@databricks/appkit 0.82.0 → 0.84.0

package/dist/core/plugin-context.js

@@ -1,6 +1,10 @@
 import { createLogger } from "../logging/logger.js";
+import { ServiceContext } from "../context/service-context.js";
+import { getCallerContext, normalizeIdentityError } from "../context/execution-context.js";
+import { assertPluginExecution, getPluginResourceTypes } from "../context/resource-capabilities.js";
 import { TelemetryManager } from "../telemetry/telemetry-manager.js";
 import { SpanStatusCode } from "../telemetry/index.js";
+import { createRequestScope } from "../context/request-scope.js";
 import { forwardAsyncErrors } from "../utils/safe-handler.js";
 
 //#region src/core/plugin-context.ts
@@ -25,16 +29,19 @@ var PluginContext = class {
 	plugins = /* @__PURE__ */ new Map();
 	lifecycleHooks = /* @__PURE__ */ new Map();
 	telemetry;
+	createCallerContext;
 	/**
 	* @param deps.telemetry - Telemetry provider used for `executeTool` spans.
-	*   Defaults to the shared `"plugin-context"` provider — the production
+	*   Defaults to the shared `"plugin-context"` provider, the production
 	*   path. Injectable so the testing kit can pass a mock provider and run
-	*   `executeTool` without a live OpenTelemetry pipeline. This is the only
-	*   seam the mock context needs; route buffering and the tool registry are
+	*   `executeTool` without a live OpenTelemetry pipeline.
+	* @param deps.createCallerContext - Offline credential factory for tests.
+	*   Header validation and ALS remain real; route buffering and the registry are
 	*   exercised through the existing public API.
 	*/
 	constructor(deps = {}) {
 		this.telemetry = deps.telemetry ?? TelemetryManager.getProvider("plugin-context");
+		this.createCallerContext = deps.createCallerContext ?? ((...args) => ServiceContext.createCallerContext(...args));
 	}
 	/**
 	* Register a route on the root Express application.
@@ -126,15 +133,15 @@ var PluginContext = class {
 		}));
 	}
 	/**
-	* Execute a tool on a ToolProvider plugin with automatic user scoping
+	* Execute a tool on a ToolProvider plugin with the ambient principal
 	* and telemetry.
 	*
 	* The context:
 	* 1. Resolves the plugin by name
-	* 2. Calls `asUser(req)` for user-scoped execution
+	* 2. Inherits the caller, or establishes user scope from the request
 	* 3. Wraps the call in a telemetry span with a configurable timeout
 	*
-	* @param timeoutMs Per-call timeout. Defaults to 5 minutes — the floor
+	* @param timeoutMs Per-call timeout. Defaults to 5 minutes, the floor
 	*   for cold SQL Warehouse round-trips, long Genie conversations, and
 	*   busy serverless Lakebase queries. The agents plugin overrides this
 	*   per-app via `agents({ limits: { toolCallTimeoutMs } })`.
@@ -144,14 +151,16 @@ var PluginContext = class {
 		if (!provider) throw new Error(`PluginContext: unknown plugin "${pluginName}". Available: ${Array.from(this.toolProviders.keys()).join(", ")}`);
 		const tracer = this.telemetry.getTracer();
 		const operationName = `executeTool:${pluginName}.${toolName}`;
-		return tracer.startActiveSpan(operationName, async (span) => {
+		const executeInCurrentScope = () => tracer.startActiveSpan(operationName, async (span) => {
 			const timeoutSignal = AbortSignal.timeout(timeoutMs);
 			const combinedSignal = signal ? AbortSignal.any([signal, timeoutSignal]) : timeoutSignal;
 			try {
-				const result = await provider.asUser(req).executeAgentTool(toolName, args, combinedSignal);
+				assertPluginExecution(provider);
+				const result = await provider.executeAgentTool(toolName, args, combinedSignal);
 				span.setStatus({ code: SpanStatusCode.OK });
 				return result;
-			} catch (error) {
+			} catch (caught) {
+				const error = normalizeIdentityError(caught);
 				span.setStatus({
 					code: SpanStatusCode.ERROR,
 					message: error instanceof Error ? error.message : "Tool execution failed"
@@ -162,6 +171,10 @@ var PluginContext = class {
 				span.end();
 			}
 		});
+		return getCallerContext() ? executeInCurrentScope() : createRequestScope(req, getPluginResourceTypes(provider), {
+			createCaller: this.createCallerContext,
+			legacy: true
+		}).run(executeInCurrentScope);
 	}
 	/**
 	* Register a lifecycle hook callback.
@@ -223,13 +236,10 @@ var PluginContext = class {
 	}
 };
 /**
-* Type guard: checks whether a plugin implements the ToolProvider interface
-* and exposes the user-scoped `asUser` helper that the {@link Plugin} base
-* class provides. Narrowing to {@link ToolProviderPlugin} lets `executeTool`
-* call `asUser` without an unsafe cast.
+* Type guard for the tool-provider methods. Identity comes from the ALS scope.
 */
 function isToolProvider(plugin) {
-	return typeof plugin === "object" && plugin !== null && "getAgentTools" in plugin && typeof plugin.getAgentTools === "function" && "executeAgentTool" in plugin && typeof plugin.executeAgentTool === "function" && "asUser" in plugin && typeof plugin.asUser === "function";
+	return typeof plugin === "object" && plugin !== null && "getAgentTools" in plugin && typeof plugin.getAgentTools === "function" && "executeAgentTool" in plugin && typeof plugin.executeAgentTool === "function";
 }
 
