@workflow/web 5.0.0-beta.43 → 5.0.0-beta.46

package/build/client/assets/{mermaid-3ZIDBTTL-gEw-Ch1C.js → mermaid-3ZIDBTTL-BKGEyEYb.js}

@@ -1,4 +1,4 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/zstd-browser-decoder-CAEVa0bm.js","assets/index-PFjW8YjQ.js","assets/highlighted-body-B3W2YXNL-Dc1dLaUr.js"])))=>i.map(i=>d[i]);
+const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/zstd-browser-decoder-DafWVuEG.js","assets/index-PFjW8YjQ.js","assets/highlighted-body-B3W2YXNL-D78gcP7S.js"])))=>i.map(i=>d[i]);
 var __defProp = Object.defineProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
@@ -14826,11 +14826,98 @@ function date(params) {
   return /* @__PURE__ */ _coercedDate(ZodDate, params);
 }
 const RESERVED_ATTRIBUTE_KEY_PREFIX = "$";
+const ATTRIBUTE_KEY_MAX_LENGTH = 256;
+const ATTRIBUTE_VALUE_MAX_BYTES = 256;
+const ATTRIBUTE_MAX_PER_RUN = 64;
+new TextEncoder();
+class AttributeValidationError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "AttributeValidationError";
+  }
+}
+function attributeCountDelta(key, value, existingKeys) {
+  if (value === null)
+    return (existingKeys == null ? void 0 : existingKeys.has(key)) ? -1 : 0;
+  return existingKeys === void 0 || !existingKeys.has(key) ? 1 : 0;
+}
+function validateAttributeBatchConstraints(changes, context = {}) {
+  const seenKeys = /* @__PURE__ */ new Set();
+  const existingKeys = context.existingKeys === void 0 ? void 0 : context.existingKeys instanceof Set ? context.existingKeys : new Set(context.existingKeys);
+  let postMergeCount = (existingKeys == null ? void 0 : existingKeys.size) ?? 0;
+  for (const { key, value } of changes) {
+    if (seenKeys.has(key)) {
+      throw new AttributeValidationError(`Attribute key ${JSON.stringify(key)} appears more than once in the same batch`);
+    }
+    seenKeys.add(key);
+    postMergeCount += attributeCountDelta(key, value, existingKeys);
+  }
+  if (postMergeCount > ATTRIBUTE_MAX_PER_RUN) {
+    throw new AttributeValidationError(`Run attribute count would exceed limit ${ATTRIBUTE_MAX_PER_RUN} (post-merge ${postMergeCount})`);
+  }
+}
+const textEncoder$1 = new TextEncoder();
+const AttributeKeySchema = string$2().min(1, { error: "Attribute key must not be empty" }).max(ATTRIBUTE_KEY_MAX_LENGTH, {
+  error: `Attribute key exceeds limit ${ATTRIBUTE_KEY_MAX_LENGTH}`
+});
+const AttributeValueSchema = string$2().refine((value) => textEncoder$1.encode(value).length <= ATTRIBUTE_VALUE_MAX_BYTES, {
+  error: `Attribute value exceeds limit ${ATTRIBUTE_VALUE_MAX_BYTES} UTF-8 bytes`
+}).nullable();
 const AttributeChangeSchema = object({
-  key: string$2(),
-  value: union([string$2(), _null()])
+  key: AttributeKeySchema,
+  value: AttributeValueSchema
 });
-const AttributeChangesSchema = array(AttributeChangeSchema);
+const AttributeChangesSchema = array(AttributeChangeSchema).superRefine((changes, context) => {
+  try {
+    validateAttributeBatchConstraints(changes);
+  } catch (error) {
+    if (!(error instanceof AttributeValidationError))
+      throw error;
+    context.addIssue({
+      code: "custom",
+      message: error.message,
+      input: changes
+    });
+  }
+});
+function getOwnProperty$1(object2, key) {
+  return Object.hasOwn(object2, key) ? object2[key] : void 0;
+}
+function isSealedNoopEvent(event) {
+  return event.eventType === "noop";
+}
+const ENTITY_EVENT_CLASS_BY_TYPE = {
+  step_created: "step_created",
+  step_started: "step_started",
+  step_retrying: "step_retrying",
+  step_completed: "step_terminal",
+  step_failed: "step_terminal",
+  wait_created: "wait_created",
+  wait_completed: "wait_completed",
+  hook_created: "hook_created",
+  hook_disposed: "hook_disposed",
+  run_started: "run_started"
+};
+function entityEventClass(eventType) {
+  return getOwnProperty$1(ENTITY_EVENT_CLASS_BY_TYPE, eventType);
+}
+const EVENT_DATA_REF_FIELDS_BY_EVENT_TYPE = {
+  run_created: ["input"],
+  run_started: ["input"],
+  run_completed: ["output"],
+  run_failed: ["error"],
+  step_created: ["input"],
+  step_started: ["input"],
+  step_completed: ["result"],
+  step_failed: ["error"],
+  step_retrying: ["error"],
+  hook_created: ["metadata"],
+  hook_received: ["payload"]
+};
+const NO_EVENT_DATA_REF_FIELDS = [];
+function getEventDataRefFields(eventType) {
+  return getOwnProperty$1(EVENT_DATA_REF_FIELDS_BY_EVENT_TYPE, eventType) ?? NO_EVENT_DATA_REF_FIELDS;
+}
 const BinarySerializedDataSchema = _instanceof(Uint8Array);
 const LegacySerializedDataSchemaV1 = any();
 const SerializedDataSchema = union([
@@ -14860,7 +14947,11 @@ const EventTypeSchema = _enum([
   // Created by world when hook token already exists
   // Wait lifecycle events
   "wait_created",
-  "wait_completed"
+  "wait_completed",
+  // Sealed-log filler (specVersion >= 7): written ONLY by the World's backend
+  // to occupy a slot whose writer allocated it and died. Carries no workflow
+  // meaning; replay skips it (see EventsConsumer). Never user-creatable.
+  "noop"
 ]);
 const RunEventTypeSchema = EventTypeSchema.extract([
   "run_created",
@@ -14895,21 +14986,6 @@ const TERMINAL_STEP_EVENT_TYPES = TerminalStepEventTypeSchema.options;
 function isTerminalStepEventType(eventType) {
   return TERMINAL_STEP_EVENT_TYPES.includes(eventType);
 }
-const ENTITY_EVENT_CLASS_BY_TYPE = {
-  step_created: "step_created",
-  step_started: "step_started",
-  step_retrying: "step_retrying",
-  step_completed: "step_terminal",
-  step_failed: "step_terminal",
-  wait_created: "wait_created",
-  wait_completed: "wait_completed",
-  hook_created: "hook_created",
-  hook_disposed: "hook_disposed",
-  run_started: "run_started"
-};
-function entityEventClass(eventType) {
-  return ENTITY_EVENT_CLASS_BY_TYPE[eventType];
-}
 const HookLifecycleEventTypeSchema = EventTypeSchema.extract([
   "hook_created",
   "hook_received",
@@ -14938,23 +15014,6 @@ const ChildEntityCreationEventTypeSchema = EventTypeSchema.extract([
   "wait_created"
 ]);
 ChildEntityCreationEventTypeSchema.options;
-const EVENT_DATA_PAYLOAD_FIELD_BY_EVENT_TYPE = {
-  run_created: "input",
-  run_started: "input",
-  run_completed: "output",
-  run_failed: "error",
-  step_created: "input",
-  step_started: "input",
-  step_completed: "result",
-  step_failed: "error",
-  step_retrying: "error",
-  hook_created: "metadata",
-  hook_received: "payload"
-};
-const EVENT_DATA_REF_FIELDS = Object.fromEntries(Object.entries(EVENT_DATA_PAYLOAD_FIELD_BY_EVENT_TYPE).map(([eventType, field]) => [eventType, [field]]));
-function getEventDataRefFields(eventType) {
-  return EVENT_DATA_REF_FIELDS[eventType] ?? [];
-}
 const BaseEventSchema = object({
   eventType: EventTypeSchema,
   correlationId: string$2().optional(),
@@ -14982,7 +15041,7 @@ const stepLatencyTelemetryFields = {
   rsfs: number$3().optional(),
   // Synchronous workflow-function replay duration of only the FINAL replay
   // pass within the rsfs window (the pass that scheduled the first step),
-  // excluding awaited network I/O — not accumulated across earlier
+  // excluding awaited network I/O. Not accumulated across earlier
   // pre-first-step passes, so it is not "the replay portion of rsfs". Only
   // present alongside rsfs, and only for the run's first step.
