@sixb/core 0.0.1

package/dist/chunk-8r8cw2xw.js

@@ -0,0 +1,373 @@
+// @bun
+// src/http/api-routes.ts
+var SIXB_API_ROUTES = [
+  {
+    operationId: "getProjectInfo",
+    method: "GET",
+    path: "/api/project",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "getAuthAccessManagementOptions",
+    method: "GET",
+    path: "/api/auth/access-management-options",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "listAuthAccessTokens",
+    method: "GET",
+    path: "/api/auth/access-tokens",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "createAuthPersonalAccessToken",
+    method: "POST",
+    path: "/api/auth/access-tokens",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "revokeAuthAccessToken",
+    method: "POST",
+    path: "/api/auth/access-tokens/:tokenId/revoke",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "listAuthServiceAccounts",
+    method: "GET",
+    path: "/api/auth/service-accounts",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "createAuthServiceAccount",
+    method: "POST",
+    path: "/api/auth/service-accounts",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "disableAuthServiceAccount",
+    method: "POST",
+    path: "/api/auth/service-accounts/:serviceAccountId/disable",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "listAuthServiceAccountAccessTokens",
+    method: "GET",
+    path: "/api/auth/service-accounts/:serviceAccountId/access-tokens",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "createAuthServiceAccountAccessToken",
+    method: "POST",
+    path: "/api/auth/service-accounts/:serviceAccountId/access-tokens",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "revokeAuthServiceAccountAccessToken",
+    method: "POST",
+    path: "/api/auth/service-accounts/:serviceAccountId/access-tokens/:tokenId/revoke",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "listObjectTypes",
+    method: "GET",
+    path: "/api/object-types",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "getObjectType",
+    method: "GET",
+    path: "/api/object-types/:objectTypeId",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "listObjects",
+    method: "GET",
+    path: "/api/objects",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "queryObjects",
+    method: "POST",
+    path: "/api/objects/query",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "countObjects",
+    method: "POST",
+    path: "/api/objects/query/count",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "existsObjects",
+    method: "POST",
+    path: "/api/objects/query/exists",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "facetObjects",
+    method: "POST",
+    path: "/api/objects/query/facets",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "getObject",
+    method: "GET",
+    path: "/api/objects/:objectTypeId/:objectId",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "upsertObject",
+    method: "PUT",
+    path: "/api/objects/:objectTypeId/:objectId",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "upsertObjectLink",
+    method: "PUT",
+    path: "/api/objects/:objectTypeId/:objectId/links/:linkId",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "removeObjectLink",
+    method: "DELETE",
+    path: "/api/objects/:objectTypeId/:objectId/links/:linkId",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "appendTelemetry",
+    method: "POST",
+    path: "/api/objects/:objectTypeId/:objectId/telemetry/:propertyId",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getBulkTelemetryHistory",
+    method: "POST",
+    path: "/api/telemetry/history",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "getTelemetryHistory",
+    method: "GET",
+    path: "/api/objects/:objectTypeId/:objectId/telemetry/:propertyId/history",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "getLatestTelemetry",
+    method: "GET",
+    path: "/api/objects/:objectTypeId/:objectId/telemetry/:propertyId/latest",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "getObjectFileContent",
+    method: "GET",
+    path: "/api/objects/:objectTypeId/:objectId/files/content",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "headObjectFileContent",
