@voltro/protocol 0.83.1 → 0.85.0

package/dist/index.js

@@ -1,67 +1,94 @@
-import { $ as e, A as t, B as n, C as r, D as i, E as a, F as o, G as s, H as c, I as ee, J as te, K as ne, L as re, M as ie, N as ae, O as oe, P as se, Q as ce, R as le, S as ue, T as de, U as fe, V as l, W as pe, X as me, Y as he, Z as ge, _ as _e, a as ve, at as ye, b as be, c as xe, d as u, et as Se, f as Ce, g as we, h as Te, i as Ee, it as De, j as Oe, k as ke, l as Ae, m as je, n as Me, nt as Ne, o as d, ot as Pe, p as Fe, q as Ie, r as Le, rt as Re, s as f, st as ze, t as Be, tt as Ve, u as He, v as Ue, w as We, x as Ge, y as p, z as Ke } from "./scopes-Di756ENh.js";
-import { A as qe, C as m, D as Je, E as Ye, O as Xe, S as Ze, T as Qe, _ as $e, a as et, b as tt, c as nt, d as rt, f as it, g as at, h as ot, i as st, j as ct, k as lt, l as ut, m as dt, n as ft, o as pt, p as mt, r as ht, s as gt, t as _t, u as vt, v as yt, w as bt, x as xt, y as St } from "./restFormat-EZ8k9ZcQ.js";
-import { n as Ct, t as wt } from "./sessionHeader-DriTZhmv.js";
-import { Context as Tt, Either as Et, Encoding as Dt, Layer as Ot, Schema as h } from "effect";
-import { Rpc as g } from "@effect/rpc";
-import { VersionConflict as kt } from "@voltro/database/wire";
-//#region src/rowPatch.ts
-var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e && !Array.isArray(e) && Object.keys(e).length === 1 && typeof e.$bytes == "string", _ = h.transform(h.Unknown, h.Unknown, {
-	strict: !0,
-	decode: (e) => {
-		if (!jt(e)) return e;
-		let t = Dt.decodeBase64(e.$bytes);
-		return Et.isRight(t) ? t.right : e;
-	},
-	encode: (e) => e instanceof Uint8Array ? { $bytes: Dt.encodeBase64(e) } : e
-}), Mt = h.Record({
-	key: h.String,
-	value: _
-}).pipe(h.filter((e) => "id" in e, { message: () => "patch row must carry an id" })), Nt = h.Union(h.Struct({
-	op: h.Literal("add"),
-	path: h.String,
-	value: Mt
-}), h.Struct({
-	op: h.Literal("replace"),
-	path: h.String,
-	value: Mt
-}), h.Struct({
-	op: h.Literal("remove"),
-	path: h.String
-}), h.Struct({
-	op: h.Literal("mergeCells"),
-	path: h.String,
-	value: h.Record({
-		key: h.String,
-		value: _
+import { $ as e, A as t, B as n, C as r, D as i, E as a, F as o, G as s, H as c, I as l, J as ee, K as te, L as ne, M as re, N as ie, O as ae, P as oe, Q as se, R as ce, S as le, T as ue, U as de, V as u, W as fe, X as pe, Y as me, Z as he, _ as ge, a as _e, at as ve, b as ye, c as be, d as xe, et as Se, f as Ce, g as we, h as Te, i as Ee, it as De, j as Oe, k as ke, l as Ae, m as je, n as Me, nt as Ne, o as d, ot as Pe, p as Fe, q as Ie, r as Le, rt as Re, s as f, st as ze, t as Be, tt as Ve, u as He, v as Ue, w as We, x as Ge, y as Ke, z as qe } from "./scopes-ClywBij8.js";
+import { A as Je, C as Ye, D as Xe, E as Ze, O as Qe, S as $e, T as et, _ as tt, a as nt, b as rt, c as it, d as at, f as ot, g as st, h as ct, i as lt, j as ut, k as dt, l as ft, m as pt, n as mt, o as ht, p as gt, r as _t, s as vt, t as yt, u as bt, v as xt, w as St, x as Ct, y as wt } from "./restFormat-BlgTLxm1.js";
+import { n as Tt, t as Et } from "./sessionHeader-DriTZhmv.js";
+import { Context as Dt, Effect as Ot, Layer as kt, Result as At, Schema as p, SchemaAST as m, SchemaGetter as jt, SchemaIssue as Mt } from "effect";
+import { Rpc as h } from "effect/rpc";
+import * as Nt from "effect/encoding/Base64";
+import * as g from "effect/SchemaAST";
+import { VersionConflict as Pt } from "@voltro/database/wire";
+//#region src/rowEquality.ts
+var Ft = (e) => e instanceof Uint8Array && Object.getPrototypeOf(e) === Uint8Array.prototype && !("toJSON" in e) && Object.keys(e).length === e.length, It = (e) => {
+	let t = Object.getPrototypeOf(e);
+	return (t === null || t === Object.prototype) && !("toJSON" in e) && !("toJSON" in Object.prototype);
+}, Lt = (e) => e == null || typeof e == "string" || typeof e == "boolean" || typeof e == "number" || Ft(e), Rt = (e, t) => {
+	let n = typeof e == "number" && !Number.isFinite(e) ? null : e, r = typeof t == "number" && !Number.isFinite(t) ? null : t;
+	if (n === r) return !0;
+	if (n instanceof Uint8Array && r instanceof Uint8Array) {
+		if (n.length !== r.length) return !1;
+		for (let e = 0; e < n.length; e++) if (n[e] !== r[e]) return !1;
+		return !0;
+	}
+	return !1;
+}, zt = (e, t) => {
+	if (!It(e) || !It(t)) return;
+	let n = Object.keys(e), r = e === t ? n : Object.keys(t);
+	if (n.length !== r.length) return;
+	let i = !0;
+	for (let r = 0; r < n.length; r++) {
+		let a = n[r];
+		if (a === "__proto__" || a in Object.prototype && Object.getOwnPropertyDescriptor(Object.prototype, a)?.set !== void 0) return;
+		let o = Object.getOwnPropertyDescriptor(e, a), s = e === t ? o : Object.getOwnPropertyDescriptor(t, a);
+		if (o === void 0 || s === void 0 || s.enumerable !== !0 || !("value" in o) || !("value" in s)) return;
+		let c = o.value, l = s.value;
+		if (!Lt(c) || !Lt(l)) return;
+		Rt(c, l) || (i = !1);
+	}
+	return i;
+}, Bt = p.Union([p.String, p.Number]), Vt = (e) => typeof e == "object" && !!e && !Array.isArray(e) && Object.keys(e).length === 1 && typeof e.$bytes == "string", Ht = p.Unknown.pipe(p.decodeTo(p.Unknown, {
+	decode: jt.transform((e) => {
+		if (!Vt(e)) return e;
+		let t = Nt.decode(e.$bytes);
+		return At.isSuccess(t) ? t.success : e;
+	}),
+	encode: jt.transform((e) => e instanceof Uint8Array ? { $bytes: Nt.encode(e) } : e instanceof Date ? e.toISOString() : e)
+})), Ut = p.Record(p.String, Ht).pipe(p.refine((e) => "id" in e, { message: "patch row must carry an id" })), Wt = p.Union([
+	p.Struct({
+		op: p.Literal("add"),
+		path: p.String,
+		value: Ut
+	}),
+	p.Struct({
+		op: p.Literal("replace"),
+		path: p.String,
+		value: Ut
+	}),
+	p.Struct({
+		op: p.Literal("remove"),
+		path: p.String
+	}),
+	p.Struct({
+		op: p.Literal("mergeCells"),
+		path: p.String,
+		value: p.Record(p.String, Ht)
 	})
-})), Pt = h.Struct({
-	ops: h.Array(Nt),
-	order: h.Array(At)
-}), v = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, y = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), b = (e) => {
+]), Gt = p.Struct({
+	ops: p.Array(Wt),
+	order: p.NullOr(p.Array(Bt))
+}), _ = (e) => `/${String(e).replace(/~/g, "~0").replace(/\//g, "~1")}`, v = (e) => (e.startsWith("/") ? e.slice(1) : e).replace(/~1/g, "/").replace(/~0/g, "~"), y = (e) => {
 	let t = Object.keys(e).sort(), n = {};
 	for (let r of t) n[r] = e[r];
 	return JSON.stringify(n);
-}, Ft = (e, t) => b(e) === b(t), It = (e, t) => {
+}, Kt = (e, t) => zt(e, t) ?? y(e) === y(t), qt = (e, t) => {
 	if (e instanceof Uint8Array && t instanceof Uint8Array) {
 		if (e.length !== t.length) return !1;
 		for (let n = 0; n < e.length; n += 1) if (e[n] !== t[n]) return !1;
 		return !0;
 	}
-	return b({
+	return y({
 		id: 0,
 		v: e
-	}) === b({
+	}) === y({
 		id: 0,
 		v: t
 	});
-}, Lt = (e, t, n = {}) => {
+}, Jt = (e, t, n = {}) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) r.set(t.id, t);
-	let i = [], a = [], o = /* @__PURE__ */ new Set(), s = n.crdt, c = (e, t) => {
+	let i = [], a = e.length === t.length && t.every((t, n) => t.id === e[n].id) ? null : [], o = /* @__PURE__ */ new Set(), s = n.crdt, c = (e, t) => {
 		if (s === void 0 || s.columns.size === 0) return;
 		let n = {}, r = !1;
 		for (let i of s.columns) {
-			if (!(i in t) || It(e[i], t[i])) continue;
+			if (!(i in t) || qt(e[i], t[i])) continue;
 			let a = s.incremental(i, e[i], t[i]);
 			if (a === void 0) return;
 			n[i] = a, r = !0;
@@ -75,85 +102,137 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 		};
 	};
 	for (let e of t) {
-		a.push(e.id), o.add(e.id);
+		a?.push(e.id), o.add(e.id);
 		let t = r.get(e.id);
 		if (t === void 0) i.push({
 			op: "add",
-			path: v(e.id),
+			path: _(e.id),
 			value: e
 		});
-		else if (!Ft(t, e)) {
+		else if (!Kt(t, e)) {
 			let n = c(t, e);
 			n === void 0 ? i.push({
 				op: "replace",
-				path: v(e.id),
+				path: _(e.id),
 				value: e
-			}) : (Ft(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
+			}) : (Kt(Object.fromEntries(Object.entries(t).filter(([e]) => !s.columns.has(e))), n.scalars) || i.push({
 				op: "replace",
-				path: v(e.id),
+				path: _(e.id),
 				value: n.scalars
 			}), i.push({
 				op: "mergeCells",
-				path: v(e.id),
+				path: _(e.id),
 				value: n.merges
 			}));
 		}
 	}
 	for (let t of e) o.has(t.id) || i.push({
 		op: "remove",
-		path: v(t.id)
+		path: _(t.id)
 	});
 	return {
 		ops: i,
 		order: a
 	};
-}, Rt = (e) => e.every((e) => {
+}, Yt = (e) => e.every((e) => {
 	let t = e.id;
 	return typeof t == "string" || typeof t == "number";
-}), zt = (e, t, n = {}) => {
+}), Xt = (e, t, n = {}) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) r.set(t.id, t);
-	let i = /* @__PURE__ */ new Map();
-	for (let e of t.ops) e.op === "mergeCells" && i.set(y(e.path), Object.keys(e.value));
+	return Zt(e, t, n, r);
+}, Zt = (e, t, n, r, i) => {
+	let a = /* @__PURE__ */ new Map();
+	for (let e of t.ops) e.op === "mergeCells" && a.set(v(e.path), Object.keys(e.value));
 	for (let e of t.ops) {
 		if (e.op === "mergeCells") {
-			let t = y(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
+			let t = v(e.path), i = r.get(t) ?? r.get(Number(t)), a = r.has(t) ? t : Number(t);
 			if (i === void 0) continue;
 			let o = { ...i };
 			for (let [t, r] of Object.entries(e.value)) o[t] = n.mergeCell === void 0 ? r : n.mergeCell(t, i[t], r);
 			r.set(a, o);
 			continue;
 		}
-		if (e.op === "add" && r.set(e.value.id, e.value), e.op === "replace") {
-			let t = r.get(e.value.id), n = (t === void 0 ? [] : i.get(String(e.value.id)) ?? []).filter((n) => !(n in e.value) && n in t);
-			r.set(e.value.id, n.length === 0 ? e.value : {
+		if (e.op === "add" && (t.order !== null || r.has(e.value.id)) && r.set(e.value.id, e.value), e.op === "replace") {
+			let n = r.get(e.value.id), i = (n === void 0 ? [] : a.get(String(e.value.id)) ?? []).filter((t) => !(t in e.value) && t in n);
+			(t.order !== null || n !== void 0) && r.set(e.value.id, i.length === 0 ? e.value : {
 				...e.value,
-				...Object.fromEntries(n.map((e) => [e, t[e]]))
+				...Object.fromEntries(i.map((e) => [e, n[e]]))
 			});
 		}
 	}
-	let a = [];
-	for (let e of t.order) {
+	if (t.order === null && i !== void 0) {
+		let n = e.slice();
+		for (let e of t.ops) {
+			if (e.op === "remove") continue;
+			let t = e.op === "mergeCells" ? v(e.path) : void 0, a = e.op === "mergeCells" ? r.has(t) ? t : Number(t) : e.value.id, o = i.get(a), s = r.get(a);
+			o !== void 0 && s !== void 0 && (n[o] = s);
+		}
+		return n;
+	}
+	let o = [];
+	if (t.order === null) for (let t of e) {
+		let e = r.get(t.id);
+		e !== void 0 && o.push(e);
+	}
+	else for (let e of t.order) {
 		let t = r.get(e);
-		t !== void 0 && a.push(t);
+		t !== void 0 && o.push(t);
 	}
-	return a;
-}, Bt = (e) => h.Union(h.Struct({
-	_tag: h.Literal("snapshot"),
-	revision: h.Number,
-	data: e,
-	computed: h.optional(h.Boolean),
-	reconciles: h.optional(h.String)
-}), h.Struct({
-	_tag: h.Literal("delta"),
-	revision: h.Number,
-	emittedAt: h.Number,
-	patch: Pt
-}), h.Struct({
-	_tag: h.Literal("error"),
-	error: h.Unknown,
-	revision: h.optional(h.Number)
-})), Vt = (e, t, n) => {
+	return o;
+}, Qt = () => {
+	let e, t, n, r = () => {
+		e = void 0, t = void 0, n = void 0;
+	}, i = (e) => {
+		let r = /* @__PURE__ */ new Map(), i = Object.getPrototypeOf(e) === Array.prototype;
+		for (let t = 0; t < e.length; t++) {
+			let n = e[t];
+			r.has(n.id) && (i = !1), r.set(n.id, t);
+		}
+		n = i ? r : void 0, t = i ? void 0 : new Map(e.map((e) => [e.id, e]));
+	};
+	return {
+		reset: r,
+		apply: (a, o, s = {}) => {
+			(a !== e || n === void 0 && t === void 0) && i(a);
+			try {
+				let r = n, c = /* @__PURE__ */ new Map(), l = Zt(a, o, s, r === void 0 ? t : {
+					get: (e) => {
+						if (c.has(e)) return c.get(e);
+						let t = r.get(e);
+						return t === void 0 ? void 0 : a[t];
+					},
+					has: (e) => c.has(e) || r.has(e),
+					set: (e, t) => {
+						c.set(e, t);
+					}
+				}, r);
+				return (o.order !== null || o.ops.some((e) => e.op === "mergeCells" && "id" in e.value)) && i(l), e = l, l;
+			} catch (e) {
+				throw r(), e;
+			}
+		}
+	};
+}, $t = (e) => p.Union([
+	p.Struct({
+		_tag: p.Literal("snapshot"),
+		revision: p.Number,
+		data: e,
+		computed: p.optional(p.Boolean),
+		reconciles: p.optional(p.String)
+	}),
+	p.Struct({
+		_tag: p.Literal("delta"),
+		revision: p.Number,
+		emittedAt: p.Number,
+		patch: Gt
+	}),
+	p.Struct({
+		_tag: p.Literal("error"),
+		error: p.Unknown,
+		revision: p.optional(p.Number)
+	})
+]), en = (e, t, n) => {
 	if (!t || typeof t != "object" || !("_tag" in t)) return t;