   finalSchedulingReplay: number$3().optional(),
@@ -15042,7 +15101,7 @@ const StepStartedEventSchema = BaseEventSchema.extend({
     // handler is executing this step's body inline. Stamped on the lazy
     // step_started (and re-stamped on an owner-recovery bare start) so
     // that a wake replay can tell "this attempt is in flight in a live
-    // invocation" apart from "this attempt died with its process" — the
+    // invocation" apart from "this attempt died with its process": the
     // owner's queue message doubles as the liveness lease (a crash means
     // the queue redelivers that same messageId, which is allowed to
     // re-execute). Ownership derives from the step's LATEST step_started:
@@ -15098,6 +15157,12 @@ const HookConflictEventSchema = BaseEventSchema.extend({
     conflictingRunId: string$2().optional()
   })
 });
+const NoopEventSchema = BaseEventSchema.extend({
+  eventType: literal("noop"),
+  eventData: object({
+    sealed: boolean$2().optional()
+  }).passthrough().optional()
+});
 const WaitCreatedEventSchema = BaseEventSchema.extend({
   eventType: literal("wait_created"),
   correlationId: string$2(),
@@ -15144,7 +15209,7 @@ const RunCreatedEventSchema = BaseEventSchema.extend({
      * The run's X25519 public key (base64), stamped by SDKs that support
      * sealed (`encp`) envelopes. Persisted onto the run entity so that
      * cross-run writers can seal payloads to this run without holding its
-     * symmetric key. Not secret — see `WorkflowRunBaseSchema`.
+     * symmetric key. Not secret. See `WorkflowRunBaseSchema`.
      */
     encryptionPublicKey: string$2().optional()
   })
@@ -15239,7 +15304,9 @@ const AllEventsSchema = discriminatedUnion("eventType", [
   // World-only: created when hook token conflicts
   // Wait lifecycle events
   WaitCreatedEventSchema,
-  WaitCompletedEventSchema
+  WaitCompletedEventSchema,
+  NoopEventSchema
+  // World-only: sealed-log filler for an abandoned slot
 ]);
 AllEventsSchema.and(object({
   runId: string$2(),
@@ -15297,7 +15364,7 @@ const WorkflowRunBaseSchema = object({
    * ```
    */
   workflowName: string$2(),
-  // Optional in database for backwards compatibility, defaults to 1 (legacy) when reading
+  // Optional in database for backward compatibility, defaults to 1 (legacy) when reading
   specVersion: number$3().optional(),
   executionContext: record(string$2(), any()).optional(),
   input: SerializedDataSchema.optional(),
@@ -15325,12 +15392,12 @@ const WorkflowRunBaseSchema = object({
    *
    * Defaults to `{}` after schema parsing so consumers always receive
    * a record regardless of world. World adapters need not initialize
-   * the field on disk — `world-local` JSON files written before this
+   * the field on disk: `world-local` JSON files written before this
    * field existed, and rows from any other adapter that omits the
    * column, both read as `{}` after Zod parses them.
    *
    * EXPERIMENTAL (MVP): the full Workflow Attributes feature replaces
-   * the direct-mutation MVP path with an event-sourced model — see
+   * the direct-mutation MVP path with an event-sourced model. See
    * the attributes-mvp changelog entry.
    */
   attributes: record(string$2(), string$2()).default({}),
@@ -15338,12 +15405,12 @@ const WorkflowRunBaseSchema = object({
    * The run's X25519 public key, base64-encoded (~44 chars).
    *
    * Lets any party that can read this run seal a payload *to* it without
-   * being able to read the run's data — used for cross-run writes such as a
-   * hook resumption from another deployment, or a child workflow writing into
-   * a forwarded stream. The matching private scalar is never stored: it is
-   * re-derived on demand from the deployment's own key material, so this
-   * field is not secret and its presence does not weaken the run's
-   * confidentiality.
+   * being able to read the run's data. This is used for cross-run writes
+   * such as a hook resumption from another deployment, or a child workflow
+   * writing into a forwarded stream. The matching private scalar is never
+   * stored: it is re-derived on demand from the deployment's own key
+   * material, so this field is not secret and its presence does not weaken
+   * the run's confidentiality.
    *
    * Stamped at run creation by SDKs that support sealed (`encp`) envelopes.
    * **Presence is the writer-side gate**: a run only carries a public key if
@@ -15596,6 +15663,9 @@ object({
   firstSeenAt: date(),
   lastSeenAt: date()
 });
+const WarnedEnvValuesKey = Symbol.for("@workflow/world//warnedEnvValues/v1");
+const globalStore = globalThis;
+globalStore[WarnedEnvValuesKey] ?? (globalStore[WarnedEnvValuesKey] = /* @__PURE__ */ new Set());
 string$2().regex(/^__(?:[a-z][a-z0-9]*_)?wkf_workflow_$/, "Must match __wkf_workflow_ or __{namespace}_wkf_workflow_");
 string$2().regex(/^__(?:[a-z][a-z0-9]*_)?wkf_workflow_.+$/, "Must be a valid queue name with a recognized prefix");
 string$2().regex(/^[a-z][a-z0-9]*$/, "Must be lowercase alphanumeric, starting with a letter");
@@ -15626,12 +15696,12 @@ const RunInputSchema = object({
    * two can disagree: if the message is consumed by a deployment in a
    * DIFFERENT environment, that consumer's `run_started` re-creates the run
    * under ITS tenant, so the same client-minted `wrun_` id ends up existing
-   * in two environments — one stuck pending forever, the other executing.
+   * in two environments: one stuck pending forever, the other executing.
    * Carrying the creator's environment lets the consumer compare it against
    * its own and refuse the delivery instead of forking the run.
    *
    * Absent for worlds with no environment dimension (local, Postgres), and
-   * for older SDKs — consumers must treat it as advisory and skip the check
+   * for older SDKs. Consumers must treat it as advisory and skip the check
    * when it is missing.
    */
   environment: string$2().optional()
@@ -15656,8 +15726,8 @@ const HookResumeInputSchema = object({
   hookId: string$2(),
   /**
    * The hook's token, written into the `hook_received` event's `eventData` so
-   * the consumer's re-ensured event carries the same token the producer would
-   * — replay validates `eventData.token` against the `createHook` token.
+   * the consumer's re-ensured event carries the same token the producer
+   * would. Replay validates `eventData.token` against the `createHook` token.
