconciles: h.optional(h.String)
+}), h.Struct({
+	_tag: h.Literal("delta"),
+	revision: h.Number,
+	emittedAt: h.Number,
+	patch: Pt
+}), h.Struct({
+	_tag: h.Literal("error"),
+	error: h.Unknown,
+	revision: h.optional(h.Number)
+})), Vt = (e, t, n) => {
 	if (!t || typeof t != "object" || !("_tag" in t)) return t;
 	let r = t;
 	switch (r._tag) {
 		case "snapshot": return r.data;
-		case "error": {
-			let t = r.error;
-			throw Object.assign(Error(`${n} ${e}: ${t?._tag ?? "error"}${t?.message ? ` — ${t.message}` : ""}`, { cause: r.error }), { voltroError: r.error });
-		}
+		case "error": throw r.error === void 0 ? Error(`${n} ${e}: the rpc refused without an error value`) : r.error;
 		case "delta": throw Error(`${n} ${e}: received a 'delta' as the first event, which should be impossible — a subscription always opens with a snapshot. This is a framework bug.`);
 		default: return t;
 	}
-}, Ft = (e, t) => {
+}, Ht = (e, t) => {
 	let n = `${e ?? "this procedure"} input`;
 	return t === !0 ? `${n} (guarded — the guard did NOT run: the payload failed to decode first, so this says nothing about access)` : n;
-}, It = (e) => {
+}, Ut = (e) => {
 	let t = e.ast;
 	return t._tag === "TypeLiteral" && (t.propertySignatures?.length ?? 0) === 0 && (t.indexSignatures?.length ?? 0) === 0;
-}, y = (e, t, n) => {
-	let r = Ft(t, n), i = e.annotations({
+}, x = (e, t, n) => {
+	let r = Ht(t, n), i = e.annotations({
 		parseOptions: { onExcessProperty: "error" },
 		parseIssueTitle: () => r
 	});
-	return It(e) ? m.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
-}, Lt = class extends m.TaggedError()("BusinessRuleViolation", {
-	rule: m.String,
-	params: m.optional(m.Record({
-		key: m.String,
-		value: m.Unknown
+	return Ut(e) ? h.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
+}, S = class extends h.TaggedError()("BusinessRuleViolation", {
+	rule: h.String,
+	params: h.optional(h.Record({
+		key: h.String,
+		value: h.Unknown
 	})),
-	field: m.optional(m.String),
-	message: m.optional(m.String),
-	severity: m.Literal("error", "warning")
-}) {}, Rt = m.Struct({
-	field: m.String,
-	message: m.String,
-	params: m.optional(m.Record({
-		key: m.String,
-		value: m.Unknown
+	field: h.optional(h.String),
+	message: h.optional(h.String),
+	severity: h.Literal("error", "warning")
+}) {}, Wt = h.Struct({
+	field: h.String,
+	message: h.String,
+	params: h.optional(h.Record({
+		key: h.String,
+		value: h.Unknown
 	}))
-}), zt = class extends m.TaggedError()("ValidationError", {
-	field: m.String,
-	message: m.String,
-	params: m.optional(m.Record({
-		key: m.String,
-		value: m.Unknown
+}), C = class extends h.TaggedError()("ValidationError", {
+	field: h.String,
+	message: h.String,
+	params: h.optional(h.Record({
+		key: h.String,
+		value: h.Unknown
 	}))
-}) {}, Bt = class extends m.TaggedError()("ValidationErrors", { issues: m.Array(Rt).pipe(m.minItems(1)) }) {}, Vt = (e) => {
+}) {}, w = class extends h.TaggedError()("ValidationErrors", { issues: h.Array(Wt).pipe(h.minItems(1)) }) {}, Gt = (e) => {
 	if (typeof e != "object" || !e) return [];
 	let t = e._tag;
 	if (t === "ValidationError") {
@@ -209,69 +223,69 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 		}];
 	}
 	return [];
-}, Ht = class extends m.TaggedError()("ApprovalRequired", {
-	approvalId: m.String,
-	procedure: m.String,
-	expiresAt: m.String,
-	requiredScopes: m.Array(m.String),
-	reason: m.NullOr(m.String),
-	created: m.Boolean
-}) {}, Ut = class extends m.TaggedError()("ApprovalNotFound", { approvalId: m.String }) {}, Wt = class extends m.TaggedError()("ApprovalSelfApproval", {
-	approvalId: m.String,
-	subjectId: m.NullOr(m.String)
-}) {}, Gt = class extends m.TaggedError()("ApprovalRejected", {
-	approvalId: m.String,
-	decidedBy: m.NullOr(m.String),
-	note: m.NullOr(m.String)
-}) {}, b = class extends m.TaggedError()("ApprovalExpired", {
-	approvalId: m.String,
-	expiredAt: m.String
-}) {}, Kt = class extends m.TaggedError()("ApprovalNotPending", {
-	approvalId: m.String,
-	status: m.String
-}) {}, qt = class extends m.TaggedError()("ApprovalForbidden", {
-	approvalId: m.String,
-	required: m.NullOr(m.String),
-	message: m.String
-}) {}, x = class extends m.TaggedError()("ApprovalUnavailable", {
-	procedure: m.String,
-	message: m.String
-}) {}, Jt = m.Union(Ht, Gt, b, x), Yt = m.Union(Ut, Wt, b, Kt, qt, x), Xt = m.Struct({
-	id: m.String,
-	procedure: m.String,
-	kind: m.Literal("mutation", "action"),
-	requestedBy: m.NullOr(m.String),
-	status: m.Literal("pending", "approved", "rejected", "expired", "consumed"),
-	reason: m.NullOr(m.String),
-	requiredScopes: m.Array(m.String),
-	requestedAt: m.String,
-	expiresAt: m.String,
-	decidedBy: m.NullOr(m.String),
-	decidedAt: m.NullOr(m.String),
-	note: m.NullOr(m.String),
-	relation: m.Literal("to-decide", "requested")
-}), S = "channel:", Zt = Symbol.for("@voltro/protocol/reactivityChannels"), Qt = globalThis, C = Qt[Zt] ?? (Qt[Zt] = /* @__PURE__ */ new Map()), $t = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, en = (e) => {
-	if (!$t.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
+}, Kt = class extends h.TaggedError()("ApprovalRequired", {
+	approvalId: h.String,
+	procedure: h.String,
+	expiresAt: h.String,
+	requiredScopes: h.Array(h.String),
+	reason: h.NullOr(h.String),
+	created: h.Boolean
+}) {}, qt = class extends h.TaggedError()("ApprovalNotFound", { approvalId: h.String }) {}, Jt = class extends h.TaggedError()("ApprovalSelfApproval", {
+	approvalId: h.String,
+	subjectId: h.NullOr(h.String)
+}) {}, Yt = class extends h.TaggedError()("ApprovalRejected", {
+	approvalId: h.String,
+	decidedBy: h.NullOr(h.String),
+	note: h.NullOr(h.String)
+}) {}, T = class extends h.TaggedError()("ApprovalExpired", {
+	approvalId: h.String,
+	expiredAt: h.String
+}) {}, Xt = class extends h.TaggedError()("ApprovalNotPending", {
+	approvalId: h.String,
+	status: h.String
+}) {}, Zt = class extends h.TaggedError()("ApprovalForbidden", {
+	approvalId: h.String,
+	required: h.NullOr(h.String),
+	message: h.String
+}) {}, E = class extends h.TaggedError()("ApprovalUnavailable", {
+	procedure: h.String,
+	message: h.String
+}) {}, Qt = h.Union(Kt, Yt, T, E), $t = h.Union(qt, Jt, T, Xt, Zt, E), en = h.Struct({
+	id: h.String,
+	procedure: h.String,
+	kind: h.Literal("mutation", "action"),
+	requestedBy: h.NullOr(h.String),
+	status: h.Literal("pending", "approved", "rejected", "expired", "consumed"),
+	reason: h.NullOr(h.String),
+	requiredScopes: h.Array(h.String),
+	requestedAt: h.String,
+	expiresAt: h.String,
+	decidedBy: h.NullOr(h.String),
+	decidedAt: h.NullOr(h.String),
+	note: h.NullOr(h.String),
+	relation: h.Literal("to-decide", "requested")
+}), D = "channel:", tn = Symbol.for("@voltro/protocol/reactivityChannels"), nn = globalThis, O = nn[tn] ?? (nn[tn] = /* @__PURE__ */ new Map()), rn = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, an = (e) => {
+	if (!rn.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
   \`billing.usage\`. A \`:\` is refused because it is the namespace separator in
-  the routing key (\`${S}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
+  the routing key (\`${D}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
   routes as two.`);
-	let t = C.get(e);
+	let t = O.get(e);
 	if (t !== void 0) return t;
-	let n = `${S}${e}`, r = Object.freeze({
+	let n = `${D}${e}`, r = Object.freeze({
 		kind: "reactivity-channel",
 		name: e,
 		key: n,
 		toString: () => n
 	});
-	return C.set(e, r), r;
-}, tn = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", nn = (e) => e.startsWith(S), rn = () => new Set([...C.values()].map((e) => e.key)), w = (e) => tn(e) ? e.key : e, an = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(w) : [w(e)], on = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(w) : w(e), sn = (e) => {
-	let t = rn(), n = [];
-	for (let r of e) for (let e of an(r.source)) nn(e) && !t.has(e) && n.push({
+	return O.set(e, r), r;
+}, on = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", sn = (e) => e.startsWith(D), cn = () => new Set([...O.values()].map((e) => e.key)), k = (e) => on(e) ? e.key : e, ln = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(k) : [k(e)], un = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(k) : k(e), dn = (e) => {
+	let t = cn(), n = [];
+	for (let r of e) for (let e of ln(r.source)) sn(e) && !t.has(e) && n.push({
 		procedure: r.name,
 		key: e
 	});
 	return n;
-}, cn = (e, t) => {
+}, fn = (e, t) => {
 	let n = e?.injectExternalChange;
 	return n !== void 0 && (n.call(e, {
 		table: t.key,
@@ -280,8 +294,8 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 		old: {},
 		origin: "inline"
 	}), !0);
-}, T = (e) => e.internal !== !0, ln = (e) => e.service === void 0 ? "client" : "service", un = (e) => T(e) && e.service === void 0, dn = (e) => T(e) && e.service !== void 0, E = /^[a-z][a-z0-9-]{0,55}$/i, D = (e) => {
-	if (pn(e), fn(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
+}, A = (e) => e.internal !== !0, pn = (e) => e.service === void 0 ? "client" : "service", mn = (e) => A(e) && e.service === void 0, hn = (e) => A(e) && e.service !== void 0, gn = /^[a-z][a-z0-9-]{0,55}$/i, j = (e) => {
+	if (vn(e), _n(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
 	let t = e.serialize;
 	if (t !== void 0) {
 		if (typeof t.key != "function") throw Error(`${e.name}: serialize.key must be a function of the input`);
@@ -305,13 +319,13 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 	let r = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
 	if (r.length === 0) return e;
 	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${r.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${r.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${r.join(" / ")} annotation if it is not.`);
-}, fn = (e) => {
+}, _n = (e) => {
 	let t = e.service;
 	if (t === void 0) return;
 	let n = t.callers;
 	if (!Array.isArray(n) || n.length === 0) throw Error(`${e.name}: \`service.callers\` is empty, so NO app may call this procedure —\n  and no browser either. Name the calling app(s), e.g. \`service: { callers: ['worker'] }\`,
   or drop \`service:\` if the procedure is meant for this app's own clients.`);
-	let r = n.filter((e) => typeof e != "string" || !E.test(e));
+	let r = n.filter((e) => typeof e != "string" || !gn.test(e));
 	if (r.length > 0) throw Error(`${e.name}: \`service.callers\` holds ${r.map((e) => JSON.stringify(e)).join(", ")} — a caller is an\n  app name (letters, digits, dashes; starting with a letter; at most 56 characters), the same name this app
   lists in \`serviceCallers\` and the caller's credential resolves to.`);
 	if (new Set(n).size !== n.length) throw Error(`${e.name}: \`service.callers\` lists the same app twice`);
@@ -325,7 +339,7 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 	].filter((e) => e !== void 0);
 	if (i.length !== 0) throw Error(`${e.name}: \`service:\` cannot be combined with ${i.join("; ")}.\n  A service procedure is callable only by the listed apps of this project, over the
   socket, with their service credential. Drop the other field, or drop \`service:\`.`);
-}, pn = (e) => {
+}, vn = (e) => {
 	let t = e.requiresApproval;
 	if (t !== void 0) {
 		if (!Array.isArray(t.approvers) || t.approvers.length === 0) throw Error(`${e.name}: \`requiresApproval.approvers\` is empty, so NOBODY can approve this\n  procedure and every call would park forever. Name the scope(s) an approver must hold
@@ -335,43 +349,43 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
   human from every other, and the second-pair-of-eyes control would enforce nothing.