 	let r = t;
 	switch (r._tag) {
@@ -162,42 +241,42 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 		case "delta": throw Error(`${n} ${e}: received a 'delta' as the first event, which should be impossible — a subscription always opens with a snapshot. This is a framework bug.`);
 		default: return t;
 	}
-}, Ht = (e, t) => {
+}, tn = (e, t) => {
 	let n = `${e ?? "this procedure"} input`;
 	return t === !0 ? `${n} (guarded — the guard did NOT run: the payload failed to decode first, so this says nothing about access)` : n;
-}, Ut = (e) => {
-	let t = e.ast;
-	return t._tag === "TypeLiteral" && (t.propertySignatures?.length ?? 0) === 0 && (t.indexSignatures?.length ?? 0) === 0;
+}, nn = Mt.makeFormatterDefault(), rn = (e) => p.Never.annotate({ message: e.size === 0 ? "is unexpected: the input declares no keys" : `is unexpected: the input declares ${[...e].map(String).join(", ")}` }).ast, an = (e) => p.String.check(p.makeFilter((t) => e.has(t) ? "a declared key" : void 0)).ast, b = (e, t = /* @__PURE__ */ new Map()) => {
+	let n = t.get(e);
+	if (n !== void 0) return n;
+	let r = on(e, t);
+	return t.set(e, r), r;
+}, on = (e, t) => {
+	if (e.encoding !== void 0) {
+		let n = g.toEncoded(e), r = b(n, t);
+		return r === n ? e : p.make(r).pipe(p.decodeTo(p.make(e))).ast;
+	}
+	if (g.isObjects(e)) {
+		let n = e.propertySignatures.map((e) => new g.PropertySignature(e.name, b(e.type, t))), r = new Set(n.map((e) => e.name)), i = e.indexSignatures.length > 0 ? e.indexSignatures.map((e) => new g.IndexSignature(e.parameter, b(e.type, t))) : [new g.IndexSignature(an(r), rn(r))];
+		return new g.Objects(n, i, e.annotations, e.checks, void 0, e.context);
+	}
+	return g.isArrays(e) ? new g.Arrays(e.isMutable, e.elements.map((e) => b(e, t)), e.rest.map((e) => b(e, t)), e.annotations, e.checks, void 0, e.context) : g.isUnion(e) ? new g.Union(e.types.map((e) => b(e, t)), e.options, e.annotations, e.checks, void 0, e.context) : g.isSuspend(e) ? new g.Suspend(() => b(e.thunk(), t), e.annotations, e.checks, void 0, e.context) : e;
 }, x = (e, t, n) => {
-	let r = Ht(t, n), i = e.annotations({
-		parseOptions: { onExcessProperty: "error" },
-		parseIssueTitle: () => r
-	});
-	return Ut(e) ? h.filter((e) => typeof e == "object" && e && Object.keys(e).length > 0 ? `this procedure declares no input; received: ${Object.keys(e).join(", ")}` : void 0)(i).annotations({ identifier: r }) : i;
-}, S = class extends h.TaggedError()("BusinessRuleViolation", {
-	rule: h.String,
-	params: h.optional(h.Record({
-		key: h.String,
-		value: h.Unknown
-	})),
-	field: h.optional(h.String),
-	message: h.optional(h.String),
-	severity: h.Literal("error", "warning")
-}) {}, Wt = h.Struct({
-	field: h.String,
-	message: h.String,
-	params: h.optional(h.Record({
-		key: h.String,
-		value: h.Unknown
-	}))
-}), C = class extends h.TaggedError()("ValidationError", {
-	field: h.String,
-	message: h.String,
-	params: h.optional(h.Record({
-		key: h.String,
-		value: h.Unknown
-	}))
-}) {}, w = class extends h.TaggedError()("ValidationErrors", { issues: h.Array(Wt).pipe(h.minItems(1)) }) {}, Gt = (e) => {
+	let r = tn(t, n);
+	return p.make(b(e.ast)).pipe(p.middlewareDecoding((e) => Ot.catch(e, (e) => Ot.fail(new Mt.InvalidValue({ message: `${r}\n${nn(e)}` })))));
+}, sn = class extends p.TaggedError()("BusinessRuleViolation", {
+	rule: p.String,
+	params: p.optional(p.Record(p.String, p.Unknown)),
+	field: p.optional(p.String),
+	message: p.optional(p.String),
+	severity: p.Literals(["error", "warning"])
+}) {}, cn = p.Struct({
+	field: p.String,
+	message: p.String,
+	params: p.optional(p.Record(p.String, p.Unknown))
+}), S = class extends p.TaggedError()("ValidationError", {
+	field: p.String,
+	message: p.String,
+	params: p.optional(p.Record(p.String, p.Unknown))
+}) {}, C = class extends p.TaggedError()("ValidationErrors", { issues: p.Array(cn).pipe(p.check(p.isMinLength(1))) }) {}, ln = (e) => {
 	if (typeof e != "object" || !e) return [];
 	let t = e._tag;
 	if (t === "ValidationError") {
@@ -223,69 +302,87 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 		}];
 	}
 	return [];
-}, Kt = class extends h.TaggedError()("ApprovalRequired", {
-	approvalId: h.String,
-	procedure: h.String,
-	expiresAt: h.String,
-	requiredScopes: h.Array(h.String),
-	reason: h.NullOr(h.String),
-	created: h.Boolean
-}) {}, qt = class extends h.TaggedError()("ApprovalNotFound", { approvalId: h.String }) {}, Jt = class extends h.TaggedError()("ApprovalSelfApproval", {
-	approvalId: h.String,
-	subjectId: h.NullOr(h.String)
-}) {}, Yt = class extends h.TaggedError()("ApprovalRejected", {
-	approvalId: h.String,
-	decidedBy: h.NullOr(h.String),
-	note: h.NullOr(h.String)
-}) {}, T = class extends h.TaggedError()("ApprovalExpired", {
-	approvalId: h.String,
-	expiredAt: h.String
-}) {}, Xt = class extends h.TaggedError()("ApprovalNotPending", {
-	approvalId: h.String,
-	status: h.String
-}) {}, Zt = class extends h.TaggedError()("ApprovalForbidden", {
-	approvalId: h.String,
-	required: h.NullOr(h.String),
-	message: h.String
-}) {}, E = class extends h.TaggedError()("ApprovalUnavailable", {
-	procedure: h.String,
-	message: h.String
-}) {}, Qt = h.Union(Kt, Yt, T, E), $t = h.Union(qt, Jt, T, Xt, Zt, E), en = h.Struct({
-	id: h.String,
-	procedure: h.String,
-	kind: h.Literal("mutation", "action"),
-	requestedBy: h.NullOr(h.String),
-	status: h.Literal("pending", "approved", "rejected", "expired", "consumed"),
-	reason: h.NullOr(h.String),
-	requiredScopes: h.Array(h.String),
-	requestedAt: h.String,
-	expiresAt: h.String,
-	decidedBy: h.NullOr(h.String),
-	decidedAt: h.NullOr(h.String),
-	note: h.NullOr(h.String),
-	relation: h.Literal("to-decide", "requested")
-}), D = "channel:", tn = Symbol.for("@voltro/protocol/reactivityChannels"), nn = globalThis, O = nn[tn] ?? (nn[tn] = /* @__PURE__ */ new Map()), rn = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, an = (e) => {
-	if (!rn.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
+}, un = class extends p.TaggedError()("ApprovalRequired", {
+	approvalId: p.String,
+	procedure: p.String,
+	expiresAt: p.String,
+	requiredScopes: p.Array(p.String),
+	reason: p.NullOr(p.String),
+	created: p.Boolean
+}) {}, dn = class extends p.TaggedError()("ApprovalNotFound", { approvalId: p.String }) {}, fn = class extends p.TaggedError()("ApprovalSelfApproval", {
+	approvalId: p.String,
+	subjectId: p.NullOr(p.String)
+}) {}, pn = class extends p.TaggedError()("ApprovalRejected", {
+	approvalId: p.String,
+	decidedBy: p.NullOr(p.String),
+	note: p.NullOr(p.String)
+}) {}, mn = class extends p.TaggedError()("ApprovalExpired", {
+	approvalId: p.String,
+	expiredAt: p.String
+}) {}, hn = class extends p.TaggedError()("ApprovalNotPending", {
+	approvalId: p.String,
+	status: p.String
+}) {}, gn = class extends p.TaggedError()("ApprovalForbidden", {
+	approvalId: p.String,
+	required: p.NullOr(p.String),
+	message: p.String
+}) {}, _n = class extends p.TaggedError()("ApprovalUnavailable", {
+	procedure: p.String,
+	message: p.String
+}) {}, vn = p.Union([
+	un,
+	pn,
+	mn,
+	_n
+]), yn = p.Union([
+	dn,
+	fn,
+	mn,
+	hn,
+	gn,
+	_n
+]), bn = p.Struct({
+	id: p.String,
+	procedure: p.String,
+	kind: p.Literals(["mutation", "action"]),
+	requestedBy: p.NullOr(p.String),
+	status: p.Literals([
+		"pending",
+		"approved",
+		"rejected",
+		"expired",
+		"consumed"
+	]),
+	reason: p.NullOr(p.String),
+	requiredScopes: p.Array(p.String),
+	requestedAt: p.String,
+	expiresAt: p.String,
+	decidedBy: p.NullOr(p.String),
+	decidedAt: p.NullOr(p.String),
+	note: p.NullOr(p.String),
+	relation: p.Literals(["to-decide", "requested"])
+}), w = "channel:", xn = Symbol.for("@voltro/protocol/reactivityChannels"), Sn = globalThis, T = Sn[xn] ?? (Sn[xn] = /* @__PURE__ */ new Map()), Cn = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, wn = (e) => {
+	if (!Cn.test(e)) throw Error(`reactivityChannel('${e}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
   \`billing.usage\`. A \`:\` is refused because it is the namespace separator in
-  the routing key (\`${D}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
+  the routing key (\`${w}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
   routes as two.`);
-	let t = O.get(e);
+	let t = T.get(e);
 	if (t !== void 0) return t;
-	let n = `${D}${e}`, r = Object.freeze({
+	let n = `${w}${e}`, r = Object.freeze({
 		kind: "reactivity-channel",
 		name: e,
 		key: n,
 		toString: () => n
 	});
-	return O.set(e, r), r;
-}, on = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", sn = (e) => e.startsWith(D), cn = () => new Set([...O.values()].map((e) => e.key)), k = (e) => on(e) ? e.key : e, ln = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(k) : [k(e)], un = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(k) : k(e), dn = (e) => {
-	let t = cn(), n = [];
-	for (let r of e) for (let e of ln(r.source)) sn(e) && !t.has(e) && n.push({
+	return T.set(e, r), r;
+}, Tn = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", En = (e) => e.startsWith(w), Dn = () => new Set([...T.values()].map((e) => e.key)), E = (e) => Tn(e) ? e.key : e, On = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(E) : [E(e)], kn = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(E) : E(e), An = (e) => {
+	let t = Dn(), n = [];
+	for (let r of e) for (let e of On(r.source)) En(e) && !t.has(e) && n.push({
 		procedure: r.name,
 		key: e
 	});
 	return n;
-}, fn = (e, t) => {
+}, jn = (e, t) => {
 	let n = e?.injectExternalChange;
 	return n !== void 0 && (n.call(e, {
 		table: t.key,
@@ -294,8 +391,8 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 		old: {},
 		origin: "inline"
 	}), !0);
-}, A = (e) => e.internal !== !0, pn = (e) => e.service === void 0 ? "client" : "service", mn = (e) => A(e) && e.service === void 0, hn = (e) => A(e) && e.service !== void 0, gn = /^[a-z][a-z0-9-]{0,55}$/i, j = (e) => {
-	if (vn(e), _n(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
+}, Mn = (e) => e.internal !== !0, Nn = (e) => e.service === void 0 ? "client" : "service", Pn = (e) => Mn(e) && e.service === void 0, Fn = (e) => Mn(e) && e.service !== void 0, In = /^[a-z][a-z0-9-]{0,55}$/i, D = (e) => {
+	if (Rn(e), Ln(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
 	let t = e.serialize;
 	if (t !== void 0) {
 		if (typeof t.key != "function") throw Error(`${e.name}: serialize.key must be a function of the input`);
@@ -319,13 +416,13 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 	let r = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
 	if (r.length === 0) return e;
 	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${r.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${r.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${r.join(" / ")} annotation if it is not.`);
-}, _n = (e) => {
+}, Ln = (e) => {
 	let t = e.service;
 	if (t === void 0) return;
 	let n = t.callers;
 	if (!Array.isArray(n) || n.length === 0) throw Error(`${e.name}: \`service.callers\` is empty, so NO app may call this procedure —\n  and no browser either. Name the calling app(s), e.g. \`service: { callers: ['worker'] }\`,
   or drop \`service:\` if the procedure is meant for this app's own clients.`);
-	let r = n.filter((e) => typeof e != "string" || !gn.test(e));
+	let r = n.filter((e) => typeof e != "string" || !In.test(e));
 	if (r.length > 0) throw Error(`${e.name}: \`service.callers\` holds ${r.map((e) => JSON.stringify(e)).join(", ")} — a caller is an\n  app name (letters, digits, dashes; starting with a letter; at most 56 characters), the same name this app
   lists in \`serviceCallers\` and the caller's credential resolves to.`);
 	if (new Set(n).size !== n.length) throw Error(`${e.name}: \`service.callers\` lists the same app twice`);
@@ -339,7 +436,7 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 	].filter((e) => e !== void 0);
 	if (i.length !== 0) throw Error(`${e.name}: \`service:\` cannot be combined with ${i.join("; ")}.\n  A service procedure is callable only by the listed apps of this project, over the
   socket, with their service credential. Drop the other field, or drop \`service:\`.`);
-}, vn = (e) => {
+}, Rn = (e) => {
 	let t = e.requiresApproval;
 	if (t !== void 0) {
 		if (!Array.isArray(t.approvers) || t.approvers.length === 0) throw Error(`${e.name}: \`requiresApproval.approvers\` is empty, so NOBODY can approve this\n  procedure and every call would park forever. Name the scope(s) an approver must hold
@@ -349,7 +446,7 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
   human from every other, and the second-pair-of-eyes control would enforce nothing.