    */
   token: string$2(),
   /** The serialized resume payload, reused verbatim from the direct write. */
@@ -15667,7 +15737,7 @@ const HookResumeInputSchema = object({
    * serialized bytes and forwarded verbatim on both the direct `events.create`
    * and this queue message. The consumer forwards it back to the server so both
    * writers of the same `resumeId` record an identical digest on the
-   * `(runId, resumeId)` constraint — required because the v4 payload ref is not
+   * `(runId, resumeId)` constraint, required because the v4 payload ref is not
    * content-stable server-side.
    */
   payloadDigest: string$2(),
@@ -15675,19 +15745,22 @@ const HookResumeInputSchema = object({
    * The deployment the run is pinned to, from the producer's resume context.
    * Lets the consumer detect a misrouted delivery with a cheap ambient
    * deployment-id comparison BEFORE its hoisted `hook_received` replay-preload
-   * write — only a detected mismatch pays for the authoritative run fetch and
+   * write: only a detected mismatch pays for the authoritative run fetch and
    * the deployment-affinity guard. Optional for queued-message compatibility:
-   * messages from older producers omit it and simply skip the pre-write
+   * messages from older producers omit it and skip the pre-write
    * check (the authoritative guard before replay still protects them).
    */
   deploymentId: string$2().optional()
 });
 const HookResumeTimingSchema = object({
-  /** Epoch ms at entry into `resumeHook()` — the start of the TTR window. */
+  /** Epoch ms at entry into `resumeHook()`: the start of the TTR window. */
   resumeRequestedAtMs: number$3(),
   /** Epoch ms immediately before the queue publish was requested. */
   queuePublishRequestedAtMs: number$3(),
-  /** Which `resumeHook()` dispatch path ran: `parallel` or `sequential`. */
+  /**
+   * Which `resumeHook()` dispatch path ran: `lazy` or `sequential` (`parallel`
+   * from producers predating lazy-only resume).
+   */
   strategy: string$2().optional(),
   /** Epoch ms the final consumer's queue handler was entered. */
   consumerStartedAtMs: number$3().optional(),
@@ -15719,10 +15792,41 @@ const WorkflowInvokePayloadSchema = object({
   serverErrorRetryCount: number$3().int().optional(),
   /** Number of times this message has been re-routed after a deployment mismatch */
   deploymentMismatchRetryCount: number$3().int().nonnegative().optional(),
+  /**
+   * The wait this message is the delayed continuation for, and which attempt
+   * in that wait's chain it is.
+   *
+   * Present only on wait-continuation messages. It exists so the invocation a
+   * continuation wakes can recognize itself as that continuation: if the wait
+   * is STILL pending when it replays — the continuation arrived before its
+   * deadline — then its own idempotency key is already spent, and re-enqueueing
+   * under the same key is silently dropped by the world's dedupe window. The
+   * attempt number is what makes the next key fresh, so an early delivery
+   * costs one extra hop instead of losing the wait's timer permanently.
+   *
+   * Counted on the message for the same reason as
+   * {@link WorkflowInvokePayloadSchema.shape.preconditionReinvocations}: the
+   * budget has to survive across invocations, and a fresh enqueue resets
+   * anything the queue tracks itself. Absent on the first continuation, so a
+   * producer that predates this field is indistinguishable from attempt 0 and
+   * a consumer that predates it simply ignores the field.
+   */
+  /**
+   * `.catch(undefined)` for the reason `hookResumeTiming` has it: this field
+   * must never be able to fail the parse of the invocation payload. A
+   * malformed value would otherwise throw on every delivery of the message
+   * and burn the run's delivery budget. Degrading to `undefined` reads as
+   * "not a continuation", which costs at worst the pre-attempt behavior for
+   * that one wait rather than killing the run.
+   */
+  waitContinuation: object({
+    correlationId: string$2(),
+    attempt: number$3().int().nonnegative()
+  }).optional().catch(void 0),
   /** Step ID for inline step execution in combined handler. If provided, the flow execution
    * will jump directly to execute the step with the given ID before doing an event replay. */
   stepId: string$2().optional(),
-  /** Step name, sent alongside stepId to avoid loading the event log just to resolve the name. */
+  /** Step name, sent alongside stepId to avoid loading the event log to resolve the name. */
   stepName: string$2().optional(),
   /** Run creation data, only present on the first queue delivery from start() */
   runInput: RunInputSchema.optional(),
@@ -15741,10 +15845,10 @@ const WorkflowInvokePayloadSchema = object({
   stepInput: StepDispatchInputSchema.optional(),
   /**
    * Hook-resume TTR timing. Present on both `resumeHook()` dispatch paths
-   * (unlike `hookInput`, which only rides the parallel fast path), and
+   * (unlike `hookInput`, which only rides the lazy path), and
    * forwarded onto a dispatched step message when the resuming invocation
-   * hands the next durable step to another invocation. Purely observational —
-   * see {@link HookResumeTimingSchema}.
+   * hands the next durable step to another invocation. Purely observational.
+   * See {@link HookResumeTimingSchema}.
    *
    * `.catch(undefined)` because this field must never be able to fail the
    * parse of the invocation payload: a malformed value (a NaN boundary, a
@@ -15789,9 +15893,9 @@ const HookResumeContextSchema = object({
   // Feature marker: the version of the lazy-hook-resume consumer protocol the
   // run's creating deployment supports. Present (>= 1) means that deployment's
   // `@workflow/core` re-ensures the `hook_received` event from the queue
-  // message's `hookInput` on replay, so `resumeHook()`'s parallel fast path is
-  // safe to use. Because a run is pinned to its creating deployment, this
-  // marker is a reliable per-run attestation — unlike inferring support from a
+  // message's `hookInput` on replay, so `resumeHook()`'s lazy path is safe to
+  // use. Because a run is pinned to its creating deployment, this
+  // marker is a reliable per-run attestation, unlike inferring support from a
   // version compare against a predicted release cutoff. Absent on runs created
   // before the marker existed (fall back to the sequential path).
   hookResumeInputVersion: number$3().optional()
@@ -15812,7 +15916,7 @@ object({
   environment: string$2(),
   metadata: SerializedDataSchema.optional(),
   createdAt: date(),
-  // Optional in database for backwards compatibility, defaults to 1 (legacy) when reading
+  // Optional in database for backward compatibility, defaults to 1 (legacy) when reading
   specVersion: number$3().optional(),
   isWebhook: boolean$2().optional(),
   isSystem: boolean$2().optional(),
@@ -15824,10 +15928,10 @@ object({
   // falls back to `runs.get`.
   resumeContext: HookResumeContextSchema.optional(),
   // Backend dedup capability, computed FRESH by the server on every by-token
-  // lookup — RESPONSE-ONLY and TRANSIENT. Never persisted on the hook entity
+  // lookup: RESPONSE-ONLY and TRANSIENT. Never persisted on the hook entity
   // and never part of `resumeContext`, so a server rollback or kill switch
-  // takes effect on the very next lookup (the field simply stops appearing).
-  // `resumeHook()` gates its parallel fast path on this being present and
+  // takes effect on the next lookup (the field stops appearing).