   Give the procedure a \`guards:\` decision, or drop \`requiresApproval\`.`);
 	}
-}, mn = (e) => e.action !== void 0 && e.resourceType !== void 0, hn = (e) => e.authenticated === !0, gn = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, O = (e, t, n, r) => {
-	if (r !== void 0) {
+}, yn = (e) => e.action !== void 0 && e.resourceType !== void 0, bn = (e) => e.authenticated === !0, xn = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, M = (e, t, n, i) => {
+	if (i !== void 0) {
 		if (n !== void 0 || t !== void 0 && t.length > 0) throw Error(`${e}: \`service:\` is an access decision of its own — only the listed apps may\n  call this procedure — so it cannot sit beside \`guards:\` or \`openAccess:\`. A service
   holds no scopes, and no user may call a service procedure. Keep exactly one.`);
-		return Array.isArray(r.callers) ? [d(r.callers)] : void 0;
+		return Array.isArray(i.callers) ? [a(i.callers)] : void 0;
 	}
 	if (n === void 0) return t;
 	if (n.trim() === "") throw Error(`${e}: \`openAccess\` needs a REASON, not an empty string. It is the sentence a\n  reviewer reads to decide whether this procedure should really be callable
   without an authorization check — e.g. \`openAccess: 'public pricing, no caller data'\`.`);
 	if (t !== void 0 && t.length > 0) throw Error(`${e}: \`openAccess\` and \`guards\` are two different access decisions, so\n  declaring both says the procedure is protected AND open. Keep the guards if a
   caller must hold a scope; drop them if anyone may call it.`);
-	return [f(n.trim())];
-}, k = (e) => D({
+	return [r(n.trim())];
+}, N = (e) => j({
 	kind: "query",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? m.Never,
-	source: on(e.source),
+	error: e.error ?? h.Never,
+	source: un(e.source),
 	cache: e.cache,
-	guards: O(e.name, e.guards, e.openAccess, e.service),
+	guards: M(e.name, e.guards, e.openAccess, e.service),
 	openAccess: e.openAccess,
 	service: e.service === void 0 ? void 0 : { callers: Array.isArray(e.service.callers) ? [...e.service.callers] : e.service.callers },
 	publicApi: e.publicApi,
 	exposeAsTool: e.exposeAsTool,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), A = (e) => D({
+}), P = (e) => j({
 	kind: "mutation",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? m.Never,
+	error: e.error ?? h.Never,
 	...e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope },
 	...e.serialize === void 0 ? {} : { serialize: e.serialize },
 	target: e.target,
-	guards: O(e.name, e.guards, e.openAccess, e.service),
+	guards: M(e.name, e.guards, e.openAccess, e.service),
 	openAccess: e.openAccess,
 	service: e.service === void 0 ? void 0 : { callers: Array.isArray(e.service.callers) ? [...e.service.callers] : e.service.callers },
 	publicApi: e.publicApi,
@@ -379,13 +393,13 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), j = (e) => D({
+}), F = (e) => j({
 	kind: "action",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? m.Never,
-	guards: O(e.name, e.guards, e.openAccess, e.service),
+	error: e.error ?? h.Never,
+	guards: M(e.name, e.guards, e.openAccess, e.service),
 	openAccess: e.openAccess,
 	service: e.service === void 0 ? void 0 : { callers: Array.isArray(e.service.callers) ? [...e.service.callers] : e.service.callers },
 	source: e.source,
@@ -395,54 +409,85 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), _n = (e) => D({
+}), Sn = (e) => j({
 	kind: "stream",
 	name: e.name,
 	input: e.input,
 	element: e.element,
-	error: e.error ?? m.Never,
+	error: e.error ?? h.Never,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin,
-	guards: O(e.name, e.guards, e.openAccess),
+	guards: M(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess
-}), M = (e, t) => t && t.length > 0 ? m.Union(e, ...t) : e, N = (e) => e !== void 0 && e.some((e) => !l(e)), vn = (e) => m.Union(e, u, p), yn = (e) => m.Union(e, Lt), bn = (e) => m.Union(e, zt, Bt), xn = (e, t) => t === void 0 ? e : m.Union(e, Jt), P = (e, t) => {
-	let n = vn(e.error);
+}), Cn = (e, t) => t && t.length > 0 ? h.Union(e, ...t) : e, I = (e) => e !== void 0 && e.some((e) => !p(e)), wn = (e) => h.Union(e, f, l), Tn = (e) => h.Union(e, S), En = (e) => h.Union(e, C, w), Dn = (e, t) => t === void 0 ? e : h.Union(e, Qt), On = (e, t) => u(t) ? h.Union(e, d) : e, L = (e, t, n) => Cn(kn(e, t), n), kn = (e, t) => {
+	let n = On(wn(e.error), e.guards);
 	if (t === "stream" || t === "query") return n;
-	let r = t === "mutation" ? m.Union(yn(n), Xe, Ct) : n;
-	return xn(bn(t === "mutation" && e.idempotencyScope === "connection" ? m.Union(r, yt) : r), e.requiresApproval);
-}, Sn = (e, t) => M(vn(e.errorSchema), t), Cn = (e, t) => ({
+	let r = t === "mutation" ? h.Union(Tn(n), m, kt) : n;
+	return Dn(En(t === "mutation" && e.idempotencyScope === "connection" ? h.Union(r, Ze) : r), e.requiresApproval);
+}, An = {
+	query: [f, l],
+	stream: [f, l],
+	action: [
+		f,
+		l,
+		C,
+		w
+	],
+	mutation: [
+		f,
+		l,
+		S,
+		m,
+		kt,
+		C,
+		w
+	]
+}, jn = (e, t) => Cn(On(wn(e.errorSchema), e.guards), t), Mn = (e, t) => ({
 	...e,
 	name: t
-}), wn = (e, t) => h.make(e.name, {
-	payload: y(e.input, e.name, N(e.guards)),
-	success: Nt(e.output),
-	error: M(P(e, "query"), t),
+}), Nn = (e, t) => g.make(e.name, {
+	payload: x(e.input, e.name, I(e.guards)),
+	success: Bt(e.output),
+	error: L(e, "query", t),
 	stream: !0
-}), Tn = (e, t) => h.make(e.name, {
-	payload: y(e.input, e.name, N(e.guards)),
+}), Pn = (e, t) => g.make(e.name, {
+	payload: x(e.input, e.name, I(e.guards)),
 	success: e.output,
-	error: M(P(e, "mutation"), t)
-}), En = (e, t) => h.make(e.name, {
-	payload: y(e.input, e.name, N(e.guards)),
+	error: L(e, "mutation", t)
+}), Fn = (e, t) => g.make(e.name, {
+	payload: x(e.input, e.name, I(e.guards)),
 	success: e.output,
-	error: M(P(e, "action"), t)
-}), Dn = (e, t) => h.make(e.name, {
-	payload: y(e.input, e.name, N(e.guards)),
+	error: L(e, "action", t)
+}), In = (e, t) => g.make(e.name, {
+	payload: x(e.input, e.name, I(e.guards)),
 	success: e.element,
-	error: M(e.error, t),
+	error: L(e, "stream", t),
 	stream: !0
-}), On = (e) => {
+}), R = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
 	return typeof t == "string" ? t : void 0;
-}, kn = (e) => {
+}, Ln = (e) => {
+	if (typeof e == "string") return e;
+	if (typeof e == "object" && e) {
+		let t = e.message;
+		if (typeof t == "string" && t !== "") return t;
+		let n = R(e);
+		if (n !== void 0) return n;
+	}
+	return String(e);
+}, Rn = (e) => {
+	if (e instanceof Error) return e;
+	let t = Error(Ln(e), { cause: e });
+	return t.name = R(e) ?? "NonErrorThrown", t;
+}, zn = (e) => {
 	switch (e.kind) {
-		case "query": return wn(e);
-		case "mutation": return Tn(e);
-		case "action": return En(e);
-		case "stream": return Dn(e);
+		case "query": return Nn(e);
+		case "mutation": return Pn(e);
+		case "action": return Fn(e);
+		case "stream": return In(e);
 	}
-}, An = (e) => {
+}, Bn = (e) => {
 	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
 	if (e.kind === "query") return {
 		kind: "query",
@@ -488,7 +533,7 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 			..."relations" in e && e.relations !== void 0 ? { relations: e.relations } : {}
 		}))
 	};
-}, jn = 7500, Mn = (e) => typeof e == "object" && !!e && e.kind === "event", Nn = (e) => {
+}, Vn = 7500, Hn = (e) => typeof e == "object" && !!e && e.kind === "event", Un = (e) => {
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -517,68 +562,68 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 		name: e.name,
 		key: e.key,
 		payload: e.payload,
-		guards: e.openAccess === void 0 ? e.guards : [f(e.openAccess.trim())],
+		guards: e.openAccess === void 0 ? e.guards : [r(e.openAccess.trim())],
 		openAccess: e.openAccess,
 		rewind: e.rewind,
 		webhook: e.webhook,
 		delivery: e.delivery
 	};
-}, Pn = (e) => m.Struct({
-	_tag: m.Literal("event"),
-	origin: m.String,
-	n: m.Number,
-	emittedAt: m.Number,
+}, Wn = (e) => h.Struct({
+	_tag: h.Literal("event"),
+	origin: h.String,
+	n: h.Number,
+	emittedAt: h.Number,
 	payload: e
-}), Fn = m.Struct({
-	_tag: m.Literal("gap"),
-	missed: m.Number,
-	reason: m.Literal("buffer", "resume")
-}), In = m.Struct({ _tag: m.Literal("attached") }), Ln = (e) => m.Union(In, Pn(e), Fn), Rn = m.Struct({
-	origin: m.String,
-	n: m.Number
-}), zn = (e) => m.Struct({
+}), Gn = h.Struct({
+	_tag: h.Literal("gap"),
+	missed: h.Number,
+	reason: h.Literal("buffer", "resume")
+}), Kn = h.Struct({ _tag: h.Literal("attached") }), qn = (e) => h.Union(Kn, Wn(e), Gn), Jn = h.Struct({
+	origin: h.String,
+	n: h.Number
+}), Yn = (e) => h.Struct({
 	key: e,
-	resume: m.optional(m.Array(Rn))
-}), Bn = (e, t) => {
-	let n = e.guards !== void 0 && e.guards.some((e) => !l(e)) ? m.Union(u, p) : p, r = t && t.length > 0 ? m.Union(n, ...t) : n;
-	return h.make(e.name, {
-		payload: y(zn(e.key), e.name, N(e.guards)),
-		success: Ln(e.payload),
-		error: r,
+	resume: h.optional(h.Array(Jn))
+}), Xn = (e, t) => {
+	let n = e.guards !== void 0 && e.guards.some((e) => !p(e)) ? h.Union(f, l) : l, r = u(e.guards) ? h.Union(n, d) : n, i = t && t.length > 0 ? h.Union(r, ...t) : r;
+	return g.make(e.name, {
+		payload: x(Yn(e.key), e.name, I(e.guards)),
+		success: qn(e.payload),
+		error: i,
 		stream: !0
 	});
-}, Vn = class extends m.TaggedError()("EventPayloadInvalid", {
-	event: m.String,
-	message: m.String
-}) {}, Hn = class extends m.TaggedError()("EventKeyInvalid", {
-	event: m.String,
-	message: m.String
-}) {}, Un = class extends m.TaggedError()("EventPayloadTooLarge", {
-	event: m.String,