 //#endregion

package/dist/core/plugin-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-context.js","names":[],"sources":["../../src/core/plugin-context.ts"],"sourcesContent":["import type express from \"express\";\nimport type { BasePlugin, IAppRequest, ToolProvider } from \"shared\";\n\nimport { createLogger } from \"../logging/logger\";\nimport {\n  type ITelemetry,\n  SpanStatusCode,\n  TelemetryManager,\n} from \"../telemetry\";\nimport { forwardAsyncErrors } from \"../utils/safe-handler\";\n\nconst logger = createLogger(\"plugin-context\");\n\ninterface BufferedRoute {\n  method: string;\n  path: string;\n  handlers: express.RequestHandler[];\n}\n\ninterface RouteTarget {\n  addExtension(fn: (app: express.Application) => void): void;\n}\n\n/**\n * A tool-provider plugin that also exposes user-scoped execution. Plugins\n * derived from {@link Plugin} satisfy this implicitly because `asUser` lives\n * on the base class. {@link isToolProvider} narrows to this shape so\n * `executeTool` can call `asUser` without an unsafe cast.\n */\ntype ToolProviderPlugin = BasePlugin &\n  ToolProvider & { asUser: (req: IAppRequest) => ToolProvider };\n\n/**\n * Lifecycle events emitted through {@link PluginContext.emitLifecycle}.\n *\n * - `\"setup:complete\"` — emitted by AppKit core after every plugin's\n *   `setup()` has finished.\n * - `\"server:ready\"` — emitted when the HTTP server is listening.\n * - `\"shutdown\"` — emitted by the core lifecycle manager during graceful\n *   shutdown, AFTER all plugin `shutdown()` hooks have completed. The emit is\n *   bounded by a short timeout (see the lifecycle manager's shutdown budget),\n *   so subscribers must not start long-running async work — finish quickly or\n *   be cut off. (The server plugin subscribes here to force-close its\n *   remaining sockets once peers have drained.)\n */\ntype LifecycleEvent = \"setup:complete\" | \"server:ready\" | \"shutdown\";\n\n/**\n * Mediator for inter-plugin communication.\n *\n * Created by AppKit core and passed to every plugin. Plugins request\n * capabilities from the context instead of holding direct references\n * to sibling plugin instances.\n *\n * Capabilities:\n * - Route mounting with buffering (order-independent)\n * - Typed ToolProvider registry (live, not snapshot-based)\n * - User-scoped tool execution with automatic telemetry\n * - Lifecycle hooks for plugin coordination\n */\nexport class PluginContext {\n  private routeBuffer: BufferedRoute[] = [];\n  private routeTarget: RouteTarget | null = null;\n  private toolProviders = new Map<string, ToolProviderPlugin>();\n  private plugins = new Map<string, BasePlugin>();\n  private lifecycleHooks = new Map<\n    LifecycleEvent,\n    Set<() => void | Promise<void>>\n  >();\n  private telemetry: ITelemetry;\n\n  /**\n   * @param deps.telemetry - Telemetry provider used for `executeTool` spans.\n   *   Defaults to the shared `\"plugin-context\"` provider — the production\n   *   path. Injectable so the testing kit can pass a mock provider and run\n   *   `executeTool` without a live OpenTelemetry pipeline. This is the only\n   *   seam the mock context needs; route buffering and the tool registry are\n   *   exercised through the existing public API.\n   */\n  constructor(deps: { telemetry?: ITelemetry } = {}) {\n    this.telemetry =\n      deps.telemetry ?? TelemetryManager.getProvider(\"plugin-context\");\n  }\n\n  /**\n   * Register a route on the root Express application.\n   *\n   * If a route target (server plugin) has registered, the route is applied\n   * immediately. Otherwise it is buffered and flushed when a route target\n   * becomes available.\n   */\n  addRoute(\n    method: string,\n    path: string,\n    ...handlers: express.RequestHandler[]\n  ): void {\n    if (this.routeTarget) {\n      this.applyRoute({ method, path, handlers });\n    } else {\n      this.routeBuffer.push({ method, path, handlers });\n    }\n  }\n\n  /**\n   * Register middleware on the root Express application.\n   *\n   * Same buffering semantics as `addRoute`.\n   */\n  addMiddleware(path: string, ...handlers: express.RequestHandler[]): void {\n    if (this.routeTarget) {\n      this.applyMiddleware(path, handlers);\n    } else {\n      this.routeBuffer.push({ method: \"use\", path, handlers });\n    }\n  }\n\n  /**\n   * Called by the server plugin to opt in as the route target.\n   * Flushes all buffered routes via the server's `addExtension`.\n   *\n   * Only the first caller wins — subsequent calls are ignored with a warning.\n   * In practice only the server plugin registers, but a misconfigured app\n   * (two server plugins, or duplicate AppKit setup in tests) would otherwise\n   * silently drop the first target's later extensions.\n   */\n  registerAsRouteTarget(target: RouteTarget): void {\n    if (this.routeTarget) {\n      logger.warn(\n        \"registerAsRouteTarget called more than once; ignoring duplicate registration\",\n      );\n      return;\n    }\n    this.routeTarget = target;\n\n    for (const route of this.routeBuffer) {\n      if (route.method === \"use\") {\n        this.applyMiddleware(route.path, route.handlers);\n      } else {\n        this.applyRoute(route);\n      }\n    }\n    this.routeBuffer = [];\n  }\n\n  /**\n   * Register a plugin that implements the ToolProvider interface.\n   * Called by AppKit core after constructing each plugin.\n   *\n   * Plugin names should be unique (they are derived from `manifest.name`).\n   * A duplicate registration overwrites the previous entry and emits a\n   * warning so the misconfiguration is visible in startup logs.\n   */\n  registerToolProvider(name: string, plugin: ToolProviderPlugin): void {\n    if (this.toolProviders.has(name)) {\n      logger.warn(\n        'Tool provider \"%s\" registered more than once; the previous registration is being overwritten',\n        name,\n      );\n    }\n    this.toolProviders.set(name, plugin);\n  }\n\n  /**\n   * Register a plugin instance.\n   * Called by AppKit core after constructing each plugin.\n   */\n  registerPlugin(name: string, instance: BasePlugin): void {\n    this.plugins.set(name, instance);\n  }\n\n  /**\n   * Returns all registered plugin instances keyed by name.\n   * Used by the server plugin for route injection, client config,\n   * and shutdown coordination. The returned map is read-only at the\n   * type level — callers must not mutate the live registry.\n   */\n  getPlugins(): ReadonlyMap<string, BasePlugin> {\n    return this.plugins;\n  }\n\n  /**\n   * Returns all registered ToolProvider plugins.\n   * Always returns the current set — not a frozen snapshot.\n   */\n  getToolProviders(): Array<{ name: string; provider: ToolProvider }> {\n    return Array.from(this.toolProviders.entries()).map(([name, provider]) => ({\n      name,\n      provider,\n    }));\n  }\n\n  /**\n   * Execute a tool on a ToolProvider plugin with automatic user scoping\n   * and telemetry.\n   *\n   * The context:\n   * 1. Resolves the plugin by name\n   * 2. Calls `asUser(req)` for user-scoped execution\n   * 3. Wraps the call in a telemetry span with a configurable timeout\n   *\n   * @param timeoutMs Per-call timeout. Defaults to 5 minutes — the floor\n   *   for cold SQL Warehouse round-trips, long Genie conversations, and\n   *   busy serverless Lakebase queries. The agents plugin overrides this\n   *   per-app via `agents({ limits: { toolCallTimeoutMs } })`.\n   */\n  async executeTool(\n    req: express.Request,\n    pluginName: string,\n    toolName: string,\n    args: unknown,\n    signal?: AbortSignal,\n    timeoutMs: number = 300_000,\n  ): Promise<unknown> {\n    const provider = this.toolProviders.get(pluginName);\n    if (!provider) {\n      throw new Error(\n        `PluginContext: unknown plugin \"${pluginName}\". Available: ${Array.from(this.toolProviders.keys()).join(\", \")}`,\n      );\n    }\n\n    const tracer = this.telemetry.getTracer();\n    const operationName = `executeTool:${pluginName}.${toolName}`;\n\n    return tracer.startActiveSpan(operationName, async (span) => {\n      const timeoutSignal = AbortSignal.timeout(timeoutMs);\n      const combinedSignal = signal\n        ? AbortSignal.any([signal, timeoutSignal])\n        : timeoutSignal;\n\n      try {\n        const userScoped = provider.asUser(req);\n        const result = await userScoped.executeAgentTool(\n          toolName,\n          args,\n          combinedSignal,\n        );\n        span.setStatus({ code: SpanStatusCode.OK });\n        return result;\n      } catch (error) {\n        span.setStatus({\n          code: SpanStatusCode.ERROR,\n          message:\n            error instanceof Error ? error.message : \"Tool execution failed\",\n        });\n        span.recordException(\n          error instanceof Error ? error : new Error(String(error)),\n        );\n        throw error;\n      } finally {\n        span.end();\n      }\n    });\n  }\n\n  /**\n   * Register a lifecycle hook callback.\n   *\n   * See {@link LifecycleEvent} for event semantics. In particular,\n   * `\"shutdown\"` subscribers run inside a bounded shutdown phase and must\n   * not start long-running async work.\n   */\n  onLifecycle(event: LifecycleEvent, fn: () => void | Promise<void>): void {\n    let hooks = this.lifecycleHooks.get(event);\n    if (!hooks) {\n      hooks = new Set();\n      this.lifecycleHooks.set(event, hooks);\n    }\n    hooks.add(fn);\n  }\n\n  /**\n   * Emit a lifecycle event, calling all registered callbacks.\n   * Errors in individual callbacks are logged but do not prevent\n   * other callbacks from running.\n   *\n   * @internal Called by AppKit core: `setup:complete` after plugin setup,\n   * and `shutdown` by the lifecycle manager during graceful shutdown.\n   */\n  async emitLifecycle(event: LifecycleEvent): Promise<void> {\n    const hooks = this.lifecycleHooks.get(event);\n    if (!hooks) return;\n\n    if (\n      event === \"setup:complete\" &&\n      this.routeBuffer.length > 0 &&\n      !this.routeTarget\n    ) {\n      logger.warn(\n        \"%d buffered routes were never applied — no server plugin registered as route target\",\n        this.routeBuffer.length,\n      );\n    }\n\n    // Snapshot before iterating so a callback that registers a new hook for\n    // the same event does not mutate the loop. ECMAScript Set iteration would\n    // otherwise visit late-added entries, risking unexpected re-entry.