+  // `resumeHook()` gates its lazy path on this being present and
   // current. Absent against an older/rolled-back server or when the kill switch
   // is active.
   resumeCapabilities: HookResumeCapabilitiesSchema.optional()
@@ -15931,6 +16035,154 @@ const __vitePreload = function preload(baseModule, deps, importerUrl) {
     return baseModule().catch(handlePreloadError);
   });
 };
+function globalSingleton(name2, shapeVersion, create2) {
+  const key = Symbol.for(`${name2}/v${shapeVersion}`);
+  const store = globalThis;
+  const existing = store[key];
+  if (existing !== void 0) {
+    return existing;
+  }
+  const created = create2();
+  store[key] = created;
+  return created;
+}
+var ms$1;
+var hasRequiredMs;
+function requireMs() {
+  if (hasRequiredMs) return ms$1;
+  hasRequiredMs = 1;
+  var s2 = 1e3;
+  var m2 = s2 * 60;
+  var h2 = m2 * 60;
+  var d2 = h2 * 24;
+  var w2 = d2 * 7;
+  var y2 = d2 * 365.25;
+  ms$1 = function(val, options) {
+    options = options || {};
+    var type = typeof val;
+    if (type === "string" && val.length > 0) {
+      return parse2(val);
+    } else if (type === "number" && isFinite(val)) {
+      return options.long ? fmtLong(val) : fmtShort(val);
+    }
+    throw new Error(
+      "val is not a non-empty string or a valid number. val=" + JSON.stringify(val)
+    );
+  };
+  function parse2(str) {
+    str = String(str);
+    if (str.length > 100) {
+      return;
+    }
+    var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(
+      str
+    );
+    if (!match) {
+      return;
+    }
+    var n = parseFloat(match[1]);
+    var type = (match[2] || "ms").toLowerCase();
+    switch (type) {
+      case "years":
+      case "year":
+      case "yrs":
+      case "yr":
+      case "y":
+        return n * y2;
+      case "weeks":
+      case "week":
+      case "w":
+        return n * w2;
+      case "days":
+      case "day":
+      case "d":
+        return n * d2;
+      case "hours":
+      case "hour":
+      case "hrs":
+      case "hr":
+      case "h":
+        return n * h2;
+      case "minutes":
+      case "minute":
+      case "mins":
+      case "min":
+      case "m":
+        return n * m2;
+      case "seconds":
+      case "second":
+      case "secs":
+      case "sec":
+      case "s":
+        return n * s2;
+      case "milliseconds":
+      case "millisecond":
+      case "msecs":
+      case "msec":
+      case "ms":
+        return n;
+      default:
+        return void 0;
+    }
+  }
+  function fmtShort(ms2) {
+    var msAbs = Math.abs(ms2);
+    if (msAbs >= d2) {
+      return Math.round(ms2 / d2) + "d";
+    }
+    if (msAbs >= h2) {
+      return Math.round(ms2 / h2) + "h";
+    }
+    if (msAbs >= m2) {
+      return Math.round(ms2 / m2) + "m";
+    }
+    if (msAbs >= s2) {
+      return Math.round(ms2 / s2) + "s";
+    }
+    return ms2 + "ms";
+  }
+  function fmtLong(ms2) {
+    var msAbs = Math.abs(ms2);
+    if (msAbs >= d2) {
+      return plural(ms2, msAbs, d2, "day");
+    }
+    if (msAbs >= h2) {
+      return plural(ms2, msAbs, h2, "hour");
+    }
+    if (msAbs >= m2) {
+      return plural(ms2, msAbs, m2, "minute");
+    }
+    if (msAbs >= s2) {
+      return plural(ms2, msAbs, s2, "second");
+    }
+    return ms2 + " ms";
+  }
+  function plural(ms2, msAbs, n, name2) {
+    var isPlural = msAbs >= n * 1.5;
+    return Math.round(ms2 / n) + " " + name2 + (isPlural ? "s" : "");
+  }
+  return ms$1;
+}
+var msExports = requireMs();
+const ms = /* @__PURE__ */ getDefaultExportFromCjs(msExports);
+function parseDurationToDate(param) {
+  if (typeof param === "string") {
+    const durationMs = ms(param);
+    if (typeof durationMs !== "number" || durationMs < 0) {
+      throw new Error(`Invalid duration: "${param}". Expected a valid duration string like "1s", "1m", "1h", etc.`);
+    }
+    return new Date(Date.now() + durationMs);
+  } else if (typeof param === "number") {
+    if (param < 0 || !Number.isFinite(param)) {
+      throw new Error(`Invalid duration: ${param}. Expected a non-negative finite number of milliseconds.`);
+    }
+    return new Date(Date.now() + param);
+  } else if (param instanceof Date || param && typeof param === "object" && typeof param.getTime === "function") {
+    return param instanceof Date ? param : new Date(param.getTime());
+  } else {
+    throw new Error(`Invalid duration parameter. Expected a duration string, number (milliseconds), or Date object.`);
+  }
+}
 const UNDEFINED = -1;
 const HOLE = -2;
 const NAN = -3;
@@ -16186,143 +16438,6 @@ function unflatten(parsed, revivers, options) {
   }
   return hydrate(0);
 }
-var ms$1;
-var hasRequiredMs;
-function requireMs() {
-  if (hasRequiredMs) return ms$1;
-  hasRequiredMs = 1;
-  var s2 = 1e3;
-  var m2 = s2 * 60;
-  var h2 = m2 * 60;
-  var d2 = h2 * 24;
-  var w2 = d2 * 7;
-  var y2 = d2 * 365.25;
-  ms$1 = function(val, options) {
-    options = options || {};
-    var type = typeof val;
-    if (type === "string" && val.length > 0) {
-      return parse2(val);
-    } else if (type === "number" && isFinite(val)) {
-      return options.long ? fmtLong(val) : fmtShort(val);
-    }
-    throw new Error(
-      "val is not a non-empty string or a valid number. val=" + JSON.stringify(val)
-    );
-  };
-  function parse2(str) {
-    str = String(str);
-    if (str.length > 100) {
-      return;
-    }
-    var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(
-      str
-    );
-    if (!match) {
-      return;
-    }
-    var n = parseFloat(match[1]);
-    var type = (match[2] || "ms").toLowerCase();
-    switch (type) {
-      case "years":
-      case "year":
-      case "yrs":
-      case "yr":
-      case "y":
-        return n * y2;
-      case "weeks":
-      case "week":
-      case "w":
-        return n * w2;
-      case "days":
-      case "day":
-      case "d":
-        return n * d2;
-      case "hours":
-      case "hour":
-      case "hrs":
-      case "hr":
-      case "h":
-        return n * h2;
-      case "minutes":
-      case "minute":
-      case "mins":
-      case "min":
-      case "m":
-        return n * m2;
-      case "seconds":
-      case "second":
-      case "secs":
-      case "sec":
-      case "s":
-        return n * s2;
-      case "milliseconds":
-      case "millisecond":
-      case "msecs":
-      case "msec":
-      case "ms":
-        return n;
-      default:
-        return void 0;
-    }
-  }
-  function fmtShort(ms2) {
-    var msAbs = Math.abs(ms2);
-    if (msAbs >= d2) {
-      return Math.round(ms2 / d2) + "d";
-    }
-    if (msAbs >= h2) {
-      return Math.round(ms2 / h2) + "h";
-    }
-    if (msAbs >= m2) {
-      return Math.round(ms2 / m2) + "m";
-    }
-    if (msAbs >= s2) {
-      return Math.round(ms2 / s2) + "s";
-    }
-    return ms2 + "ms";
-  }
-  function fmtLong(ms2) {
-    var msAbs = Math.abs(ms2);
-    if (msAbs >= d2) {
-      return plural(ms2, msAbs, d2, "day");
-    }
-    if (msAbs >= h2) {
-      return plural(ms2, msAbs, h2, "hour");
-    }
-    if (msAbs >= m2) {
-      return plural(ms2, msAbs, m2, "minute");
-    }
-    if (msAbs >= s2) {
-      return plural(ms2, msAbs, s2, "second");
-    }
-    return ms2 + " ms";
-  }
-  function plural(ms2, msAbs, n, name2) {
-    var isPlural = msAbs >= n * 1.5;
-    return Math.round(ms2 / n) + " " + name2 + (isPlural ? "s" : "");
-  }
-  return ms$1;
-}
-var msExports = requireMs();
-const ms = /* @__PURE__ */ getDefaultExportFromCjs(msExports);
-function parseDurationToDate(param) {
-  if (typeof param === "string") {
-    const durationMs = ms(param);
-    if (typeof durationMs !== "number" || durationMs < 0) {
-      throw new Error(`Invalid duration: "${param}". Expected a valid duration string like "1s", "1m", "1h", etc.`);
-    }
-    return new Date(Date.now() + durationMs);
-  } else if (typeof param === "number") {
-    if (param < 0 || !Number.isFinite(param)) {
-      throw new Error(`Invalid duration: ${param}. Expected a non-negative finite number of milliseconds.`);
-    }
-    return new Date(Date.now() + param);
-  } else if (param instanceof Date || param && typeof param === "object" && typeof param.getTime === "function") {
-    return param instanceof Date ? param : new Date(param.getTime());
-  } else {
-    throw new Error(`Invalid duration parameter. Expected a duration string, number (milliseconds), or Date object.`);
-  }
-}
 const BASE_URL = "https://workflow-sdk.dev/err";
 function isError(value) {
   return typeof value === "object" && value !== null && "name" in value && "message" in value;
@@ -16606,7 +16721,7 @@ function importPublicKey(publicKey) {
     { name: "X25519" },
     /* extractable */
     true,
-    // Public keys carry no usages for X25519 — the private key does the
+    // Public keys carry no usages for X25519: the private key does the
     // deriving; the public key is only ever an argument to it.