-	bytes: m.Number,
-	limit: m.Number
-}) {}, Wn = (e) => {
+}, Zn = class extends h.TaggedError()("EventPayloadInvalid", {
+	event: h.String,
+	message: h.String
+}) {}, Qn = class extends h.TaggedError()("EventKeyInvalid", {
+	event: h.String,
+	message: h.String
+}) {}, $n = class extends h.TaggedError()("EventPayloadTooLarge", {
+	event: h.String,
+	bytes: h.Number,
+	limit: h.Number
+}) {}, er = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
 	let t = Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t));
 	return JSON.stringify(t);
-}, Gn = "\0", Kn = (e, t, n) => [
+}, tr = "\0", nr = (e, t, n) => [
 	e ?? "~",
 	t,
-	Wn(n)
-].join("\0"), qn = (e) => {
+	er(n)
+].join("\0"), rr = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, Jn = (e) => e.split("\0").join(" · "), F = Symbol.for("@voltro/protocol/workflow-access"), Yn = {
+}, ir = (e) => e.split("\0").join(" · "), z = Symbol.for("@voltro/protocol/workflow-access"), ar = {
 	guards: void 0,
 	openAccess: void 0,
 	internal: !1,
 	controls: void 0,
 	controlsOpenAccess: void 0
-}, Xn = (e, t) => {
+}, or = (e, t) => {
 	let n = t.guards;
 	if (n !== void 0 && n.length === 0) throw Error(`workflow("${e}"): \`guards: []\` is empty, so it enforces nothing —\n  but it reads at the call site as if the start were protected. Omit the field
   and decide with \`openAccess\` or \`internal\`, or list the scopes that may start it.`);
@@ -593,34 +638,34 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
   \`openAccess\` (an internal workflow needs no wire decision), or drop
   \`internal: true\` if the workflow really is meant to be startable by clients.`);
 	}
-	let r = t.controls?.guards, i = t.controls?.openAccess;
-	if (r !== void 0 && r.length === 0) throw Error(`workflow("${e}"): \`controls: { guards: [] }\` is empty, so it enforces nothing —\n  but it reads at the call site as if driving this run were protected. Omit
+	let i = t.controls?.guards, a = t.controls?.openAccess;
+	if (i !== void 0 && i.length === 0) throw Error(`workflow("${e}"): \`controls: { guards: [] }\` is empty, so it enforces nothing —\n  but it reads at the call site as if driving this run were protected. Omit
   \`controls\` (wire control is then refused for everyone but \`admin:full\`), or
   list the scopes a caller needs to cancel or signal a run.`);
-	if (i !== void 0) {
-		if (i.trim() === "") throw Error(`workflow("${e}"): \`controls: { openAccess }\` needs a REASON, not an empty string.\n  It is the sentence a reviewer reads to decide whether anyone who can see this
+	if (a !== void 0) {
+		if (a.trim() === "") throw Error(`workflow("${e}"): \`controls: { openAccess }\` needs a REASON, not an empty string.\n  It is the sentence a reviewer reads to decide whether anyone who can see this
   run should be able to cancel or signal it — e.g. \`controls: { openAccess:
   'the run belongs to the caller who started it; cancelling it affects nobody else' }\`.`);
-		if (r !== void 0 && r.length > 0) throw Error(`workflow("${e}"): \`controls\` takes \`guards\` OR \`openAccess\`, not both.\n  Two answers to one question; keep the guards if a caller needs a scope.`);
+		if (i !== void 0 && i.length > 0) throw Error(`workflow("${e}"): \`controls\` takes \`guards\` OR \`openAccess\`, not both.\n  Two answers to one question; keep the guards if a caller needs a scope.`);
 	}
 	return {
-		guards: t.openAccess === void 0 ? t.guards : [f(t.openAccess.trim())],
+		guards: t.openAccess === void 0 ? t.guards : [r(t.openAccess.trim())],
 		openAccess: t.openAccess?.trim(),
 		internal: t.internal === !0,
-		controls: i === void 0 ? r : [f(i.trim())],
-		controlsOpenAccess: i?.trim()
+		controls: a === void 0 ? i : [r(a.trim())],
+		controlsOpenAccess: a?.trim()
 	};
-}, Zn = (e, t) => {
-	Object.defineProperty(e, F, {
+}, sr = (e, t) => {
+	Object.defineProperty(e, z, {
 		value: t,
 		enumerable: !1
 	});
-}, I = (e) => {
-	if (typeof e != "object" || !e) return Yn;
-	let t = e[F];
-	return t === void 0 ? Yn : t;
-}, Qn = (e) => {
-	let t = I(e);
+}, B = (e) => {
+	if (typeof e != "object" || !e) return ar;
+	let t = e[z];
+	return t === void 0 ? ar : t;
+}, cr = (e) => {
+	let t = B(e);
 	return {
 		name: e.name,
 		internal: t.internal,
@@ -628,25 +673,25 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 		openAccess: t.openAccess,
 		controls: t.controls
 	};
-}, $n = class extends m.TaggedError()("ApiUnavailable", {
-	api: m.String,
-	tag: m.String,
-	reason: m.Literal("timeout", "transport", "closed"),
-	message: m.String
-}) {}, er = (e) => typeof e == "object" && !!e && e._tag === "ApiUnavailable", tr = (e) => e, nr = (e) => e, rr = (e) => {
+}, lr = class extends h.TaggedError()("ApiUnavailable", {
+	api: h.String,
+	tag: h.String,
+	reason: h.Literal("timeout", "transport", "closed"),
+	message: h.String
+}) {}, ur = (e) => typeof e == "object" && !!e && e._tag === "ApiUnavailable", dr = (e) => e, fr = (e) => e, pr = (e) => {
 	let t = e.alias?.trim(), n = e.instance?.trim(), r = t !== void 0 && t !== "" ? t : e.base;
 	return n !== void 0 && n !== "" ? `${r}#${n}` : r;
-}, ir = (e) => {
+}, mr = (e) => {
 	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
-}, ar = (e, t) => {
-	let n = xt.GenericTag(e);
+}, hr = (e, t) => {
+	let n = Tt.GenericTag(e);
 	return {
 		Tag: n,
-		Live: St.succeed(n, t)
+		Live: Ot.succeed(n, t)
 	};
-}, or = (e, t, n) => {
+}, gr = (e, t, n) => {
 	if (!t) return { ok: !0 };
-	let r = n === void 0 ? null : L(n);
+	let r = n === void 0 ? null : V(n);
 	if (!r) return {
 		ok: !0,
 		unverified: `plugin "${e}" requires framework ${t}, but the running framework version is ${n === void 0 ? "unknown" : `unreadable ("${n}")`} — not checked.`
@@ -654,12 +699,12 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 	let i = t.trim();
 	if (i === "*" || i === "") return { ok: !0 };
 	let a = i.split(/\s+/).filter((e) => e.length > 0);
-	for (let i of a) if (!sr(i, r)) return {
+	for (let i of a) if (!_r(i, r)) return {
 		ok: !1,
 		reason: `plugin "${e}" requires framework ${t}, running ${n}`
 	};
 	return { ok: !0 };
-}, L = (e) => {
+}, V = (e) => {
 	let t = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9a-zA-Z.-]+))?$/.exec(e.trim());
 	return t ? {
 		major: Number(t[1]),
@@ -667,109 +712,109 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 		patch: Number(t[3]),
 		pre: t[4] ?? ""
 	} : null;
-}, R = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, sr = (e, t) => {
+}, H = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, _r = (e, t) => {
 	if (e === "*") return !0;
 	if (e.startsWith("^")) {
-		let n = L(e.slice(1));
-		return !n || t.major !== n.major ? !1 : R(t, n) >= 0;
+		let n = V(e.slice(1));
+		return !n || t.major !== n.major ? !1 : H(t, n) >= 0;
 	}
 	if (e.startsWith("~")) {
-		let n = L(e.slice(1));
-		return !n || t.major !== n.major || t.minor !== n.minor ? !1 : R(t, n) >= 0;
+		let n = V(e.slice(1));
+		return !n || t.major !== n.major || t.minor !== n.minor ? !1 : H(t, n) >= 0;
 	}
 	let n = /^(>=|<=|>|<)(.+)$/.exec(e);
 	if (n) {
-		let e = n[1], r = L(n[2]);
+		let e = n[1], r = V(n[2]);
 		if (!r) return !1;
-		let i = R(t, r);
+		let i = H(t, r);
 		if (e === ">=") return i >= 0;
 		if (e === "<=") return i <= 0;
 		if (e === ">") return i > 0;
 		if (e === "<") return i < 0;
 	}
-	let r = L(e);
-	return r ? R(t, r) === 0 : !1;
-}, cr = (e) => {
+	let r = V(e);
+	return r ? H(t, r) === 0 : !1;
+}, vr = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/-([a-zA-Z0-9])/g, (e, t) => t.toUpperCase());
-}, lr = (e) => {
+}, yr = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/#/g, "--").replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
-}, ur = Symbol.for("@voltro/protocol/pluginAliases"), z = () => {
-	let e = globalThis, t = e[ur];
+}, br = Symbol.for("@voltro/protocol/pluginAliases"), U = () => {
+	let e = globalThis, t = e[br];
 	if (t instanceof Map) return t;
 	let n = /* @__PURE__ */ new Map();
-	return e[ur] = n, n;
-}, dr = (e) => {
-	let t = z();
+	return e[br] = n, n;
+}, xr = (e) => {
+	let t = U();
 	for (let [n, r] of Object.entries(e)) {
 		if (r === "") continue;
 		let e = t.get(n);
 		e === void 0 ? t.set(n, /* @__PURE__ */ new Set([r])) : e.add(r);
 	}
-}, fr = () => {
-	z().clear();
-}, pr = (e, t) => {
-	let n = z().get(e);
-	if (n === void 0 || n.size === 0) return `${cr(e)}.${t}`;
+}, Sr = () => {
+	U().clear();
+}, Cr = (e, t) => {
+	let n = U().get(e);
+	if (n === void 0 || n.size === 0) return `${vr(e)}.${t}`;
 	if (n.size === 1) return `${[...n][0]}.${t}`;
 	let r = [...n].filter((e) => !e.includes("#"));
 	if (r.length === 1) return `${r[0]}.${t}`;
 	throw Error(`[voltro] ${e} is installed more than once (${[...n].sort().join(", ")}) and no single install is the primary one, so a plugin hook cannot tell which of them it addresses. Call the route by its full tag instead — e.g. useSubscription(api, '${[...n].sort()[0]}.${t}').`);
-}, B = m.Union(m.Struct({
-	kind: m.Literal("dropped"),
-	at: m.Number,
-	retryAfterMs: m.Number
-}), m.Struct({
-	kind: m.Literal("skipped"),
-	at: m.Number,
-	executionId: m.String,
-	runId: m.String
-}), m.Struct({
-	kind: m.Literal("superseded"),
-	at: m.Number
-}), m.Struct({
-	kind: m.Literal("cancelled"),
-	at: m.Number
-}), m.Struct({
-	kind: m.Literal("abandoned"),
-	at: m.Number,
-	failureId: m.NonEmptyString
-})), V = m.Literal("running", "succeeded", "failed", "cancelled", "suspended"), H = m.Struct({
-	id: m.String,
-	workflowName: m.String,
-	executionId: m.String,
-	status: m.Union(V, m.Literal("unknown")),