+    method: "HEAD",
+    path: "/api/objects/:objectTypeId/:objectId/files/content",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "listActions",
+    method: "GET",
+    path: "/api/actions",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "getAction",
+    method: "GET",
+    path: "/api/actions/:actionId",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "requestAction",
+    method: "POST",
+    path: "/api/actions/:actionId",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "getActionRun",
+    method: "GET",
+    path: "/api/action-runs/:runId",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "getActionRunFileContent",
+    method: "GET",
+    path: "/api/action-runs/:runId/files/content",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "headActionRunFileContent",
+    method: "HEAD",
+    path: "/api/action-runs/:runId/files/content",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "listWorkflows",
+    method: "GET",
+    path: "/api/workflows",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getWorkflow",
+    method: "GET",
+    path: "/api/workflows/:workflowId",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "requestWorkflowRun",
+    method: "POST",
+    path: "/api/workflows/:workflowId/runs",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "cancelWorkflowRun",
+    method: "POST",
+    path: "/api/workflow-runs/:runId/cancel",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getWorkflowAgentNodeExecution",
+    method: "GET",
+    path: "/api/workflow-runs/:runId/nodes/:nodeKey/agent-execution",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getWorkflowRunFileContent",
+    method: "GET",
+    path: "/api/workflow-runs/:runId/files/content",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "headWorkflowRunFileContent",
+    method: "HEAD",
+    path: "/api/workflow-runs/:runId/files/content",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getWorkflowNodeRunFileContent",
+    method: "GET",
+    path: "/api/workflow-runs/:runId/nodes/:nodeKey/files/content",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "headWorkflowNodeRunFileContent",
+    method: "HEAD",
+    path: "/api/workflow-runs/:runId/nodes/:nodeKey/files/content",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getAgentMessageFileContent",
+    method: "GET",
+    path: "/api/agent-threads/:threadId/messages/:messageId/files/content",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "headAgentMessageFileContent",
+    method: "HEAD",
+    path: "/api/agent-threads/:threadId/messages/:messageId/files/content",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "searchObjects",
+    method: "GET",
+    path: "/api/objects/search",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "listEvents",
+    method: "GET",
+    path: "/api/events",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "listLogs",
+    method: "GET",
+    path: "/api/logs",
+    accessToken: true,
+    agentApi: false
+  }
+];
+for (const route of SIXB_API_ROUTES) {
+  if (route.agentApi && !route.accessToken) {
+    throw new Error(`[Sixb] agent API route '${route.method} ${route.path}' must also be an access-token route.`);
+  }
+}
+
+// src/http/route-pattern.ts
+function pathSegmentsFor(pathname) {
+  return pathname.split("/").filter(Boolean);
+}
+function matchesPathPattern(pathname, pattern) {
+  const pathSegments = pathSegmentsFor(pathname);
+  const patternSegments = pathSegmentsFor(pattern);
+  if (pathSegments.length !== patternSegments.length) {
+    return false;
+  }
+  return patternSegments.every((patternSegment, index) => {
+    if (patternSegment.startsWith(":")) {
+      return pathSegments[index] !== "";
+    }
+    return patternSegment === pathSegments[index];
+  });
+}
+function normalizeRoutePath(pathname) {
+  if (pathname.length > 1 && pathname.endsWith("/")) {
+    return pathname.slice(0, -1);
+  }
+  return pathname;
+}
+
+export { SIXB_API_ROUTES, pathSegmentsFor, matchesPathPattern, normalizeRoutePath };
+
+//# debugId=ACF0E08E430AE9FB64756E2164756E21

package/dist/chunk-8r8cw2xw.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/http/api-routes.ts", "../src/http/route-pattern.ts"],