     []
   );
@@ -16701,7 +16816,7 @@ const SerializationFormat$1 = {
   /** Encrypted payload (inner payload has its own format prefix) */
   ENCRYPTED: "encr",
   /**
-   * Sealed payload — asymmetrically encrypted to a run's X25519 public key
+   * Sealed payload: asymmetrically encrypted to a run's X25519 public key
    * (inner payload has its own format prefix).
    *
    * Used for *cross-run* writes (hook payloads, forwarded stream frames),
@@ -16831,7 +16946,7 @@ const SerializationFormat = {
   /** Encrypted payload (inner payload has its own format prefix after decryption) */
   ENCRYPTED: "encr",
   /**
-   * Sealed payload — asymmetrically encrypted to a run's X25519 public key
+   * Sealed payload: asymmetrically encrypted to a run's X25519 public key
    * (inner payload has its own format prefix after opening).
    *
    * Written by cross-run writers that hold only the recipient run's public
@@ -16925,17 +17040,19 @@ function decompressSyncIfAvailable(format, payload) {
   }
   return void 0;
 }
-let zstdBrowserDecoder;
+const zstd = globalSingleton("@workflow/core//zstd.decoder", 1, () => ({
+  decoder: void 0
+}));
 function registerZstdDecoder(decoder2) {
-  zstdBrowserDecoder = decoder2;
+  zstd.decoder = decoder2;
 }
 async function decompressAsync(format, payload) {
   if (format === SerializationFormat.ZSTD) {
     const sync = decompressSyncIfAvailable(format, payload);
     if (sync)
       return sync;
-    if (zstdBrowserDecoder)
-      return zstdBrowserDecoder(payload);
+    if (zstd.decoder)
+      return zstd.decoder(payload);
     throw new Error("zstd-compressed workflow data encountered but no zstd decoder is available. Node.js 22.15+ decodes natively; in the browser register one via registerZstdDecoder (the web o11y package does this).");
   }
   const transform2 = new DecompressionStream("gzip");
@@ -17082,7 +17199,7 @@ const observabilityRevivers = {
   // throws on the `["DOMException", ...]` tag and `hydrateStepIO`'s
   // try/catch leaves the raw flat-encoded string in the UI. AbortController
   // synthesizes a DOMException as the default `signal.reason` when abort()
-  // is called with no arg — so any abort that round-trips through a step
+  // is called with no arg, so any abort that round-trips through a step
   // boundary surfaces here. Reconstruct as a real DOMException when the
   // global is available (modern browsers + Node 18+), else fall back to
   // an Error preserving name/message/stack/cause for display.
@@ -17289,8 +17406,8 @@ function getWebRevivers() {
     // entry for each built-in Error subclass plus the workflow-specific
     // `FatalError` / `RetryableError` / `HookConflictError` /
     // `RuntimeDecryptionError` and `AggregateError`. Without
-    // matching revivers here, `devalue.unflatten` throws "Unknown type X"
-    // — which surfaces in the web o11y UI as "Failed to load resource
+    // matching revivers here, `devalue.unflatten` throws "Unknown type X",
+    // which surfaces in the web o11y UI as "Failed to load resource
     // details: Unknown type FatalError".
     Error: (value) => {
       const opts = "cause" in value ? { cause: value.cause } : void 0;
@@ -17320,7 +17437,7 @@ function getWebRevivers() {
     // `FatalError` and `RetryableError` are not built-in browser globals,
     // so we can't resolve a constructor from globalThis. The web o11y UI
     // doesn't need `instanceof FatalError` to pass (no user code runs
-    // here) — it just needs `name`, `message`, `stack`, and any extra
+    // here). The web o11y UI needs `name`, `message`, `stack`, and any extra
     // enumerable fields to render. Construct a plain `Error` with `name`
     // set; ObjectInspector reads `constructor.name` for the displayed
     // class label, but we don't have the real class, so we emit a tagged
@@ -17522,7 +17639,7 @@ async function hydrateResourceIOAsync(resource, key) {
     return { hydrateDataWithKey: hydrateDataWithKey3, deriveRunPayloadKeys: deriveRunPayloadKeys3 };
   }, true ? void 0 : void 0);
   const { ensureZstdDecoderRegistered } = await __vitePreload(async () => {
-    const { ensureZstdDecoderRegistered: ensureZstdDecoderRegistered2 } = await import("./zstd-browser-decoder-CAEVa0bm.js");
+    const { ensureZstdDecoderRegistered: ensureZstdDecoderRegistered2 } = await import("./zstd-browser-decoder-DafWVuEG.js");
     return { ensureZstdDecoderRegistered: ensureZstdDecoderRegistered2 };
   }, true ? __vite__mapDeps([0,1]) : void 0);
   ensureZstdDecoderRegistered();
@@ -19109,7 +19226,7 @@ const RunClickContext = reactExports.createContext(void 0);
 function EncryptedInlineLabel() {
   const ctx = reactExports.useContext(DecryptClickContext);
   if (ctx) {
-    return jsxRuntimeExports.jsxs(Button$1, { size: "xs", className: "align-baseline gap-x-1", disabled: ctx.isDecrypting, onClick: (e) => {
+    return jsxRuntimeExports.jsxs(Button$1, { size: "xs", className: "align-baseline gap-x-1", disabled: ctx.isDecrypting || ctx.isDecryptDisabled, title: ctx.isDecryptDisabled ? ctx.decryptDisabledReason : void 0, onClick: (e) => {
       e.stopPropagation();
       ctx.onDecrypt();
     }, children: [ctx.isDecrypting ? jsxRuntimeExports.jsx(Spinner, { size: 10 }) : jsxRuntimeExports.jsx(Lock, { className: "h-3 w-3" }), jsxRuntimeExports.jsx("span", { children: "Decrypt" })] });
@@ -19382,7 +19499,7 @@ function collapseRefs(data) {
   }
   return result;
 }
-function DataInspector({ data, expandLevel = 2, name: name2, onStreamClick, onRunClick, onDecrypt, isDecrypting = false }) {
+function DataInspector({ data, expandLevel = 2, name: name2, onStreamClick, onRunClick, onDecrypt, isDecrypting = false, isDecryptDisabled = false, decryptDisabledReason }) {
   const collapsedData = reactExports.useMemo(() => collapseRefs(data), [data]);
   const stableData = useStableInspectorData(collapsedData);