-	output: m.optional(m.Unknown),
-	error: m.optional(m.Struct({
-		tag: m.NullOr(m.String),
-		message: m.String
+}, W = h.Union(h.Struct({
+	kind: h.Literal("dropped"),
+	at: h.Number,
+	retryAfterMs: h.Number
+}), h.Struct({
+	kind: h.Literal("skipped"),
+	at: h.Number,
+	executionId: h.String,
+	runId: h.String
+}), h.Struct({
+	kind: h.Literal("superseded"),
+	at: h.Number
+}), h.Struct({
+	kind: h.Literal("cancelled"),
+	at: h.Number
+}), h.Struct({
+	kind: h.Literal("abandoned"),
+	at: h.Number,
+	failureId: h.NonEmptyString
+})), G = h.Literal("running", "succeeded", "failed", "cancelled", "suspended"), K = h.Struct({
+	id: h.String,
+	workflowName: h.String,
+	executionId: h.String,
+	status: h.Union(G, h.Literal("unknown")),
+	output: h.optional(h.Unknown),
+	error: h.optional(h.Struct({
+		tag: h.NullOr(h.String),
+		message: h.String
 	}))
-}), U = m.Struct({
-	operation: m.Literal("cancel", "resume"),
-	kind: m.Literal("accepted", "confirmed", "unknown", "already-terminal"),
-	requestId: m.NullOr(m.NonEmptyString),
-	snapshot: H
-}).pipe(m.filter((e) => e.kind === "unknown" ? !0 : e.kind === "accepted" ? e.requestId !== null && (e.snapshot.status === "running" || e.snapshot.status === "suspended") : e.kind === "already-terminal" ? e.snapshot.status === "succeeded" || e.snapshot.status === "failed" || e.snapshot.status === "cancelled" : e.operation === "cancel" ? e.snapshot.status === "cancelled" : e.requestId !== null && e.snapshot.status === "running", { message: () => "Workflow control acknowledgement contradicts its observed state or receipt identity" })), W = m.Struct({
-	operation: m.Literal("cancel"),
-	workflowName: m.NonEmptyString,
-	receiptId: m.NonEmptyString,
-	requestId: m.NullOr(m.NonEmptyString),
-	kind: m.Literal("accepted", "confirmed", "unknown", "already-terminal"),
-	observation: m.Union(m.Struct({ kind: m.Literal("pending") }), m.Struct({
-		kind: m.Literal("admission"),
-		outcome: m.Union(B, m.Struct({
-			kind: m.Literal("rejected"),
-			failureId: m.NonEmptyString
+}), q = h.Struct({
+	operation: h.Literal("cancel", "resume"),
+	kind: h.Literal("accepted", "confirmed", "unknown", "already-terminal"),
+	requestId: h.NullOr(h.NonEmptyString),
+	snapshot: K
+}).pipe(h.filter((e) => e.kind === "unknown" ? !0 : e.kind === "accepted" ? e.requestId !== null && (e.snapshot.status === "running" || e.snapshot.status === "suspended") : e.kind === "already-terminal" ? e.snapshot.status === "succeeded" || e.snapshot.status === "failed" || e.snapshot.status === "cancelled" : e.operation === "cancel" ? e.snapshot.status === "cancelled" : e.requestId !== null && e.snapshot.status === "running", { message: () => "Workflow control acknowledgement contradicts its observed state or receipt identity" })), wr = h.Struct({
+	operation: h.Literal("cancel"),
+	workflowName: h.NonEmptyString,
+	receiptId: h.NonEmptyString,
+	requestId: h.NullOr(h.NonEmptyString),
+	kind: h.Literal("accepted", "confirmed", "unknown", "already-terminal"),
+	observation: h.Union(h.Struct({ kind: h.Literal("pending") }), h.Struct({
+		kind: h.Literal("admission"),
+		outcome: h.Union(W, h.Struct({
+			kind: h.Literal("rejected"),
+			failureId: h.NonEmptyString
 		}))
-	}), m.Struct({
-		kind: m.Literal("execution"),
-		snapshot: H
-	}), m.Struct({
-		kind: m.Literal("unavailable"),
-		reason: m.Literal("missing-request", "missing-run", "unconfirmed-generation", "unbound-submission")
+	}), h.Struct({
+		kind: h.Literal("execution"),
+		snapshot: K
+	}), h.Struct({
+		kind: h.Literal("unavailable"),
+		reason: h.Literal("missing-request", "missing-run", "unconfirmed-generation", "unbound-submission")
 	}))
-}).pipe(m.filter((e) => {
+}).pipe(h.filter((e) => {
 	let t = e.observation;
 	if (t.kind === "unavailable") return e.kind === "unknown" && (t.reason === "missing-request" ? e.requestId === null : e.requestId !== null);
 	if (e.requestId === null) return !1;
@@ -777,307 +822,342 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 	if (t.kind === "admission") return e.kind === (t.outcome.kind === "cancelled" ? "confirmed" : "already-terminal");
 	let n = t.snapshot;
 	return n.workflowName !== e.workflowName || n.id.length === 0 || n.executionId.length === 0 ? !1 : e.kind === "accepted" ? n.status === "running" || n.status === "suspended" : e.kind === "confirmed" ? n.status === "cancelled" : e.kind === "already-terminal" && (n.status === "succeeded" || n.status === "failed" || n.status === "cancelled");
-}, { message: () => "Queued cancellation acknowledgement contradicts its receipt or observation" })), mr = m.Literal("cancel", "terminate", "abandon"), hr = m.Struct({
-	mode: m.String,
-	dueAt: m.NullOr(m.Number),
-	retryAfterMs: m.NullOr(m.Number),
-	intentId: m.NullOr(m.String)
-}), gr = m.Struct({
-	id: m.String,
-	workflowName: m.String,
-	executionId: m.NullOr(m.String),
-	status: m.Literal("running", "succeeded", "queued", "dropped", "skipped", "replayed"),
-	deferral: m.optional(hr)
-}), _r = (e, t) => {
-	let n = I(e);
-	return h.make(e.name, {
-		payload: y(e.payloadSchema, e.name, N(n.guards)),
-		success: gr,
-		error: Sn({
+}, { message: () => "Queued cancellation acknowledgement contradicts its receipt or observation" })), Tr = h.Literal("cancel", "terminate", "abandon"), Er = h.Struct({
+	mode: h.String,
+	dueAt: h.NullOr(h.Number),
+	retryAfterMs: h.NullOr(h.Number),
+	intentId: h.NullOr(h.String)
+}), Dr = h.Struct({
+	id: h.String,
+	workflowName: h.String,
+	executionId: h.NullOr(h.String),
+	status: h.Literal("running", "succeeded", "queued", "dropped", "skipped", "replayed"),
+	deferral: h.optional(Er)
+}), Or = (e, t) => {
+	let n = B(e);
+	return g.make(e.name, {
+		payload: x(e.payloadSchema, e.name, I(n.guards)),
+		success: Dr,
+		error: jn({
 			errorSchema: e.errorSchema,
 			guards: n.guards
 		}, t)
 	});
-}, G = m.Struct({
-	id: m.String,
-	tag: m.String,
-	executionId: m.String,
-	status: V,
-	payload: m.Unknown,
-	workflowVersion: m.NullOr(m.String),
-	workflowPatches: m.NullOr(m.Unknown),
-	output: m.NullOr(m.Unknown),
-	subject: m.NullOr(m.Unknown),
-	source: m.NullOr(m.String),
-	errorTag: m.NullOr(m.String),
-	errorMessage: m.NullOr(m.String),
-	cancelled: m.Boolean,
-	startedAt: m.Date,
-	completedAt: m.NullOr(m.Date),
-	durationMs: m.NullOr(m.Number),
-	traceId: m.NullOr(m.String),
-	parentExecutionId: m.NullOr(m.String),
-	parentClosePolicy: m.NullOr(mr)
-}), vr = m.Struct({
-	tag: m.optional(m.String),
-	status: m.optional(V),
-	limit: m.optional(m.Number)
-}), yr = m.Struct({
-	id: m.String,
-	runId: m.String,
-	stepName: m.String,
-	attempt: m.Number,
-	status: m.Literal("running", "succeeded", "failed"),
-	input: m.NullOr(m.Unknown),
-	retryPolicy: m.NullOr(m.Unknown),
-	output: m.NullOr(m.Unknown),
-	errorTag: m.NullOr(m.String),
-	errorMessage: m.NullOr(m.String),
-	errorCause: m.NullOr(m.Unknown),
-	startedAt: m.Date,
-	completedAt: m.NullOr(m.Date),
-	durationMs: m.NullOr(m.Number)
-}), br = m.Struct({
-	id: m.String,
-	runId: m.String,
-	eventType: m.String,
-	payload: m.NullOr(m.Unknown),
-	occurredAt: m.Date,
-	stepName: m.NullOr(m.String),
-	attempt: m.NullOr(m.Number)
-}), xr = m.Struct({
-	id: m.String,
-	name: m.String,
-	payload: m.Unknown,
-	source: m.String,
-	subject: m.NullOr(m.Unknown),
-	traceId: m.NullOr(m.String),
-	occurredAt: m.Date
-}), Sr = m.Struct({
-	id: m.String,
-	eventId: m.String,
-	eventName: m.String,
-	triggerId: m.String,
-	workflowName: m.String,
-	executionId: m.NullOr(m.String),
-	status: m.Literal("starting", "started", "skipped", "failed"),
-	idempotencyKey: m.String,
-	skipped: m.Boolean,
-	errorMessage: m.NullOr(m.String),
-	createdAt: m.Date,
-	completedAt: m.NullOr(m.Date)
-}), Cr = m.Struct({ id: m.String }), K = m.Struct({ runId: m.String }), wr = m.Struct({
-	name: m.optional(m.String),
-	limit: m.optional(m.Number)
-}), Tr = m.Struct({ eventId: m.String }), q = m.Struct({
-	requestId: m.NonEmptyString,
-	cause: m.optionalWith(m.Struct({
-		reason: m.NonEmptyString,
-		detail: m.optional(m.Record({
-			key: m.String,
-			value: m.Unknown
+}, kr = h.Struct({
+	id: h.String,
+	tag: h.String,
+	executionId: h.String,
+	status: G,
+	payload: h.Unknown,
+	workflowVersion: h.NullOr(h.String),
+	workflowPatches: h.NullOr(h.Unknown),
+	output: h.NullOr(h.Unknown),
+	subject: h.NullOr(h.Unknown),
+	source: h.NullOr(h.String),
+	errorTag: h.NullOr(h.String),
+	errorMessage: h.NullOr(h.String),
+	cancelled: h.Boolean,
+	startedAt: h.Date,
+	completedAt: h.NullOr(h.Date),
+	durationMs: h.NullOr(h.Number),
+	traceId: h.NullOr(h.String),
+	parentExecutionId: h.NullOr(h.String),
+	parentClosePolicy: h.NullOr(Tr)
+}), Ar = h.Struct({
+	tag: h.optional(h.String),
+	status: h.optional(G),
+	limit: h.optional(h.Number)
+}), jr = h.Struct({
+	id: h.String,
+	runId: h.String,
+	stepName: h.String,
+	attempt: h.Number,
+	status: h.Literal("running", "succeeded", "failed"),
+	input: h.NullOr(h.Unknown),
+	retryPolicy: h.NullOr(h.Unknown),
+	output: h.NullOr(h.Unknown),
+	errorTag: h.NullOr(h.String),
+	errorMessage: h.NullOr(h.String),
+	errorCause: h.NullOr(h.Unknown),
+	startedAt: h.Date,
+	completedAt: h.NullOr(h.Date),
+	durationMs: h.NullOr(h.Number)
+}), Mr = h.Struct({
+	id: h.String,
+	runId: h.String,
+	eventType: h.String,
+	payload: h.NullOr(h.Unknown),
+	occurredAt: h.Date,
+	stepName: h.NullOr(h.String),
+	attempt: h.NullOr(h.Number)
+}), Nr = h.Struct({
+	id: h.String,
+	name: h.String,
+	payload: h.Unknown,
+	source: h.String,
+	subject: h.NullOr(h.Unknown),
+	traceId: h.NullOr(h.String),