+  "sourcesContent": [
+    "/**\n * The single source of truth for the Sixb HTTP API surface and its auth capabilities.\n *\n * Two views are derived from this one table:\n * - `AGENT_API_ROUTES` (@sixb/core agent gateway) = the `agentApi` rows, projected to {method, path}.\n * - `ACCESS_TOKEN_ROUTES` (@sixb/server bearer boundary) = the `accessToken` rows, with operationId.\n *\n * Because both views are projections of this table, the agent gateway allow-list is structurally a\n * subset of the bearer boundary — the invariant below enforces `agentApi ⇒ accessToken` at load\n * time. This table lives in @sixb/core (never @sixb/server) because @sixb/server depends on core,\n * not the reverse; the operationId strings are opaque here.\n */\nexport interface SixbApiRoute {\n  /** OpenAPI operationId — the server keys its bearer security requirement off this. */\n  readonly operationId: string\n  readonly method: string\n  readonly path: string\n  /** The route accepts a bearer access token (enforced by the server access-token boundary). */\n  readonly accessToken: boolean\n  /** The route is proxied by the agent API gateway (a strict subset of the accessToken routes). */\n  readonly agentApi: boolean\n}\n\nexport const SIXB_API_ROUTES: readonly SixbApiRoute[] = [\n  {\n    operationId: \"getProjectInfo\",\n    method: \"GET\",\n    path: \"/api/project\",\n    accessToken: true,\n    agentApi: true,\n  },\n  // Token and service-account management is bearer-capable so the CLI can authenticate with a\n  // personal access token. It is NOT exposed to agents. The runtime still confines every operation\n  // to the caller's own groups, and service-account tokens are rejected (only user principals may\n  // manage credentials).\n  {\n    operationId: \"getAuthAccessManagementOptions\",\n    method: \"GET\",\n    path: \"/api/auth/access-management-options\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listAuthAccessTokens\",\n    method: \"GET\",\n    path: \"/api/auth/access-tokens\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"createAuthPersonalAccessToken\",\n    method: \"POST\",\n    path: \"/api/auth/access-tokens\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"revokeAuthAccessToken\",\n    method: \"POST\",\n    path: \"/api/auth/access-tokens/:tokenId/revoke\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listAuthServiceAccounts\",\n    method: \"GET\",\n    path: \"/api/auth/service-accounts\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"createAuthServiceAccount\",\n    method: \"POST\",\n    path: \"/api/auth/service-accounts\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"disableAuthServiceAccount\",\n    method: \"POST\",\n    path: \"/api/auth/service-accounts/:serviceAccountId/disable\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listAuthServiceAccountAccessTokens\",\n    method: \"GET\",\n    path: \"/api/auth/service-accounts/:serviceAccountId/access-tokens\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"createAuthServiceAccountAccessToken\",\n    method: \"POST\",\n    path: \"/api/auth/service-accounts/:serviceAccountId/access-tokens\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"revokeAuthServiceAccountAccessToken\",\n    method: \"POST\",\n    path: \"/api/auth/service-accounts/:serviceAccountId/access-tokens/:tokenId/revoke\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listObjectTypes\",\n    method: \"GET\",\n    path: \"/api/object-types\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"getObjectType\",\n    method: \"GET\",\n    path: \"/api/object-types/:objectTypeId\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"listObjects\",\n    method: \"GET\",\n    path: \"/api/objects\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"queryObjects\",\n    method: \"POST\",\n    path: \"/api/objects/query\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"countObjects\",\n    method: \"POST\",\n    path: \"/api/objects/query/count\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"existsObjects\",\n    method: \"POST\",\n    path: \"/api/objects/query/exists\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"facetObjects\",\n    method: \"POST\",\n    path: \"/api/objects/query/facets\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"getObject\",\n    method: \"GET\",\n    path: \"/api/objects/:objectTypeId/:objectId\",\n    accessToken: true,\n    agentApi: true,\n  },\n  // The four write routes. Bearer-capable because they now enforce scoped authorization\n  // (`edit:object` / `append:telemetry`), which is exactly the precondition this table's rule states.