   let content2 = jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [jsxRuntimeExports.jsx("style", { href: "wf-json-view", precedence: "default", children: JSON_VIEW_STYLES }), jsxRuntimeExports.jsx(JsonTree, { data: stableData, name: name2, expandLevel })] });
@@ -19393,7 +19510,12 @@ function DataInspector({ data, expandLevel = 2, name: name2, onStreamClick, onRu
     content2 = jsxRuntimeExports.jsx(RunClickContext.Provider, { value: onRunClick, children: content2 });
   }
   if (onDecrypt) {
-    content2 = jsxRuntimeExports.jsx(DecryptClickContext.Provider, { value: { onDecrypt, isDecrypting }, children: content2 });
+    content2 = jsxRuntimeExports.jsx(DecryptClickContext.Provider, { value: {
+      onDecrypt,
+      isDecrypting,
+      isDecryptDisabled,
+      decryptDisabledReason
+    }, children: content2 });
   }
   return content2;
 }
@@ -19478,7 +19600,7 @@ const encryptedPlaceholderPreview = `{
 }`;
 function EncryptedDataBlock() {
   const ctx = reactExports.useContext(DecryptClickContext);
-  return jsxRuntimeExports.jsxs("div", { className: "relative min-h-20 overflow-hidden rounded-md border border-gray-alpha-400 bg-background-100", children: [jsxRuntimeExports.jsx("pre", { "aria-hidden": "true", className: "pointer-events-none m-0 select-none p-3 font-mono text-label-12 text-gray-900 blur-[4px]", children: encryptedPlaceholderPreview }), jsxRuntimeExports.jsx("div", { className: "absolute inset-0 flex items-center justify-center", children: ctx ? jsxRuntimeExports.jsxs(Button$1, { onClick: ctx.onDecrypt, disabled: ctx.isDecrypting, size: "xs", children: [ctx.isDecrypting ? jsxRuntimeExports.jsx(Spinner, { size: 10 }) : jsxRuntimeExports.jsx(Lock, { className: "h-3 w-3" }), jsxRuntimeExports.jsx("span", { children: "Decrypt" })] }) : jsxRuntimeExports.jsxs("span", { className: "inline-flex items-center gap-1 rounded border border-gray-alpha-400 bg-gray-100 px-1.5 py-0.5 text-button-12 font-medium text-gray-700", children: [jsxRuntimeExports.jsx(Lock, { className: "h-3 w-3" }), "Encrypted"] }) })] });
+  return jsxRuntimeExports.jsxs("div", { className: "relative min-h-20 overflow-hidden rounded-md border border-gray-alpha-400 bg-background-100", children: [jsxRuntimeExports.jsx("pre", { "aria-hidden": "true", className: "pointer-events-none m-0 select-none p-3 font-mono text-label-12 text-gray-900 blur-[4px]", children: encryptedPlaceholderPreview }), jsxRuntimeExports.jsx("div", { className: "absolute inset-0 flex items-center justify-center", children: ctx ? jsxRuntimeExports.jsxs(Button$1, { onClick: ctx.onDecrypt, disabled: ctx.isDecrypting || ctx.isDecryptDisabled, title: ctx.isDecryptDisabled ? ctx.decryptDisabledReason : void 0, size: "xs", children: [ctx.isDecrypting ? jsxRuntimeExports.jsx(Spinner, { size: 10 }) : jsxRuntimeExports.jsx(Lock, { className: "h-3 w-3" }), jsxRuntimeExports.jsx("span", { children: "Decrypt" })] }) : jsxRuntimeExports.jsxs("span", { className: "inline-flex items-center gap-1 rounded border border-gray-alpha-400 bg-gray-100 px-1.5 py-0.5 text-button-12 font-medium text-gray-700", children: [jsxRuntimeExports.jsx(Lock, { className: "h-3 w-3" }), "Encrypted"] }) })] });
 }
 const serializeForClipboard = (value) => {
   if (typeof value === "string")
@@ -20305,27 +20427,27 @@ function ZoneDateTimeRow({ date: date2, zone }) {
   });
   return jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-between gap-3", children: [jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-1.5", children: [jsxRuntimeExports.jsx("div", { className: "flex items-center justify-center h-4 px-1.5 bg-gray-200 rounded-xs", children: jsxRuntimeExports.jsx("span", { className: "text-label-12-mono text-gray-900", children: formattedZone }) }), jsxRuntimeExports.jsx("span", { className: "text-label-13 text-gray-1000", children: formattedDate })] }), jsxRuntimeExports.jsx("span", { className: "tabular-nums text-label-12-mono text-gray-900", children: formattedTime })] });
 }
-function RelativeTimeContextCardContent({ date: date2 }) {
+function RelativeTimeContextCardContent({ date: date2, prefix }) {
   const localTimezone = Intl.DateTimeFormat().resolvedOptions().timeZone;
   const timeAgo = useTimeAgo(date2);
-  return jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-3 min-w-[300px]", children: [jsxRuntimeExports.jsx("div", { className: "flex flex-col gap-3", children: jsxRuntimeExports.jsx("span", { className: "tabular-nums text-label-13 text-gray-900", children: timeAgo }) }), jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-2", children: [jsxRuntimeExports.jsx(ZoneDateTimeRow, { date: date2, zone: "UTC" }), jsxRuntimeExports.jsx(ZoneDateTimeRow, { date: date2, zone: localTimezone })] })] });
+  return jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-3 min-w-[300px]", children: [jsxRuntimeExports.jsx("div", { className: "flex flex-col gap-3", children: jsxRuntimeExports.jsx("span", { className: "tabular-nums text-label-13 text-gray-900", children: prefix ? `${prefix} ${timeAgo}` : timeAgo }) }), jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-2", children: [jsxRuntimeExports.jsx(ZoneDateTimeRow, { date: date2, zone: "UTC" }), jsxRuntimeExports.jsx(ZoneDateTimeRow, { date: date2, zone: localTimezone })] })] });
 }
 function DefaultTimeText({ date: date2 }) {
   const shortTimeAgo = useShortTimeAgo(date2);
   return jsxRuntimeExports.jsx("span", { className: "text-label-14 text-gray-900", children: shortTimeAgo });
 }
-function RelativeTimeCard({ date: date2, children: _children, ...props }) {
+function RelativeTimeCard({ date: date2, children: _children, prefix, ...props }) {
   const children2 = _children === void 0 ? jsxRuntimeExports.jsx(DefaultTimeText, { date: date2 }) : _children;
   if (!date2)
     return children2;
-  return jsxRuntimeExports.jsx(ContextCardTrigger, { content: jsxRuntimeExports.jsx(RelativeTimeContextCardContent, { date: date2 }), ...props, children: children2 });
+  return jsxRuntimeExports.jsx(ContextCardTrigger, { content: jsxRuntimeExports.jsx(RelativeTimeContextCardContent, { date: date2, prefix }), ...props, children: children2 });