   Give the procedure a \`guards:\` decision, or drop \`requiresApproval\`.`);
 	}
-}, yn = (e) => e.action !== void 0 && e.resourceType !== void 0, bn = (e) => e.authenticated === !0, xn = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, M = (e, t, n, i) => {
+}, zn = (e) => e.action !== void 0 && e.resourceType !== void 0, Bn = (e) => e.authenticated === !0, Vn = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, O = (e, t, n, i) => {
 	if (i !== void 0) {
 		if (n !== void 0 || t !== void 0 && t.length > 0) throw Error(`${e}: \`service:\` is an access decision of its own — only the listed apps may\n  call this procedure — so it cannot sit beside \`guards:\` or \`openAccess:\`. A service
   holds no scopes, and no user may call a service procedure. Keep exactly one.`);
@@ -361,31 +458,31 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 	if (t !== void 0 && t.length > 0) throw Error(`${e}: \`openAccess\` and \`guards\` are two different access decisions, so\n  declaring both says the procedure is protected AND open. Keep the guards if a
   caller must hold a scope; drop them if anyone may call it.`);
 	return [r(n.trim())];
-}, N = (e) => j({
+}, k = (e) => D({
 	kind: "query",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? h.Never,
-	source: un(e.source),
+	error: e.error ?? p.Never,
+	source: kn(e.source),
 	cache: e.cache,
-	guards: M(e.name, e.guards, e.openAccess, e.service),
+	guards: O(e.name, e.guards, e.openAccess, e.service),
 	openAccess: e.openAccess,
 	service: e.service === void 0 ? void 0 : { callers: Array.isArray(e.service.callers) ? [...e.service.callers] : e.service.callers },
 	publicApi: e.publicApi,
 	exposeAsTool: e.exposeAsTool,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), P = (e) => j({
+}), A = (e) => D({
 	kind: "mutation",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? h.Never,
+	error: e.error ?? p.Never,
 	...e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope },
 	...e.serialize === void 0 ? {} : { serialize: e.serialize },
 	target: e.target,
-	guards: M(e.name, e.guards, e.openAccess, e.service),
+	guards: O(e.name, e.guards, e.openAccess, e.service),
 	openAccess: e.openAccess,
 	service: e.service === void 0 ? void 0 : { callers: Array.isArray(e.service.callers) ? [...e.service.callers] : e.service.callers },
 	publicApi: e.publicApi,
@@ -393,13 +490,13 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), F = (e) => j({
+}), j = (e) => D({
 	kind: "action",
 	name: e.name,
 	input: e.input,
 	output: e.output,
-	error: e.error ?? h.Never,
-	guards: M(e.name, e.guards, e.openAccess, e.service),
+	error: e.error ?? p.Never,
+	guards: O(e.name, e.guards, e.openAccess, e.service),
 	openAccess: e.openAccess,
 	service: e.service === void 0 ? void 0 : { callers: Array.isArray(e.service.callers) ? [...e.service.callers] : e.service.callers },
 	source: e.source,
@@ -409,85 +506,97 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 	requiresApproval: e.requiresApproval,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin
-}), Sn = (e) => j({
+}), Hn = (e) => D({
 	kind: "stream",
 	name: e.name,
 	input: e.input,
 	element: e.element,
-	error: e.error ?? h.Never,
+	error: e.error ?? p.Never,
 	internal: e.internal,
 	overridesPlugin: e.overridesPlugin,
-	guards: M(e.name, e.guards, e.openAccess),
+	guards: O(e.name, e.guards, e.openAccess),
 	openAccess: e.openAccess
-}), Cn = (e, t) => t && t.length > 0 ? h.Union(e, ...t) : e, I = (e) => e !== void 0 && e.some((e) => !p(e)), wn = (e) => h.Union(e, f, l), Tn = (e) => h.Union(e, S), En = (e) => h.Union(e, C, w), Dn = (e, t) => t === void 0 ? e : h.Union(e, Qt), On = (e, t) => u(t) ? h.Union(e, d) : e, L = (e, t, n) => Cn(kn(e, t), n), kn = (e, t) => {
-	let n = On(wn(e.error), e.guards);
+}), Un = (e, t) => t && t.length > 0 ? p.Union([e, ...t]) : e, M = (e) => e !== void 0 && e.some((e) => !Ke(e)), Wn = (e) => p.Union([
+	e,
+	f,
+	u
+]), Gn = (e) => p.Union([e, sn]), Kn = (e) => p.Union([
+	e,
+	S,
+	C
+]), qn = (e, t) => t === void 0 ? e : p.Union([e, vn]), Jn = (e, t) => xe(t) ? p.Union([e, d]) : e, N = (e, t, n) => Un(Yn(e, t), n), Yn = (e, t) => {
+	let n = Jn(Wn(e.error), e.guards);
 	if (t === "stream" || t === "query") return n;
-	let r = t === "mutation" ? h.Union(Tn(n), m, kt) : n;
-	return Dn(En(t === "mutation" && e.idempotencyScope === "connection" ? h.Union(r, Ze) : r), e.requiresApproval);
-}, An = {
-	query: [f, l],
-	stream: [f, l],
+	let r = t === "mutation" ? p.Union([
+		Gn(n),
+		Ye,
+		Pt
+	]) : n;
+	return qn(Kn(t === "mutation" && e.idempotencyScope === "connection" ? p.Union([r, $e]) : r), e.requiresApproval);
+}, Xn = {
+	query: [f, u],
+	stream: [f, u],
 	action: [
 		f,
-		l,
-		C,
-		w
+		u,
+		S,
+		C
 	],
 	mutation: [
 		f,
-		l,
+		u,
+		sn,
+		Ye,
+		Pt,
 		S,
-		m,
-		kt,
-		C,
-		w
+		C
 	]
-}, jn = (e, t) => Cn(On(wn(e.errorSchema), e.guards), t), Mn = (e, t) => ({
+}, Zn = (e, t) => Un(Jn(Wn(e.errorSchema), e.guards), t), Qn = (e, t) => ({
 	...e,
 	name: t
-}), Nn = (e, t) => g.make(e.name, {
-	payload: x(e.input, e.name, I(e.guards)),
-	success: Bt(e.output),
-	error: L(e, "query", t),
+}), $n = (e, t) => h.make(e.name, {
+	payload: x(e.input, e.name, M(e.guards)),
+	success: $t(e.output),
+	error: N(e, "query", t),
 	stream: !0
-}), Pn = (e, t) => g.make(e.name, {
-	payload: x(e.input, e.name, I(e.guards)),
+}), er = (e, t) => h.make(e.name, {
+	payload: x(e.input, e.name, M(e.guards)),
 	success: e.output,
-	error: L(e, "mutation", t)
-}), Fn = (e, t) => g.make(e.name, {
-	payload: x(e.input, e.name, I(e.guards)),
+	error: N(e, "mutation", t)
+}), tr = (e, t) => h.make(e.name, {
+	payload: x(e.input, e.name, M(e.guards)),
 	success: e.output,
-	error: L(e, "action", t)
-}), In = (e, t) => g.make(e.name, {
-	payload: x(e.input, e.name, I(e.guards)),
+	error: N(e, "action", t)
+}), nr = (e, t) => h.make(e.name, {
+	payload: x(e.input, e.name, M(e.guards)),
 	success: e.element,
-	error: L(e, "stream", t),
+	error: N(e, "stream", t),
 	stream: !0
-}), R = (e) => {
+}), rr = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e._tag;
 	return typeof t == "string" ? t : void 0;
-}, Ln = (e) => {
+}, ir = (e) => {
 	if (typeof e == "string") return e;
 	if (typeof e == "object" && e) {
 		let t = e.message;
 		if (typeof t == "string" && t !== "") return t;
-		let n = R(e);
+		let n = rr(e);
 		if (n !== void 0) return n;
 	}
 	return String(e);
-}, Rn = (e) => {
+}, ar = (e) => {
 	if (e instanceof Error) return e;
-	let t = Error(Ln(e), { cause: e });
-	return t.name = R(e) ?? "NonErrorThrown", t;
-}, zn = (e) => {
+	let t = Error(ir(e), { cause: e });
+	return t.name = rr(e) ?? "NonErrorThrown", t;
+}, or = (e) => {
 	switch (e.kind) {
-		case "query": return Nn(e);
-		case "mutation": return Pn(e);
-		case "action": return Fn(e);
-		case "stream": return In(e);
+		case "query": return $n(e);
+		case "mutation": return er(e);
+		case "action": return tr(e);
+		case "stream": return nr(e);
 	}
-}, Bn = (e) => {
+}, sr = (e) => {
 	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
 	if (e.kind === "query") return {
 		kind: "query",
@@ -533,7 +642,7 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 			..."relations" in e && e.relations !== void 0 ? { relations: e.relations } : {}
 		}))
 	};
-}, Vn = 7500, Hn = (e) => typeof e == "object" && !!e && e.kind === "event", Un = (e) => {
+}, cr = 7500, lr = (e) => typeof e == "object" && !!e && e.kind === "event", ur = (e) => {
 	if (e.name.length === 0) throw Error("defineEvent: `name` must not be empty");
 	if (/\s/.test(e.name)) throw Error(`defineEvent("${e.name}"): \`name\` must not contain whitespace.\n  The name is used as a broker subject segment. NATS refuses a subject with
   whitespace and delivers nothing — silently, and only on that broker, so an
@@ -568,62 +677,67 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 		webhook: e.webhook,
 		delivery: e.delivery
 	};
-}, Wn = (e) => h.Struct({
-	_tag: h.Literal("event"),
-	origin: h.String,
-	n: h.Number,
-	emittedAt: h.Number,
+}, dr = (e) => p.Struct({
+	_tag: p.Literal("event"),
+	origin: p.String,
+	n: p.Number,
+	emittedAt: p.Number,
 	payload: e
-}), Gn = h.Struct({
-	_tag: h.Literal("gap"),
-	missed: h.Number,
-	reason: h.Literal("buffer", "resume")
-}), Kn = h.Struct({ _tag: h.Literal("attached") }), qn = (e) => h.Union(Kn, Wn(e), Gn), Jn = h.Struct({
-	origin: h.String,
-	n: h.Number
-}), Yn = (e) => h.Struct({
+}), fr = p.Struct({
+	_tag: p.Literal("gap"),
+	missed: p.Number,
+	reason: p.Literals(["buffer", "resume"])
+}), pr = p.Struct({ _tag: p.Literal("attached") }), mr = (e) => p.Union([
+	pr,
+	dr(e),
+	fr
+]), hr = p.Struct({
+	origin: p.String,
+	n: p.Number
+}), gr = (e) => p.Struct({
 	key: e,
-	resume: h.optional(h.Array(Jn))
-}), Xn = (e, t) => {
-	let n = e.guards !== void 0 && e.guards.some((e) => !p(e)) ? h.Union(f, l) : l, r = u(e.guards) ? h.Union(n, d) : n, i = t && t.length > 0 ? h.Union(r, ...t) : r;
-	return g.make(e.name, {
-		payload: x(Yn(e.key), e.name, I(e.guards)),
-		success: qn(e.payload),
+	resume: p.optional(p.Array(hr))
+}), _r = (e, t) => {
+	let n = e.guards !== void 0 && e.guards.some((e) => !Ke(e)) ? p.Union([f, u]) : u, r = xe(e.guards) ? p.Union([n, d]) : n, i = t && t.length > 0 ? p.Union([r, ...t]) : r;
+	return h.make(e.name, {
+		payload: x(gr(e.key), e.name, M(e.guards)),
+		success: mr(e.payload),
 		error: i,
 		stream: !0
 	});
-}, Zn = class extends h.TaggedError()("EventPayloadInvalid", {
-	event: h.String,
-	message: h.String
-}) {}, Qn = class extends h.TaggedError()("EventKeyInvalid", {
-	event: h.String,
-	message: h.String
-}) {}, $n = class extends h.TaggedError()("EventPayloadTooLarge", {
-	event: h.String,
-	bytes: h.Number,
-	limit: h.Number
-}) {}, er = (e) => {
+}, vr = class extends p.TaggedError()("EventPayloadInvalid", {
+	event: p.String,
+	message: p.String
+}) {}, yr = class extends p.TaggedError()("EventKeyInvalid", {
+	event: p.String,
+	message: p.String
+}) {}, br = class extends p.TaggedError()("EventPayloadTooLarge", {
+	event: p.String,
+	bytes: p.Number,
+	limit: p.Number
+}) {}, xr = (e) => {
 	if (typeof e != "object" || !e) return JSON.stringify(e) ?? "null";
-	let t = Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t));
-	return JSON.stringify(t);
-}, tr = "\0", nr = (e, t, n) => [
+	let t = Object.entries(e), n = 0;
+	for (let e of t) e[1] !== void 0 && (t[n++] = e);
+	return t.length = n, t.sort(([e], [t]) => e < t ? -1 : +(e > t)), JSON.stringify(t);
+}, Sr = "\0", Cr = (e, t, n) => [
 	e ?? "~",
 	t,
-	er(n)
-].join("\0"), rr = (e) => {
+	xr(n)
+].join("\0"), wr = (e) => {
 	let [t = "~", n = "", r = ""] = e.split("\0");
 	return {
 		tenantId: t === "~" ? null : t,
 		event: n,
 		key: r
 	};
-}, ir = (e) => e.split("\0").join(" · "), z = Symbol.for("@voltro/protocol/workflow-access"), ar = {
+}, Tr = (e) => e.split("\0").join(" · "), Er = Symbol.for("@voltro/protocol/workflow-access"), Dr = {
 	guards: void 0,
 	openAccess: void 0,
 	internal: !1,
 	controls: void 0,
 	controlsOpenAccess: void 0
-}, or = (e, t) => {
+}, Or = (e, t) => {
 	let n = t.guards;
 	if (n !== void 0 && n.length === 0) throw Error(`workflow("${e}"): \`guards: []\` is empty, so it enforces nothing —\n  but it reads at the call site as if the start were protected. Omit the field
   and decide with \`openAccess\` or \`internal\`, or list the scopes that may start it.`);
@@ -655,17 +769,17 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 		controls: a === void 0 ? i : [r(a.trim())],
 		controlsOpenAccess: a?.trim()
 	};
-}, sr = (e, t) => {
-	Object.defineProperty(e, z, {
+}, kr = (e, t) => {
+	Object.defineProperty(e, Er, {
 		value: t,
 		enumerable: !1
 	});
-}, B = (e) => {
-	if (typeof e != "object" || !e) return ar;
-	let t = e[z];
-	return t === void 0 ? ar : t;
-}, cr = (e) => {
-	let t = B(e);
+}, Ar = (e) => {
+	if (typeof e != "object" && typeof e != "function" || e === null) return Dr;