+	occurredAt: h.Date
+}), Pr = h.Struct({
+	id: h.String,
+	eventId: h.String,
+	eventName: h.String,
+	triggerId: h.String,
+	workflowName: h.String,
+	executionId: h.NullOr(h.String),
+	status: h.Literal("starting", "started", "skipped", "failed"),
+	idempotencyKey: h.String,
+	skipped: h.Boolean,
+	errorMessage: h.NullOr(h.String),
+	createdAt: h.Date,
+	completedAt: h.NullOr(h.Date)
+}), Fr = h.Struct({ id: h.String }), Ir = h.Struct({ runId: h.String }), Lr = h.Struct({
+	name: h.optional(h.String),
+	limit: h.optional(h.Number)
+}), Rr = h.Struct({ eventId: h.String }), zr = h.Struct({
+	requestId: h.NonEmptyString,
+	cause: h.optionalWith(h.Struct({
+		reason: h.NonEmptyString,
+		detail: h.optional(h.Record({
+			key: h.String,
+			value: h.Unknown
 		}))
 	}), { exact: !0 })
-}), J = m.Struct({
-	workflowName: m.String,
-	executionId: m.String,
-	control: m.optional(q)
-}), Er = m.Struct({
-	workflowName: m.NonEmptyString,
-	executionId: m.NonEmptyString,
-	operation: m.Literal("cancel", "resume"),
-	requestId: m.NonEmptyString
-}), Y = m.Struct({
-	workflowName: m.NonEmptyString,
-	receiptId: m.NonEmptyString,
-	requestId: m.NonEmptyString
-}), Dr = m.Struct({
-	...Y.fields,
-	cause: q.fields.cause
-}), Or = j({
+}), Br = h.Struct({
+	workflowName: h.String,
+	executionId: h.String,
+	control: h.optional(zr)
+}), Vr = h.Struct({
+	workflowName: h.NonEmptyString,
+	executionId: h.NonEmptyString,
+	operation: h.Literal("cancel", "resume"),
+	requestId: h.NonEmptyString
+}), Hr = h.Struct({
+	workflowName: h.NonEmptyString,
+	receiptId: h.NonEmptyString,
+	requestId: h.NonEmptyString
+}), Ur = h.Struct({
+	...Hr.fields,
+	cause: zr.fields.cause
+}), Wr = F({
 	name: "__voltro.workflow.queued.cancel",
-	input: Dr,
-	output: W,
+	input: Ur,
+	output: wr,
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), kr = k({
+}), Gr = N({
 	name: "__voltro.workflow.queued.control",
-	input: Y,
-	output: W,
+	input: Hr,
+	output: wr,
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), Ar = k({
+}), Kr = N({
 	name: "__voltro.workflow.control",
-	input: Er,
-	output: U,
+	input: Vr,
+	output: q,
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), jr = m.Struct({
-	id: m.String,
-	signalName: m.String,
-	payload: m.optional(m.Unknown)
-}), Mr = m.Struct({
-	id: m.String,
-	updateName: m.String,
-	payload: m.optional(m.Unknown),
-	timeoutMs: m.optional(m.Number)
-}), Nr = m.Struct({
-	eventId: m.String,
-	updateId: m.String,
-	completedEventId: m.String,
-	result: m.Unknown
-}), Pr = k({
+}), qr = h.Struct({
+	id: h.String,
+	signalName: h.String,
+	payload: h.optional(h.Unknown)
+}), Jr = h.Struct({
+	id: h.String,
+	updateName: h.String,
+	payload: h.optional(h.Unknown),
+	timeoutMs: h.optional(h.Number)
+}), Yr = h.Struct({
+	eventId: h.String,
+	updateId: h.String,
+	completedEventId: h.String,
+	result: h.Unknown
+}), Xr = N({
 	name: "__voltro.workflow.run",
 	source: "_voltro_workflow_runs",
-	input: Cr,
-	output: m.Array(G),
+	input: Fr,
+	output: h.Array(kr),
 	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
-}), Fr = k({
+}), Zr = N({
 	name: "__voltro.workflow.runs",
 	source: "_voltro_workflow_runs",
-	input: vr,
-	output: m.Array(G),
+	input: Ar,
+	output: h.Array(kr),
 	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
-}), Ir = k({
+}), Qr = N({
 	name: "__voltro.workflow.run.steps",
 	source: "_voltro_workflow_run_steps",
-	input: K,
-	output: m.Array(yr),
+	input: Ir,
+	output: h.Array(jr),
 	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
-}), Lr = k({
+}), $r = N({
 	name: "__voltro.workflow.run.events",
 	source: "_voltro_workflow_run_events",
-	input: K,
-	output: m.Array(br),
+	input: Ir,
+	output: h.Array(Mr),
 	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
-}), Rr = k({
+}), ei = N({
 	name: "__voltro.workflow.domainEvents",
 	source: "_voltro_workflow_events",
-	input: wr,
-	output: m.Array(xr),
+	input: Lr,
+	output: h.Array(Nr),
 	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
-}), zr = k({
+}), ti = N({
 	name: "__voltro.workflow.event.deliveries",
 	source: "_voltro_workflow_event_deliveries",
-	input: Tr,
-	output: m.Array(Sr),
+	input: Rr,
+	output: h.Array(Pr),
 	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
-}), Br = j({
+}), ni = F({
 	name: "__voltro.workflow.cancel",
-	input: J,
-	output: U,
+	input: Br,
+	output: q,
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), Vr = j({
+}), ri = F({
 	name: "__voltro.workflow.resume",
-	input: J,
-	output: U,
+	input: Br,
+	output: q,
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), Hr = j({
+}), ii = F({
 	name: "__voltro.workflow.signal",
-	input: jr,
-	output: m.Struct({ eventId: m.String }),
+	input: qr,
+	output: h.Struct({ eventId: h.String }),
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), Ur = j({
+}), ai = F({
 	name: "__voltro.workflow.update",
-	input: Mr,
-	output: Nr,
+	input: Jr,
+	output: Yr,
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), Wr = m.NonEmptyString.pipe(m.filter((e) => e.trim().length > 0, { message: () => "A workflow retry identity must not be blank" })), Gr = m.Struct({
-	runId: Wr,
-	requestId: Wr
-}), Kr = m.Struct({
-	...Gr.fields,
-	payloadOverride: m.optional(m.Unknown)
-}), X = {
-	requestId: m.NonEmptyString,
-	originalRunId: m.NonEmptyString,
-	originalExecutionId: m.NonEmptyString,
-	workflowName: m.NonEmptyString
-}, qr = m.Union(m.Struct({
-	...X,
-	kind: m.Literal("queued"),
-	nextAttemptAt: m.NullOr(m.Number)
-}), m.Struct({
-	...X,
-	kind: m.Literal("accepted"),
-	executionId: m.NonEmptyString
-}).pipe(m.filter((e) => e.executionId !== e.originalExecutionId, { message: () => "A retry cannot accept its original execution identity" })), m.Struct({
-	...X,
-	kind: m.Literal("unconfirmed"),
-	automaticRetryStopped: m.Boolean,
-	nextAttemptAt: m.NullOr(m.Number)
-}).pipe(m.filter((e) => !e.automaticRetryStopped || e.nextAttemptAt === null, { message: () => "Stopped automatic retries cannot have a next attempt" })), m.Struct({
-	...X,
-	kind: m.Literal("not-started"),
-	outcome: B
-}), m.Struct({
-	...X,
-	kind: m.Literal("rejected"),
-	failureId: m.NonEmptyString
-})), Jr = "__voltro.undo.log", Yr = "__voltro.undo.apply", Xr = "__voltro.undo.redo", Zr = m.Struct({
-	id: m.String,
-	tag: m.String,
-	label: m.NullOr(m.String),
-	undone: m.Boolean,
-	crossesAction: m.Boolean,
-	createdAt: m.String
-}), Qr = class extends m.TaggedError()("UndoNotFound", { invocationId: m.String }) {}, $r = class extends m.TaggedError()("UndoForbidden", { invocationId: m.String }) {}, ei = class extends m.TaggedError()("UndoConflict", {
-	invocationId: m.String,
-	reason: m.Literal("conflict", "action")
-}) {}, ti = m.Union(Qr, $r, ei), ni = k({
-	name: Jr,
+}), oi = h.NonEmptyString.pipe(h.filter((e) => e.trim().length > 0, { message: () => "A workflow retry identity must not be blank" })), si = h.Struct({
+	runId: oi,
+	requestId: oi
+}), ci = h.Struct({
+	...si.fields,
+	payloadOverride: h.optional(h.Unknown)
+}), J = {
+	requestId: h.NonEmptyString,
+	originalRunId: h.NonEmptyString,
+	originalExecutionId: h.NonEmptyString,
+	workflowName: h.NonEmptyString
+}, li = h.Union(h.Struct({
+	...J,
+	kind: h.Literal("queued"),
+	nextAttemptAt: h.NullOr(h.Number)
+}), h.Struct({
+	...J,
+	kind: h.Literal("accepted"),
+	executionId: h.NonEmptyString
+}).pipe(h.filter((e) => e.executionId !== e.originalExecutionId, { message: () => "A retry cannot accept its original execution identity" })), h.Struct({
+	...J,
+	kind: h.Literal("unconfirmed"),
+	automaticRetryStopped: h.Boolean,
+	nextAttemptAt: h.NullOr(h.Number)
+}).pipe(h.filter((e) => !e.automaticRetryStopped || e.nextAttemptAt === null, { message: () => "Stopped automatic retries cannot have a next attempt" })), h.Struct({
+	...J,
+	kind: h.Literal("not-started"),
+	outcome: W
+}), h.Struct({
+	...J,
+	kind: h.Literal("rejected"),
+	failureId: h.NonEmptyString
+})), Y = h.NonEmptyString.pipe(h.filter((e) => e.trim().length > 0, { message: () => "A workflow restart identity must not be blank" })), ui = h.Union(h.Struct({ kind: h.Literal("failed-steps") }), h.Struct({
+	kind: h.Literal("from-step"),
+	stepName: Y
+})), X = h.Struct({
+	requestId: Y.pipe(h.maxLength(64)),
+	runId: Y
+}), di = h.Struct({
+	...X.fields,
+	selection: ui
+}), fi = {
+	...di.fields,
+	workflowName: Y,
+	executionId: Y,
+	originalGeneration: Y,
+	requestedAt: h.Number.pipe(h.finite()),
+	dispatchAttempts: h.NonNegativeInt
+}, pi = h.Union(h.Struct({
+	...X.fields,
+	kind: h.Literal("not-found")
+}), h.Struct({
+	...di.fields,
+	kind: h.Literal("withdrawn"),
+	workflowName: Y,
+	withdrawnAt: h.Number.pipe(h.finite())
+}), h.Struct({
+	...fi,
+	kind: h.Literal("pending")
+}), h.Struct({
+	...fi,
+	kind: h.Literal("entered"),
+	enteredGeneration: Y
+}).pipe(h.filter((e) => e.enteredGeneration !== e.originalGeneration && e.dispatchAttempts > 0, { message: () => "Restart entry requires a dispatched command and a new generation" }))), mi = h.Union(pi, h.Struct({
+	...X.fields,
+	kind: h.Literal("not-reserved"),
+	reason: h.Literal("admission", "journal")
+})), hi = "__voltro.undo.log", gi = "__voltro.undo.apply", _i = "__voltro.undo.redo", vi = h.Struct({
+	id: h.String,
+	tag: h.String,
+	label: h.NullOr(h.String),
+	undone: h.Boolean,
+	crossesAction: h.Boolean,
+	createdAt: h.String
+}), yi = class extends h.TaggedError()("UndoNotFound", { invocationId: h.String }) {}, bi = class extends h.TaggedError()("UndoForbidden", { invocationId: h.String }) {}, xi = class extends h.TaggedError()("UndoConflict", {