 }
-function TimestampTooltip({ date: date2, children: children2, side = "top" }) {
+function TimestampTooltip({ date: date2, children: children2, side = "top", prefix }) {
   const hasProvider = useHasContextCardProvider();
   const ts = date2 == null ? null : typeof date2 === "number" ? date2 : new Date(date2).getTime();
   if (ts == null || Number.isNaN(ts))
     return jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, { children: children2 });
-  const card = jsxRuntimeExports.jsx(RelativeTimeCard, { date: ts, side, asChild: true, children: children2 });
+  const card = jsxRuntimeExports.jsx(RelativeTimeCard, { date: ts, side, prefix, asChild: true, children: children2 });
   return hasProvider ? card : jsxRuntimeExports.jsx(ContextCardProvider, { children: card });
 }
 const convert = (
@@ -45113,7 +45235,7 @@ var tn = f("block", "before:content-[counter(line)]", "before:inline-block", "be
 var et = ({ className: e, language: t, style: o, isIncomplete: n, ...s2 }) => jsxRuntimeExports.jsx("div", { className: f("my-4 flex w-full flex-col gap-2 rounded-xl border border-border bg-sidebar p-2", e), "data-incomplete": n || void 0, "data-language": t, "data-streamdown": "code-block", style: { contentVisibility: "auto", containIntrinsicSize: "auto 200px", ...o }, ...s2 });
 var Se = reactExports.createContext({ code: "" }), de = () => reactExports.useContext(Se);
 var ot = ({ language: e }) => jsxRuntimeExports.jsx("div", { className: "flex h-8 items-center text-muted-foreground text-xs", "data-language": e, "data-streamdown": "code-block-header", children: jsxRuntimeExports.jsx("span", { className: "ml-1 font-mono lowercase", children: e }) });
-var cn$1 = /\n+$/, dn = reactExports.lazy(() => __vitePreload(() => import("./highlighted-body-B3W2YXNL-Dc1dLaUr.js"), true ? __vite__mapDeps([2,1]) : void 0).then((e) => ({ default: e.HighlightedCodeBlockBody }))), rt = ({ code: e, language: t, className: o, children: n, isIncomplete: s2 = false, ...r2 }) => {
+var cn$1 = /\n+$/, dn = reactExports.lazy(() => __vitePreload(() => import("./highlighted-body-B3W2YXNL-D78gcP7S.js"), true ? __vite__mapDeps([2,1]) : void 0).then((e) => ({ default: e.HighlightedCodeBlockBody }))), rt = ({ code: e, language: t, className: o, children: n, isIncomplete: s2 = false, ...r2 }) => {
   let i = reactExports.useMemo(() => e.replace(cn$1, ""), [e]), c = reactExports.useMemo(() => ({ bg: "transparent", fg: "inherit", tokens: i.split(`
 `).map((a2) => [{ content: a2, color: "inherit", bgColor: "transparent", htmlStyle: {}, offset: 0 }]) }), [i]);
   return jsxRuntimeExports.jsx(Se.Provider, { value: { code: e }, children: jsxRuntimeExports.jsxs(et, { isIncomplete: s2, language: t, children: [jsxRuntimeExports.jsx(ot, { language: t }), n ? jsxRuntimeExports.jsx("div", { className: "pointer-events-none sticky top-2 z-10 -mt-10 flex h-8 items-center justify-end", children: jsxRuntimeExports.jsx("div", { className: "pointer-events-auto flex shrink-0 items-center gap-2 rounded-md border border-sidebar bg-sidebar/80 px-1.5 py-1 supports-[backdrop-filter]:bg-sidebar/70 supports-[backdrop-filter]:backdrop-blur", "data-streamdown": "code-block-actions", children: n }) }) : null, jsxRuntimeExports.jsx(reactExports.Suspense, { fallback: jsxRuntimeExports.jsx(Qe, { className: o, language: t, result: c, ...r2 }), children: jsxRuntimeExports.jsx(dn, { className: o, code: i, language: t, raw: c, ...r2 }) })] }) });
@@ -46274,7 +46396,7 @@ const RESOURCE_CLASS_NAMES = {
     className: "border-green-500 bg-green-200",
     errorClassName: "border-red-500 bg-red-200"
   },
-  // Passive spans (hooks) stay gray — matches event-list icons and the minimap.
+  // Passive spans (hooks) stay gray; matches event-list icons and the minimap.
   hook: {
     className: "border-gray-500 bg-gray-200",
     errorClassName: "border-red-500 bg-red-200"
@@ -46472,7 +46594,8 @@ function computeSpanSegments(span) {
 const MARKER_EVENT_NAMES = ["hook_received", "attr_set"];
 function computeSpanMarkers(span) {
   return sortedEventMarks(span.events, MARKER_EVENT_NAMES).map((mark2) => ({
-    timeMs: mark2.time
+    timeMs: mark2.time,
+    kind: mark2.type
   }));
 }
 function computeOffscreenMarkers(markers, visibleStartMs, visibleEndMs) {
@@ -46568,6 +46691,10 @@ function scrollRowIntoView(listEl, index2, rowHeight, opts) {
     behavior: opts == null ? void 0 : opts.behavior
   });
 }
+const MARKER_KIND_PREFIX = {
+  hook_received: "Hook received",
+  attr_set: "Attribute set"
+};
 function projectMarkers(markers, visibleStartMs, visibleEndMs) {
   const visibleDurationMs = visibleEndMs - visibleStartMs;
   if (visibleDurationMs <= 0)
@@ -46579,7 +46706,8 @@ function projectMarkers(markers, visibleStartMs, visibleEndMs) {
     return [
       {
         leftPct: (m2.timeMs - visibleStartMs) / visibleDurationMs * 100,
-        timeMs: m2.timeMs
+        timeMs: m2.timeMs,
+        kind: m2.kind
       }
     ];
   });
@@ -46601,7 +46729,7 @@ function MarkerTick({ className }) {
   return jsxRuntimeExports.jsx("span", { className: cn$4("block w-[3px] rounded-full bg-gray-1000", className) });
 }
 function MarkerLayer({ markers }) {
-  return jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, { children: markers.map((m2) => jsxRuntimeExports.jsx("span", { className: "pointer-events-auto absolute top-0 bottom-0 z-10 flex w-8 -translate-x-1/2 items-center justify-center", style: { left: `clamp(8px, ${m2.leftPct}%, calc(100% - 8px))` }, children: jsxRuntimeExports.jsx(TimestampTooltip, { date: m2.timeMs, children: jsxRuntimeExports.jsx("span", { className: "flex h-6 w-8 items-center justify-center", children: jsxRuntimeExports.jsx(MarkerTick, { className: "h-3" }) }) }) }, m2.timeMs)) });