+	let t = e[Er];
+	return t === void 0 ? Dr : t;
+}, jr = (e) => {
+	let t = Ar(e);
 	return {
 		name: e.name,
 		internal: t.internal,
@@ -673,38 +787,42 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 		openAccess: t.openAccess,
 		controls: t.controls
 	};
-}, lr = class extends h.TaggedError()("ApiUnavailable", {
-	api: h.String,
-	tag: h.String,
-	reason: h.Literal("timeout", "transport", "closed"),
-	message: h.String
-}) {}, ur = (e) => typeof e == "object" && !!e && e._tag === "ApiUnavailable", dr = (e) => e, fr = (e) => e, pr = (e) => {
+}, Mr = class extends p.TaggedError()("ApiUnavailable", {
+	api: p.String,
+	tag: p.String,
+	reason: p.Literals([
+		"timeout",
+		"transport",
+		"closed"
+	]),
+	message: p.String
+}) {}, Nr = (e) => typeof e == "object" && !!e && e._tag === "ApiUnavailable", Pr = (e) => e, Fr = (e) => e, Ir = (e) => {
 	let t = e.alias?.trim(), n = e.instance?.trim(), r = t !== void 0 && t !== "" ? t : e.base;
 	return n !== void 0 && n !== "" ? `${r}#${n}` : r;
-}, mr = (e) => {
+}, Lr = (e) => {
 	if (e.length !== 0) return (t, n) => e.reduceRight((e, t) => t(e, n), t);
-}, hr = (e, t) => {
-	let n = Tt.GenericTag(e);
+}, Rr = (e, t) => {
+	let n = Dt.Service(e);
 	return {
 		Tag: n,
-		Live: Ot.succeed(n, t)
+		Live: kt.succeed(n, t)
 	};
-}, gr = (e, t, n) => {
+}, zr = (e, t, n) => {
 	if (!t) return { ok: !0 };
-	let r = n === void 0 ? null : V(n);
+	let r = n === void 0 ? null : P(n);
 	if (!r) return {
 		ok: !0,
 		unverified: `plugin "${e}" requires framework ${t}, but the running framework version is ${n === void 0 ? "unknown" : `unreadable ("${n}")`} — not checked.`
 	};
 	let i = t.trim();
 	if (i === "*" || i === "") return { ok: !0 };
-	let a = i.split(/\s+/).filter((e) => e.length > 0);
-	for (let i of a) if (!_r(i, r)) return {
+	let a = i.split(/\s+/);
+	for (let i of a) if (!Br(i, r)) return {
 		ok: !1,
 		reason: `plugin "${e}" requires framework ${t}, running ${n}`
 	};
 	return { ok: !0 };
-}, V = (e) => {
+}, P = (e) => {
 	let t = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9a-zA-Z.-]+))?$/.exec(e.trim());
 	return t ? {
 		major: Number(t[1]),
@@ -712,109 +830,142 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 		patch: Number(t[3]),
 		pre: t[4] ?? ""
 	} : null;
-}, H = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, _r = (e, t) => {
+}, F = (e, t) => e.major === t.major ? e.minor === t.minor ? e.patch === t.patch ? e.pre && !t.pre ? -1 : !e.pre && t.pre ? 1 : e.pre && t.pre ? e.pre < t.pre ? -1 : +(e.pre > t.pre) : 0 : e.patch - t.patch : e.minor - t.minor : e.major - t.major, Br = (e, t) => {
 	if (e === "*") return !0;
 	if (e.startsWith("^")) {
-		let n = V(e.slice(1));
-		return !n || t.major !== n.major ? !1 : H(t, n) >= 0;
+		let n = P(e.slice(1));
+		return !n || t.major !== n.major ? !1 : F(t, n) >= 0;
 	}
 	if (e.startsWith("~")) {
-		let n = V(e.slice(1));
-		return !n || t.major !== n.major || t.minor !== n.minor ? !1 : H(t, n) >= 0;
+		let n = P(e.slice(1));
+		return !n || t.major !== n.major || t.minor !== n.minor ? !1 : F(t, n) >= 0;
 	}
 	let n = /^(>=|<=|>|<)(.+)$/.exec(e);
 	if (n) {
-		let e = n[1], r = V(n[2]);
+		let e = n[1], r = P(n[2]);
 		if (!r) return !1;
-		let i = H(t, r);
+		let i = F(t, r);
 		if (e === ">=") return i >= 0;
 		if (e === "<=") return i <= 0;
 		if (e === ">") return i > 0;
 		if (e === "<") return i < 0;
 	}
-	let r = V(e);
-	return r ? H(t, r) === 0 : !1;
-}, vr = (e) => {
+	let r = P(e);
+	return r ? F(t, r) === 0 : !1;
+}, Vr = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/-([a-zA-Z0-9])/g, (e, t) => t.toUpperCase());
-}, yr = (e) => {
+}, Hr = (e) => {
 	let t = e.startsWith("@") ? e.replace(/^@[^/]+\//, "") : e;
 	return (t.startsWith("plugin-") ? t.slice(7) : t).replace(/#/g, "--").replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
-}, br = Symbol.for("@voltro/protocol/pluginAliases"), U = () => {
-	let e = globalThis, t = e[br];
+}, Ur = Symbol.for("@voltro/protocol/pluginAliases"), I = () => {
+	let e = globalThis, t = e[Ur];
 	if (t instanceof Map) return t;
 	let n = /* @__PURE__ */ new Map();
-	return e[br] = n, n;
-}, xr = (e) => {
-	let t = U();
+	return e[Ur] = n, n;
+}, Wr = (e) => {
+	let t = I();
 	for (let [n, r] of Object.entries(e)) {
 		if (r === "") continue;
 		let e = t.get(n);
 		e === void 0 ? t.set(n, /* @__PURE__ */ new Set([r])) : e.add(r);
 	}
-}, Sr = () => {
-	U().clear();
-}, Cr = (e, t) => {
-	let n = U().get(e);
-	if (n === void 0 || n.size === 0) return `${vr(e)}.${t}`;
-	if (n.size === 1) return `${[...n][0]}.${t}`;
-	let r = [...n].filter((e) => !e.includes("#"));
-	if (r.length === 1) return `${r[0]}.${t}`;
+}, Gr = () => {
+	I().clear();
+}, Kr = (e, t) => {
+	let n = I().get(e);
+	if (n === void 0 || n.size === 0) return `${Vr(e)}.${t}`;
+	if (n.size === 1) for (let e of n) return `${e}.${t}`;
+	let r, i = 0;
+	for (let e of n) e.includes("#") || (r = e, i++);
+	if (i === 1) return `${r}.${t}`;
 	throw Error(`[voltro] ${e} is installed more than once (${[...n].sort().join(", ")}) and no single install is the primary one, so a plugin hook cannot tell which of them it addresses. Call the route by its full tag instead — e.g. useSubscription(api, '${[...n].sort()[0]}.${t}').`);
-}, W = h.Union(h.Struct({
-	kind: h.Literal("dropped"),
-	at: h.Number,
-	retryAfterMs: h.Number
-}), h.Struct({
-	kind: h.Literal("skipped"),
-	at: h.Number,
-	executionId: h.String,
-	runId: h.String
-}), h.Struct({
-	kind: h.Literal("superseded"),
-	at: h.Number
-}), h.Struct({
-	kind: h.Literal("cancelled"),
-	at: h.Number
-}), h.Struct({
-	kind: h.Literal("abandoned"),
-	at: h.Number,
-	failureId: h.NonEmptyString
-})), G = h.Literal("running", "succeeded", "failed", "cancelled", "suspended"), K = h.Struct({
-	id: h.String,
-	workflowName: h.String,
-	executionId: h.String,
-	status: h.Union(G, h.Literal("unknown")),
-	output: h.optional(h.Unknown),
-	error: h.optional(h.Struct({
-		tag: h.NullOr(h.String),
-		message: h.String
-	}))
-}), q = h.Struct({
-	operation: h.Literal("cancel", "resume"),
-	kind: h.Literal("accepted", "confirmed", "unknown", "already-terminal"),
-	requestId: h.NullOr(h.NonEmptyString),
-	snapshot: K
-}).pipe(h.filter((e) => e.kind === "unknown" ? !0 : e.kind === "accepted" ? e.requestId !== null && (e.snapshot.status === "running" || e.snapshot.status === "suspended") : e.kind === "already-terminal" ? e.snapshot.status === "succeeded" || e.snapshot.status === "failed" || e.snapshot.status === "cancelled" : e.operation === "cancel" ? e.snapshot.status === "cancelled" : e.requestId !== null && e.snapshot.status === "running", { message: () => "Workflow control acknowledgement contradicts its observed state or receipt identity" })), wr = h.Struct({
-	operation: h.Literal("cancel"),
-	workflowName: h.NonEmptyString,
-	receiptId: h.NonEmptyString,
-	requestId: h.NullOr(h.NonEmptyString),
-	kind: h.Literal("accepted", "confirmed", "unknown", "already-terminal"),
-	observation: h.Union(h.Struct({ kind: h.Literal("pending") }), h.Struct({
-		kind: h.Literal("admission"),
-		outcome: h.Union(W, h.Struct({
-			kind: h.Literal("rejected"),
-			failureId: h.NonEmptyString
-		}))
-	}), h.Struct({
-		kind: h.Literal("execution"),
-		snapshot: K
-	}), h.Struct({
-		kind: h.Literal("unavailable"),
-		reason: h.Literal("missing-request", "missing-run", "unconfirmed-generation", "unbound-submission")
+}, L = p.Union([
+	p.Struct({
+		kind: p.Literal("dropped"),
+		at: p.Number,
+		retryAfterMs: p.Number
+	}),
+	p.Struct({
+		kind: p.Literal("skipped"),
+		at: p.Number,
+		executionId: p.String,
+		runId: p.String
+	}),
+	p.Struct({
+		kind: p.Literal("superseded"),
+		at: p.Number
+	}),
+	p.Struct({
+		kind: p.Literal("cancelled"),
+		at: p.Number
+	}),
+	p.Struct({
+		kind: p.Literal("abandoned"),
+		at: p.Number,
+		failureId: p.NonEmptyString
+	})
+]), R = p.Literals([
+	"running",
+	"succeeded",
+	"failed",
+	"cancelled",
+	"suspended"
+]), z = p.Struct({
+	id: p.String,
+	workflowName: p.String,
+	executionId: p.String,
+	status: p.Union([R, p.Literal("unknown")]),
+	output: p.optional(p.Unknown),
+	error: p.optional(p.Struct({
+		tag: p.NullOr(p.String),
+		message: p.String
 	}))
-}).pipe(h.filter((e) => {
+}), B = p.Struct({
+	operation: p.Literals(["cancel", "resume"]),
+	kind: p.Literals([
+		"accepted",
+		"confirmed",
+		"unknown",
+		"already-terminal"
+	]),
+	requestId: p.NullOr(p.NonEmptyString),
+	snapshot: z
+}).pipe(p.check(p.makeFilter((e) => e.kind === "unknown" ? !0 : e.kind === "accepted" ? e.requestId !== null && (e.snapshot.status === "running" || e.snapshot.status === "suspended") : e.kind === "already-terminal" ? e.snapshot.status === "succeeded" || e.snapshot.status === "failed" || e.snapshot.status === "cancelled" : e.operation === "cancel" ? e.snapshot.status === "cancelled" : e.requestId !== null && e.snapshot.status === "running", { message: "Workflow control acknowledgement contradicts its observed state or receipt identity" }))), V = p.Struct({
+	operation: p.Literal("cancel"),
+	workflowName: p.NonEmptyString,
+	receiptId: p.NonEmptyString,
+	requestId: p.NullOr(p.NonEmptyString),
+	kind: p.Literals([
+		"accepted",
+		"confirmed",
+		"unknown",
+		"already-terminal"
+	]),
+	observation: p.Union([
+		p.Struct({ kind: p.Literal("pending") }),
+		p.Struct({
+			kind: p.Literal("admission"),
+			outcome: p.Union([L, p.Struct({
+				kind: p.Literal("rejected"),
+				failureId: p.NonEmptyString
+			})])
+		}),
+		p.Struct({
+			kind: p.Literal("execution"),
+			snapshot: z
+		}),
+		p.Struct({
+			kind: p.Literal("unavailable"),
+			reason: p.Literals([
+				"missing-request",
+				"missing-run",
+				"unconfirmed-generation",
+				"unbound-submission"
+			])
+		})
+	])
+}).pipe(p.check(p.makeFilter((e) => {
 	let t = e.observation;
 	if (t.kind === "unavailable") return e.kind === "unknown" && (t.reason === "missing-request" ? e.requestId === null : e.requestId !== null);
 	if (e.requestId === null) return !1;
@@ -822,342 +973,384 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 	if (t.kind === "admission") return e.kind === (t.outcome.kind === "cancelled" ? "confirmed" : "already-terminal");
 	let n = t.snapshot;
 	return n.workflowName !== e.workflowName || n.id.length === 0 || n.executionId.length === 0 ? !1 : e.kind === "accepted" ? n.status === "running" || n.status === "suspended" : e.kind === "confirmed" ? n.status === "cancelled" : e.kind === "already-terminal" && (n.status === "succeeded" || n.status === "failed" || n.status === "cancelled");
-}, { message: () => "Queued cancellation acknowledgement contradicts its receipt or observation" })), Tr = h.Literal("cancel", "terminate", "abandon"), Er = h.Struct({
-	mode: h.String,
-	dueAt: h.NullOr(h.Number),
-	retryAfterMs: h.NullOr(h.Number),
-	intentId: h.NullOr(h.String)
-}), Dr = h.Struct({
-	id: h.String,
-	workflowName: h.String,
-	executionId: h.NullOr(h.String),
-	status: h.Literal("running", "succeeded", "queued", "dropped", "skipped", "replayed"),
-	deferral: h.optional(Er)
-}), Or = (e, t) => {
-	let n = B(e);
-	return g.make(e.name, {
-		payload: x(e.payloadSchema, e.name, I(n.guards)),
-		success: Dr,
-		error: jn({
+}, { message: "Queued cancellation acknowledgement contradicts its receipt or observation" }))), qr = p.Literals([
+	"cancel",
+	"terminate",
+	"abandon"
+]), Jr = p.Struct({
+	mode: p.String,
+	dueAt: p.NullOr(p.Number),
+	retryAfterMs: p.NullOr(p.Number),
+	intentId: p.NullOr(p.String)
+}), Yr = p.Struct({
+	id: p.String,
+	workflowName: p.String,
+	executionId: p.NullOr(p.String),
+	status: p.Literals([
+		"running",
+		"succeeded",
+		"queued",
+		"dropped",
+		"skipped",
+		"replayed"
+	]),
+	deferral: p.optional(Jr)
+}), Xr = (e, t) => {
+	let n = Ar(e);
+	return h.make(e.name, {
+		payload: x(e.payloadSchema, e.name, M(n.guards)),
+		success: Yr,
+		error: Zn({
 			errorSchema: e.errorSchema,
 			guards: n.guards
 		}, t)
 	});
-}, kr = h.Struct({
-	id: h.String,