+	invocationId: h.String,
+	reason: h.Literal("conflict", "action")
+}) {}, Si = h.Union(yi, bi, xi), Ci = N({
+	name: hi,
 	source: "_voltro_undo_log",
-	input: m.Struct({ limit: m.optional(m.Number) }),
-	output: m.Array(Zr),
+	input: h.Struct({ limit: h.optional(h.Number) }),
+	output: h.Array(vi),
 	openAccess: "subject-scoped by construction: lists only the calling subject's own undoable actions"
-}), ri = A({
-	name: Yr,
-	input: m.Struct({ invocationId: m.String }),
-	output: m.Struct({ ok: m.Boolean }),
-	error: ti,
+}), wi = P({
+	name: gi,
+	input: h.Struct({ invocationId: h.String }),
+	output: h.Struct({ ok: h.Boolean }),
+	error: Si,
 	openAccess: "subject-scoped by construction: undo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), ii = A({
-	name: Xr,
-	input: m.Struct({ invocationId: m.String }),
-	output: m.Struct({ ok: m.Boolean }),
-	error: ti,
+}), Ti = P({
+	name: _i,
+	input: h.Struct({ invocationId: h.String }),
+	output: h.Struct({ ok: h.Boolean }),
+	error: Si,
 	openAccess: "subject-scoped by construction: redo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), ai = class extends m.TaggedError()("TenantScopeViolation", {
-	table: m.String,
-	reason: m.String
-}) {}, oi = class extends m.TaggedError()("StoreOperationFailed", {
-	operation: m.String,
-	table: m.String,
-	cause: m.String
+}), Ei = class extends h.TaggedError()("TenantScopeViolation", {
+	table: h.String,
+	reason: h.String
+}) {}, Di = class extends h.TaggedError()("StoreOperationFailed", {
+	operation: h.String,
+	table: h.String,
+	cause: h.String
 }) {
 	get message() {
 		return `${this.operation} on '${this.table}' failed: ${this.cause}`;
 	}
-}, si = class extends m.TaggedError()("NoRowFound", {
-	table: m.String,
-	found: m.Number
+}, Oi = class extends h.TaggedError()("NoRowFound", {
+	table: h.String,
+	found: h.Number
 }) {
 	get message() {
 		return this.found === 0 ? `expected exactly one row in '${this.table}', found none` : `expected exactly one row in '${this.table}', found more than one`;
 	}
-}, ci = class extends m.TaggedError()("TableValidationFailed", {
-	table: m.String,
-	summary: m.String,
-	issues: m.Array(m.Struct({
-		path: m.String,
-		message: m.String
+}, ki = class extends h.TaggedError()("TableValidationFailed", {
+	table: h.String,
+	summary: h.String,
+	issues: h.Array(h.Struct({
+		path: h.String,
+		message: h.String
 	}))
-}) {}, li = class extends m.TaggedError()("TenantRowNotFound", {
-	table: m.String,
-	id: m.String,
-	reason: m.String
-}) {}, ui = class extends m.TaggedError()("ServerOnlyColumnWrite", {
-	table: m.String,
-	columns: m.Array(m.String)
-}) {}, di = class extends m.TaggedError()("ConstraintViolation", {
-	kind: m.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
-	table: m.String,
-	operation: m.String,
-	constraint: m.optional(m.String),
-	column: m.optional(m.String),
-	detail: m.optional(m.String)
+}) {}, Ai = class extends h.TaggedError()("TenantRowNotFound", {
+	table: h.String,
+	id: h.String,
+	reason: h.String
+}) {}, ji = class extends h.TaggedError()("ServerOnlyColumnWrite", {
+	table: h.String,
+	columns: h.Array(h.String)
+}) {}, Mi = class extends h.TaggedError()("ConstraintViolation", {
+	kind: h.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
+	table: h.String,
+	operation: h.String,
+	constraint: h.optional(h.String),
+	column: h.optional(h.String),
+	detail: h.optional(h.String)
 }) {
 	get message() {
 		if (this.detail !== void 0) return this.detail;
@@ -1090,86 +1170,243 @@ var wt = m.Union(m.String, m.Number), Tt = m.Record({
 			case "check": return `check constraint ${t}: the row does not satisfy it`;
 		}
 	}
-}, fi = "__voltro.approvals.pending", pi = "__voltro.approvals.decide", mi = k({
-	name: fi,
+}, Ni = "__voltro.approvals.pending", Pi = "__voltro.approvals.decide", Fi = N({
+	name: Ni,
 	source: "_voltro_approvals",
-	input: m.Struct({ limit: m.optional(m.Number) }),
-	output: m.Array(Xt),
+	input: h.Struct({ limit: h.optional(h.Number) }),
+	output: h.Array(en),
 	openAccess: "the answer is scoped to the caller — a row appears only if they requested it or hold its recorded approver scopes, so an anonymous caller sees nothing"
-}), hi = A({
-	name: pi,
-	input: m.Struct({
-		approvalId: m.String,
-		decision: m.Literal("approve", "reject"),
-		note: m.optional(m.String)
+}), Ii = P({
+	name: Pi,
+	input: h.Struct({
+		approvalId: h.String,
+		decision: h.Literal("approve", "reject"),
+		note: h.optional(h.String)
 	}),
-	output: m.Struct({
-		approvalId: m.String,
-		status: m.Literal("approved", "rejected")
+	output: h.Struct({
+		approvalId: h.String,
+		status: h.Literal("approved", "rejected")
 	}),
-	error: Yt,
+	error: $t,
 	openAccess: "the approver authority is the PENDING ROW's own recorded scopes (plus an unconditional self-approval refusal), checked in-handler — a descriptor-level scope would have to be the union of every approval-requiring procedure in the app"
-}), gi = "__voltro.connections.list", _i = "__voltro.connections.start", vi = "__voltro.connections.submitToken", Z = "__voltro.connections.disconnect", Q = m.Literal("oauth2", "pat"), yi = m.Literal("disconnected", "connected", "expired", "revoked", "error"), bi = m.Struct({
-	connectionId: m.String,
-	kind: Q,
-	label: m.String,
-	status: yi,
-	accountId: m.NullOr(m.String),
-	accountLabel: m.NullOr(m.String),
-	scopes: m.Array(m.String),
-	expiresAt: m.NullOr(m.String),
-	lastError: m.NullOr(m.String),
-	connectedAt: m.NullOr(m.String)
-}), xi = class extends m.TaggedError()("ConnectionNotDeclared", { connectionId: m.String }) {}, Si = class extends m.TaggedError()("ConnectionSubjectRequired", { connectionId: m.String }) {}, Ci = class extends m.TaggedError()("ConnectionKindMismatch", {
-	connectionId: m.String,
-	expected: Q,
-	actual: Q
-}) {}, wi = class extends m.TaggedError()("ConnectionHandshakeFailed", {
-	connectionId: m.String,
-	reason: m.String,
-	transient: m.Boolean
-}) {}, $ = m.Union(xi, Si, Ci, wi), Ti = k({
-	name: gi,
+}), Li = "__voltro.connections.list", Ri = "__voltro.connections.start", zi = "__voltro.connections.submitToken", Bi = "__voltro.connections.disconnect", Z = h.Literal("oauth2", "pat"), Vi = h.Literal("disconnected", "connected", "expired", "revoked", "error"), Hi = h.Struct({
+	connectionId: h.String,
+	kind: Z,
+	label: h.String,
+	status: Vi,
+	accountId: h.NullOr(h.String),
+	accountLabel: h.NullOr(h.String),
+	scopes: h.Array(h.String),
+	expiresAt: h.NullOr(h.String),
+	lastError: h.NullOr(h.String),
+	connectedAt: h.NullOr(h.String)
+}), Ui = class extends h.TaggedError()("ConnectionNotDeclared", { connectionId: h.String }) {}, Wi = class extends h.TaggedError()("ConnectionSubjectRequired", { connectionId: h.String }) {}, Gi = class extends h.TaggedError()("ConnectionKindMismatch", {
+	connectionId: h.String,
+	expected: Z,
+	actual: Z
+}) {}, Ki = class extends h.TaggedError()("ConnectionHandshakeFailed", {
+	connectionId: h.String,
+	reason: h.String,
+	transient: h.Boolean
+}) {}, qi = h.Union(Ui, Wi, Gi, Ki), Ji = N({
+	name: Li,
 	source: "_voltro_connections",
-	input: m.Struct({}),
-	output: m.Array(bi),
+	input: h.Struct({}),
+	output: h.Array(Hi),
 	openAccess: "self-scoped read: projects the declared connections for the calling subject only (its own connect/disconnect state)"
-}), Ei = j({
-	name: _i,
-	input: m.Struct({
-		connectionId: m.String,
-		redirectTo: m.optional(m.String)
+}), Yi = F({
+	name: Ri,
+	input: h.Struct({
+		connectionId: h.String,
+		redirectTo: h.optional(h.String)
 	}),
-	output: m.Struct({
-		authorizeUrl: m.String,
-		state: m.String
+	output: h.Struct({
+		authorizeUrl: h.String,
+		state: h.String
 	}),
-	error: $,
+	error: qi,
 	openAccess: "self-service: begins an oauth handshake that stores a credential for the calling subject only; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Di = A({
-	name: vi,
-	input: m.Struct({
-		connectionId: m.String,
-		token: m.String
+}), Xi = P({
+	name: zi,
+	input: h.Struct({
+		connectionId: h.String,
+		token: h.String
 	}),
-	output: m.Struct({ ok: m.Boolean }),
-	error: $,
+	output: h.Struct({ ok: h.Boolean }),
+	error: qi,
 	openAccess: "self-service: stores a pasted token as the calling subject's own credential; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Oi = A({
-	name: Z,
-	input: m.Struct({ connectionId: m.String }),
-	output: m.Struct({ ok: m.Boolean }),
-	error: $,
+}), Zi = P({
+	name: Bi,
+	input: h.Struct({ connectionId: h.String }),
+	output: h.Struct({ ok: h.Boolean }),
+	error: qi,
 	openAccess: "self-service: deletes only the calling subject's own credential row for this connection"
-}), ki = (e) => {
+}), Qi = (e) => {
 	let t = e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : 0;
 	return Number.isNaN(t) ? 0 : t;
-}, Ai = 4001, ji = /* @__PURE__ */ new Set(["/rpc", "/ws"]), Mi = (e) => {
+}, $i = [
+	"app-store",
+	"play",
+	"mac-app-store",
+	"microsoft-store"
+], Q = [
+	{
+		name: "iphone-6.7",
+		label: "iPhone 6.7″ — 1290×2796",
+		kind: "phone",
+		viewport: {
+			width: 430,
+			height: 932
+		},
+		deviceScaleFactor: 3,
+		stores: ["app-store"]
+	},
+	{
+		name: "iphone-6.5",
+		label: "iPhone 6.5″ — 1242×2688",
+		kind: "phone",
+		viewport: {
+			width: 414,
+			height: 896
+		},
+		deviceScaleFactor: 3,
+		stores: ["app-store"]
+	},
+	{
+		name: "ipad-12.9",
+		label: "iPad 12.9″ — 2048×2732",
+		kind: "tablet",
+		viewport: {
+			width: 1024,
+			height: 1366
+		},
+		deviceScaleFactor: 2,
+		stores: ["app-store"]
+	},
+	{
+		name: "android-phone",