\n  // NOT agent-proxied: letting an agent turn write objects on its own is a separate decision, and\n  // the gateway already hands routes a scoped runtime, so flipping `agentApi` later needs no\n  // authorization work — only that decision.\n  {\n    operationId: \"upsertObject\",\n    method: \"PUT\",\n    path: \"/api/objects/:objectTypeId/:objectId\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"upsertObjectLink\",\n    method: \"PUT\",\n    path: \"/api/objects/:objectTypeId/:objectId/links/:linkId\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"removeObjectLink\",\n    method: \"DELETE\",\n    path: \"/api/objects/:objectTypeId/:objectId/links/:linkId\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"appendTelemetry\",\n    method: \"POST\",\n    path: \"/api/objects/:objectTypeId/:objectId/telemetry/:propertyId\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getBulkTelemetryHistory\",\n    method: \"POST\",\n    path: \"/api/telemetry/history\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"getTelemetryHistory\",\n    method: \"GET\",\n    path: \"/api/objects/:objectTypeId/:objectId/telemetry/:propertyId/history\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"getLatestTelemetry\",\n    method: \"GET\",\n    path: \"/api/objects/:objectTypeId/:objectId/telemetry/:propertyId/latest\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"getObjectFileContent\",\n    method: \"GET\",\n    path: \"/api/objects/:objectTypeId/:objectId/files/content\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    // Bearer-capable (CLI/programmatic existence + range probes) but NOT agent-proxied: the agent\n    // API gateway only forwards GET/POST, and an agent gains nothing from HEAD over GET (a file's\n    // size already travels in its FileRef). Keeping this agentApi:true would throw at gateway\n    // registration (\"Unsupported agent API gateway method 'HEAD'\") and stop the server booting.\n    operationId: \"headObjectFileContent\",\n    method: \"HEAD\",\n    path: \"/api/objects/:objectTypeId/:objectId/files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listActions\",\n    method: \"GET\",\n    path: \"/api/actions\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"getAction\",\n    method: \"GET\",\n    path: \"/api/actions/:actionId\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"requestAction\",\n    method: \"POST\",\n    path: \"/api/actions/:actionId\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"getActionRun\",\n    method: \"GET\",\n    path: \"/api/action-runs/:runId\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"getActionRunFileContent\",\n    method: \"GET\",\n    path: \"/api/action-runs/:runId/files/content\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"headActionRunFileContent\",\n    method: \"HEAD\",\n    path: \"/api/action-runs/:runId/files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listWorkflows\",\n    method: \"GET\",\n    path: \"/api/workflows\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getWorkflow\",\n    method: \"GET\",\n    path: \"/api/workflows/:workflowId\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"requestWorkflowRun\",\n    method: \"POST\",\n    path: \"/api/workflows/:workflowId/runs\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"cancelWorkflowRun\",\n    method: \"POST\",\n    path: \"/api/workflow-runs/:runId/cancel\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getWorkflowAgentNodeExecution\",\n    method: \"GET\",\n    path: \"/api/workflow-runs/:runId/nodes/:nodeKey/agent-execution\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getWorkflowRunFileContent\",\n    