\n    for (const fn of [...hooks]) {\n      try {\n        await fn();\n      } catch (error) {\n        logger.error(\"Lifecycle hook '%s' failed: %O\", event, error);\n      }\n    }\n  }\n\n  /**\n   * Returns all registered plugin names.\n   */\n  getPluginNames(): string[] {\n    return Array.from(this.plugins.keys());\n  }\n\n  /**\n   * Check if a plugin with the given name is registered.\n   */\n  hasPlugin(name: string): boolean {\n    return this.plugins.has(name);\n  }\n\n  private applyRoute(route: BufferedRoute): void {\n    if (!this.routeTarget) return;\n    this.routeTarget.addExtension((app) => {\n      const method = route.method.toLowerCase() as keyof express.Application;\n      if (typeof app[method] === \"function\") {\n        (app[method] as (...a: unknown[]) => void)(\n          route.path,\n          ...route.handlers.map(forwardAsyncErrors),\n        );\n      }\n    });\n  }\n\n  private applyMiddleware(\n    path: string,\n    handlers: express.RequestHandler[],\n  ): void {\n    if (!this.routeTarget) return;\n    this.routeTarget.addExtension((app) => {\n      app.use(path, ...handlers.map(forwardAsyncErrors));\n    });\n  }\n}\n\n/**\n * Type guard: checks whether a plugin implements the ToolProvider interface\n * and exposes the user-scoped `asUser` helper that the {@link Plugin} base\n * class provides. Narrowing to {@link ToolProviderPlugin} lets `executeTool`\n * call `asUser` without an unsafe cast.\n */\nexport function isToolProvider(plugin: unknown): plugin is ToolProviderPlugin {\n  return (\n    typeof plugin === \"object\" &&\n    plugin !== null &&\n    \"getAgentTools\" in plugin &&\n    typeof (plugin as ToolProvider).getAgentTools === \"function\" &&\n    \"executeAgentTool\" in plugin &&\n    typeof (plugin as ToolProvider).executeAgentTool === \"function\" &&\n    \"asUser\" in plugin &&\n    typeof (plugin as { asUser?: unknown }).asUser === \"function\"\n  );\n}\n"],"mappings":";;;;;;AAWA,MAAM,SAAS,aAAa,iBAAiB;;;;;;;;;;;;;;AAiD7C,IAAa,gBAAb,MAA2B;CACzB,AAAQ,cAA+B,EAAE;CACzC,AAAQ,cAAkC;CAC1C,AAAQ,gCAAgB,IAAI,KAAiC;CAC7D,AAAQ,0BAAU,IAAI,KAAyB;CAC/C,AAAQ,iCAAiB,IAAI,KAG1B;CACH,AAAQ;;;;;;;;;CAUR,YAAY,OAAmC,EAAE,EAAE;AACjD,OAAK,YACH,KAAK,aAAa,iBAAiB,YAAY,iBAAiB;;;;;;;;;CAUpE,SACE,QACA,MACA,GAAG,UACG;AACN,MAAI,KAAK,YACP,MAAK,WAAW;GAAE;GAAQ;GAAM;GAAU,CAAC;MAE3C,MAAK,YAAY,KAAK;GAAE;GAAQ;GAAM;GAAU,CAAC;;;;;;;CASrD,cAAc,MAAc,GAAG,UAA0C;AACvE,MAAI,KAAK,YACP,MAAK,gBAAgB,MAAM,SAAS;MAEpC,MAAK,YAAY,KAAK;GAAE,QAAQ;GAAO;GAAM;GAAU,CAAC;;;;;;;;;;;CAa5D,sBAAsB,QAA2B;AAC/C,MAAI,KAAK,aAAa;AACpB,UAAO,KACL,+EACD;AACD;;AAEF,OAAK,cAAc;AAEnB,OAAK,MAAM,SAAS,KAAK,YACvB,KAAI,MAAM,WAAW,MACnB,MAAK,gBAAgB,MAAM,MAAM,MAAM,SAAS;MAEhD,MAAK,WAAW,MAAM;AAG1B,OAAK,cAAc,EAAE;;;;;;;;;;CAWvB,qBAAqB,MAAc,QAAkC;AACnE,MAAI,KAAK,cAAc,IAAI,KAAK,CAC9B,QAAO,KACL,kGACA,KACD;AAEH,OAAK,cAAc,IAAI,MAAM,OAAO;;;;;;CAOtC,eAAe,MAAc,UAA4B;AACvD,OAAK,QAAQ,IAAI,MAAM,SAAS;;;;;;;;CASlC,aAA8C;AAC5C,SAAO,KAAK;;;;;;CAOd,mBAAoE;AAClE,SAAO,MAAM,KAAK,KAAK,cAAc,SAAS,CAAC,CAAC,KAAK,CAAC,MAAM,eAAe;GACzE;GACA;GACD,EAAE;;;;;;;;;;;;;;;;CAiBL,MAAM,YACJ,KACA,YACA,UACA,MACA,QACA,YAAoB,KACF;EAClB,MAAM,WAAW,KAAK,cAAc,IAAI,WAAW;AACnD,MAAI,CAAC,SACH,OAAM,IAAI,MACR,kCAAkC,WAAW,gBAAgB,MAAM,KAAK,KAAK,cAAc,MAAM,CAAC,CAAC,KAAK,KAAK,GAC9G;EAGH,MAAM,SAAS,KAAK,UAAU,WAAW;EACzC,MAAM,gBAAgB,eAAe,WAAW,GAAG;AAEnD,SAAO,OAAO,gBAAgB,eAAe,OAAO,SAAS;GAC3D,MAAM,gBAAgB,YAAY,QAAQ,UAAU;GACpD,MAAM,iBAAiB,SACnB,YAAY,IAAI,CAAC,QAAQ,cAAc,CAAC,GACxC;AAEJ,OAAI;IAEF,MAAM,SAAS,MADI,SAAS,OAAO,IAAI,CACP,iBAC9B,UACA,MACA,eACD;AACD,SAAK,UAAU,EAAE,MAAM,eAAe,IAAI,CAAC;AAC3C,WAAO;YACA,OAAO;AACd,SAAK,UAAU;KACb,MAAM,eAAe;KACrB,SACE,iBAAiB,QAAQ,MAAM,UAAU;KAC5C,CAAC;AACF,SAAK,gBACH,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC,CAC1D;AACD,UAAM;aACE;AACR,SAAK,KAAK;;IAEZ;;;;;;;;;CAUJ,YAAY,OAAuB,IAAsC;EACvE,IAAI,QAAQ,KAAK,eAAe,IAAI,MAAM;AAC1C,MAAI,CAAC,OAAO;AACV,2BAAQ,IAAI,KAAK;AACjB,QAAK,eAAe,IAAI,OAAO,MAAM;;AAEvC,QAAM,IAAI,GAAG;;;;;;;;;;CAWf,MAAM,cAAc,OAAsC;EACxD,MAAM,QAAQ,KAAK,eAAe,IAAI,MAAM;AAC5C,MAAI,CAAC,MAAO;AAEZ,MACE,UAAU,oBACV,KAAK,YAAY,SAAS,KAC1B,CAAC,KAAK,YAEN,QAAO,KACL,uFACA,KAAK,YAAY,OAClB;AAMH,OAAK,MAAM,MAAM,CAAC,GAAG,MAAM,CACzB,KAAI;AACF,SAAM,IAAI;WACH,OAAO;AACd,UAAO,MAAM,kCAAkC,OAAO,MAAM;;;;;;CAQlE,iBAA2B;AACzB,SAAO,MAAM,KAAK,KAAK,QAAQ,MAAM,CAAC;;;;;CAMxC,UAAU,MAAuB;AAC/B,SAAO,KAAK,QAAQ,IAAI,KAAK;;CAG/B,AAAQ,WAAW,OAA4B;AAC7C,MAAI,CAAC,KAAK,YAAa;AACvB,OAAK,YAAY,cAAc,QAAQ;GACrC,MAAM,SAAS,MAAM,OAAO,aAAa;AACzC,OAAI,OAAO,IAAI,YAAY,WACzB,CAAC,IAAI,QACH,MAAM,MACN,GAAG,MAAM,SAAS,IAAI,mBAAmB,CAC1C;IAEH;;CAGJ,AAAQ,gBACN,MACA,UACM;AACN,MAAI,CAAC,KAAK,YAAa;AACvB,OAAK,YAAY,cAAc,QAAQ;AACrC,OAAI,IAAI,MAAM,GAAG,SAAS,IAAI,mBAAmB,CAAC;IAClD;;;;;;;;;AAUN,SAAgB,eAAe,QAA+C;AAC5E,QACE,OAAO,WAAW,YAClB,WAAW,QACX,mBAAmB,UACnB,OAAQ,OAAwB,kBAAkB,cAClD,sBAAsB,UACtB,OAAQ,OAAwB,qBAAqB,cACrD,YAAY,UACZ,OAAQ,OAAgC,WAAW"}
+{"version":3,"file":"plugin-context.js","names":[],"sources":["../../src/core/plugin-context.ts"],"sourcesContent":["import type express from \"express\";\nimport type { BasePlugin, ToolProvider } from \"shared\";\n\nimport {\n  getCallerContext,\n  normalizeIdentityError,\n} from \"../context/execution-context\";\nimport { createRequestScope } from \"../context/request-scope\";\nimport {\n  assertPluginExecution,\n  getPluginResourceTypes,\n} from \"../context/resource-capabilities\";\nimport { ServiceContext } from \"../context/service-context\";\nimport { createLogger } from \"../logging/logger\";\nimport {\n  type ITelemetry,\n  SpanStatusCode,\n  TelemetryManager,\n} from \"../telemetry\";\nimport { forwardAsyncErrors } from \"../utils/safe-handler\";\n\nconst logger = createLogger(\"plugin-context\");\n\ninterface BufferedRoute {\n  method: string;\n  path: string;\n  handlers: express.RequestHandler[];\n}\n\ninterface RouteTarget {\n  addExtension(fn: (app: express.Application) => void): void;\n}\n\n/**\n * Tool execution inherits the caller scope established by the entry point.\n */\ntype ToolProviderPlugin = BasePlugin & ToolProvider;\n\n/**\n * Lifecycle events emitted through {@link PluginContext.emitLifecycle}.\n *\n * - `\"setup:complete\"` — emitted by AppKit core after every plugin's\n *   `setup()` has finished.\n * - `\"server:ready\"` — emitted when the HTTP server is listening.\n * - `\"shutdown\"` — emitted by the core lifecycle manager during graceful\n *   shutdown, AFTER all plugin `shutdown()` hooks have completed. The emit is\n *   bounded by a short timeout (see the lifecycle manager's shutdown budget),\n *   so subscribers must not start long-running async work — finish quickly or\n *   be cut off. (The server plugin subscribes here to force-close its\n *   remaining sockets once peers have drained.)\n */\ntype LifecycleEvent = \"setup:complete\" | \"server:ready\" | \"shutdown\";\n\n/**\n * Mediator for inter-plugin communication.\n *\n * Created by AppKit core and passed to every plugin. Plugins request\n * capabilities from the context instead of holding direct references\n * to sibling plugin instances.\n *\n * Capabilities:\n * - Route mounting with buffering (order-independent)\n * - Typed ToolProvider registry (live, not snapshot-based)\n * - User-scoped tool execution with automatic telemetry\n * - Lifecycle hooks for plugin coordination\n */\nexport class PluginContext {\n  private routeBuffer: BufferedRoute[] = [];\n  private routeTarget: RouteTarget | null = null;\n  private toolProviders = new Map<string, ToolProviderPlugin>();\n  private plugins = new Map<string, BasePlugin>();\n  private lifecycleHooks = new Map<\n    LifecycleEvent,\n    Set<() => void | Promise<void>>\n  >();\n  private telemetry: ITelemetry;\n  private createCallerContext: typeof ServiceContext.createCallerContext;\n\n  /**\n   * @param deps.telemetry - Telemetry provider used for `executeTool` spans.\n   *   Defaults to the shared `\"plugin-context\"` provider, the production\n   *   path. Injectable so the testing kit can pass a mock provider and run\n   *   `executeTool` without a live OpenTelemetry pipeline.\n   * @param deps.createCallerContext - Offline credential factory for tests.\n   *   Header validation and ALS remain real; route buffering and the registry are\n   *   exercised through the existing public API.\n   */\n  constructor(\n    deps: {\n      telemetry?: ITelemetry;\n      /** @internal Credential factory seam for offline testing. */\n      createCallerContext?: typeof ServiceContext.createCallerContext;\n    } = {},\n  ) {\n    this.telemetry =\n      deps.telemetry ?? TelemetryManager.getProvider(\"plugin-context\");\n    this.createCallerContext =\n      deps.createCallerContext ??\n      ((...args) => ServiceContext.createCallerContext(...args));\n  }\n\n  /**\n   * Register a route on the root Express application.\n   *\n   * If a route target (server plugin) has registered, the route is applied\n   * immediately. Otherwise it is buffered and flushed when a route target\n   * becomes available.\n   */\n  addRoute(\n    method: string,\n    path: string,\n    ...handlers: express.RequestHandler[]\n  ): void {\n    if (this.routeTarget) {\n      this.applyRoute({ method, path, handlers });\n    } else {\n      this.routeBuffer.push({ method, path, handlers });\n    }\n  }\n\n  /**\n   * Register middleware on the root Express application.\n   *\n   * Same buffering semantics as `addRoute`.\n   */\n  addMiddleware(path: string, ...handlers: express.RequestHandler[]): void {\n    if (this.routeTarget) {\n      this.applyMiddleware(path, handlers);\n    } else {\n      this.routeBuffer.push({ method: \"use\", path, handlers });\n    }\n  }\n\n  /**\n   * Called by the server plugin to opt in as the route target.\n   * Flushes all buffered routes via the server's `addExtension`.\n   *\n   * Only the first caller wins — subsequent calls are ignored with a warning.\n   * In practice only the server plugin registers, but a misconfigured app\n   * (two server plugins, or duplicate AppKit setup in tests) would otherwise\n   * silently drop the first target's later extensions.\n   */\n  registerAsRouteTarget(target: RouteTarget): void {\n    if (this.routeTarget) {\n      logger.warn(\n        \"registerAsRouteTarget called more than once; ignoring duplicate registration\",\n      );\n      return;\n    }\n    this.routeTarget = target;\n\n    for (const route of this.routeBuffer) {\n      if (route.method === \"use\") {\n        this.applyMiddleware(route.path, route.handlers);\n      } else {\n        this.applyRoute(route);\n      }\n    }\n    this.routeBuffer = [];\n  }\n\n  /**\n   * Register a plugin that implements the ToolProvider interface.