+		label: "Android phone — 1080×2160",
+		kind: "phone",
+		viewport: {
+			width: 360,
+			height: 720
+		},
+		deviceScaleFactor: 3,
+		stores: ["play"]
+	},
+	{
+		name: "android-tablet-10",
+		label: "Android 10″ tablet — 1600×2560",
+		kind: "tablet",
+		viewport: {
+			width: 800,
+			height: 1280
+		},
+		deviceScaleFactor: 2,
+		stores: ["play"]
+	},
+	{
+		name: "mac",
+		label: "Mac — 2880×1800",
+		kind: "desktop",
+		viewport: {
+			width: 1440,
+			height: 900
+		},
+		deviceScaleFactor: 2,
+		stores: ["mac-app-store"]
+	},
+	{
+		name: "windows",
+		label: "Windows — 1366×768",
+		kind: "desktop",
+		viewport: {
+			width: 1366,
+			height: 768
+		},
+		deviceScaleFactor: 1,
+		stores: ["microsoft-store"]
+	}
+], ea = Q.map((e) => e.name), ta = (e) => Q.find((t) => t.name === e), na = (e) => ({
+	width: e.viewport.width * e.deviceScaleFactor,
+	height: e.viewport.height * e.deviceScaleFactor
+}), ra = (e) => Q.filter((t) => t.stores.includes(e)), ia = 4001, aa = /* @__PURE__ */ new Set(["/rpc", "/ws"]), oa = (e) => {
 	for (let [t, n] of Object.entries(e.limits ?? {})) if (n !== void 0 && (!Number.isSafeInteger(n) || n <= 0)) throw Error(`defineWebSocket: limits.${t} must be a positive safe integer`);
 	if (!e.path.startsWith("/")) throw Error(`defineWebSocket: path must be absolute, got '${e.path}'`);
-	if (ji.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
+	if (aa.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
 	if (e.auth !== "subject" && e.auth !== "public") throw Error(`defineWebSocket: auth must be 'subject' or 'public' (explicitly — an unauthenticated socket has to be a decision somebody wrote down), got '${String(e.auth)}'`);
 	return e;
-}, Ni = 1;
+}, sa = "voltro-dev", ca = "pair", $ = "voltro:pairing", la = (e) => {
+	try {
+		let t = new URL(e);
+		return t.protocol === "http:" || t.protocol === "https:";
+	} catch {
+		return !1;
+	}
+}, ua = (e) => {
+	try {
+		let t = new URL(e).hostname;
+		return t === "localhost" || t === "127.0.0.1" || t === "::1" || t === "[::1]";
+	} catch {
+		return !1;
+	}
+}, da = (e) => {
+	if (!la(e.api)) throw Error(`pairingLink: api must be an http(s) url, got ${JSON.stringify(e.api)}`);
+	if (ua(e.api)) throw Error("pairingLink: api must be the LAN address — a device cannot reach localhost on this machine");
+	if (!/^[A-Za-z0-9_-]+$/.test(e.name)) throw Error(`pairingLink: name must be a plain identifier, got ${JSON.stringify(e.name)}`);
+	let t = new URLSearchParams({
+		api: e.api,
+		name: e.name
+	});
+	return e.token !== void 0 && e.token.length > 0 && t.set("token", e.token), `${sa}://${ca}?${t.toString()}`;
+}, fa = (e) => {
+	let t;
+	try {
+		t = new URL(e);
+	} catch {
+		return null;
+	}
+	if (t.protocol !== "voltro-dev:" || (t.host || t.pathname.replace(/^\/+/, "")) !== "pair") return null;
+	let n = t.searchParams.get("api") ?? "", r = t.searchParams.get("name") ?? "", i = t.searchParams.get("token");
+	return !la(n) || ua(n) || !/^[A-Za-z0-9_-]+$/.test(r) ? null : {
+		api: n,
+		name: r,
+		...i !== null && i.length > 0 ? { token: i } : {}
+	};
+}, pa = (e) => "getItem" in e ? {
+	get: async (t) => e.getItem(t),
+	set: async (t, n) => {
+		await e.setItem(t, n);
+	},
+	remove: e.removeItem ? async (t) => {
+		await e.removeItem(t);
+	} : null
+} : {
+	get: async (t) => e.get(t),
+	set: async (t, n) => {
+		await e.set(t, n);
+	},
+	remove: e.remove ? async (t) => {
+		await e.remove(t);
+	} : null
+}, ma = async (e, t) => {
+	await pa(e).set($, JSON.stringify(t));
+}, ha = async (e) => {
+	let t = await pa(e).get($);
+	if (t === null || t === "") return null;
+	try {
+		let e = JSON.parse(t);
+		return typeof e.api != "string" || typeof e.name != "string" || !la(e.api) ? null : {
+			api: e.api,
+			name: e.name,
+			...typeof e.token == "string" && e.token.length > 0 ? { token: e.token } : {}
+		};
+	} catch {
+		return null;
+	}
+}, ga = async (e) => {
+	let t = pa(e);
+	t.remove ? await t.remove($) : await t.set($, "");
+}, _a = 1;
 //#endregion
-export { Be as ADMIN_SCOPE, Ne as APIKEY_ISSUE_ORG_SCOPE, Le as APIKEY_ISSUE_OTHER_SCOPE, De as APIKEY_ISSUE_SELF_SCOPE, pi as APPROVALS_DECIDE_TAG, fi as APPROVALS_PENDING_TAG, $n as ApiUnavailable, Yt as ApprovalDecisionErrors, Jt as ApprovalErrors, b as ApprovalExpired, qt as ApprovalForbidden, Ut as ApprovalNotFound, Kt as ApprovalNotPending, Gt as ApprovalRejected, Ht as ApprovalRequired, Wt as ApprovalSelfApproval, x as ApprovalUnavailable, t as AuthMiddleware, Lt as BusinessRuleViolation, gi as CONNECTIONS_LIST_TAG, Z as CONNECTION_DISCONNECT_TAG, _i as CONNECTION_START_TAG, vi as CONNECTION_SUBMIT_TOKEN_TAG, wi as ConnectionHandshakeFailed, ke as ConnectionInfo, ie as ConnectionInfoMiddleware, Q as ConnectionKind, Ci as ConnectionKindMismatch, xi as ConnectionNotDeclared, bi as ConnectionState, yi as ConnectionStatus, Si as ConnectionSubjectRequired, di as ConstraintViolation, bt as DEFAULT_IN_FLIGHT_LEASE_MS, ae as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, se as DEFAULT_SCOPE_CACHE_TTL_MS, ve as DEVICES_MANAGE_SCOPE, Gn as EVENT_ROUTE_SEP, Hn as EventKeyInvalid, Vn as EventPayloadInvalid, Un as EventPayloadTooLarge, Ai as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, o as IMPERSONATION_METADATA_KEY, ht as JSONAPI_MEDIA_TYPE, jn as MAX_EVENT_ENVELOPE_BYTES, et as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, yt as MutationConnectionRequired, Xe as MutationInFlight, si as NoRowFound, ut as PROBLEM_JSON, Ni as PROTOCOL_VERSION, Xt as PendingApproval, S as REACTIVITY_CHANNEL_PREFIX, pt as REST_PROFILE_NAMES, E as SERVICE_NAME_PATTERN, u as ScopeError, ui as ServerOnlyColumnWrite, oi as StoreOperationFailed, ee as Subject, re as SubjectIdentity, le as SubjectService, ci as TableValidationFailed, li as TenantRowNotFound, ai as TenantScopeViolation, Re as TenantSelectionRefused, Yr as UNDO_APPLY_TAG, Jr as UNDO_LOG_TAG, Xr as UNDO_REDO_TAG, p as Unauthenticated, ei as UndoConflict, $r as UndoForbidden, Zr as UndoLogEntry, Qr as UndoNotFound, zt as ValidationError, Bt as ValidationErrors, Rt as ValidationIssue, F as WorkflowAccessProperty, J as WorkflowControlInputSchema, q as WorkflowControlIntentSchema, Er as WorkflowControlReadInputSchema, U as WorkflowControlResultSchema, xr as WorkflowDomainEventRowSchema, wr as WorkflowDomainEventsInputSchema, Tr as WorkflowEventDeliveriesInputSchema, Sr as WorkflowEventDeliveryRowSchema, mr as WorkflowParentClosePolicySchema, Dr as WorkflowQueuedCancelInputSchema, W as WorkflowQueuedCancellationResultSchema, Y as WorkflowQueuedControlTargetSchema, Kr as WorkflowRetryCommandSchema, qr as WorkflowRetryObservationSchema, Gr as WorkflowRetryTargetSchema, br as WorkflowRunEventRowSchema, gr as WorkflowRunHandleSchema, Cr as WorkflowRunRefSchema, G as WorkflowRunRowSchema, H as WorkflowRunSnapshotSchema, V as WorkflowRunStatusSchema, yr as WorkflowRunStepRowSchema, K as WorkflowRunTableRefSchema, vr as WorkflowRunsInputSchema, jr as WorkflowSignalInputSchema, hr as WorkflowStartDeferralSchema, B as WorkflowStartTerminalOutcomeSchema, Mr as WorkflowUpdateInputSchema, Nr as WorkflowUpdateResultSchema, En as actionToRpc, ze as advisoryResourceGuardWarning, n as anonymousSubject, Mt as applyRowPatch, pe as applyScopeDecision, hi as approvalsDecideDescriptor, mi as approvalsPendingQueryDescriptor, c as assertAuthenticated, Zn as attachWorkflowAccess, Ke as beginIdempotent, or as checkFrameworkCompat, xe as checkGuards, je as checkGuardsEffect, lt as compareSurfaces, fe as composeAuthStrategies, ir as composeRpcInterceptors, Oi as connectionDisconnectDescriptor, Ei as connectionStartDescriptor, Di as connectionSubmitTokenDescriptor, Ti as connectionsListQueryDescriptor, rn as declaredReactivityChannelKeys, j as defineAction, Nn as defineEvent, A as defineMutation, tr as definePlugin, nr as definePluginRoute, ar as definePluginService, k as defineQuery, _n as defineStream, Mi as defineWebSocket, At as diffRows, He as effectiveScopes, Wn as encodeEventKey, ot as encodeRestError, $e as encodeRestSuccess, On as errorTag, In as eventAttached, Pn as eventEnvelope, Fn as eventGap, Rn as eventResumePoint, Kn as eventRoute, Ln as eventStreamEvent, zn as eventSubscribeInput, Bn as eventToRpc, vt as failIdempotent, Vt as fieldIssuesOf, Se as findAdvisoryResourceGuards, Ze as finishIdempotent, Pt as firstEventValue, Jn as formatEventRoute, Je as freshFor, we as getPolicyGuardResolver, Fe as getResourceScopeResolver, I as getWorkflowAccess, at as groupShapeDigests, gn as hasAccessDecision, me as hasCallbackRoutes, Me as hasEffectiveScope, N as hasEnforcedGuard, Ee as hasScope, qe as holdIdempotentClaim, g as idToPath, Ye as idempotencyScope, Ft as inputLabel, er as isApiUnavailable, Te as isAuthenticatedCheck, hn as isAuthenticatedGuard, un as isClientReachable, Mn as isEventDescriptor, jt as isIdKeyed, s as isMachineSubject, l as isOpenAccess, Ue as isPolicyCheck, mn as isPolicyGuard, tn as isReactivityChannel, nn as isReactivityChannelKey, We as isServiceAccess, dn as isServiceReachable, ne as isServiceSubject, Ie as isSystemSubject, Oe as isTenantSelectable, T as isWireReachable, te as makeScopeCache, st as memoryIdempotencyStore, be as missingAccessDecision, Tn as mutationToRpc, dt as nextLink, An as normalizeDescriptor, on as normalizeSource, f as openAccessSpec, ge as orderByBearerPrefix, qn as parseEventRoute, Ot as pathToId, cr as pluginAlias, rr as pluginInstanceName, lr as pluginSlug, pr as pluginTag, mt as problemDetails, tt as problemTypeOf, it as procedureShapeDigest, cn as