-	tag: h.String,
-	executionId: h.String,
-	status: G,
-	payload: h.Unknown,
-	workflowVersion: h.NullOr(h.String),
-	workflowPatches: h.NullOr(h.Unknown),
-	output: h.NullOr(h.Unknown),
-	subject: h.NullOr(h.Unknown),
-	source: h.NullOr(h.String),
-	errorTag: h.NullOr(h.String),
-	errorMessage: h.NullOr(h.String),
-	cancelled: h.Boolean,
-	startedAt: h.Date,
-	completedAt: h.NullOr(h.Date),
-	durationMs: h.NullOr(h.Number),
-	traceId: h.NullOr(h.String),
-	parentExecutionId: h.NullOr(h.String),
-	parentClosePolicy: h.NullOr(Tr)
-}), Ar = h.Struct({
-	tag: h.optional(h.String),
-	status: h.optional(G),
-	limit: h.optional(h.Number)
-}), jr = h.Struct({
-	id: h.String,
-	runId: h.String,
-	stepName: h.String,
-	attempt: h.Number,
-	status: h.Literal("running", "succeeded", "failed"),
-	input: h.NullOr(h.Unknown),
-	retryPolicy: h.NullOr(h.Unknown),
-	output: h.NullOr(h.Unknown),
-	errorTag: h.NullOr(h.String),
-	errorMessage: h.NullOr(h.String),
-	errorCause: h.NullOr(h.Unknown),
-	startedAt: h.Date,
-	completedAt: h.NullOr(h.Date),
-	durationMs: h.NullOr(h.Number)
-}), Mr = h.Struct({
-	id: h.String,
-	runId: h.String,
-	eventType: h.String,
-	payload: h.NullOr(h.Unknown),
-	occurredAt: h.Date,
-	stepName: h.NullOr(h.String),
-	attempt: h.NullOr(h.Number)
-}), Nr = h.Struct({
-	id: h.String,
-	name: h.String,
-	payload: h.Unknown,
-	source: h.String,
-	subject: h.NullOr(h.Unknown),
-	traceId: h.NullOr(h.String),
-	occurredAt: h.Date
-}), Pr = h.Struct({
-	id: h.String,
-	eventId: h.String,
-	eventName: h.String,
-	triggerId: h.String,
-	workflowName: h.String,
-	executionId: h.NullOr(h.String),
-	status: h.Literal("starting", "started", "skipped", "failed"),
-	idempotencyKey: h.String,
-	skipped: h.Boolean,
-	errorMessage: h.NullOr(h.String),
-	createdAt: h.Date,
-	completedAt: h.NullOr(h.Date)
-}), Fr = h.Struct({ id: h.String }), Ir = h.Struct({ runId: h.String }), Lr = h.Struct({
-	name: h.optional(h.String),
-	limit: h.optional(h.Number)
-}), Rr = h.Struct({ eventId: h.String }), zr = h.Struct({
-	requestId: h.NonEmptyString,
-	cause: h.optionalWith(h.Struct({
-		reason: h.NonEmptyString,
-		detail: h.optional(h.Record({
-			key: h.String,
-			value: h.Unknown
-		}))
-	}), { exact: !0 })
-}), Br = h.Struct({
-	workflowName: h.String,
-	executionId: h.String,
-	control: h.optional(zr)
-}), Vr = h.Struct({
-	workflowName: h.NonEmptyString,
-	executionId: h.NonEmptyString,
-	operation: h.Literal("cancel", "resume"),
-	requestId: h.NonEmptyString
-}), Hr = h.Struct({
-	workflowName: h.NonEmptyString,
-	receiptId: h.NonEmptyString,
-	requestId: h.NonEmptyString
-}), Ur = h.Struct({
-	...Hr.fields,
-	cause: zr.fields.cause
-}), Wr = F({
+}, H = p.Struct({
+	id: p.String,
+	tag: p.String,
+	executionId: p.String,
+	status: R,
+	payload: p.Unknown,
+	workflowVersion: p.NullOr(p.String),
+	workflowPatches: p.NullOr(p.Unknown),
+	output: p.NullOr(p.Unknown),
+	subject: p.NullOr(p.Unknown),
+	source: p.NullOr(p.String),
+	errorTag: p.NullOr(p.String),
+	errorMessage: p.NullOr(p.String),
+	cancelled: p.Boolean,
+	startedAt: p.DateFromString,
+	completedAt: p.NullOr(p.DateFromString),
+	durationMs: p.NullOr(p.Number),
+	traceId: p.NullOr(p.String),
+	parentExecutionId: p.NullOr(p.String),
+	parentClosePolicy: p.NullOr(qr)
+}), Zr = p.Struct({
+	tag: p.optional(p.String),
+	status: p.optional(R),
+	limit: p.optional(p.Number)
+}), Qr = p.Struct({
+	id: p.String,
+	runId: p.String,
+	stepName: p.String,
+	attempt: p.Number,
+	status: p.Literals([
+		"running",
+		"succeeded",
+		"failed"
+	]),
+	input: p.NullOr(p.Unknown),
+	retryPolicy: p.NullOr(p.Unknown),
+	output: p.NullOr(p.Unknown),
+	errorTag: p.NullOr(p.String),
+	errorMessage: p.NullOr(p.String),
+	errorCause: p.NullOr(p.Unknown),
+	startedAt: p.DateFromString,
+	completedAt: p.NullOr(p.DateFromString),
+	durationMs: p.NullOr(p.Number)
+}), $r = p.Struct({
+	id: p.String,
+	runId: p.String,
+	eventType: p.String,
+	payload: p.NullOr(p.Unknown),
+	occurredAt: p.DateFromString,
+	stepName: p.NullOr(p.String),
+	attempt: p.NullOr(p.Number)
+}), ei = p.Struct({
+	id: p.String,
+	name: p.String,
+	payload: p.Unknown,
+	source: p.String,
+	subject: p.NullOr(p.Unknown),
+	traceId: p.NullOr(p.String),
+	occurredAt: p.DateFromString
+}), ti = p.Struct({
+	id: p.String,
+	eventId: p.String,
+	eventName: p.String,
+	triggerId: p.String,
+	workflowName: p.String,
+	executionId: p.NullOr(p.String),
+	status: p.Literals([
+		"starting",
+		"started",
+		"skipped",
+		"failed"
+	]),
+	idempotencyKey: p.String,
+	skipped: p.Boolean,
+	errorMessage: p.NullOr(p.String),
+	createdAt: p.DateFromString,
+	completedAt: p.NullOr(p.DateFromString)
+}), ni = p.Struct({ id: p.String }), U = p.Struct({ runId: p.String }), ri = p.Struct({
+	name: p.optional(p.String),
+	limit: p.optional(p.Number)
+}), ii = p.Struct({ eventId: p.String }), ai = p.Struct({
+	requestId: p.NonEmptyString,
+	cause: p.optionalKey(p.Struct({
+		reason: p.NonEmptyString,
+		detail: p.optional(p.Record(p.String, p.Unknown))
+	}))
+}), oi = p.Struct({
+	workflowName: p.String,
+	executionId: p.String,
+	control: p.optional(ai)
+}), si = p.Struct({
+	workflowName: p.NonEmptyString,
+	executionId: p.NonEmptyString,
+	operation: p.Literals(["cancel", "resume"]),
+	requestId: p.NonEmptyString
+}), ci = p.Struct({
+	workflowName: p.NonEmptyString,
+	receiptId: p.NonEmptyString,
+	requestId: p.NonEmptyString
+}), li = p.Struct({
+	...ci.fields,
+	cause: ai.fields.cause
+}), ui = j({
 	name: "__voltro.workflow.queued.cancel",
-	input: Ur,
-	output: wr,
+	input: li,
+	output: V,
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), Gr = N({
+}), di = k({
 	name: "__voltro.workflow.queued.control",
-	input: Hr,
-	output: wr,
+	input: ci,
+	output: V,
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), Kr = N({
+}), fi = k({
 	name: "__voltro.workflow.control",
-	input: Vr,
-	output: q,
+	input: si,
+	output: B,
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), qr = h.Struct({
-	id: h.String,
-	signalName: h.String,
-	payload: h.optional(h.Unknown)
-}), Jr = h.Struct({
-	id: h.String,
-	updateName: h.String,
-	payload: h.optional(h.Unknown),
-	timeoutMs: h.optional(h.Number)
-}), Yr = h.Struct({
-	eventId: h.String,
-	updateId: h.String,
-	completedEventId: h.String,
-	result: h.Unknown
-}), Xr = N({
+}), pi = p.Struct({
+	id: p.String,
+	signalName: p.String,
+	payload: p.optional(p.Unknown)
+}), mi = p.Struct({
+	id: p.String,
+	updateName: p.String,
+	payload: p.optional(p.Unknown),
+	timeoutMs: p.optional(p.Number)
+}), hi = p.Struct({
+	eventId: p.String,
+	updateId: p.String,
+	completedEventId: p.String,
+	result: p.Unknown
+}), gi = k({
 	name: "__voltro.workflow.run",
 	source: "_voltro_workflow_runs",
-	input: Fr,
-	output: h.Array(kr),
+	input: ni,
+	output: p.Array(H),
 	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
-}), Zr = N({
+}), _i = k({
 	name: "__voltro.workflow.runs",
 	source: "_voltro_workflow_runs",
-	input: Ar,
-	output: h.Array(kr),
+	input: Zr,
+	output: p.Array(H),
 	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
-}), Qr = N({
+}), vi = k({
 	name: "__voltro.workflow.run.steps",
 	source: "_voltro_workflow_run_steps",
-	input: Ir,
-	output: h.Array(jr),
+	input: U,
+	output: p.Array(Qr),
 	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
-}), $r = N({
+}), yi = k({
 	name: "__voltro.workflow.run.events",
 	source: "_voltro_workflow_run_events",
-	input: Ir,
-	output: h.Array(Mr),
+	input: U,
+	output: p.Array($r),
 	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
-}), ei = N({
+}), bi = k({
 	name: "__voltro.workflow.domainEvents",
 	source: "_voltro_workflow_events",
-	input: Lr,
-	output: h.Array(Nr),
+	input: ri,
+	output: p.Array(ei),
 	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
-}), ti = N({
+}), xi = k({
 	name: "__voltro.workflow.event.deliveries",
 	source: "_voltro_workflow_event_deliveries",
-	input: Rr,
-	output: h.Array(Pr),
+	input: ii,
+	output: p.Array(ti),
 	openAccess: "the answer is scoped to the caller in the executor — a system or admin:full subject sees every row, an authenticated subject the rows of its own tenant, an anonymous caller none"
-}), ni = F({
+}), Si = j({
 	name: "__voltro.workflow.cancel",
-	input: Br,
-	output: q,
+	input: oi,
+	output: B,
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), ri = F({
+}), Ci = j({
 	name: "__voltro.workflow.resume",
-	input: Br,
-	output: q,
+	input: oi,
+	output: B,
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), ii = F({
+}), wi = j({
 	name: "__voltro.workflow.signal",
-	input: qr,
-	output: h.Struct({ eventId: h.String }),
+	input: pi,
+	output: p.Struct({ eventId: p.String }),
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), ai = F({
+}), Ti = j({
 	name: "__voltro.workflow.update",
-	input: Jr,
-	output: Yr,
+	input: mi,
+	output: hi,
 	openAccess: "authorization happens in the executor against the target run — the caller must be authenticated and belong to the run's tenant, and a missing run answers exactly like a foreign one"
-}), oi = h.NonEmptyString.pipe(h.filter((e) => e.trim().length > 0, { message: () => "A workflow retry identity must not be blank" })), si = h.Struct({
-	runId: oi,
-	requestId: oi
-}), ci = h.Struct({
-	...si.fields,
-	payloadOverride: h.optional(h.Unknown)
-}), J = {
-	requestId: h.NonEmptyString,
-	originalRunId: h.NonEmptyString,
-	originalExecutionId: h.NonEmptyString,
-	workflowName: h.NonEmptyString
-}, li = h.Union(h.Struct({
-	...J,
-	kind: h.Literal("queued"),
-	nextAttemptAt: h.NullOr(h.Number)
-}), h.Struct({
-	...J,
-	kind: h.Literal("accepted"),
-	executionId: h.NonEmptyString
-}).pipe(h.filter((e) => e.executionId !== e.originalExecutionId, { message: () => "A retry cannot accept its original execution identity" })), h.Struct({
-	...J,
-	kind: h.Literal("unconfirmed"),
-	automaticRetryStopped: h.Boolean,
-	nextAttemptAt: h.NullOr(h.Number)
-}).pipe(h.filter((e) => !e.automaticRetryStopped || e.nextAttemptAt === null, { message: () => "Stopped automatic retries cannot have a next attempt" })), h.Struct({
-	...J,
-	kind: h.Literal("not-started"),
-	outcome: W
-}), h.Struct({
-	...J,
-	kind: h.Literal("rejected"),
-	failureId: h.NonEmptyString
-})), Y = h.NonEmptyString.pipe(h.filter((e) => e.trim().length > 0, { message: () => "A workflow restart identity must not be blank" })), ui = h.Union(h.Struct({ kind: h.Literal("failed-steps") }), h.Struct({
-	kind: h.Literal("from-step"),
-	stepName: Y
-})), X = h.Struct({
-	requestId: Y.pipe(h.maxLength(64)),
-	runId: Y
-}), di = h.Struct({
-	...X.fields,
-	selection: ui
-}), fi = {
-	...di.fields,
-	workflowName: Y,
-	executionId: Y,
-	originalGeneration: Y,
-	requestedAt: h.Number.pipe(h.finite()),
-	dispatchAttempts: h.NonNegativeInt
-}, pi = h.Union(h.Struct({
-	...X.fields,
-	kind: h.Literal("not-found")
-}), h.Struct({
-	...di.fields,
-	kind: h.Literal("withdrawn"),
-	workflowName: Y,
-	withdrawnAt: h.Number.pipe(h.finite())
-}), h.Struct({
-	...fi,
-	kind: h.Literal("pending")
-}), h.Struct({
-	...fi,
-	kind: h.Literal("entered"),
-	enteredGeneration: Y
-}).pipe(h.filter((e) => e.enteredGeneration !== e.originalGeneration && e.dispatchAttempts > 0, { message: () => "Restart entry requires a dispatched command and a new generation" }))), mi = h.Union(pi, h.Struct({
-	...X.fields,
-	kind: h.Literal("not-reserved"),
-	reason: h.Literal("admission", "journal")
-})), hi = "__voltro.undo.log", gi = "__voltro.undo.apply", _i = "__voltro.undo.redo", vi = h.Struct({
-	id: h.String,
-	tag: h.String,
-	label: h.NullOr(h.String),
-	undone: h.Boolean,
-	crossesAction: h.Boolean,
-	createdAt: h.String
-}), yi = class extends h.TaggedError()("UndoNotFound", { invocationId: h.String }) {}, bi = class extends h.TaggedError()("UndoForbidden", { invocationId: h.String }) {}, xi = class extends h.TaggedError()("UndoConflict", {
-	invocationId: h.String,
-	reason: h.Literal("conflict", "action")
-}) {}, Si = h.Union(yi, bi, xi), Ci = N({