\n   * Called by AppKit core after constructing each plugin.\n   *\n   * Plugin names should be unique (they are derived from `manifest.name`).\n   * A duplicate registration overwrites the previous entry and emits a\n   * warning so the misconfiguration is visible in startup logs.\n   */\n  registerToolProvider(name: string, plugin: ToolProviderPlugin): void {\n    if (this.toolProviders.has(name)) {\n      logger.warn(\n        'Tool provider \"%s\" registered more than once; the previous registration is being overwritten',\n        name,\n      );\n    }\n    this.toolProviders.set(name, plugin);\n  }\n\n  /**\n   * Register a plugin instance.\n   * Called by AppKit core after constructing each plugin.\n   */\n  registerPlugin(name: string, instance: BasePlugin): void {\n    this.plugins.set(name, instance);\n  }\n\n  /**\n   * Returns all registered plugin instances keyed by name.\n   * Used by the server plugin for route injection, client config,\n   * and shutdown coordination. The returned map is read-only at the\n   * type level — callers must not mutate the live registry.\n   */\n  getPlugins(): ReadonlyMap<string, BasePlugin> {\n    return this.plugins;\n  }\n\n  /**\n   * Returns all registered ToolProvider plugins.\n   * Always returns the current set — not a frozen snapshot.\n   */\n  getToolProviders(): Array<{ name: string; provider: ToolProvider }> {\n    return Array.from(this.toolProviders.entries()).map(([name, provider]) => ({\n      name,\n      provider,\n    }));\n  }\n\n  /**\n   * Execute a tool on a ToolProvider plugin with the ambient principal\n   * and telemetry.\n   *\n   * The context:\n   * 1. Resolves the plugin by name\n   * 2. Inherits the caller, or establishes user scope from the request\n   * 3. Wraps the call in a telemetry span with a configurable timeout\n   *\n   * @param timeoutMs Per-call timeout. Defaults to 5 minutes, the floor\n   *   for cold SQL Warehouse round-trips, long Genie conversations, and\n   *   busy serverless Lakebase queries. The agents plugin overrides this\n   *   per-app via `agents({ limits: { toolCallTimeoutMs } })`.\n   */\n  async executeTool(\n    req: express.Request,\n    pluginName: string,\n    toolName: string,\n    args: unknown,\n    signal?: AbortSignal,\n    timeoutMs: number = 300_000,\n  ): Promise<unknown> {\n    const provider = this.toolProviders.get(pluginName);\n    if (!provider) {\n      throw new Error(\n        `PluginContext: unknown plugin \"${pluginName}\". Available: ${Array.from(this.toolProviders.keys()).join(\", \")}`,\n      );\n    }\n\n    const tracer = this.telemetry.getTracer();\n    const operationName = `executeTool:${pluginName}.${toolName}`;\n\n    const executeInCurrentScope = () =>\n      tracer.startActiveSpan(operationName, async (span) => {\n        const timeoutSignal = AbortSignal.timeout(timeoutMs);\n        const combinedSignal = signal\n          ? AbortSignal.any([signal, timeoutSignal])\n          : timeoutSignal;\n\n        try {\n          assertPluginExecution(provider);\n          const result = await provider.executeAgentTool(\n            toolName,\n            args,\n            combinedSignal,\n          );\n          span.setStatus({ code: SpanStatusCode.OK });\n          return result;\n        } catch (caught) {\n          const error = normalizeIdentityError(caught);\n          span.setStatus({\n            code: SpanStatusCode.ERROR,\n            message:\n              error instanceof Error ? error.message : \"Tool execution failed\",\n          });\n          span.recordException(\n            error instanceof Error ? error : new Error(String(error)),\n          );\n          throw error;\n        } finally {\n          span.end();\n        }\n      });\n\n    // Inherit the caller or establish request user scope before the span and tool run.\n    return getCallerContext()\n      ? executeInCurrentScope()\n      : createRequestScope(req, getPluginResourceTypes(provider), {\n          createCaller: this.createCallerContext,\n          legacy: true,\n        }).run(executeInCurrentScope);\n  }\n\n  /**\n   * Register a lifecycle hook callback.\n   *\n   * See {@link LifecycleEvent} for event semantics. In particular,\n   * `\"shutdown\"` subscribers run inside a bounded shutdown phase and must\n   * not start long-running async work.\n   */\n  onLifecycle(event: LifecycleEvent, fn: () => void | Promise<void>): void {\n    let hooks = this.lifecycleHooks.get(event);\n    if (!hooks) {\n      hooks = new Set();\n      this.lifecycleHooks.set(event, hooks);\n    }\n    hooks.add(fn);\n  }\n\n  /**\n   * Emit a lifecycle event, calling all registered callbacks.\n   * Errors in individual callbacks are logged but do not prevent\n   * other callbacks from running.\n   *\n   * @internal Called by AppKit core: `setup:complete` after plugin setup,\n   * and `shutdown` by the lifecycle manager during graceful shutdown.\n   */\n  async emitLifecycle(event: LifecycleEvent): Promise<void> {\n    const hooks = this.lifecycleHooks.get(event);\n    if (!hooks) return;\n\n    if (\n      event === \"setup:complete\" &&\n      this.routeBuffer.length > 0 &&\n      !this.routeTarget\n    ) {\n      logger.warn(\n        \"%d buffered routes were never applied — no server plugin registered as route target\",\n        this.routeBuffer.length,\n      );\n    }\n\n    // Snapshot before iterating so a callback that registers a new hook for\n    // the same event does not mutate the loop. ECMAScript Set iteration would\n    // otherwise visit late-added entries, risking unexpected re-entry.\n    for (const fn of [...hooks]) {\n      try {\n        await fn();\n      } catch (error) {\n        logger.error(\"Lifecycle hook '%s' failed: %O\", event, error);\n      }\n    }\n  }\n\n  /**\n   * Returns all registered plugin names.\n   */\n  getPluginNames(): string[] {\n    return Array.from(this.plugins.keys());\n  }\n\n  /**\n   * Check if a plugin with the given name is registered.\n   */\n  hasPlugin(name: string): boolean {\n    return this.plugins.has(name);\n  }\n\n  private applyRoute(route: BufferedRoute): void {\n    if (!this.routeTarget) return;\n    this.routeTarget.addExtension((app) => {\n      const method = route.method.toLowerCase() as keyof express.Application;\n      if (typeof app[method] === \"function\") {\n        (app[method] as (...a: unknown[]) => void)(\n          route.path,\n          ...route.handlers.map(forwardAsyncErrors),\n        );\n      }\n    });\n  }\n\n  private applyMiddleware(\n    path: string,\n    handlers: express.RequestHandler[],\n  ): void {\n    if (!this.routeTarget) return;\n    this.routeTarget.addExtension((app) => {\n      app.use(path, ...handlers.map(forwardAsyncErrors));\n    });\n  }\n}\n\n/**\n * Type guard for the tool-provider methods. Identity comes from the ALS scope.\n */\nexport function isToolProvider(plugin: unknown): plugin is ToolProviderPlugin {\n  return (\n    typeof plugin === \"object\" &&\n    plugin !== null &&\n    \"getAgentTools\" in plugin &&\n    typeof (plugin as ToolProvider).getAgentTools === \"function\" &&\n    \"executeAgentTool\" in plugin &&\n    typeof (plugin as ToolProvider).executeAgentTool === \"function\"\n  );\n}\n"],"mappings":";;;;;;;;;;AAqBA,MAAM,SAAS,aAAa,iBAAiB;;;;;;;;;;;;;;AA6C7C,IAAa,gBAAb,MAA2B;CACzB,AAAQ,cAA+B,EAAE;CACzC,AAAQ,cAAkC;CAC1C,AAAQ,gCAAgB,IAAI,KAAiC;CAC7D,AAAQ,0BAAU,IAAI,KAAyB;CAC/C,AAAQ,iCAAiB,IAAI,KAG1B;CACH,AAAQ;CACR,AAAQ;;;;;;;;;;CAWR,YACE,OAII,EAAE,EACN;AACA,OAAK,YACH,KAAK,aAAa,iBAAiB,YAAY,iBAAiB;AAClE,OAAK,sBACH,KAAK,yBACH,GAAG,SAAS,eAAe,oBAAoB,GAAG,KAAK;;;;;;;;;CAU7D,SACE,QACA,MACA,GAAG,UACG;AACN,MAAI,KAAK,YACP,MAAK,WAAW;GAAE;GAAQ;GAAM;GAAU,CAAC;MAE3C,MAAK,YAAY,KAAK;GAAE;GAAQ;GAAM;GAAU,CAAC;;;;;;;CASrD,cAAc,MAAc,GAAG,UAA0C;AACvE,MAAI,KAAK,YACP,MAAK,gBAAgB,MAAM,SAAS;MAEpC,MAAK,YAAY,KAAK;GAAE,QAAQ;GAAO;GAAM;GAAU,CAAC;;;;;;;;;;;CAa5D,sBAAsB,QAA2B;AAC/C,MAAI,KAAK,aAAa;AACpB,UAAO,KACL,+EACD;AACD;;AAEF,OAAK,cAAc;AAEnB,OAAK,MAAM,SAAS,KAAK,YACvB,KAAI,MAAM,WAAW,MACnB,MAAK,gBAAgB,MAAM,MAAM,MAAM,SAAS;MAEhD,MAAK,WAAW,MAAM;AAG1B,OAAK,cAAc,EAAE;;;;;;;;;;CAWvB,qBAAqB,MAAc,QAAkC;AACnE,MAAI,KAAK,cAAc,IAAI,KAAK,CAC9B,QAAO,KACL,kGACA,KACD;AAEH,OAAK,cAAc,IAAI,MAAM,OAAO;;;;;;CAOtC,eAAe,MAAc,UAA4B;AACvD,OAAK,QAAQ,IAAI,MAAM,SAAS;;;;;;;;CASlC,aAA8C;AAC5C,SAAO,KAAK;;;;;;CAOd,mBAAoE;AAClE,SAAO,MAAM,KAAK,KAAK,cAAc,SAAS,CAAC,CAAC,KAAK,CAAC,MAAM,eAAe;GACzE;GACA;GACD,EAAE;;;;;;;;;;;;;;;;CAiBL,MAAM,YACJ,KACA,YACA,UACA,MACA,QACA,YAAoB,KACF;EAClB,MAAM,WAAW,KAAK,cAAc,IAAI,WAAW;AACnD,MAAI,CAAC,SACH,OAAM,IAAI,MACR,kCAAkC,WAAW,gBAAgB,MAAM,KAAK,KAAK,cAAc,MAAM,CAAC,CAAC,KAAK,KAAK,GAC9G;EAGH,MAAM,SAAS,KAAK,UAAU,WAAW;EACzC,MAAM,gBAAgB,eAAe,WAAW,GAAG;EAEnD,MAAM,8BACJ,OAAO,gBAAgB,eAAe,OAAO,SAAS;GACpD,MAAM,gBAAgB,YAAY,QAAQ,UAAU;GACpD,MAAM,iBAAiB,SACnB,YAAY,IAAI,CAAC,QAAQ,cAAc,CAAC,GACxC;AAEJ,OAAI;AACF,0BAAsB,SAAS;IAC/B,MAAM,SAAS,MAAM,SAAS,iBAC5B,UACA,MACA,eACD;AACD,SAAK,UAAU,EAAE,MAAM,eAAe,IAAI,CAAC;AAC3C,WAAO;YACA,QAAQ;IACf,MAAM,QAAQ,uBAAuB,OAAO;AAC5C,SAAK,UAAU;KACb,MAAM,eAAe;KACrB,SACE,iBAAiB,QAAQ,MAAM,UAAU;KAC5C,CAAC;AACF,SAAK,gBACH,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC,CAC1D;AACD,UAAM;aACE;AACR,SAAK,KAAK;;IAEZ;AAGJ,SAAO,kBAAkB,GACrB,uBAAuB,GACvB,mBAAmB,KAAK,uBAAuB,SAAS,EAAE;GACxD,cAAc,KAAK;GACnB,QAAQ;GACT,CAAC,CAAC,IAAI,sBAAsB;;;;;;;;;CAUnC,YAAY,OAAuB,IAAsC;EACvE,IAAI,QAAQ,KAAK,eAAe,IAAI,MAAM;AAC1C,MAAI,CAAC,OAAO;AACV,2BAAQ,IAAI,KAAK;AACjB,QAAK,eAAe,IAAI,OAAO,MAAM;;AAEvC,QAAM,IAAI,GAAG;;;;;;;;;;CAWf,MAAM,cAAc,OAAsC;EACxD,MAAM,QAAQ,KAAK,eAAe,IAAI,MAAM;AAC5C,MAAI,CAAC,MAAO;AAEZ,MACE,UAAU,oBACV,KAAK,YAAY,SAAS,KAC1B,CAAC,KAAK,YAEN,QAAO,KACL,uFACA,KAAK,YAAY,OAClB;AAMH,OAAK,MAAM,MAAM,CAAC,GAAG,MAAM,CACzB,KAAI;AACF,SAAM,IAAI;WACH,OAAO;AACd,UAAO,MAAM,kCAAkC,OAAO,MAAM;;;;;;CAQlE,iBAA2B;AACzB,SAAO,MAAM,KAAK,KAAK,QAAQ,MAAM,CAAC;;;;;CAMxC,UAAU,MAAuB;AAC/B,SAAO,KAAK,QAAQ,IAAI,KAAK;;CAG/B,AAAQ,WAAW,OAA4B;AAC7C,MAAI,CAAC,KAAK,YAAa;AACvB,OAAK,YAAY,cAAc,QAAQ;GACrC,MAAM,SAAS,MAAM,OAAO,aAAa;AACzC,OAAI,OAAO,IAAI,YAAY,WACzB,CAAC,IAAI,QACH,MAAM,MACN,GAAG,MAAM,SAAS,IAAI,mBAAmB,CAC1C;IAEH;;CAGJ,AAAQ,gBACN,MACA,UACM;AACN,MAAI,CAAC,KAAK,YAAa;AACvB,OAAK,YAAY,cAAc,QAAQ;AACrC,OAAI,IAAI,MAAM,GAAG,SAAS,IAAI,mBAAmB,CAAC;IAClD;;;;;;AAON,SAAgB,eAAe,QAA+C;AAC5E,QACE,OAAO,WAAW,YAClB,WAAW,QACX,mBAAmB,UACnB,OAAQ,OAAwB,kBAAkB,cAClD,sBAAsB,UACtB,OAAQ,OAAwB,qBAAqB"}