method: \"GET\",\n    path: \"/api/workflow-runs/:runId/files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"headWorkflowRunFileContent\",\n    method: \"HEAD\",\n    path: \"/api/workflow-runs/:runId/files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getWorkflowNodeRunFileContent\",\n    method: \"GET\",\n    path: \"/api/workflow-runs/:runId/nodes/:nodeKey/files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"headWorkflowNodeRunFileContent\",\n    method: \"HEAD\",\n    path: \"/api/workflow-runs/:runId/nodes/:nodeKey/files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getAgentMessageFileContent\",\n    method: \"GET\",\n    path: \"/api/agent-threads/:threadId/messages/:messageId/files/content\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"headAgentMessageFileContent\",\n    method: \"HEAD\",\n    path: \"/api/agent-threads/:threadId/messages/:messageId/files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"searchObjects\",\n    method: \"GET\",\n    path: \"/api/objects/search\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"listEvents\",\n    method: \"GET\",\n    path: \"/api/events\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listLogs\",\n    method: \"GET\",\n    path: \"/api/logs\",\n    accessToken: true,\n    agentApi: false,\n  },\n]\n\n// Enforce the subset invariant at module load: a gateway-proxied route must also be a bearer route,\n// or the gateway would expose a surface the access-token boundary does not recognize.\nfor (const route of SIXB_API_ROUTES) {\n  if (route.agentApi && !route.accessToken) {\n    throw new Error(\n      `[Sixb] agent API route '${route.method} ${route.path}' must also be an access-token route.`\n    )\n  }\n}\n",
+    "/**\n * Shared HTTP route-pattern matching. Used by both the agent API gateway allow-list (@sixb/core)\n * and the server's access-token boundary (@sixb/server) so the two never drift.\n */\n\n/** Split a path into its non-empty segments (drops leading/trailing/empty parts). */\nexport function pathSegmentsFor(pathname: string): string[] {\n  return pathname.split(\"/\").filter(Boolean)\n}\n\n/**\n * Match a concrete pathname against a route pattern. A `:param` pattern segment matches any single\n * non-empty segment; every other segment must match exactly. Segment counts must be equal.\n */\nexport function matchesPathPattern(pathname: string, pattern: string): boolean {\n  const pathSegments = pathSegmentsFor(pathname)\n  const patternSegments = pathSegmentsFor(pattern)\n\n  if (pathSegments.length !== patternSegments.length) {\n    return false\n  }\n\n  return patternSegments.every((patternSegment, index) => {\n    if (patternSegment.startsWith(\":\")) {\n      return pathSegments[index] !== \"\"\n    }\n    return patternSegment === pathSegments[index]\n  })\n}\n\n/** Strip a single trailing slash so `/api/foo` and `/api/foo/` compare equal (leaves \"/\" alone). */\nexport function normalizeRoutePath(pathname: string): string {\n  if (pathname.length > 1 && pathname.endsWith(\"/\")) {\n    return pathname.slice(0, -1)\n  }\n  return pathname\n}\n"
+  ],
+  "mappings": ";;AAuBO,IAAM,kBAA2C;AAAA,EACtD;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EAKA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EAMA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IAKE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AACF;AAIA,WAAW,SAAS,iBAAiB;AAAA,EACnC,IAAI,MAAM,YAAY,CAAC,MAAM,aAAa;AAAA,IACxC,MAAM,IAAI,MACR,2BAA2B,MAAM,UAAU,MAAM,2CACnD;AAAA,EACF;AACF;;;ACzXO,SAAS,eAAe,CAAC,UAA4B;AAAA,EAC1D,OAAO,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AAAA;AAOpC,SAAS,kBAAkB,CAAC,UAAkB,SAA0B;AAAA,EAC7E,MAAM,eAAe,gBAAgB,QAAQ;AAAA,EAC7C,MAAM,kBAAkB,gBAAgB,OAAO;AAAA,EAE/C,IAAI,aAAa,WAAW,gBAAgB,QAAQ;AAAA,IAClD,OAAO;AAAA,EACT;AAAA,EAEA,OAAO,gBAAgB,MAAM,CAAC,gBAAgB,UAAU;AAAA,IACtD,IAAI,eAAe,WAAW,GAAG,GAAG;AAAA,MAClC,OAAO,aAAa,WAAW;AAAA,IACjC;AAAA,IACA,OAAO,mBAAmB,aAAa;AAAA,GACxC;AAAA;AAII,SAAS,kBAAkB,CAAC,UAA0B;AAAA,EAC3D,IAAI,SAAS,SAAS,KAAK,SAAS,SAAS,GAAG,GAAG;AAAA,IACjD,OAAO,SAAS,MAAM,GAAG,EAAE;AAAA,EAC7B;AAAA,EACA,OAAO;AAAA;",