-	name: hi,
+}), Ei = p.NonEmptyString.pipe(p.check(p.makeFilter((e) => e.trim().length > 0, { message: "A workflow retry identity must not be blank" }))), Di = p.Struct({
+	runId: Ei,
+	requestId: Ei
+}), Oi = p.Struct({
+	...Di.fields,
+	payloadOverride: p.optional(p.Unknown)
+}), W = {
+	requestId: p.NonEmptyString,
+	originalRunId: p.NonEmptyString,
+	originalExecutionId: p.NonEmptyString,
+	workflowName: p.NonEmptyString
+}, ki = p.Union([
+	p.Struct({
+		...W,
+		kind: p.Literal("queued"),
+		nextAttemptAt: p.NullOr(p.Number)
+	}),
+	p.Struct({
+		...W,
+		kind: p.Literal("accepted"),
+		executionId: p.NonEmptyString
+	}).pipe(p.check(p.makeFilter((e) => e.executionId !== e.originalExecutionId, { message: "A retry cannot accept its original execution identity" }))),
+	p.Struct({
+		...W,
+		kind: p.Literal("unconfirmed"),
+		automaticRetryStopped: p.Boolean,
+		nextAttemptAt: p.NullOr(p.Number)
+	}).pipe(p.check(p.makeFilter((e) => !e.automaticRetryStopped || e.nextAttemptAt === null, { message: "Stopped automatic retries cannot have a next attempt" }))),
+	p.Struct({
+		...W,
+		kind: p.Literal("not-started"),
+		outcome: L
+	}),
+	p.Struct({
+		...W,
+		kind: p.Literal("rejected"),
+		failureId: p.NonEmptyString
+	})
+]), G = p.NonEmptyString.pipe(p.check(p.makeFilter((e) => e.trim().length > 0, { message: "A workflow restart identity must not be blank" }))), Ai = p.Union([p.Struct({ kind: p.Literal("failed-steps") }), p.Struct({
+	kind: p.Literal("from-step"),
+	stepName: G
+})]), K = p.Struct({
+	requestId: G.pipe(p.check(p.isMaxLength(64))),
+	runId: G
+}), ji = p.Struct({
+	...K.fields,
+	selection: Ai
+}), Mi = {
+	...ji.fields,
+	workflowName: G,
+	executionId: G,
+	originalGeneration: G,
+	requestedAt: p.Number.pipe(p.check(p.isFinite())),
+	dispatchAttempts: p.Number.check(p.isInt(), p.isGreaterThanOrEqualTo(0))
+}, Ni = p.Union([
+	p.Struct({
+		...K.fields,
+		kind: p.Literal("not-found")
+	}),
+	p.Struct({
+		...ji.fields,
+		kind: p.Literal("withdrawn"),
+		workflowName: G,
+		withdrawnAt: p.Number.pipe(p.check(p.isFinite()))
+	}),
+	p.Struct({
+		...Mi,
+		kind: p.Literal("pending")
+	}),
+	p.Struct({
+		...Mi,
+		kind: p.Literal("entered"),
+		enteredGeneration: G
+	}).pipe(p.check(p.makeFilter((e) => e.enteredGeneration !== e.originalGeneration && e.dispatchAttempts > 0, { message: "Restart entry requires a dispatched command and a new generation" })))
+]), Pi = p.Union([Ni, p.Struct({
+	...K.fields,
+	kind: p.Literal("not-reserved"),
+	reason: p.Literals(["admission", "journal"])
+})]), Fi = "__voltro.undo.log", Ii = "__voltro.undo.apply", Li = "__voltro.undo.redo", Ri = p.Struct({
+	id: p.String,
+	tag: p.String,
+	label: p.NullOr(p.String),
+	undone: p.Boolean,
+	crossesAction: p.Boolean,
+	createdAt: p.String
+}), zi = class extends p.TaggedError()("UndoNotFound", { invocationId: p.String }) {}, Bi = class extends p.TaggedError()("UndoForbidden", { invocationId: p.String }) {}, Vi = class extends p.TaggedError()("UndoConflict", {
+	invocationId: p.String,
+	reason: p.Literals(["conflict", "action"])
+}) {}, Hi = p.Union([
+	zi,
+	Bi,
+	Vi
+]), Ui = k({
+	name: Fi,
 	source: "_voltro_undo_log",
-	input: h.Struct({ limit: h.optional(h.Number) }),
-	output: h.Array(vi),
+	input: p.Struct({ limit: p.optional(p.Number) }),
+	output: p.Array(Ri),
 	openAccess: "subject-scoped by construction: lists only the calling subject's own undoable actions"
-}), wi = P({
-	name: gi,
-	input: h.Struct({ invocationId: h.String }),
-	output: h.Struct({ ok: h.Boolean }),
-	error: Si,
+}), Wi = A({
+	name: Ii,
+	input: p.Struct({ invocationId: p.String }),
+	output: p.Struct({ ok: p.Boolean }),
+	error: Hi,
 	openAccess: "subject-scoped by construction: undo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), Ti = P({
-	name: _i,
-	input: h.Struct({ invocationId: h.String }),
-	output: h.Struct({ ok: h.Boolean }),
-	error: Si,
+}), Gi = A({
+	name: Li,
+	input: p.Struct({ invocationId: p.String }),
+	output: p.Struct({ ok: p.Boolean }),
+	error: Hi,
 	openAccess: "subject-scoped by construction: redo is per-actor — another subject's invocation fails typed with UndoForbidden"
-}), Ei = class extends h.TaggedError()("TenantScopeViolation", {
-	table: h.String,
-	reason: h.String
-}) {}, Di = class extends h.TaggedError()("StoreOperationFailed", {
-	operation: h.String,
-	table: h.String,
-	cause: h.String
+}), Ki = class extends p.TaggedError()("TenantScopeViolation", {
+	table: p.String,
+	reason: p.String
+}) {}, qi = class extends p.TaggedError()("StoreOperationFailed", {
+	operation: p.String,
+	table: p.String,
+	cause: p.String
 }) {
 	get message() {
 		return `${this.operation} on '${this.table}' failed: ${this.cause}`;
 	}
-}, Oi = class extends h.TaggedError()("NoRowFound", {
-	table: h.String,
-	found: h.Number
+}, Ji = class extends p.TaggedError()("NoRowFound", {
+	table: p.String,
+	found: p.Number
 }) {
 	get message() {
 		return this.found === 0 ? `expected exactly one row in '${this.table}', found none` : `expected exactly one row in '${this.table}', found more than one`;
 	}
-}, ki = class extends h.TaggedError()("TableValidationFailed", {
-	table: h.String,
-	summary: h.String,
-	issues: h.Array(h.Struct({
-		path: h.String,
-		message: h.String
+}, Yi = class extends p.TaggedError()("TableValidationFailed", {
+	table: p.String,
+	summary: p.String,
+	issues: p.Array(p.Struct({
+		path: p.String,
+		message: p.String
 	}))
-}) {}, Ai = class extends h.TaggedError()("TenantRowNotFound", {
-	table: h.String,
-	id: h.String,
-	reason: h.String
-}) {}, ji = class extends h.TaggedError()("ServerOnlyColumnWrite", {
-	table: h.String,
-	columns: h.Array(h.String)
-}) {}, Mi = class extends h.TaggedError()("ConstraintViolation", {
-	kind: h.Literal("foreignKey", "foreignKeyInUse", "unique", "notNull", "check"),
-	table: h.String,
-	operation: h.String,
-	constraint: h.optional(h.String),
-	column: h.optional(h.String),
-	detail: h.optional(h.String)
+}) {
+	get message() {
+		return this.summary;
+	}
+}, Xi = class extends p.TaggedError()("TenantRowNotFound", {
+	table: p.String,
+	id: p.String,
+	reason: p.String
+}) {}, Zi = class extends p.TaggedError()("ServerOnlyColumnWrite", {
+	table: p.String,
+	columns: p.Array(p.String)
+}) {}, Qi = class extends p.TaggedError()("ConstraintViolation", {
+	kind: p.Literals([
+		"foreignKey",
+		"foreignKeyInUse",
+		"unique",
+		"notNull",
+		"check"
+	]),
+	table: p.String,
+	operation: p.String,
+	constraint: p.optional(p.String),
+	column: p.optional(p.String),
+	detail: p.optional(p.String)
 }) {
 	get message() {
 		if (this.detail !== void 0) return this.detail;
@@ -1170,86 +1363,101 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 			case "check": return `check constraint ${t}: the row does not satisfy it`;
 		}
 	}
-}, Ni = "__voltro.approvals.pending", Pi = "__voltro.approvals.decide", Fi = N({
-	name: Ni,
+}, $i = "__voltro.approvals.pending", ea = "__voltro.approvals.decide", ta = k({
+	name: $i,
 	source: "_voltro_approvals",
-	input: h.Struct({ limit: h.optional(h.Number) }),
-	output: h.Array(en),
+	input: p.Struct({ limit: p.optional(p.Number) }),
+	output: p.Array(bn),
 	openAccess: "the answer is scoped to the caller — a row appears only if they requested it or hold its recorded approver scopes, so an anonymous caller sees nothing"
-}), Ii = P({
-	name: Pi,
-	input: h.Struct({
-		approvalId: h.String,
-		decision: h.Literal("approve", "reject"),
-		note: h.optional(h.String)
+}), na = A({
+	name: ea,
+	input: p.Struct({
+		approvalId: p.String,
+		decision: p.Literals(["approve", "reject"]),
+		note: p.optional(p.String)
 	}),
-	output: h.Struct({
-		approvalId: h.String,
-		status: h.Literal("approved", "rejected")
+	output: p.Struct({
+		approvalId: p.String,
+		status: p.Literals(["approved", "rejected"])
 	}),
-	error: $t,
+	error: yn,
 	openAccess: "the approver authority is the PENDING ROW's own recorded scopes (plus an unconditional self-approval refusal), checked in-handler — a descriptor-level scope would have to be the union of every approval-requiring procedure in the app"
-}), Li = "__voltro.connections.list", Ri = "__voltro.connections.start", zi = "__voltro.connections.submitToken", Bi = "__voltro.connections.disconnect", Z = h.Literal("oauth2", "pat"), Vi = h.Literal("disconnected", "connected", "expired", "revoked", "error"), Hi = h.Struct({
-	connectionId: h.String,
-	kind: Z,
-	label: h.String,
-	status: Vi,
-	accountId: h.NullOr(h.String),
-	accountLabel: h.NullOr(h.String),
-	scopes: h.Array(h.String),
-	expiresAt: h.NullOr(h.String),
-	lastError: h.NullOr(h.String),
-	connectedAt: h.NullOr(h.String)
-}), Ui = class extends h.TaggedError()("ConnectionNotDeclared", { connectionId: h.String }) {}, Wi = class extends h.TaggedError()("ConnectionSubjectRequired", { connectionId: h.String }) {}, Gi = class extends h.TaggedError()("ConnectionKindMismatch", {
-	connectionId: h.String,
-	expected: Z,
-	actual: Z
-}) {}, Ki = class extends h.TaggedError()("ConnectionHandshakeFailed", {
-	connectionId: h.String,
-	reason: h.String,
-	transient: h.Boolean
-}) {}, qi = h.Union(Ui, Wi, Gi, Ki), Ji = N({
-	name: Li,
+}), ra = "__voltro.connections.list", ia = "__voltro.connections.start", aa = "__voltro.connections.submitToken", oa = "__voltro.connections.disconnect", q = p.Literals(["oauth2", "pat"]), sa = p.Literals([
+	"disconnected",
+	"connected",
+	"expired",
+	"revoked",
+	"error"
+]), ca = p.Struct({
+	connectionId: p.String,
+	kind: q,
+	label: p.String,
+	status: sa,
+	accountId: p.NullOr(p.String),
+	accountLabel: p.NullOr(p.String),
+	scopes: p.Array(p.String),
+	expiresAt: p.NullOr(p.String),
+	lastError: p.NullOr(p.String),
+	connectedAt: p.NullOr(p.String)
+}), la = class extends p.TaggedError()("ConnectionNotDeclared", { connectionId: p.String }) {}, ua = class extends p.TaggedError()("ConnectionSubjectRequired", { connectionId: p.String }) {}, da = class extends p.TaggedError()("ConnectionKindMismatch", {
+	connectionId: p.String,
+	expected: q,
+	actual: q
+}) {}, fa = class extends p.TaggedError()("ConnectionHandshakeFailed", {
+	connectionId: p.String,
+	reason: p.String,
+	transient: p.Boolean
+}) {
+	get message() {
+		return this.reason;
+	}
+}, J = p.Union([
+	la,
+	ua,
+	da,
+	fa
+]), pa = k({
+	name: ra,
 	source: "_voltro_connections",
-	input: h.Struct({}),
-	output: h.Array(Hi),
+	input: p.Struct({}),
+	output: p.Array(ca),
 	openAccess: "self-scoped read: projects the declared connections for the calling subject only (its own connect/disconnect state)"
-}), Yi = F({
-	name: Ri,
-	input: h.Struct({
-		connectionId: h.String,
-		redirectTo: h.optional(h.String)
+}), ma = j({
+	name: ia,
+	input: p.Struct({
+		connectionId: p.String,
+		redirectTo: p.optional(p.String)
 	}),
-	output: h.Struct({
-		authorizeUrl: h.String,
-		state: h.String
+	output: p.Struct({
+		authorizeUrl: p.String,
+		state: p.String
 	}),
-	error: qi,
+	error: J,
 	openAccess: "self-service: begins an oauth handshake that stores a credential for the calling subject only; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Xi = P({
-	name: zi,
-	input: h.Struct({
-		connectionId: h.String,
-		token: h.String
+}), ha = A({
+	name: aa,
+	input: p.Struct({
+		connectionId: p.String,
+		token: p.String
 	}),
-	output: h.Struct({ ok: h.Boolean }),
-	error: qi,
+	output: p.Struct({ ok: p.Boolean }),
+	error: J,
 	openAccess: "self-service: stores a pasted token as the calling subject's own credential; anonymous callers fail typed with ConnectionSubjectRequired"
-}), Zi = P({
-	name: Bi,
-	input: h.Struct({ connectionId: h.String }),
-	output: h.Struct({ ok: h.Boolean }),
-	error: qi,
+}), ga = A({
+	name: oa,
+	input: p.Struct({ connectionId: p.String }),
+	output: p.Struct({ ok: p.Boolean }),
+	error: J,
 	openAccess: "self-service: deletes only the calling subject's own credential row for this connection"
-}), Qi = (e) => {
+}), _a = (e) => {