package/dist/errors/base.d.ts

@@ -33,8 +33,8 @@ declare abstract class AppKitError extends Error {
   readonly context?: Record<string, unknown>;
   /**
    * Client-safe error message. When set, callers serializing the error to
-   * a client (SSE, HTTP body) MUST prefer `clientMessage` over `message`
-   * — `message` may contain raw upstream / SDK text including statement
+   * a client (SSE, HTTP body) MUST prefer `clientMessage` over `message`.
+   * `message` may contain raw upstream / SDK text including statement
    * fragments, internal object names, and correlation IDs.
    *
    * Subclasses can set this in their constructor for a fixed sanitized

package/dist/errors/base.js

@@ -37,8 +37,8 @@ var AppKitError = class extends Error {
 	context;
 	/**
 	* Client-safe error message. When set, callers serializing the error to
-	* a client (SSE, HTTP body) MUST prefer `clientMessage` over `message`
-	* — `message` may contain raw upstream / SDK text including statement
+	* a client (SSE, HTTP body) MUST prefer `clientMessage` over `message`.
+	* `message` may contain raw upstream / SDK text including statement
 	* fragments, internal object names, and correlation IDs.
 	*
 	* Subclasses can set this in their constructor for a fixed sanitized

package/dist/errors/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","names":[],"sources":["../../src/errors/base.ts"],"sourcesContent":["/** Fields that should be redacted in logs/serialization for security */\nconst SENSITIVE_FIELD_PATTERNS = [\n  /token/i,\n  /password/i,\n  /secret/i,\n  /credential/i,\n  /auth/i,\n  /key$/i,\n  /apikey/i,\n];\n\n/**\n * Base error class for all AppKit errors.\n * Provides a consistent structure for error handling across the framework.\n *\n * @example\n * ```typescript\n * // Catching errors by type\n * try {\n *   await lakebase.query(\"...\");\n * } catch (e) {\n *   if (e instanceof AuthenticationError) {\n *     // Re-authenticate\n *   } else if (e instanceof ConnectionError && e.isRetryable) {\n *     // Retry with backoff\n *   }\n * }\n *\n * // Logging errors\n * console.error(error.toJSON()); // Safe for logging, sensitive values redacted\n * ```\n */\nexport abstract class AppKitError extends Error {\n  /** Error code for programmatic error handling */\n  abstract readonly code: string;\n\n  /** HTTP status code suggestion (can be overridden) */\n  abstract readonly statusCode: number;\n\n  /** Whether this error type is generally safe to retry */\n  abstract readonly isRetryable: boolean;\n\n  /** Optional cause of the error */\n  readonly cause?: Error;\n\n  /** Additional context for the error */\n  readonly context?: Record<string, unknown>;\n\n  /**\n   * Client-safe error message. When set, callers serializing the error to\n   * a client (SSE, HTTP body) MUST prefer `clientMessage` over `message`\n   * — `message` may contain raw upstream / SDK text including statement\n   * fragments, internal object names, and correlation IDs.\n   *\n   * Subclasses can set this in their constructor for a fixed sanitized\n   * string. When unset, `clientMessage` defaults to a generic per-code\n   * string (see the getter), and the raw `message` is kept server-side\n   * only.\n   */\n  protected readonly _clientMessage?: string;\n\n  constructor(\n    message: string,\n    options?: {\n      cause?: Error;\n      context?: Record<string, unknown>;\n      clientMessage?: string;\n    },\n  ) {\n    super(message);\n    this.name = this.constructor.name;\n    this.cause = options?.cause;\n    this.context = options?.context;\n    this._clientMessage = options?.clientMessage;\n\n    // Maintains proper stack trace for where the error was thrown\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, this.constructor);\n    }\n  }\n\n  /**\n   * Sanitized message safe to forward to clients. Override in subclasses\n   * if a more specific default is appropriate.\n   */\n  get clientMessage(): string {\n    return this._clientMessage ?? \"An internal error occurred\";\n  }\n\n  /**\n   * Convert error to JSON for logging/serialization.\n   * Sensitive values in context are automatically redacted.\n   */\n  toJSON(): Record<string, unknown> {\n    return {\n      name: this.name,\n      code: this.code,\n      message: this.message,\n      statusCode: this.statusCode,\n      isRetryable: this.isRetryable,\n      context: this.sanitizeContext(this.context),\n      cause: this.cause?.message,\n      stack: this.stack,\n    };\n  }\n\n  /**\n   * Create a human-readable string representation\n   */\n  toString(): string {\n    let str = `${this.name} [${this.code}]: ${this.message}`;\n    if (this.cause) {\n      str += ` (caused by: ${this.cause.message})`;\n    }\n    return str;\n  }\n\n  /**\n   * Sanitize context by redacting sensitive field values\n   */\n  private sanitizeContext(\n    context?: Record<string, unknown>,\n  ): Record<string, unknown> | undefined {\n    if (!context) return undefined;\n\n    const sanitized: Record<string, unknown> = {};\n    for (const [key, value] of Object.entries(context)) {\n      if (this.isSensitiveField(key)) {\n        sanitized[key] = \"[REDACTED]\";\n      } else if (typeof value === \"object\" && value !== null) {\n        // Don't deep-sanitize nested objects, just indicate their type\n        sanitized[key] = Array.isArray(value)\n          ? `[Array(${value.length})]`\n          : \"[Object]\";\n      } else {\n        sanitized[key] = value;\n      }\n    }\n    return sanitized;\n  }\n\n  /**\n   * Check if a field name matches sensitive patterns\n   */\n  private isSensitiveField(fieldName: string): boolean {\n    return SENSITIVE_FIELD_PATTERNS.some((pattern) => pattern.test(fieldName));\n  }\n}\n"],"mappings":";;AACA,MAAM,2BAA2B;CAC/B;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;;;;;;;;;;;;;;;;;;AAuBD,IAAsB,cAAtB,cAA0C,MAAM;;CAW9C,AAAS;;CAGT,AAAS;;;;;;;;;;;;CAaT,AAAmB;CAEnB,YACE,SACA,SAKA;AACA,QAAM,QAAQ;AACd,OAAK,OAAO,KAAK,YAAY;AAC7B,OAAK,QAAQ,SAAS;AACtB,OAAK,UAAU,SAAS;AACxB,OAAK,iBAAiB,SAAS;AAG/B,MAAI,MAAM,kBACR,OAAM,kBAAkB,MAAM,KAAK,YAAY;;;;;;CAQnD,IAAI,gBAAwB;AAC1B,SAAO,KAAK,kBAAkB;;;;;;CAOhC,SAAkC;AAChC,SAAO;GACL,MAAM,KAAK;GACX,MAAM,KAAK;GACX,SAAS,KAAK;GACd,YAAY,KAAK;GACjB,aAAa,KAAK;GAClB,SAAS,KAAK,gBAAgB,KAAK,QAAQ;GAC3C,OAAO,KAAK,OAAO;GACnB,OAAO,KAAK;GACb;;;;;CAMH,WAAmB;EACjB,IAAI,MAAM,GAAG,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK;AAC/C,MAAI,KAAK,MACP,QAAO,gBAAgB,KAAK,MAAM,QAAQ;AAE5C,SAAO;;;;;CAMT,AAAQ,gBACN,SACqC;AACrC,MAAI,CAAC,QAAS,QAAO;EAErB,MAAM,YAAqC,EAAE;AAC7C,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,CAChD,KAAI,KAAK,iBAAiB,IAAI,CAC5B,WAAU,OAAO;WACR,OAAO,UAAU,YAAY,UAAU,KAEhD,WAAU,OAAO,MAAM,QAAQ,MAAM,GACjC,UAAU,MAAM,OAAO,MACvB;MAEJ,WAAU,OAAO;AAGrB,SAAO;;;;;CAMT,AAAQ,iBAAiB,WAA4B;AACnD,SAAO,yBAAyB,MAAM,YAAY,QAAQ,KAAK,UAAU,CAAC"}
+{"version":3,"file":"base.js","names":[],"sources":["../../src/errors/base.ts"],"sourcesContent":["/** Fields that should be redacted in logs/serialization for security */\nconst SENSITIVE_FIELD_PATTERNS = [\n  /token/i,\n  /password/i,\n  /secret/i,\n  /credential/i,\n  /auth/i,\n  /key$/i,\n  /apikey/i,\n];\n\n/**\n * Base error class for all AppKit errors.\n * Provides a consistent structure for error handling across the framework.\n *\n * @example\n * ```typescript\n * // Catching errors by type\n * try {\n *   await lakebase.query(\"...\");\n * } catch (e) {\n *   if (e instanceof AuthenticationError) {\n *     // Re-authenticate\n *   } else if (e instanceof ConnectionError && e.isRetryable) {\n *     // Retry with backoff\n *   }\n * }\n *\n * // Logging errors\n * console.error(error.toJSON()); // Safe for logging, sensitive values redacted\n * ```\n */\nexport abstract class AppKitError extends Error {\n  /** Error code for programmatic error handling */\n  abstract readonly code: string;\n\n  /** HTTP status code suggestion (can be overridden) */\n  abstract readonly statusCode: number;\n\n  /** Whether this error type is generally safe to retry */\n  abstract readonly isRetryable: boolean;\n\n  /** Optional cause of the error */\n  readonly cause?: Error;\n\n  /** Additional context for the error */\n  readonly context?: Record<string, unknown>;\n\n  /**\n   * Client-safe error message. When set, callers serializing the error to\n   * a client (SSE, HTTP body) MUST prefer `clientMessage` over `message`.\n   * `message` may contain raw upstream / SDK text including statement\n   * fragments, internal object names, and correlation IDs.\n   *\n   * Subclasses can set this in their constructor for a fixed sanitized\n   * string. When unset, `clientMessage` defaults to a generic per-code\n   * string (see the getter), and the raw `message` is kept server-side\n   * only.\n   */\n  protected readonly _clientMessage?: string;\n\n  constructor(\n    message: string,\n    options?: {\n      cause?: Error;\n      context?: Record<string, unknown>;\n      clientMessage?: string;\n    },\n  ) {\n    super(message);\n    this.name = this.constructor.name;\n    this.cause = options?.cause;\n    this.context = options?.context;\n    this._clientMessage = options?.clientMessage;\n\n    // Maintains proper stack trace for where the error was thrown\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, this.constructor);\n    }\n  }\n\n  /**\n   * Sanitized message safe to forward to clients. Override in subclasses\n   * if a more specific default is appropriate.\n   */\n  get clientMessage(): string {\n    return this._clientMessage ?? \"An internal error occurred\";\n  }\n\n  /**\n   * Convert error to JSON for logging/serialization.\n   * Sensitive values in context are automatically redacted.\n   */\n  toJSON(): Record<string, unknown> {\n    return {\n      name: this.name,\n      code: this.code,\n      message: this.message,\n      statusCode: this.statusCode,\n      isRetryable: this.isRetryable,\n      context: this.sanitizeContext(this.context),\n      cause: this.cause?.message,\n      stack: this.stack,\n    };\n  }\n\n  /**\n   * Create a human-readable string representation\n   */\n  toString(): string {\n    let str = `${this.name} [${this.code}]: ${this.message}`;\n    if (this.cause) {\n      str += ` (caused by: ${this.cause.message})`;\n    }\n    return str;\n  }\n\n  /**\n   * Sanitize context by redacting sensitive field values\n   */\n  private sanitizeContext(\n    context?: Record<string, unknown>,\n  ): Record<string, unknown> | undefined {\n    if (!context) return undefined;\n\n    const sanitized: Record<string, unknown> = {};\n    for (const [key, value] of Object.entries(context)) {\n      if (this.isSensitiveField(key)) {\n        sanitized[key] = \"[REDACTED]\";\n      } else if (typeof value === \"object\" && value !== null) {\n        // Don't deep-sanitize nested objects, just indicate their type\n        sanitized[key] = Array.isArray(value)\n          ? `[Array(${value.length})]`\n          : \"[Object]\";\n      } else {\n        sanitized[key] = value;\n      }\n    }\n    return sanitized;\n  }\n\n  /**\n   * Check if a field name matches sensitive patterns\n   */\n  private isSensitiveField(fieldName: string): boolean {\n    return SENSITIVE_FIELD_PATTERNS.some((pattern) => pattern.test(fieldName));\n  }\n}\n"],"mappings":";;AACA,MAAM,2BAA2B;CAC/B;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;;;;;;;;;;;;;;;;;;AAuBD,IAAsB,cAAtB,cAA0C,MAAM;;CAW9C,AAAS;;CAGT,AAAS;;;;;;;;;;;;CAaT,AAAmB;CAEnB,YACE,SACA,SAKA;AACA,QAAM,QAAQ;AACd,OAAK,OAAO,KAAK,YAAY;AAC7B,OAAK,QAAQ,SAAS;AACtB,OAAK,UAAU,SAAS;AACxB,OAAK,iBAAiB,SAAS;AAG/B,MAAI,MAAM,kBACR,OAAM,kBAAkB,MAAM,KAAK,YAAY;;;;;;CAQnD,IAAI,gBAAwB;AAC1B,SAAO,KAAK,kBAAkB;;;;;;CAOhC,SAAkC;AAChC,SAAO;GACL,MAAM,KAAK;GACX,MAAM,KAAK;GACX,SAAS,KAAK;GACd,YAAY,KAAK;GACjB,aAAa,KAAK;GAClB,SAAS,KAAK,gBAAgB,KAAK,QAAQ;GAC3C,OAAO,KAAK,OAAO;GACnB,OAAO,KAAK;GACb;;;;;CAMH,WAAmB;EACjB,IAAI,MAAM,GAAG,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK;AAC/C,MAAI,KAAK,MACP,QAAO,gBAAgB,KAAK,MAAM,QAAQ;AAE5C,SAAO;;;;;CAMT,AAAQ,gBACN,SACqC;AACrC,MAAI,CAAC,QAAS,QAAO;EAErB,MAAM,YAAqC,EAAE;AAC7C,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,CAChD,KAAI,KAAK,iBAAiB,IAAI,CAC5B,WAAU,OAAO;WACR,OAAO,UAAU,YAAY,UAAU,KAEhD,WAAU,OAAO,MAAM,QAAQ,MAAM,GACjC,UAAU,MAAM,OAAO,MACvB;MAEJ,WAAU,OAAO;AAGrB,SAAO;;;;;CAMT,AAAQ,iBAAiB,WAA4B;AACnD,SAAO,yBAAyB,MAAM,YAAY,QAAQ,KAAK,UAAU,CAAC"}

package/dist/errors/identity-expired.d.ts

@@ -0,0 +1,14 @@
+import { AppKitError } from "./base.js";
+
+//#region src/errors/identity-expired.d.ts
+/** The downstream service rejected the active caller's credentials. */
+declare class IdentityExpiredError extends AppKitError {
+  readonly tokenFingerprint?: string | undefined;
+  readonly code = "IDENTITY_EXPIRED";
+  readonly statusCode = 401;
+  readonly isRetryable = false;
+  constructor(tokenFingerprint?: string | undefined);
+}
+//#endregion
+export { IdentityExpiredError };
+//# sourceMappingURL=identity-expired.d.ts.map

package/dist/errors/identity-expired.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-expired.d.ts","names":[],"sources":["../../src/errors/identity-expired.ts"],"mappings":";;;;cAGa,oBAAA,SAA6B,WAAA;EAAA,SAKnB,gBAAA;EAAA,SAJZ,IAAA;EAAA,SACA,UAAA;EAAA,SACA,WAAA;cAEY,gBAAA;AAAA"}

package/dist/errors/identity-expired.js

@@ -0,0 +1,33 @@
+import { AppKitError } from "./base.js";
+
+//#region src/errors/identity-expired.ts
+/** The downstream service rejected the active caller's credentials. */
+var IdentityExpiredError = class extends AppKitError {
+	code = "IDENTITY_EXPIRED";
+	statusCode = 401;
+	isRetryable = false;
+	constructor(tokenFingerprint) {
+		const message = "Caller credentials were rejected or expired. Reauthenticate and retry with a fresh user token.";
+		super(message, {
+			clientMessage: message,
+			context: { fingerprint: tokenFingerprint }
+		});
+		this.tokenFingerprint = tokenFingerprint;
+	}
+};
+/** Recognize structured HTTP failures, including connector cause wrappers. */
+function isUnauthorized(error) {
+	const seen = /* @__PURE__ */ new Set();
+	let current = error;
+	while (current && typeof current === "object" && !seen.has(current)) {
+		seen.add(current);
+		const value = current;
+		if (!(current instanceof AppKitError) && (value.status === 401 || value.statusCode === 401 || value.response?.status === 401)) return true;
+		current = value.cause;
+	}
+	return false;
+}
+
+//#endregion
+export { IdentityExpiredError, isUnauthorized };
+//# sourceMappingURL=identity-expired.js.map