+  return jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, { children: markers.map((m2, index2) => jsxRuntimeExports.jsx("span", { className: "pointer-events-auto absolute top-0 bottom-0 z-10 flex w-8 -translate-x-1/2 items-center justify-center", style: { left: `clamp(8px, ${m2.leftPct}%, calc(100% - 8px))` }, children: jsxRuntimeExports.jsx(TimestampTooltip, { date: m2.timeMs, prefix: MARKER_KIND_PREFIX[m2.kind], children: jsxRuntimeExports.jsx("span", { className: "flex h-6 w-8 items-center justify-center", children: jsxRuntimeExports.jsx(MarkerTick, { className: "h-3" }) }) }) }, `${m2.timeMs}-${index2}`)) });
 }
 function OffscreenMarkerIndicator({ direction, count: count2, targetMs, onReveal }) {
   const Chevron = direction === "right" ? ArrowRight : ArrowLeft;
@@ -49524,7 +49652,7 @@ const mermaid3ZIDBTTL = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.def
   Mermaid: Nt
 }, Symbol.toStringTag, { value: "Module" }));
 export {
-  CopyableDataBlock as $,
+  cn$4 as $,
   Anchor as A,
   Button as B,
   Check as C,
@@ -49550,108 +49678,109 @@ export {
   createContext2 as W,
   fetchWorkflowsManifest as X,
   entityEventClass as Y,
-  cn$4 as Z,
+  isSealedNoopEvent as Z,
   __vitePreload as _,
   TooltipTrigger as a,
-  fetchStreams as a$,
-  CollapsibleRoot as a0,
-  CollapsibleTrigger as a1,
-  CollapsibleContent as a2,
-  CopyButton as a3,
-  RESERVED_ATTRIBUTE_KEY_PREFIX as a4,
-  Spinner as a5,
-  TooltipProvider as a6,
-  Tooltip$1 as a7,
-  TooltipTrigger$1 as a8,
-  TooltipContent$1 as a9,
-  useSidebarData as aA,
-  IconButton as aB,
-  useRowWindow as aC,
-  isSpanDimmedBySearch as aD,
-  ROW_HEIGHT_PX as aE,
-  getSpanDurationMs as aF,
-  isSpanErrored as aG,
-  formatDurationPrecise as aH,
-  ActiveSpanProvider as aI,
-  useReducedMotion as aJ,
-  searchSpans as aK,
-  computeRootBounds as aL,
-  computeTimeMarkers as aM,
-  clampViewportToRoot as aN,
-  getHighResInMs as aO,
-  scrollRowIntoView as aP,
-  TIMELINE_PADDING_PX as aQ,
-  Minimap as aR,
-  Timeline as aS,
-  TimelineHeader as aT,
-  wheelZoomScaleFactor as aU,
-  wheelDeltaToPixels as aV,
-  SidebarDataProvider as aW,
-  fetchHook as aX,
-  hydrateResourceIOAsync as aY,
-  fetchStep as aZ,
-  hydrateResourceIO as a_,
-  ContextCardProvider as aa,
-  Skeleton as ab,
-  DecryptClickContext as ac,
-  Yr as ad,
-  isEncryptedMarker$1 as ae,
-  TimestampTooltip as af,
-  formatDuration as ag,
-  DataInspector as ah,
-  _r as ai,
-  isHookLifecycleEventType as aj,
-  isTerminalStepEventType as ak,
-  isWaitEventType as al,
-  isStepEventType as am,
-  RunClickContext as an,
-  StreamClickContext as ao,
-  Collapsible as ap,
-  isExpiredMarker as aq,
-  isDoStreamStep as ar,
-  extractConversation as as,
-  EncryptedDataBlock as at,
-  getEventDataRefFields as au,
-  hasEncryptedFields as av,
-  useSidebarDataOptional as aw,
-  isTerminalWorkflowRunStatus as ax,
-  clsx as ay,
-  useActiveSpan as az,
+  hydrateResourceIO as a$,
+  CopyableDataBlock as a0,
+  CollapsibleRoot as a1,
+  CollapsibleTrigger as a2,
+  CollapsibleContent as a3,
+  CopyButton as a4,
+  RESERVED_ATTRIBUTE_KEY_PREFIX as a5,
+  Spinner as a6,
+  TooltipProvider as a7,
+  Tooltip$1 as a8,
+  TooltipTrigger$1 as a9,
+  useActiveSpan as aA,
+  useSidebarData as aB,
+  IconButton as aC,
+  useRowWindow as aD,
+  isSpanDimmedBySearch as aE,
+  ROW_HEIGHT_PX as aF,
+  getSpanDurationMs as aG,
+  isSpanErrored as aH,
+  formatDurationPrecise as aI,
+  ActiveSpanProvider as aJ,
+  useReducedMotion as aK,
+  searchSpans as aL,
+  computeRootBounds as aM,
+  computeTimeMarkers as aN,
+  clampViewportToRoot as aO,
+  getHighResInMs as aP,
+  scrollRowIntoView as aQ,
+  TIMELINE_PADDING_PX as aR,
+  Minimap as aS,
+  Timeline as aT,
+  TimelineHeader as aU,
+  wheelZoomScaleFactor as aV,
+  wheelDeltaToPixels as aW,
+  SidebarDataProvider as aX,
+  fetchHook as aY,
+  hydrateResourceIOAsync as aZ,
+  fetchStep as a_,
+  TooltipContent$1 as aa,
+  ContextCardProvider as ab,
+  Skeleton as ac,
+  DecryptClickContext as ad,
+  Yr as ae,
+  isEncryptedMarker$1 as af,
+  TimestampTooltip as ag,
+  formatDuration as ah,
+  DataInspector as ai,
+  _r as aj,
+  isHookLifecycleEventType as ak,
+  isTerminalStepEventType as al,
+  isWaitEventType as am,
+  isStepEventType as an,
+  RunClickContext as ao,
+  StreamClickContext as ap,
+  Collapsible as aq,
+  isExpiredMarker as ar,
+  isDoStreamStep as as,
+  extractConversation as at,
+  EncryptedDataBlock as au,
+  getEventDataRefFields as av,
+  hasEncryptedFields as aw,
+  useSidebarDataOptional as ax,
+  isTerminalWorkflowRunStatus as ay,
+  clsx as az,
   TooltipContent as b,
-  apiBase as b0,
-  Slot as b1,
-  Slottable as b2,
-  buttonVariants as b3,
-  fetchEvent as b4,
-  fetchEventsByCorrelationId as b5,
-  isEncryptedData as b6,
-  hydrateData as b7,
-  decrypt as b8,
-  deriveRunPayloadKeys as b9,
-  getWebRevivers as ba,
-  LIVE_UPDATE_INTERVAL_MS as bb,
-  getEncryptionKeyForRun as bc,
-  StreamViewerSkeleton as bd,
-  Lock as be,
-  StreamViewer as bf,
-  composeRefs as bg,
-  useFloating as bh,
-  offset as bi,
-  shift as bj,
-  limitShift as bk,
-  flip as bl,
-  size as bm,
-  arrow as bn,
-  hide as bo,
-  autoUpdate as bp,
-  VERCEL_403_ERROR_MESSAGE as bq,
-  bulkCancelRuns as br,
-  reenqueueRun as bs,
-  wakeUpRun as bt,
-  resumeHook as bu,
-  fetchHookToken as bv,
-  cancelRun as bw,
-  recreateRun as bx,
+  fetchStreams as b0,
+  apiBase as b1,
+  Slot as b2,
+  Slottable as b3,
+  buttonVariants as b4,
+  fetchEvent as b5,
+  fetchEventsByCorrelationId as b6,
+  isEncryptedData as b7,
+  hydrateData as b8,
+  decrypt as b9,
+  deriveRunPayloadKeys as ba,
+  getWebRevivers as bb,
+  LIVE_UPDATE_INTERVAL_MS as bc,
+  getEncryptionKeyForRun as bd,
+  StreamViewerSkeleton as be,
+  Lock as bf,
+  StreamViewer as bg,
+  composeRefs as bh,
+  useFloating as bi,
+  offset as bj,
+  shift as bk,
+  limitShift as bl,
+  flip as bm,
+  size as bn,
+  arrow as bo,
+  hide as bp,
+  autoUpdate as bq,
+  VERCEL_403_ERROR_MESSAGE as br,
+  bulkCancelRuns as bs,
+  reenqueueRun as bt,
+  wakeUpRun as bu,
+  resumeHook as bv,
+  fetchHookToken as bw,
+  cancelRun as bx,
+  recreateRun as by,
   createLucideIcon as c,
   runHealthCheck as d,
   cn as e,