 	let t = e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : 0;
 	return Number.isNaN(t) ? 0 : t;
-}, $i = [
+}, va = [
 	"app-store",
 	"play",
 	"mac-app-store",
 	"microsoft-store"
-], Q = [
+], Y = [
 	{
 		name: "iphone-6.7",
 		label: "iPhone 6.7″ — 1290×2796",
@@ -1327,39 +1535,88 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 		deviceScaleFactor: 1,
 		stores: ["microsoft-store"]
 	}
-], ea = Q.map((e) => e.name), ta = (e) => Q.find((t) => t.name === e), na = (e) => ({
+], ya = Y.map((e) => e.name), ba = (e) => Y.find((t) => t.name === e), xa = (e) => ({
 	width: e.viewport.width * e.deviceScaleFactor,
 	height: e.viewport.height * e.deviceScaleFactor
-}), ra = (e) => Q.filter((t) => t.stores.includes(e)), ia = 4001, aa = /* @__PURE__ */ new Set(["/rpc", "/ws"]), oa = (e) => {
+}), Sa = (e) => Y.filter((t) => t.stores.includes(e)), Ca = 4001, wa = /* @__PURE__ */ new Set(["/rpc", "/ws"]), Ta = (e) => {
 	for (let [t, n] of Object.entries(e.limits ?? {})) if (n !== void 0 && (!Number.isSafeInteger(n) || n <= 0)) throw Error(`defineWebSocket: limits.${t} must be a positive safe integer`);
 	if (!e.path.startsWith("/")) throw Error(`defineWebSocket: path must be absolute, got '${e.path}'`);
-	if (aa.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
+	if (wa.has(e.path)) throw Error(`defineWebSocket: '${e.path}' is the framework's own socket surface — mount the gateway elsewhere`);
 	if (e.auth !== "subject" && e.auth !== "public") throw Error(`defineWebSocket: auth must be 'subject' or 'public' (explicitly — an unauthenticated socket has to be a decision somebody wrote down), got '${String(e.auth)}'`);
 	return e;
-}, sa = "voltro-dev", ca = "pair", $ = "voltro:pairing", la = (e) => {
+}, X = (e) => typeof e == "object" && !!e && !Array.isArray(e), Z = (e, t = /* @__PURE__ */ new Map()) => {
+	let n = t.get(e);
+	if (n !== void 0) return n;
+	let r = Ea(e, t);
+	return t.set(e, r), r;
+}, Ea = (e, t) => e.encoding === void 0 ? m.isNumber(e) ? p.make(e).check(p.isFinite()).ast : m.isObjects(e) ? new m.Objects(e.propertySignatures.map((e) => new m.PropertySignature(e.name, Z(e.type, t))), e.indexSignatures.map((e) => new m.IndexSignature(e.parameter, Z(e.type, t))), e.annotations, e.checks, void 0, e.context) : m.isArrays(e) ? new m.Arrays(e.isMutable, e.elements.map((e) => Z(e, t)), e.rest.map((e) => Z(e, t)), e.annotations, e.checks, void 0, e.context) : m.isUnion(e) ? new m.Union(e.types.map((e) => Z(e, t)), e.options, e.annotations, e.checks, void 0, e.context) : m.isSuspend(e) ? new m.Suspend(() => Z(e.thunk(), t), e.annotations, e.checks, void 0, e.context) : e : e, Q = (e) => {
+	if (Array.isArray(e)) return e.map(Q);
+	if (!X(e)) return e;
+	let t = e.not;
+	if (X(t) && t.type === "null" && Object.keys(e).length === 1) return {
+		type: "object",
+		properties: {},
+		additionalProperties: !1
+	};
+	let n = e.anyOf;
+	if (Array.isArray(n)) {
+		if (n.length === 2) {
+			let t = n.find((e) => X(e) && e.type === "number"), r = n.find((e) => X(e) && e.type === "string" && Array.isArray(e.enum) && e.enum.includes("Infinity"));
+			if (X(t) && r !== void 0) {
+				let { anyOf: n, ...r } = e;
+				return Q({
+					...r,
+					...t
+				});
+			}
+		}
+		if (n.length === 1 && X(n[0])) {
+			let { anyOf: t, ...r } = e;
+			return Q({
+				...r,
+				...n[0]
+			});
+		}
+	}
+	let r = {};
+	for (let [t, n] of Object.entries(e)) r[t] = Q(n);
+	return r;
+}, Da = (e, t = {}) => {
+	let n = p.make(Z(e.ast)), r = p.toJsonSchemaDocument(n, t.closed === !1 ? {} : { onExcessProperty: "error" });
+	return {
+		schema: Q(r.schema),
+		definitions: Q(r.definitions)
+	};
+}, Oa = (e, t = {}) => {
+	let { schema: n, definitions: r } = Da(e, t);
+	return Object.keys(r).length === 0 ? n : {
+		...n,
+		$defs: r
+	};
+}, ka = "voltro-dev", Aa = "pair", $ = "voltro:pairing", ja = (e) => {
 	try {
 		let t = new URL(e);
 		return t.protocol === "http:" || t.protocol === "https:";
 	} catch {
 		return !1;
 	}
-}, ua = (e) => {
+}, Ma = (e) => {
 	try {
 		let t = new URL(e).hostname;
 		return t === "localhost" || t === "127.0.0.1" || t === "::1" || t === "[::1]";
 	} catch {
 		return !1;
 	}
-}, da = (e) => {
-	if (!la(e.api)) throw Error(`pairingLink: api must be an http(s) url, got ${JSON.stringify(e.api)}`);
-	if (ua(e.api)) throw Error("pairingLink: api must be the LAN address — a device cannot reach localhost on this machine");
+}, Na = (e) => {
+	if (!ja(e.api)) throw Error(`pairingLink: api must be an http(s) url, got ${JSON.stringify(e.api)}`);
+	if (Ma(e.api)) throw Error("pairingLink: api must be the LAN address — a device cannot reach localhost on this machine");
 	if (!/^[A-Za-z0-9_-]+$/.test(e.name)) throw Error(`pairingLink: name must be a plain identifier, got ${JSON.stringify(e.name)}`);
 	let t = new URLSearchParams({
 		api: e.api,
 		name: e.name
 	});
-	return e.token !== void 0 && e.token.length > 0 && t.set("token", e.token), `${sa}://${ca}?${t.toString()}`;
-}, fa = (e) => {
+	return e.token !== void 0 && e.token.length > 0 && t.set("token", e.token), `${ka}://${Aa}?${t.toString()}`;
+}, Pa = (e) => {
 	let t;
 	try {
 		t = new URL(e);
@@ -1368,12 +1625,12 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 	}
 	if (t.protocol !== "voltro-dev:" || (t.host || t.pathname.replace(/^\/+/, "")) !== "pair") return null;
 	let n = t.searchParams.get("api") ?? "", r = t.searchParams.get("name") ?? "", i = t.searchParams.get("token");
-	return !la(n) || ua(n) || !/^[A-Za-z0-9_-]+$/.test(r) ? null : {
+	return !ja(n) || Ma(n) || !/^[A-Za-z0-9_-]+$/.test(r) ? null : {
 		api: n,
 		name: r,
 		...i !== null && i.length > 0 ? { token: i } : {}
 	};
-}, pa = (e) => "getItem" in e ? {
+}, Fa = (e) => "getItem" in e ? {
 	get: async (t) => e.getItem(t),
 	set: async (t, n) => {
 		await e.setItem(t, n);
@@ -1389,14 +1646,14 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 	remove: e.remove ? async (t) => {
 		await e.remove(t);
 	} : null
-}, ma = async (e, t) => {
-	await pa(e).set($, JSON.stringify(t));
-}, ha = async (e) => {
-	let t = await pa(e).get($);
+}, Ia = async (e, t) => {
+	await Fa(e).set($, JSON.stringify(t));
+}, La = async (e) => {
+	let t = await Fa(e).get($);
 	if (t === null || t === "") return null;
 	try {
 		let e = JSON.parse(t);
-		return typeof e.api != "string" || typeof e.name != "string" || !la(e.api) ? null : {
+		return typeof e.api != "string" || typeof e.name != "string" || !ja(e.api) ? null : {
 			api: e.api,
 			name: e.name,
 			...typeof e.token == "string" && e.token.length > 0 ? { token: e.token } : {}
@@ -1404,9 +1661,41 @@ var At = h.Union(h.String, h.Number), jt = (e) => typeof e == "object" && !!e &&
 	} catch {
 		return null;
 	}
-}, ga = async (e) => {
-	let t = pa(e);
+}, Ra = async (e) => {
+	let t = Fa(e);
 	t.remove ? await t.remove($) : await t.set($, "");
-}, _a = 1;
+}, za = p.Struct({
+	owner: p.optional(p.Boolean),
+	roles: p.optional(p.Array(p.String)),
+	groups: p.optional(p.Array(p.String)),
+	scopes: p.optional(p.Array(p.String)),
+	tenant: p.optional(p.Boolean),
+	apiKey: p.optional(p.Boolean),
+	password: p.optional(p.Boolean),
+	guard: p.optional(p.String)
+}), Ba = p.Array(za), Va = class {
+	slots = [];
+	head = 0;
+	size = 0;
+	capacity;
+	constructor(e) {
+		this.capacity = Number.isNaN(e) ? Infinity : Math.max(0, Math.floor(e));
+	}
+	get length() {
+		return this.size;
+	}
+	get(e) {
+		if (!(!Number.isInteger(e) || e < 0 || e >= this.size)) return this.slots[(this.head + e) % this.capacity];
+	}
+	push(e) {
+		this.capacity !== 0 && (this.size < this.capacity ? (this.slots[(this.head + this.size) % this.capacity] = e, this.size++) : (this.slots[this.head] = e, this.head = (this.head + 1) % this.capacity));
+	}
+	clear() {
+		this.slots.length = 0, this.head = 0, this.size = 0;
+	}
+	*[Symbol.iterator]() {
+		for (let e = 0; e < this.size; e++) yield this.get(e);
+	}
+}, Ha = 2;
 //#endregion
-export { Be as ADMIN_SCOPE, Me as APIKEY_ISSUE_ORG_SCOPE, Le as APIKEY_ISSUE_OTHER_SCOPE, Ee as APIKEY_ISSUE_SELF_SCOPE, Pi as APPROVALS_DECIDE_TAG, Ni as APPROVALS_PENDING_TAG, lr as ApiUnavailable, $t as ApprovalDecisionErrors, Qt as ApprovalErrors, T as ApprovalExpired, Zt as ApprovalForbidden, qt as ApprovalNotFound, Xt as ApprovalNotPending, Yt as ApprovalRejected, Kt as ApprovalRequired, Jt as ApprovalSelfApproval, E as ApprovalUnavailable, ie as AuthMiddleware, S as BusinessRuleViolation, Li as CONNECTIONS_LIST_TAG, Bi as CONNECTION_DISCONNECT_TAG, Ri as CONNECTION_START_TAG, zi as CONNECTION_SUBMIT_TOKEN_TAG, Ki as ConnectionHandshakeFailed, ae as ConnectionInfo, se as ConnectionInfoMiddleware, Z as ConnectionKind, Gi as ConnectionKindMismatch, Ui as ConnectionNotDeclared, Hi as ConnectionState, Vi as ConnectionStatus, Wi as ConnectionSubjectRequired, Mi as ConstraintViolation, tt as DEFAULT_IN_FLIGHT_LEASE_MS, o as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, ee as DEFAULT_SCOPE_CACHE_TTL_MS, ve as DEVICES_MANAGE_SCOPE, tr as EVENT_ROUTE_SEP, Qn as EventKeyInvalid, Zn as EventPayloadInvalid, $n as EventPayloadTooLarge, An as FRAMEWORK_WIRE_ERRORS, ia as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, re as IMPERSONATION_METADATA_KEY, _t as JSONAPI_MEDIA_TYPE, Vn as MAX_EVENT_ENVELOPE_BYTES, xt as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, Ze as MutationConnectionRequired, m as MutationInFlight, Oi as NoRowFound, d as NoSuchResource, ca as PAIRING_HOST, sa as PAIRING_SCHEME, $ as PAIRING_STORAGE_KEY, ft as PROBLEM_JSON, _a as PROTOCOL_VERSION, en as PendingApproval, D as REACTIVITY_CHANNEL_PREFIX, ht as REST_PROFILE_NAMES, gn as SERVICE_NAME_PATTERN, wt as SESSION_HEADER_NAME, Q as STORE_SCREENSHOT_PRESETS, ea as STORE_SCREENSHOT_PRESET_NAMES, $i as STORE_SCREENSHOT_STORES, f as ScopeError, ji as ServerOnlyColumnWrite, Di as StoreOperationFailed, le as Subject, Ke as SubjectIdentity, n as SubjectService, ki as TableValidationFailed, Ai as TenantRowNotFound, Ei as TenantScopeViolation, ye as TenantSelectionRefused, gi as UNDO_APPLY_TAG, hi as UNDO_LOG_TAG, _i as UNDO_REDO_TAG, l as Unauthenticated, xi as UndoConflict, bi as UndoForbidden, vi as UndoLogEntry, yi as UndoNotFound, C as ValidationError, w as ValidationErrors, Wt as ValidationIssue, z as WorkflowAccessProperty, Br as WorkflowControlInputSchema, zr as WorkflowControlIntentSchema, Vr as WorkflowControlReadInputSchema, q as WorkflowControlResultSchema, Nr as WorkflowDomainEventRowSchema, Lr as WorkflowDomainEventsInputSchema, Rr as WorkflowEventDeliveriesInputSchema, Pr as WorkflowEventDeliveryRowSchema, Tr as WorkflowParentClosePolicySchema, Ur as WorkflowQueuedCancelInputSchema, wr as WorkflowQueuedCancellationResultSchema, Hr as WorkflowQueuedControlTargetSchema, di as WorkflowRestartCommandSchema, pi as WorkflowRestartObservationSchema, mi as WorkflowRestartResultSchema, ui as WorkflowRestartSelectionSchema, X as WorkflowRestartTargetSchema, ci as WorkflowRetryCommandSchema, li as WorkflowRetryObservationSchema, si as WorkflowRetryTargetSchema, Mr as WorkflowRunEventRowSchema, Dr as WorkflowRunHandleSchema, Fr as WorkflowRunRefSchema, kr as WorkflowRunRowSchema, K as WorkflowRunSnapshotSchema, G as WorkflowRunStatusSchema, jr as WorkflowRunStepRowSchema, Ir as WorkflowRunTableRefSchema, Ar as WorkflowRunsInputSchema, qr as WorkflowSignalInputSchema, Er as WorkflowStartDeferralSchema, W as WorkflowStartTerminalOutcomeSchema, Jr as WorkflowUpdateInputSchema, Yr as WorkflowUpdateResultSchema, Fn as actionToRpc, xe as advisoryResourceGuardWarning, c as anonymousSubject, ma as applyPairing, zt as applyRowPatch, fe as applyScopeDecision, Ii as approvalsDecideDescriptor, Fi as approvalsPendingQueryDescriptor, pe as assertAuthenticated, sr as attachWorkflowAccess, bt as beginIdempotent, gr as checkFrameworkCompat, Ae as checkGuards, He as checkGuardsEffect, ga as clearPairing, ot as compareSurfaces, s as composeAuthStrategies, mr as composeRpcInterceptors, Zi as connectionDisconnectDescriptor, Yi as