package/dist/errors/identity-expired.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-expired.js","names":[],"sources":["../../src/errors/identity-expired.ts"],"sourcesContent":["import { AppKitError } from \"./base\";\n\n/** The downstream service rejected the active caller's credentials. */\nexport class IdentityExpiredError extends AppKitError {\n  readonly code = \"IDENTITY_EXPIRED\";\n  readonly statusCode = 401;\n  readonly isRetryable = false;\n\n  constructor(readonly tokenFingerprint?: string) {\n    const message =\n      \"Caller credentials were rejected or expired. Reauthenticate and retry with a fresh user token.\";\n    // Do not retain upstream errors: SDK errors may contain authorization headers.\n    super(message, {\n      clientMessage: message,\n      context: { fingerprint: tokenFingerprint },\n    });\n  }\n}\n\n/** Recognize structured HTTP failures, including connector cause wrappers. */\nexport function isUnauthorized(error: unknown): boolean {\n  const seen = new Set<object>();\n  let current = error;\n  while (current && typeof current === \"object\" && !seen.has(current)) {\n    seen.add(current);\n    const value = current as {\n      status?: unknown;\n      statusCode?: unknown;\n      response?: { status?: unknown };\n      cause?: unknown;\n    };\n    if (\n      !(current instanceof AppKitError) &&\n      (value.status === 401 ||\n        value.statusCode === 401 ||\n        value.response?.status === 401)\n    )\n      return true;\n    current = value.cause;\n  }\n  return false;\n}\n"],"mappings":";;;;AAGA,IAAa,uBAAb,cAA0C,YAAY;CACpD,AAAS,OAAO;CAChB,AAAS,aAAa;CACtB,AAAS,cAAc;CAEvB,YAAY,AAAS,kBAA2B;EAC9C,MAAM,UACJ;AAEF,QAAM,SAAS;GACb,eAAe;GACf,SAAS,EAAE,aAAa,kBAAkB;GAC3C,CAAC;EAPiB;;;;AAYvB,SAAgB,eAAe,OAAyB;CACtD,MAAM,uBAAO,IAAI,KAAa;CAC9B,IAAI,UAAU;AACd,QAAO,WAAW,OAAO,YAAY,YAAY,CAAC,KAAK,IAAI,QAAQ,EAAE;AACnE,OAAK,IAAI,QAAQ;EACjB,MAAM,QAAQ;AAMd,MACE,EAAE,mBAAmB,iBACpB,MAAM,WAAW,OAChB,MAAM,eAAe,OACrB,MAAM,UAAU,WAAW,KAE7B,QAAO;AACT,YAAU,MAAM;;AAElB,QAAO"}

package/dist/errors/index.js

@@ -1,5 +1,6 @@
 import { AppKitError } from "./base.js";
 import { AuthenticationError } from "./authentication.js";
+import { IdentityExpiredError } from "./identity-expired.js";
 import { ConfigurationError } from "./configuration.js";
 import { ConnectionError } from "./connection.js";
 import { DatabaseValidationError } from "./database-validation.js";

package/dist/index.d.ts

@@ -1,12 +1,17 @@
 import { StreamExecutionSettings } from "./shared/src/execute.js";
 import { ResourceFieldEntry } from "./shared/src/schemas/manifest.js";
-import { BasePluginConfig, IAppRouter, PluginData, ToPlugin } from "./shared/src/plugin.js";
+import { AppKitApi, BasePluginConfig, IAppRouter, PluginData, ScopedPluginMap, ToPlugin, UserScopedApp } from "./shared/src/plugin.js";
 import { CacheConfig } from "./shared/src/cache.js";
 import { isSQLTypeMarker, sql } from "./shared/src/sql/helpers.js";
 import { ApiError } from "./shared/src/workspace-client/errors.js";
 import { createWorkspaceClient } from "./shared/src/workspace-client/factory.js";
 import "./shared/src/index.js";
 import { WorkspaceClient, WorkspaceClientOptions } from "./workspace-client/index.js";
+import { UserContext, isUserContext } from "./context/user-context.js";
+import { ServiceContext } from "./context/service-context.js";
+import { CallerContext, CallerPrincipal, ExecutionContext } from "./context/caller-context.js";
+import { getCallerContext, getCurrentActorId, getCurrentPrincipalKey, getCurrentUserId, getExecutionContext, getUserContext, isInUserContext, runInCallerContext, runInUserContext } from "./context/execution-context.js";
+import "./context/index.js";
 import { DatabaseRegistry } from "./database/contract/registry.js";
 import { CacheManager } from "./cache/index.js";
 import { JobsConnectorConfig } from "./connectors/jobs/types.js";
@@ -14,14 +19,17 @@ import "./connectors/jobs/index.js";
 import { LakebasePoolManager, createLakebasePoolManager } from "./connectors/lakebase/pool-manager.js";
 import { LakebasePool } from "./connectors/lakebase/routing-pool.js";
 import { DatabaseCredential, GenerateDatabaseCredentialRequest, LakebasePoolConfig, RequestedClaims, RequestedClaimsPermissionSet, RequestedResource, createLakebasePool, generateDatabaseCredential, getLakebaseOrmConfig, getLakebasePgConfig, getUsernameWithApiLookup, getWorkspaceClient } from "./connectors/lakebase/index.js";
-import { getExecutionContext } from "./context/execution-context.js";
-import "./context/index.js";
 import { ITelemetry, TelemetryConfig } from "./telemetry/types.js";
 import { Counter, Histogram, SeverityNumber, Span, SpanStatusCode } from "./telemetry/index.js";
 import { createApp } from "./core/appkit.js";
 import "./core/index.js";
+import { ResourcePermission, ResourceType } from "./registry/types.generated.js";
+import { ConfigSchema, PluginManifest, ResourceEntry, ResourceRequirement, ValidationResult } from "./registry/types.js";
+import { getWarehouseId } from "./resources/warehouse.js";
+import "./resources/index.js";
 import { AppKitError } from "./errors/base.js";
 import { AuthenticationError } from "./errors/authentication.js";
+import { IdentityExpiredError } from "./errors/identity-expired.js";
 import { ConfigurationError } from "./errors/configuration.js";
 import { ConnectionError } from "./errors/connection.js";
 import { DatabaseValidationError, DatabaseValidationIssue } from "./errors/database-validation.js";
@@ -36,8 +44,6 @@ import { toPlugin } from "./plugin/to-plugin.js";
 import "./plugin/index.js";
 import { FileAction, FilePolicy, FilePolicyUser, FileResource, PolicyDeniedError, READ_ACTIONS, WRITE_ACTIONS } from "./plugins/files/policy.js";
 import { analytics } from "./plugins/analytics/analytics.js";
-import { ResourcePermission, ResourceType } from "./registry/types.generated.js";
-import { ConfigSchema, PluginManifest, ResourceEntry, ResourceRequirement, ValidationResult } from "./registry/types.js";
 import { defineManifest, getPluginManifest, getResourceRequirements } from "./registry/manifest-loader.js";
 import { ResourceRegistry } from "./registry/resource-registry.js";
 import "./registry/index.js";
@@ -54,4 +60,4 @@ import "./plugins/ga-exports.generated.js";
 import { extractServingEndpoints, findServerFile } from "./type-generator/serving/server-file-extractor.js";
 import { appKitServingTypesPlugin } from "./type-generator/serving/vite-plugin.js";
 import { appKitTypesPlugin } from "./type-generator/vite-plugin.js";
-export { ApiError, AppKitError, AuthenticationError, type BasePluginConfig, type CacheConfig, CacheManager, type ConfigSchema, ConfigurationError, ConnectionError, type Counter, type DatabaseCredential, type DatabaseRegistry, DatabaseValidationError, type DatabaseValidationIssue, type EndpointConfig, ExecutionError, type ExecutionResult, type FileAction, type FilePolicy, type FilePolicyUser, type FileResource, type GenerateDatabaseCredentialRequest, type Histogram, type IAppRouter, type IJobsConfig, type ITelemetry, InitializationError, type JobAPI, type JobConfig, type JobsConnectorConfig, type JobsExport, type LakebasePool, type LakebasePoolConfig, type LakebasePoolManager, Plugin, type PluginData, type PluginManifest, PolicyDeniedError, READ_ACTIONS, type RequestedClaims, RequestedClaimsPermissionSet, type RequestedResource, type ResourceEntry, type ResourceFieldEntry, type ResourcePermission, ResourceRegistry, type ResourceRequirement, ResourceType, ServerError, type ServingEndpointEntry, type ServingEndpointRegistry, type ServingFactory, SeverityNumber, type Span, SpanStatusCode, type StreamExecutionSettings, type TelemetryConfig, type ToPlugin, TunnelError, ValidationError, type ValidationResult, WRITE_ACTIONS, type WorkspaceClient, type WorkspaceClientOptions, analytics, appKitServingTypesPlugin, appKitTypesPlugin, createApp, createLakebasePool, createLakebasePoolManager, createWorkspaceClient, defineManifest, extractServingEndpoints, files, findServerFile, generateDatabaseCredential, genie, getExecutionContext, getLakebaseOrmConfig, getLakebasePgConfig, getPluginManifest, getResourceRequirements, getUsernameWithApiLookup, getWorkspaceClient, isSQLTypeMarker, jobs, lakebase, server, serving, sql, toPlugin };
+export { ApiError, type AppKitApi, AppKitError, AuthenticationError, type BasePluginConfig, type CacheConfig, CacheManager, type CallerContext, type CallerPrincipal, type ConfigSchema, ConfigurationError, ConnectionError, type Counter, type DatabaseCredential, type DatabaseRegistry, DatabaseValidationError, type DatabaseValidationIssue, type EndpointConfig, type ExecutionContext, ExecutionError, type ExecutionResult, type FileAction, type FilePolicy, type FilePolicyUser, type FileResource, type GenerateDatabaseCredentialRequest, type Histogram, type IAppRouter, type IJobsConfig, type ITelemetry, IdentityExpiredError, InitializationError, type JobAPI, type JobConfig, type JobsConnectorConfig, type JobsExport, type LakebasePool, type LakebasePoolConfig, type LakebasePoolManager, Plugin, type PluginData, type PluginManifest, PolicyDeniedError, READ_ACTIONS, type RequestedClaims, RequestedClaimsPermissionSet, type RequestedResource, type ResourceEntry, type ResourceFieldEntry, type ResourcePermission, ResourceRegistry, type ResourceRequirement, ResourceType, type ScopedPluginMap, ServerError, ServiceContext, type ServingEndpointEntry, type ServingEndpointRegistry, type ServingFactory, SeverityNumber, type Span, SpanStatusCode, type StreamExecutionSettings, type TelemetryConfig, type ToPlugin, TunnelError, type UserContext, type UserScopedApp, ValidationError, type ValidationResult, WRITE_ACTIONS, type WorkspaceClient, type WorkspaceClientOptions, analytics, appKitServingTypesPlugin, appKitTypesPlugin, createApp, createLakebasePool, createLakebasePoolManager, createWorkspaceClient, defineManifest, extractServingEndpoints, files, findServerFile, generateDatabaseCredential, genie, getCallerContext, getCurrentActorId, getCurrentPrincipalKey, getCurrentUserId, getExecutionContext, getLakebaseOrmConfig, getLakebasePgConfig, getPluginManifest, getResourceRequirements, getUserContext, getUsernameWithApiLookup, getWarehouseId, getWorkspaceClient, isInUserContext, isSQLTypeMarker, isUserContext, jobs, lakebase, runInCallerContext, runInUserContext, server, serving, sql, toPlugin };

package/dist/index.js

@@ -3,6 +3,7 @@ import { ApiError } from "./shared/src/workspace-client/errors.js";
 import { createWorkspaceClient } from "./shared/src/workspace-client/factory.js";
 import { AppKitError } from "./errors/base.js";
 import { AuthenticationError } from "./errors/authentication.js";
+import { IdentityExpiredError } from "./errors/identity-expired.js";
 import { ConfigurationError } from "./errors/configuration.js";
 import { ConnectionError } from "./errors/connection.js";
 import { DatabaseValidationError } from "./errors/database-validation.js";
@@ -12,8 +13,11 @@ import { ServerError } from "./errors/server.js";
 import { TunnelError } from "./errors/tunnel.js";
 import { ValidationError } from "./errors/validation.js";
 import "./errors/index.js";
+import { getWarehouseId } from "./resources/warehouse.js";
+import { isUserContext } from "./context/user-context.js";
+import { ServiceContext } from "./context/service-context.js";
 import { createLakebasePoolManager } from "./connectors/lakebase/pool-manager.js";
-import { getExecutionContext } from "./context/execution-context.js";
+import { getCallerContext, getCurrentActorId, getCurrentPrincipalKey, getCurrentUserId, getExecutionContext, getUserContext, isInUserContext, runInCallerContext, runInUserContext } from "./context/execution-context.js";
 import { RequestedClaimsPermissionSet, createLakebasePool, generateDatabaseCredential, getLakebaseOrmConfig, getLakebasePgConfig, getUsernameWithApiLookup, getWorkspaceClient } from "./connectors/lakebase/index.js";
 import { SeverityNumber, SpanStatusCode } from "./telemetry/index.js";
 import { CacheManager } from "./cache/index.js";
@@ -27,6 +31,7 @@ import { ResourceRegistry } from "./registry/resource-registry.js";
 import "./registry/index.js";
 import { createApp } from "./core/appkit.js";
 import "./core/index.js";
+import "./resources/index.js";
 import { PolicyDeniedError, READ_ACTIONS, WRITE_ACTIONS } from "./plugins/files/policy.js";
 import { analytics } from "./plugins/analytics/analytics.js";
 import { files } from "./plugins/files/plugin.js";
@@ -40,4 +45,4 @@ import { server } from "./plugins/server/index.js";
 import { serving } from "./plugins/serving/serving.js";
 import "./plugins/ga-exports.generated.js";
 