publishReactivity, rt as publishServerError, wn as queryToRpc, he as rawImpersonationMark, en as reactivityChannel, dr as registerPluginAliases, ue as requireScope, fr as resetPluginAliases, r as resolvePolicyAction, ct as resolveRestFormat, Xn as resolveWorkflowAccess, gt as restViewSchema, Et as rowPatchOpSchema, Dt as rowPatchSchema, Qe as schemaShape, _e as scopeCacheKey, ye as selectSubjectTenant, d as serviceAccessSpec, de as serviceCallersOf, ce as serviceSubject, a as setEffectiveScopes, i as setPolicyGuardResolver, oe as setResourceScopeResolver, _t as shapeDigest, an as sourceKeys, Dn as streamToRpc, y as strictInput, e as subjectAuditActorId, Ce as subjectIdentity, Ae as subjectScopes, ft as subscribeServerErrors, Nt as subscriptionEvent, Ve as systemSubject, Pe as tenantScopedSubject, kn as toRpc, nt as toSnakeCase, ki as tsMs, sn as undeclaredChannelKeys, ri as undoApplyDescriptor, ni as undoLogQueryDescriptor, ii as undoRedoDescriptor, ln as wireAudienceOf, P as wireErrorUnion, Cn as withRpcTag, Qn as workflowAccessDescriptor, Br as workflowCancelDescriptor, Ar as workflowControlQueryDescriptor, Rr as workflowDomainEventsQueryDescriptor, zr as workflowEventDeliveriesQueryDescriptor, Or as workflowQueuedCancelDescriptor, kr as workflowQueuedControlQueryDescriptor, Vr as workflowResumeDescriptor, Lr as workflowRunEventsQueryDescriptor, Pr as workflowRunQueryDescriptor, Ir as workflowRunStepsQueryDescriptor, Fr as workflowRunsQueryDescriptor, Hr as workflowSignalDescriptor, _r as workflowToRpc, Ur as workflowUpdateDescriptor, Sn as workflowWireErrorUnion, Ge as wsMutationIdempotencyScope };
+export { Be as ADMIN_SCOPE, Me as APIKEY_ISSUE_ORG_SCOPE, Le as APIKEY_ISSUE_OTHER_SCOPE, Ee as APIKEY_ISSUE_SELF_SCOPE, Pi as APPROVALS_DECIDE_TAG, Ni as APPROVALS_PENDING_TAG, lr as ApiUnavailable, $t as ApprovalDecisionErrors, Qt as ApprovalErrors, T as ApprovalExpired, Zt as ApprovalForbidden, qt as ApprovalNotFound, Xt as ApprovalNotPending, Yt as ApprovalRejected, Kt as ApprovalRequired, Jt as ApprovalSelfApproval, E as ApprovalUnavailable, ie as AuthMiddleware, S as BusinessRuleViolation, Li as CONNECTIONS_LIST_TAG, Bi as CONNECTION_DISCONNECT_TAG, Ri as CONNECTION_START_TAG, zi as CONNECTION_SUBMIT_TOKEN_TAG, Ki as ConnectionHandshakeFailed, ae as ConnectionInfo, se as ConnectionInfoMiddleware, Z as ConnectionKind, Gi as ConnectionKindMismatch, Ui as ConnectionNotDeclared, Hi as ConnectionState, Vi as ConnectionStatus, Wi as ConnectionSubjectRequired, Mi as ConstraintViolation, tt as DEFAULT_IN_FLIGHT_LEASE_MS, o as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ee as DEFAULT_SCOPE_CACHE_TTL_MS, ve as DEVICES_MANAGE_SCOPE, tr as EVENT_ROUTE_SEP, Qn as EventKeyInvalid, Zn as EventPayloadInvalid, $n as EventPayloadTooLarge, An as FRAMEWORK_WIRE_ERRORS, ia as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, re as IMPERSONATION_METADATA_KEY, _t as JSONAPI_MEDIA_TYPE, Vn as MAX_EVENT_ENVELOPE_BYTES, xt as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, Ze as MutationConnectionRequired, m as MutationInFlight, Oi as NoRowFound, d as NoSuchResource, ca as PAIRING_HOST, sa as PAIRING_SCHEME, $ as PAIRING_STORAGE_KEY, ft as PROBLEM_JSON, _a as PROTOCOL_VERSION, en as PendingApproval, D as REACTIVITY_CHANNEL_PREFIX, ht as REST_PROFILE_NAMES, gn as SERVICE_NAME_PATTERN, wt as SESSION_HEADER_NAME, Q as STORE_SCREENSHOT_PRESETS, ea as STORE_SCREENSHOT_PRESET_NAMES, $i as STORE_SCREENSHOT_STORES, f as ScopeError, ji as ServerOnlyColumnWrite, Di as StoreOperationFailed, le as Subject, Ke as SubjectIdentity, n as SubjectService, ki as TableValidationFailed, Ai as TenantRowNotFound, Ei as TenantScopeViolation, ye as TenantSelectionRefused, gi as UNDO_APPLY_TAG, hi as UNDO_LOG_TAG, _i as UNDO_REDO_TAG, l as Unauthenticated, xi as UndoConflict, bi as UndoForbidden, vi as UndoLogEntry, yi as UndoNotFound, C as ValidationError, w as ValidationErrors, Wt as ValidationIssue, z as WorkflowAccessProperty, Br as WorkflowControlInputSchema, zr as WorkflowControlIntentSchema, Vr as WorkflowControlReadInputSchema, q as WorkflowControlResultSchema, Nr as WorkflowDomainEventRowSchema, Lr as WorkflowDomainEventsInputSchema, Rr as WorkflowEventDeliveriesInputSchema, Pr as WorkflowEventDeliveryRowSchema, Tr as WorkflowParentClosePolicySchema, Ur as WorkflowQueuedCancelInputSchema, wr as WorkflowQueuedCancellationResultSchema, Hr as WorkflowQueuedControlTargetSchema, di as WorkflowRestartCommandSchema, pi as WorkflowRestartObservationSchema, mi as WorkflowRestartResultSchema, ui as WorkflowRestartSelectionSchema, X as WorkflowRestartTargetSchema, ci as WorkflowRetryCommandSchema, li as WorkflowRetryObservationSchema, si as WorkflowRetryTargetSchema, Mr as WorkflowRunEventRowSchema, Dr as WorkflowRunHandleSchema, Fr as WorkflowRunRefSchema, kr as WorkflowRunRowSchema, K as WorkflowRunSnapshotSchema, G as WorkflowRunStatusSchema, jr as WorkflowRunStepRowSchema, Ir as WorkflowRunTableRefSchema, Ar as WorkflowRunsInputSchema, qr as WorkflowSignalInputSchema, Er as WorkflowStartDeferralSchema, W as WorkflowStartTerminalOutcomeSchema, Jr as WorkflowUpdateInputSchema, Yr as WorkflowUpdateResultSchema, Fn as actionToRpc, xe as advisoryResourceGuardWarning, c as anonymousSubject, ma as applyPairing, zt as applyRowPatch, fe as applyScopeDecision, Ii as approvalsDecideDescriptor, Fi as approvalsPendingQueryDescriptor, pe as assertAuthenticated, sr as attachWorkflowAccess, bt as beginIdempotent, gr as checkFrameworkCompat, Ae as checkGuards, He as checkGuardsEffect, ga as clearPairing, ot as compareSurfaces, s as composeAuthStrategies, mr as composeRpcInterceptors, Zi as connectionDisconnectDescriptor, Yi as connectionStartDescriptor, Xi as connectionSubmitTokenDescriptor, Ji as connectionsListQueryDescriptor, cn as declaredReactivityChannelKeys, u as declaresResourceGuard, F as defineAction, Un as defineEvent, P as defineMutation, dr as definePlugin, fr as definePluginRoute, hr as definePluginService, N as defineQuery, Sn as defineStream, oa as defineWebSocket, Lt as diffRows, Ce as effectiveScopes, er as encodeEventKey, st as encodeRestError, et as encodeRestSuccess, Ln as errorMessage, R as errorTag, Kn as eventAttached, Wn as eventEnvelope, Gn as eventGap, Jn as eventResumePoint, nr as eventRoute, qn as eventStreamEvent, Yn as eventSubscribeInput, Xn as eventToRpc, Qe as failIdempotent, Gt as fieldIssuesOf, Fe as findAdvisoryResourceGuards, Ye as finishIdempotent, Vt as firstEventValue, ir as formatEventRoute, Je as freshFor, je as getPolicyGuardResolver, Te as getResourceScopeResolver, B as getWorkflowAccess, at as groupShapeDigests, xn as hasAccessDecision, ne as hasCallbackRoutes, we as hasEffectiveScope, I as hasEnforcedGuard, _e as hasScope, Xe as holdIdempotentClaim, v as idToPath, lt as idempotencyScope, Ht as inputLabel, ur as isApiUnavailable, Ue as isAuthenticatedCheck, bn as isAuthenticatedGuard, mn as isClientReachable, Hn as isEventDescriptor, Rt as isIdKeyed, Ie as isMachineSubject, p as isOpenAccess, be as isPolicyCheck, yn as isPolicyGuard, on as isReactivityChannel, sn as isReactivityChannelKey, Ge as isServiceAccess, hn as isServiceReachable, te as isServiceSubject, he as isSystemSubject, Pe as isTenantSelectable, A as isWireReachable, me as makeScopeCache, qe as memoryIdempotencyStore, ue as missingAccessDecision, Pn as mutationToRpc, pt as nextLink, Bn as normalizeDescriptor, un as normalizeSource, r as openAccessSpec, ge as orderByBearerPrefix, da as pairingLink, rr as parseEventRoute, fa as parsePairingLink, _ as patchCellSchema, y as pathToId, vr as pluginAlias, pr as pluginInstanceName, yr as pluginSlug, Cr as pluginTag, gt as problemDetails, nt as problemTypeOf, $e as procedureShapeDigest, fn as publishReactivity, it as publishServerError, Nn as queryToRpc, ce as rawImpersonationMark, an as reactivityChannel, ha as readPairing, xr as registerPluginAliases, Rn as reportableError, We as requireScope, Sr as resetPluginAliases, de as resolvePolicyAction, ut as resolveRestFormat, or as resolveWorkflowAccess, vt as restViewSchema, Nt as rowPatchOpSchema, Pt as rowPatchSchema, yt as schemaShape, e as scopeCacheKey, ze as selectSubjectTenant, a as serviceAccessSpec, i as serviceCallersOf, Se as serviceSubject, Ct as sessionValueFromHeaders, oe as setEffectiveScopes, ke as setPolicyGuardResolver, t as setResourceScopeResolver, St as shapeDigest, ln as sourceKeys, na as storeScreenshotPixels, ta as storeScreenshotPreset, ra as storeScreenshotPresetsFor, In as streamToRpc, x as strictInput, Ve as subjectAuditActorId, Ne as subjectIdentity, Oe as subjectScopes, mt as subscribeServerErrors, Bt as subscriptionEvent, Re as systemSubject, De as tenantScopedSubject, zn as toRpc, rt as toSnakeCase, Qi as tsMs, dn as undeclaredChannelKeys, wi as undoApplyDescriptor, Ci as undoLogQueryDescriptor, Ti as undoRedoDescriptor, pn as wireAudienceOf, L as wireErrorUnion, Mn as withRpcTag, dt as withheldServerError, cr as workflowAccessDescriptor, ni as workflowCancelDescriptor, Kr as workflowControlQueryDescriptor, ei as workflowDomainEventsQueryDescriptor, ti as workflowEventDeliveriesQueryDescriptor, Wr as workflowQueuedCancelDescriptor, Gr as workflowQueuedControlQueryDescriptor, ri as workflowResumeDescriptor, $r as workflowRunEventsQueryDescriptor, Xr as workflowRunQueryDescriptor, Qr as workflowRunStepsQueryDescriptor, Zr as workflowRunsQueryDescriptor, ii as workflowSignalDescriptor, Or as workflowToRpc, ai as workflowUpdateDescriptor, jn as workflowWireErrorUnion, ct as wsMutationIdempotencyScope };