connectionStartDescriptor, Xi as connectionSubmitTokenDescriptor, Ji as connectionsListQueryDescriptor, cn as declaredReactivityChannelKeys, u as declaresResourceGuard, F as defineAction, Un as defineEvent, P as defineMutation, dr as definePlugin, fr as definePluginRoute, hr as definePluginService, N as defineQuery, Sn as defineStream, oa as defineWebSocket, Lt as diffRows, Ce as effectiveScopes, er as encodeEventKey, st as encodeRestError, et as encodeRestSuccess, Ln as errorMessage, R as errorTag, Kn as eventAttached, Wn as eventEnvelope, Gn as eventGap, Jn as eventResumePoint, nr as eventRoute, qn as eventStreamEvent, Yn as eventSubscribeInput, Xn as eventToRpc, Qe as failIdempotent, Gt as fieldIssuesOf, Fe as findAdvisoryResourceGuards, Ye as finishIdempotent, Vt as firstEventValue, ir as formatEventRoute, Je as freshFor, je as getPolicyGuardResolver, Te as getResourceScopeResolver, B as getWorkflowAccess, at as groupShapeDigests, xn as hasAccessDecision, ne as hasCallbackRoutes, we as hasEffectiveScope, I as hasEnforcedGuard, _e as hasScope, Xe as holdIdempotentClaim, v as idToPath, lt as idempotencyScope, Ht as inputLabel, ur as isApiUnavailable, Ue as isAuthenticatedCheck, bn as isAuthenticatedGuard, mn as isClientReachable, Hn as isEventDescriptor, Rt as isIdKeyed, Ie as isMachineSubject, p as isOpenAccess, be as isPolicyCheck, yn as isPolicyGuard, on as isReactivityChannel, sn as isReactivityChannelKey, Ge as isServiceAccess, hn as isServiceReachable, te as isServiceSubject, he as isSystemSubject, Pe as isTenantSelectable, A as isWireReachable, me as makeScopeCache, qe as memoryIdempotencyStore, ue as missingAccessDecision, Pn as mutationToRpc, pt as nextLink, Bn as normalizeDescriptor, un as normalizeSource, r as openAccessSpec, ge as orderByBearerPrefix, da as pairingLink, rr as parseEventRoute, fa as parsePairingLink, _ as patchCellSchema, y as pathToId, vr as pluginAlias, pr as pluginInstanceName, yr as pluginSlug, Cr as pluginTag, gt as problemDetails, nt as problemTypeOf, $e as procedureShapeDigest, fn as publishReactivity, it as publishServerError, Nn as queryToRpc, ce as rawImpersonationMark, an as reactivityChannel, ha as readPairing, xr as registerPluginAliases, Rn as reportableError, We as requireScope, Sr as resetPluginAliases, de as resolvePolicyAction, ut as resolveRestFormat, or as resolveWorkflowAccess, vt as restViewSchema, Nt as rowPatchOpSchema, Pt as rowPatchSchema, yt as schemaShape, e as scopeCacheKey, ze as selectSubjectTenant, a as serviceAccessSpec, i as serviceCallersOf, Se as serviceSubject, Ct as sessionValueFromHeaders, oe as setEffectiveScopes, ke as setPolicyGuardResolver, t as setResourceScopeResolver, St as shapeDigest, ln as sourceKeys, na as storeScreenshotPixels, ta as storeScreenshotPreset, ra as storeScreenshotPresetsFor, In as streamToRpc, x as strictInput, Ve as subjectAuditActorId, Ne as subjectIdentity, Oe as subjectScopes, mt as subscribeServerErrors, Bt as subscriptionEvent, Re as systemSubject, De as tenantScopedSubject, zn as toRpc, rt as toSnakeCase, Qi as tsMs, dn as undeclaredChannelKeys, wi as undoApplyDescriptor, Ci as undoLogQueryDescriptor, Ti as undoRedoDescriptor, pn as wireAudienceOf, L as wireErrorUnion, Mn as withRpcTag, dt as withheldServerError, cr as workflowAccessDescriptor, ni as workflowCancelDescriptor, Kr as workflowControlQueryDescriptor, ei as workflowDomainEventsQueryDescriptor, ti as workflowEventDeliveriesQueryDescriptor, Wr as workflowQueuedCancelDescriptor, Gr as workflowQueuedControlQueryDescriptor, ri as workflowResumeDescriptor, $r as workflowRunEventsQueryDescriptor, Xr as workflowRunQueryDescriptor, Qr as workflowRunStepsQueryDescriptor, Zr as workflowRunsQueryDescriptor, ii as workflowSignalDescriptor, Or as workflowToRpc, ai as workflowUpdateDescriptor, jn as workflowWireErrorUnion, ct as wsMutationIdempotencyScope };
+export { Be as ADMIN_SCOPE, Me as APIKEY_ISSUE_ORG_SCOPE, Le as APIKEY_ISSUE_OTHER_SCOPE, Ee as APIKEY_ISSUE_SELF_SCOPE, ea as APPROVALS_DECIDE_TAG, $i as APPROVALS_PENDING_TAG, Mr as ApiUnavailable, yn as ApprovalDecisionErrors, vn as ApprovalErrors, mn as ApprovalExpired, gn as ApprovalForbidden, dn as ApprovalNotFound, hn as ApprovalNotPending, pn as ApprovalRejected, un as ApprovalRequired, fn as ApprovalSelfApproval, _n as ApprovalUnavailable, re as AuthMiddleware, Va as BoundedRing, sn as BusinessRuleViolation, ra as CONNECTIONS_LIST_TAG, oa as CONNECTION_DISCONNECT_TAG, ia as CONNECTION_START_TAG, aa as CONNECTION_SUBMIT_TOKEN_TAG, fa as ConnectionHandshakeFailed, ie as ConnectionInfo, oe as ConnectionInfoMiddleware, q as ConnectionKind, da as ConnectionKindMismatch, la as ConnectionNotDeclared, ca as ConnectionState, sa as ConnectionStatus, ua as ConnectionSubjectRequired, Qi as ConstraintViolation, rt as DEFAULT_IN_FLIGHT_LEASE_MS, o as DEFAULT_SCOPE_CACHE_MAX_ENTRIES, l as DEFAULT_SCOPE_CACHE_TTL_MS, _e as DEVICES_MANAGE_SCOPE, Sr as EVENT_ROUTE_SEP, yr as EventKeyInvalid, vr as EventPayloadInvalid, br as EventPayloadTooLarge, Xn as FRAMEWORK_WIRE_ERRORS, Ca as GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE, ne as IMPERSONATION_METADATA_KEY, yt as JSONAPI_MEDIA_TYPE, cr as MAX_EVENT_ENVELOPE_BYTES, Ct as MUTATION_IN_FLIGHT_RETRY_AFTER_MS, $e as MutationConnectionRequired, Ye as MutationInFlight, Ji as NoRowFound, d as NoSuchResource, Aa as PAIRING_HOST, ka as PAIRING_SCHEME, $ as PAIRING_STORAGE_KEY, mt as PROBLEM_JSON, Ha as PROTOCOL_VERSION, bn as PendingApproval, w as REACTIVITY_CHANNEL_PREFIX, _t as REST_PROFILE_NAMES, In as SERVICE_NAME_PATTERN, Et as SESSION_HEADER_NAME, Y as STORE_SCREENSHOT_PRESETS, ya as STORE_SCREENSHOT_PRESET_NAMES, va as STORE_SCREENSHOT_STORES, f as ScopeError, Zi as ServerOnlyColumnWrite, Ba as StorageAccessPolicySchema, za as StorageAccessRuleSchema, qi as StoreOperationFailed, ce as Subject, qe as SubjectIdentity, n as SubjectService, Yi as TableValidationFailed, Xi as TenantRowNotFound, Ki as TenantScopeViolation, ve as TenantSelectionRefused, Ii as UNDO_APPLY_TAG, Fi as UNDO_LOG_TAG, Li as UNDO_REDO_TAG, u as Unauthenticated, Vi as UndoConflict, Bi as UndoForbidden, Ri as UndoLogEntry, zi as UndoNotFound, S as ValidationError, C as ValidationErrors, cn as ValidationIssue, Er as WorkflowAccessProperty, oi as WorkflowControlInputSchema, ai as WorkflowControlIntentSchema, si as WorkflowControlReadInputSchema, B as WorkflowControlResultSchema, ei as WorkflowDomainEventRowSchema, ri as WorkflowDomainEventsInputSchema, ii as WorkflowEventDeliveriesInputSchema, ti as WorkflowEventDeliveryRowSchema, qr as WorkflowParentClosePolicySchema, li as WorkflowQueuedCancelInputSchema, V as WorkflowQueuedCancellationResultSchema, ci as WorkflowQueuedControlTargetSchema, ji as WorkflowRestartCommandSchema, Ni as WorkflowRestartObservationSchema, Pi as WorkflowRestartResultSchema, Ai as WorkflowRestartSelectionSchema, K as WorkflowRestartTargetSchema, Oi as WorkflowRetryCommandSchema, ki as WorkflowRetryObservationSchema, Di as WorkflowRetryTargetSchema, $r as WorkflowRunEventRowSchema, Yr as WorkflowRunHandleSchema, ni as WorkflowRunRefSchema, H as WorkflowRunRowSchema, z as WorkflowRunSnapshotSchema, R as WorkflowRunStatusSchema, Qr as WorkflowRunStepRowSchema, U as WorkflowRunTableRefSchema, Zr as WorkflowRunsInputSchema, pi as WorkflowSignalInputSchema, Jr as WorkflowStartDeferralSchema, L as WorkflowStartTerminalOutcomeSchema, mi as WorkflowUpdateInputSchema, hi as WorkflowUpdateResultSchema, tr as actionToRpc, be as advisoryResourceGuardWarning, c as anonymousSubject, Ia as applyPairing, Xt as applyRowPatch, de as applyScopeDecision, na as approvalsDecideDescriptor, ta as approvalsPendingQueryDescriptor, fe as assertAuthenticated, kr as attachWorkflowAccess, St as beginIdempotent, zr as checkFrameworkCompat, Ae as checkGuards, He as checkGuardsEffect, Ra as clearPairing, ct as compareSurfaces, s as composeAuthStrategies, Lr as composeRpcInterceptors, ga as connectionDisconnectDescriptor, ma as connectionStartDescriptor, ha as connectionSubmitTokenDescriptor, pa as connectionsListQueryDescriptor, Qt as createRowPatchApplier, Dn as declaredReactivityChannelKeys, xe as declaresResourceGuard, j as defineAction, ur as defineEvent, A as defineMutation, Pr as definePlugin, Fr as definePluginRoute, Rr as definePluginService, k as defineQuery, Hn as defineStream, Ta as defineWebSocket, Jt as diffRows, Ce as effectiveScopes, xr as encodeEventKey, lt as encodeRestError, nt as encodeRestSuccess, ir as errorMessage, rr as errorTag, pr as eventAttached, dr as eventEnvelope, fr as eventGap, hr as eventResumePoint, Cr as eventRoute, mr as eventStreamEvent, gr as eventSubscribeInput, _r as eventToRpc, et as failIdempotent, ln as fieldIssuesOf, Fe as findAdvisoryResourceGuards, Ze as finishIdempotent, Z as finiteNumberView, en as firstEventValue, Tr as formatEventRoute, Xe as freshFor, je as getPolicyGuardResolver, Te as getResourceScopeResolver, Ar as getWorkflowAccess, st as groupShapeDigests, Vn as hasAccessDecision, te as hasCallbackRoutes, we as hasEffectiveScope, M as hasEnforcedGuard, ge as hasScope, Qe as holdIdempotentClaim, _ as idToPath, dt as idempotencyScope, tn as inputLabel, Nr as isApiUnavailable, Ue as isAuthenticatedCheck, Bn as isAuthenticatedGuard, Pn as isClientReachable, lr as isEventDescriptor, Yt as isIdKeyed, Ie as isMachineSubject, Ke as isOpenAccess, ye as isPolicyCheck, zn as isPolicyGuard, Tn as isReactivityChannel, En as isReactivityChannelKey, Ge as isServiceAccess, Fn as isServiceReachable, ee as isServiceSubject, me as isSystemSubject, Pe as isTenantSelectable, Mn as isWireReachable, Da as jsonSchemaDocumentOf, Oa as jsonSchemaOf, pe as makeScopeCache, Je as memoryIdempotencyStore, le as missingAccessDecision, er as mutationToRpc, ht as nextLink, sr as normalizeDescriptor, kn as normalizeSource, r as openAccessSpec, he as orderByBearerPrefix, Na as pairingLink, wr as parseEventRoute, Pa as parsePairingLink, Ht as patchCellSchema, v as pathToId, Q as plainJsonSchema, Vr as pluginAlias, Ir as pluginInstanceName, Hr as pluginSlug, Kr as pluginTag, vt as problemDetails, it as problemTypeOf, tt as procedureShapeDigest, jn as publishReactivity, ot as publishServerError, $n as queryToRpc, se as rawImpersonationMark, wn as reactivityChannel, La as readPairing, Wr as registerPluginAliases, ar as reportableError, We as requireScope, Gr as resetPluginAliases, ue as resolvePolicyAction, ft as resolveRestFormat, Or as resolveWorkflowAccess, bt as restViewSchema, Wt as rowPatchOpSchema, Gt as rowPatchSchema, xt as schemaShape, e as scopeCacheKey, ze as selectSubjectTenant, a as serviceAccessSpec, i as serviceCallersOf, Se as serviceSubject, Tt as sessionValueFromHeaders, ae as setEffectiveScopes, ke as setPolicyGuardResolver, t as setResourceScopeResolver, wt as shapeDigest, On as sourceKeys, xa as storeScreenshotPixels, ba as storeScreenshotPreset, Sa as storeScreenshotPresetsFor, nr as streamToRpc, x as strictInput, Ve as subjectAuditActorId, Ne as subjectIdentity, Oe as subjectScopes, gt as subscribeServerErrors, $t as subscriptionEvent, Re as systemSubject, De as tenantScopedSubject, or as toRpc, at as toSnakeCase, _a as tsMs, An as undeclaredChannelKeys, Wi as undoApplyDescriptor, Ui as undoLogQueryDescriptor, Gi as undoRedoDescriptor, Nn as wireAudienceOf, N as wireErrorUnion, Qn as withRpcTag, pt as withheldServerError, jr as workflowAccessDescriptor, Si as workflowCancelDescriptor, fi as workflowControlQueryDescriptor, bi as workflowDomainEventsQueryDescriptor, xi as workflowEventDeliveriesQueryDescriptor, ui as workflowQueuedCancelDescriptor, di as workflowQueuedControlQueryDescriptor, Ci as workflowResumeDescriptor, yi as workflowRunEventsQueryDescriptor, gi as workflowRunQueryDescriptor, vi as workflowRunStepsQueryDescriptor, _i as workflowRunsQueryDescriptor, wi as workflowSignalDescriptor, Xr as workflowToRpc, Ti as workflowUpdateDescriptor, Zn as workflowWireErrorUnion, ut as wsMutationIdempotencyScope };