-export { ApiError, AppKitError, AuthenticationError, CacheManager, ConfigurationError, ConnectionError, DatabaseValidationError, ExecutionError, InitializationError, Plugin, PolicyDeniedError, READ_ACTIONS, RequestedClaimsPermissionSet, ResourceRegistry, ResourceType, ServerError, SeverityNumber, SpanStatusCode, TunnelError, ValidationError, WRITE_ACTIONS, analytics, appKitServingTypesPlugin, appKitTypesPlugin, createApp, createLakebasePool, createLakebasePoolManager, createWorkspaceClient, defineManifest, extractServingEndpoints, files, findServerFile, generateDatabaseCredential, genie, getExecutionContext, getLakebaseOrmConfig, getLakebasePgConfig, getPluginManifest, getResourceRequirements, getUsernameWithApiLookup, getWorkspaceClient, isSQLTypeMarker, jobs, lakebase, server, serving, sql, toPlugin };
+export { ApiError, AppKitError, AuthenticationError, CacheManager, ConfigurationError, ConnectionError, DatabaseValidationError, ExecutionError, IdentityExpiredError, InitializationError, Plugin, PolicyDeniedError, READ_ACTIONS, RequestedClaimsPermissionSet, ResourceRegistry, ResourceType, ServerError, ServiceContext, SeverityNumber, SpanStatusCode, TunnelError, ValidationError, WRITE_ACTIONS, analytics, appKitServingTypesPlugin, appKitTypesPlugin, createApp, createLakebasePool, createLakebasePoolManager, createWorkspaceClient, defineManifest, extractServingEndpoints, files, findServerFile, generateDatabaseCredential, genie, getCallerContext, getCurrentActorId, getCurrentPrincipalKey, getCurrentUserId, getExecutionContext, getLakebaseOrmConfig, getLakebasePgConfig, getPluginManifest, getResourceRequirements, getUserContext, getUsernameWithApiLookup, getWarehouseId, getWorkspaceClient, isInUserContext, isSQLTypeMarker, isUserContext, jobs, lakebase, runInCallerContext, runInUserContext, server, serving, sql, toPlugin };

package/dist/logging/logger.js

@@ -1,8 +1,8 @@
 import { DEFAULT_SAMPLING_CONFIG, shouldSample } from "./sampling.js";
 import { WideEvent } from "./wide-event.js";
 import { WideEventEmitter } from "./wide-event-emitter.js";
-import { AsyncLocalStorage } from "node:async_hooks";
 import { format } from "node:util";
+import { AsyncLocalStorage } from "node:async_hooks";
 import { trace } from "@opentelemetry/api";
 import { createDebug } from "obug";
 

package/dist/plugin/execution-result.d.ts

@@ -1,3 +1,5 @@
+import { IdentityExpiredError } from "../errors/identity-expired.js";
+
 //#region src/plugin/execution-result.d.ts
 /**
  * Discriminated union for plugin execution results.
@@ -19,7 +21,8 @@ type ExecutionResult<T> = {
 } | {
   ok: false;
   status: number;
-  message: string;
+  message: string; /** Typed credential expiry without changing the existing failure envelope. */
+  error?: IdentityExpiredError;
 };
 //#endregion
 export { ExecutionResult };

package/dist/plugin/execution-result.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution-result.d.ts","names":[],"sources":["../../src/plugin/execution-result.ts"],"mappings":";;AAcA;;;;;;;;;;;;;KAAY,eAAA;EACN,EAAA;EAAU,IAAA,EAAM,CAAA;AAAA;EAChB,EAAA;EAAW,MAAA;EAAgB,OAAA;AAAA"}
+{"version":3,"file":"execution-result.d.ts","names":[],"sources":["../../src/plugin/execution-result.ts"],"mappings":";;;;;AAgBA;;;;;;;;;;;;KAAY,eAAA;EACN,EAAA;EAAU,IAAA,EAAM,CAAA;AAAA;EAEhB,EAAA;EACA,MAAA;EACA,OAAA;EAEA,KAAA,GAAQ,oBAAA;AAAA"}

package/dist/plugin/interceptors/telemetry.js

@@ -1,6 +1,7 @@
-import { getCurrentUserId, isInUserContext } from "../../context/execution-context.js";
+import { getCurrentPrincipalId, isInUserContext, normalizeIdentityError } from "../../context/execution-context.js";
 import { SpanStatusCode } from "../../telemetry/index.js";
-import { isDevOboFallback } from "../plugin.js";
+import { isDevOboFallback } from "../../context/request-scope.js";
+import "../plugin.js";
 
 //#region src/plugin/interceptors/telemetry.ts
 var TelemetryInterceptor = class {
@@ -29,12 +30,13 @@ var TelemetryInterceptor = class {
 			}
 			try {
 				span.setAttribute("execution.context", isInUserContext() ? "user" : "service");
-				span.setAttribute("caller.id", getCurrentUserId());
+				span.setAttribute("caller.id", getCurrentPrincipalId());
 				if (isDevOboFallback()) span.setAttribute("execution.obo_dev_fallback", true);
 				const result = await fn();
 				if (!isAborted) span.setStatus({ code: SpanStatusCode.OK });
 				return result;
-			} catch (error) {
+			} catch (caught) {
+				const error = normalizeIdentityError(caught);
 				if (!isAborted) {
 					span.recordException(error);
 					span.setStatus({ code: SpanStatusCode.ERROR });

package/dist/plugin/interceptors/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","names":[],"sources":["../../../src/plugin/interceptors/telemetry.ts"],"sourcesContent":["import type { TelemetryConfig } from \"shared\";\n\nimport {\n  getCurrentUserId,\n  isInUserContext,\n} from \"../../context/execution-context\";\nimport type { ITelemetry, Span } from \"../../telemetry\";\nimport { SpanStatusCode } from \"../../telemetry\";\nimport { isDevOboFallback } from \"../plugin\";\nimport type { ExecutionInterceptor, InterceptorContext } from \"./types\";\n\nexport class TelemetryInterceptor implements ExecutionInterceptor {\n  constructor(\n    private telemetry: ITelemetry,\n    private config?: TelemetryConfig,\n  ) {}\n\n  async intercept<T>(\n    fn: () => Promise<T>,\n    context: InterceptorContext,\n  ): Promise<T> {\n    const spanName = this.config?.spanName || \"plugin.execute\";\n\n    // abort operation if signal is aborted\n    if (context.signal?.aborted) {\n      throw new Error(\"Operation aborted before execution\");\n    }\n\n    return this.telemetry.startActiveSpan(\n      spanName,\n      { attributes: this.config?.attributes },\n      async (span: Span) => {\n        let abortHandler: (() => void) | undefined;\n        let isAborted = false;\n\n        if (context.signal) {\n          abortHandler = () => {\n            // abort span if not recording\n            if (!span.isRecording()) return;\n            isAborted = true;\n            span.setAttribute(\"cancelled\", true);\n            span.setStatus({\n              code: SpanStatusCode.ERROR,\n              message: \"Operation cancelled by client\",\n            });\n            span.end();\n          };\n          context.signal.addEventListener(\"abort\", abortHandler, {\n            once: true,\n          });\n        }\n\n        try {\n          span.setAttribute(\n            \"execution.context\",\n            isInUserContext() ? \"user\" : \"service\",\n          );\n          span.setAttribute(\"caller.id\", getCurrentUserId());\n          if (isDevOboFallback()) {\n            span.setAttribute(\"execution.obo_dev_fallback\", true);\n          }\n\n          const result = await fn();\n          if (!isAborted) {\n            span.setStatus({ code: SpanStatusCode.OK });\n          }\n          return result;\n        } catch (error) {\n          if (!isAborted) {\n            span.recordException(error as Error);\n            span.setStatus({ code: SpanStatusCode.ERROR });\n          }\n          throw error;\n        } finally {\n          if (abortHandler && context.signal) {\n            context.signal.removeEventListener(\"abort\", abortHandler);\n          }\n          if (!isAborted) {\n            span.end();\n          }\n        }\n      },\n    );\n  }\n}\n"],"mappings":";;;;;AAWA,IAAa,uBAAb,MAAkE;CAChE,YACE,AAAQ,WACR,AAAQ,QACR;EAFQ;EACA;;CAGV,MAAM,UACJ,IACA,SACY;EACZ,MAAM,WAAW,KAAK,QAAQ,YAAY;AAG1C,MAAI,QAAQ,QAAQ,QAClB,OAAM,IAAI,MAAM,qCAAqC;AAGvD,SAAO,KAAK,UAAU,gBACpB,UACA,EAAE,YAAY,KAAK,QAAQ,YAAY,EACvC,OAAO,SAAe;GACpB,IAAI;GACJ,IAAI,YAAY;AAEhB,OAAI,QAAQ,QAAQ;AAClB,yBAAqB;AAEnB,SAAI,CAAC,KAAK,aAAa,CAAE;AACzB,iBAAY;AACZ,UAAK,aAAa,aAAa,KAAK;AACpC,UAAK,UAAU;MACb,MAAM,eAAe;MACrB,SAAS;MACV,CAAC;AACF,UAAK,KAAK;;AAEZ,YAAQ,OAAO,iBAAiB,SAAS,cAAc,EACrD,MAAM,MACP,CAAC;;AAGJ,OAAI;AACF,SAAK,aACH,qBACA,iBAAiB,GAAG,SAAS,UAC9B;AACD,SAAK,aAAa,aAAa,kBAAkB,CAAC;AAClD,QAAI,kBAAkB,CACpB,MAAK,aAAa,8BAA8B,KAAK;IAGvD,MAAM,SAAS,MAAM,IAAI;AACzB,QAAI,CAAC,UACH,MAAK,UAAU,EAAE,MAAM,eAAe,IAAI,CAAC;AAE7C,WAAO;YACA,OAAO;AACd,QAAI,CAAC,WAAW;AACd,UAAK,gBAAgB,MAAe;AACpC,UAAK,UAAU,EAAE,MAAM,eAAe,OAAO,CAAC;;AAEhD,UAAM;aACE;AACR,QAAI,gBAAgB,QAAQ,OAC1B,SAAQ,OAAO,oBAAoB,SAAS,aAAa;AAE3D,QAAI,CAAC,UACH,MAAK,KAAK;;IAIjB"}
+{"version":3,"file":"telemetry.js","names":[],"sources":["../../../src/plugin/interceptors/telemetry.ts"],"sourcesContent":["import type { TelemetryConfig } from \"shared\";\n\nimport {\n  getCurrentPrincipalId,\n  isInUserContext,\n  normalizeIdentityError,\n} from \"../../context/execution-context\";\nimport type { ITelemetry, Span } from \"../../telemetry\";\nimport { SpanStatusCode } from \"../../telemetry\";\nimport { isDevOboFallback } from \"../plugin\";\nimport type { ExecutionInterceptor, InterceptorContext } from \"./types\";\n\nexport class TelemetryInterceptor implements ExecutionInterceptor {\n  constructor(\n    private telemetry: ITelemetry,\n    private config?: TelemetryConfig,\n  ) {}\n\n  async intercept<T>(\n    fn: () => Promise<T>,\n    context: InterceptorContext,\n  ): Promise<T> {\n    const spanName = this.config?.spanName || \"plugin.execute\";\n\n    // abort operation if signal is aborted\n    if (context.signal?.aborted) {\n      throw new Error(\"Operation aborted before execution\");\n    }\n\n    return this.telemetry.startActiveSpan(\n      spanName,\n      { attributes: this.config?.attributes },\n      async (span: Span) => {\n        let abortHandler: (() => void) | undefined;\n        let isAborted = false;\n\n        if (context.signal) {\n          abortHandler = () => {\n            // abort span if not recording\n            if (!span.isRecording()) return;\n            isAborted = true;\n            span.setAttribute(\"cancelled\", true);\n            span.setStatus({\n              code: SpanStatusCode.ERROR,\n              message: \"Operation cancelled by client\",\n            });\n            span.end();\n          };\n          context.signal.addEventListener(\"abort\", abortHandler, {\n            once: true,\n          });\n        }\n\n        try {\n          span.setAttribute(\n            \"execution.context\",\n            isInUserContext() ? \"user\" : \"service\",\n          );\n          span.setAttribute(\"caller.id\", getCurrentPrincipalId());\n          if (isDevOboFallback()) {\n            span.setAttribute(\"execution.obo_dev_fallback\", true);\n          }\n\n          const result = await fn();\n          if (!isAborted) {\n            span.setStatus({ code: SpanStatusCode.OK });\n          }\n          return result;\n        } catch (caught) {\n          const error = normalizeIdentityError(caught);\n          if (!isAborted) {\n            span.recordException(error as Error);\n            span.setStatus({ code: SpanStatusCode.ERROR });\n          }\n          throw error;\n        } finally {\n          if (abortHandler && context.signal) {\n            context.signal.removeEventListener(\"abort\", abortHandler);\n          }\n          if (!isAborted) {\n            span.end();\n          }\n        }\n      },\n    );\n  }\n}\n"],"mappings":";;;;;;AAYA,IAAa,uBAAb,MAAkE;CAChE,YACE,AAAQ,WACR,AAAQ,QACR;EAFQ;EACA;;CAGV,MAAM,UACJ,IACA,SACY;EACZ,MAAM,WAAW,KAAK,QAAQ,YAAY;AAG1C,MAAI,QAAQ,QAAQ,QAClB,OAAM,IAAI,MAAM,qCAAqC;AAGvD,SAAO,KAAK,UAAU,gBACpB,UACA,EAAE,YAAY,KAAK,QAAQ,YAAY,EACvC,OAAO,SAAe;GACpB,IAAI;GACJ,IAAI,YAAY;AAEhB,OAAI,QAAQ,QAAQ;AAClB,yBAAqB;AAEnB,SAAI,CAAC,KAAK,aAAa,CAAE;AACzB,iBAAY;AACZ,UAAK,aAAa,aAAa,KAAK;AACpC,UAAK,UAAU;MACb,MAAM,eAAe;MACrB,SAAS;MACV,CAAC;AACF,UAAK,KAAK;;AAEZ,YAAQ,OAAO,iBAAiB,SAAS,cAAc,EACrD,MAAM,MACP,CAAC;;AAGJ,OAAI;AACF,SAAK,aACH,qBACA,iBAAiB,GAAG,SAAS,UAC9B;AACD,SAAK,aAAa,aAAa,uBAAuB,CAAC;AACvD,QAAI,kBAAkB,CACpB,MAAK,aAAa,8BAA8B,KAAK;IAGvD,MAAM,SAAS,MAAM,IAAI;AACzB,QAAI,CAAC,UACH,MAAK,UAAU,EAAE,MAAM,eAAe,IAAI,CAAC;AAE7C,WAAO;YACA,QAAQ;IACf,MAAM,QAAQ,uBAAuB,OAAO;AAC5C,QAAI,CAAC,WAAW;AACd,UAAK,gBAAgB,MAAe;AACpC,UAAK,UAAU,EAAE,MAAM,eAAe,OAAO,CAAC;;AAEhD,UAAM;aACE;AACR,QAAI,gBAAgB,QAAQ,OAC1B,SAAQ,OAAO,oBAAoB,SAAS,aAAa;AAE3D,QAAI,CAAC,UACH,MAAK,KAAK;;IAIjB"}

package/dist/plugin/plugin.d.ts

@@ -10,6 +10,7 @@ import { PluginContext } from "../core/plugin-context.js";
 import { StreamManager } from "../stream/stream-manager.js";
 import "../stream/index.js";
 import { DevFileReader } from "./dev-reader.js";
+import "../context/request-scope.js";
 import express from "express";
 
 //#region src/plugin/plugin.d.ts
@@ -215,37 +216,27 @@ declare abstract class Plugin<TConfig extends BasePluginConfig = BasePluginConfi
    *
    * Returns the `x-forwarded-user` header when present. In development mode
    * (`NODE_ENV=development`) falls back to the current context user ID so
-   * that callers outside an active `runInUserContext` scope still get a
+   * that callers outside an active `runInCallerContext` scope still get a
    * consistent value.
    *
    * @throws AuthenticationError in production when no user header is present.
    */
   protected resolveUserId(req: express.Request): string;
-  /**
-   * Execute operations using the user's identity from the request.
-   * Returns a proxy of this plugin where all method calls execute
-   * with the user's Databricks credentials instead of the service principal.
-   *
-   * @param req - The Express request containing the user token in headers
-   * @returns A proxied plugin instance that executes as the user
-   * @throws AuthenticationError if user token is not available in request headers (production only).
-   *   In development mode (`NODE_ENV=development`), skips user impersonation instead of throwing.
-   */
+  /** @deprecated Use appkit.asUser(req) to scope the whole app. */
   asUser(req: express.Request): this;
   /**
-   * Creates a proxy of `this` where every method call — and every function
-   * in the result of `exports()` — runs inside `wrapCall`.
+   * User-scoped executor for the plugin's own on-behalf-of routing (for
+   * example `.obo.sql` lanes), using the same caller context as the
+   * app-level `appkit.asUser(req)`.
    *
-   * `wrapCall` decides the per-call scope. Two strategies are used today:
-   *   - real OBO:     fn => (...args) => runInUserContext(userContext, () => fn(...args))
-   *   - dev fallback: fn => (...args) => otelContext.with(DEV_OBO_FALLBACK_KEY=true, () => fn(...args))
+   * Unlike the deprecated public `asUser(req)`, this does not emit a
+   * deprecation warning and does not opt out of the app-only resource
+   * guards, so internal routing matches current on-behalf-of semantics
+   * rather than the retained legacy behavior.
    *
-   * `exports` is intercepted because methods captured in the returned
-   * exports object never re-enter the proxy's `get` trap. Wrapping them
-   * here is the only way to make the user context follow function
-   * references back out of the plugin.
+   * @internal
    */
-  private _createAsUserProxy;
+  protected _asUserScoped(req: express.Request): this;
   protected executeStream<T>(res: IAppResponse, fn: StreamExecuteHandler<T>, options: StreamExecutionSettings, userKey?: string): Promise<void>;
   /**
    * Execute a function with the plugin's interceptor chain.
@@ -254,7 +245,8 @@ declare abstract class Plugin<TConfig extends BasePluginConfig = BasePluginConfi
    * - `{ ok: true, data: T }` on success
    * - `{ ok: false, status: number, message: string }` on failure
    *
-   * Errors are never thrown — the method is production-safe.
+   * Caller credential expiration retains the failure result and additionally
+   * exposes a typed error, preserving existing result-based callers.
    */
   protected execute<T>(fn: (signal?: AbortSignal) => Promise<T>, options: PluginExecutionSettings, userKey?: string): Promise<ExecutionResult<T>>;
   protected registerEndpoint(name: string, path: string): void;

package/dist/plugin/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","names":[],"sources":["../../src/plugin/plugin.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBA0NsB,MAAA,iBACJ,gBAAA,GAAmB,gBAAA,aACxB,UAAA;EAAA,UA4BW,MAAA,EAAQ,OAAA;EAAA,UA3BpB,OAAA;EAAA,UACA,KAAA,EAAQ,YAAA;EAAA,UACR,GAAA,EAAK,UAAA;EAAA,UACL,aAAA,EAAe,aAAA;EAAA,UACf,aAAA,EAAe,aAAA;EAAA,UACf,SAAA,EAAY,UAAA;EAAA,UACZ,OAAA,GAAU,aAAA;EA0SO;EAAA,QAvSnB,mBAAA;EAwSG;EAAA,QArSH,oBAAA;EAsSN;;;;;;EAAA,OA9RK,KAAA,EAAO,WAAA;EA+W0B;;;EA1WxC,IAAA;cAEsB,MAAA,EAAQ,OAAA;EAAA,QAoBtB,gBAAA;EAuVG;;;;;;;;EAlUX,aAAA,CACE,IAAA;IACE,OAAA;IACA,eAAA,GAAkB,gBAAA;EAAA;EAgBtB,YAAA,CAAa,CAAA,EAAG,OAAA,CAAQ,MAAA;EAIlB,KAAA,CAAA,GAAK,OAAA;EAEX,YAAA,CAAA,GAAgB,iBAAA;EAIhB,uBAAA,CAAA,GAA2B,WAAA;EAI3B,qBAAA,CAAA;EAgbyB;;;;;;;;;;;;;;;;;;;;;;;;EApZzB,OAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiDA,YAAA,CAAA,GAAgB,MAAA;;;;;;;;;;;YAcN,aAAA,CAAc,GAAA,EAAK,OAAA,CAAQ,OAAA;;;;;;;;;;;EAiBrC,MAAA,CAAO,GAAA,EAAK,OAAA,CAAQ,OAAA;;;;;;;;;;;;;;UAyDZ,kBAAA;EAAA,UAoCQ,aAAA,GAAA,CACd,GAAA,EAAK,YAAA,EACL,EAAA,EAAI,oBAAA,CAAqB,CAAA,GACzB,OAAA,EAAS,uBAAA,EACT,OAAA,YAAgB,OAAA;;;;;;;;;;YAgFF,OAAA,GAAA,CACd,EAAA,GAAK,MAAA,GAAS,WAAA,KAAgB,OAAA,CAAQ,CAAA,GACtC,OAAA,EAAS,uBAAA,EACT,OAAA,YACC,OAAA,CAAQ,eAAA,CAAgB,CAAA;EAAA,UAmDjB,gBAAA,CAAiB,IAAA,UAAc,IAAA;EAAA,UAI/B,KAAA,YAAA,CACR,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAChB,MAAA,EAAQ,WAAA;EAAA,QAeF,qBAAA;EAAA,QAaA,kBAAA;EAAA,QAqCM,wBAAA;EAAA,QAqBN,iBAAA;AAAA"}
+{"version":3,"file":"plugin.d.ts","names":[],"sources":["../../src/plugin/plugin.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwJA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAsB,MAAA,iBACJ,gBAAA,GAAmB,gBAAA,aACxB,UAAA;EAAA,UA4BW,MAAA,EAAQ,OAAA;EAAA,UA3BpB,OAAA;EAAA,UACA,KAAA,EAAQ,YAAA;EAAA,UACR,GAAA,EAAK,UAAA;EAAA,UACL,aAAA,EAAe,aAAA;EAAA,UACf,aAAA,EAAe,aAAA;EAAA,UACf,SAAA,EAAY,UAAA;EAAA,UACZ,OAAA,GAAU,aAAA;EA0LV;EAAA,QAvLF,mBAAA;EAuL6B;EAAA,QApL7B,oBAAA;EA4LR;;;;;;EAAA,OApLO,KAAA,EAAO,WAAA;EAyMU;;;EApMxB,IAAA;cAEsB,MAAA,EAAQ,OAAA;EAAA,QAoBtB,gBAAA;EAyLmB;;;;;;;;EApK3B,aAAA,CACE,IAAA;IACE,OAAA;IACA,eAAA,GAAkB,gBAAA;EAAA;EAgBtB,YAAA,CAAa,CAAA,EAAG,OAAA,CAAQ,MAAA;EAIlB,KAAA,CAAA,GAAK,OAAA;EAEX,YAAA,CAAA,GAAgB,iBAAA;EAIhB,uBAAA,CAAA,GAA2B,WAAA;EAI3B,qBAAA,CAAA;EA+NW;;;;;;;;;;;;;;;;;;;;;;;;EAnMX,OAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiDA,YAAA,CAAA,GAAgB,MAAA;;;;;;;;;;;YAcN,aAAA,CAAc,GAAA,EAAK,OAAA,CAAQ,OAAA;;EAQrC,MAAA,CAAO,GAAA,EAAK,OAAA,CAAQ,OAAA;;;;;;;;;;;;;YAqBV,aAAA,CAAc,GAAA,EAAK,OAAA,CAAQ,OAAA;EAAA,UASrB,aAAA,GAAA,CACd,GAAA,EAAK,YAAA,EACL,EAAA,EAAI,oBAAA,CAAqB,CAAA,GACzB,OAAA,EAAS,uBAAA,EACT,OAAA,YAAgB,OAAA;;;;;;;;;;;YAsFF,OAAA,GAAA,CACd,EAAA,GAAK,MAAA,GAAS,WAAA,KAAgB,OAAA,CAAQ,CAAA,GACtC,OAAA,EAAS,uBAAA,EACT,OAAA,YACC,OAAA,CAAQ,eAAA,CAAgB,CAAA;EAAA,UAsDjB,gBAAA,CAAiB,IAAA,UAAc,IAAA;EAAA,UAI/B,KAAA,YAAA,CACR,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAChB,MAAA,EAAQ,WAAA;EAAA,QAeF,qBAAA;EAAA,QAaA,kBAAA;EAAA,QAqCM,wBAAA;EAAA,QAqBN,iBAAA;AAAA"}