+  "debugId": "ACF0E08E430AE9FB64756E2164756E21",
+  "names": []
+}

package/dist/chunk-8ydjhh27.js

@@ -0,0 +1,95 @@
+// @bun
+// src/sandboxes/errors.ts
+class SandboxError extends Error {
+  name = "SandboxError";
+}
+
+class SandboxNotRunningError extends SandboxError {
+  name = "SandboxNotRunningError";
+}
+
+class SandboxTimeoutError extends SandboxError {
+  name = "SandboxTimeoutError";
+}
+
+class SandboxIsolationUnavailableError extends SandboxError {
+  name = "SandboxIsolationUnavailableError";
+}
+// src/sandboxes/exec.ts
+var DEFAULT_KILL_EXIT_CODE = 137;
+async function exec(options) {
+  const start = Date.now();
+  const [head, ...rest] = options.argv;
+  if (!head) {
+    return {
+      exitCode: 1,
+      stdout: "",
+      stderr: "[Sandbox] empty argv",
+      durationMs: 0
+    };
+  }
+  let proc;
+  try {
+    proc = Bun.spawn([head, ...rest], {
+      cwd: options.cwd,
+      env: options.env,
+      stdin: "ignore",
+      stdout: "pipe",
+      stderr: "pipe"
+    });
+  } catch (error) {
+    return {
+      exitCode: 127,
+      stdout: "",
+      stderr: error instanceof Error ? error.message : String(error),
+      durationMs: Date.now() - start
+    };
+  }
+  let timedOut = false;
+  let killed = false;
+  const timer = options.timeoutMs !== undefined && options.timeoutMs > 0 ? setTimeout(() => {
+    timedOut = true;
+    killed = true;
+    proc.kill("SIGKILL");
+  }, options.timeoutMs) : undefined;
+  const onAbort = () => {
+    if (!killed) {
+      killed = true;
+      proc.kill("SIGKILL");
+    }
+  };
+  options.signal?.addEventListener("abort", onAbort);
+  if (options.signal?.aborted) {
+    onAbort();
+  }
+  let stdout = "";
+  let stderr = "";
+  let exitCode = 0;
+  try {
+    const [stdoutText, stderrText, code] = await Promise.all([
+      new Response(proc.stdout).text(),
+      new Response(proc.stderr).text(),
+      proc.exited
+    ]);
+    stdout = stdoutText;
+    stderr = stderrText;
+    exitCode = typeof code === "number" ? code : DEFAULT_KILL_EXIT_CODE;
+  } finally {
+    if (timer !== undefined)
+      clearTimeout(timer);
+    options.signal?.removeEventListener("abort", onAbort);
+  }
+  if (killed && exitCode === 0) {
+    exitCode = DEFAULT_KILL_EXIT_CODE;
+  }
+  return {
+    exitCode,
+    stdout,
+    stderr,
+    durationMs: Date.now() - start,
+    ...timedOut ? { timedOut: true } : {}
+  };
+}
+export { SandboxError, SandboxNotRunningError, SandboxTimeoutError, SandboxIsolationUnavailableError, exec };
+
+//# debugId=72438F88FDC6717B64756E2164756E21

package/dist/chunk-8ydjhh27.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/sandboxes/errors.ts", "../src/sandboxes/exec.ts"],
+  "sourcesContent": [
+    "/**\n * Errors thrown by sandbox providers. Hosts can catch SandboxError at the\n * audit boundary while still distinguishing recoverable provider states.\n */\nexport class SandboxError extends Error {\n  readonly name: string = \"SandboxError\"\n}\n\n/** runCommand / stop / destroy called after the sandbox is stopped or destroyed. */\nexport class SandboxNotRunningError extends SandboxError {\n  override readonly name = \"SandboxNotRunningError\"\n}\n\n/** Command exceeded its timeout and was killed. */\nexport class SandboxTimeoutError extends SandboxError {\n  override readonly name = \"SandboxTimeoutError\"\n}\n\n/** Requested isolation backend is not available on the host. */\nexport class SandboxIsolationUnavailableError extends SandboxError {\n  override readonly name = \"SandboxIsolationUnavailableError\"\n}\n",
+    "import type { CommandResult } from \"./sandbox\"\n\nexport interface ExecOptions {\n  readonly argv: readonly string[]\n  readonly cwd: string\n  readonly env: Readonly<Record<string, string>>\n  readonly timeoutMs?: number\n  readonly signal?: AbortSignal\n}\n\nconst DEFAULT_KILL_EXIT_CODE = 137\n\n/**\n * Spawn a child process and gather its {@link CommandResult}. Wraps Bun.spawn with timeout and\n * AbortSignal handling, and never throws. Command-agnostic: the wrapper makes no assumptions about\n * what it spawns, so sandbox providers share it. On timeout/abort it SIGKILLs the spawned process;\n * any provider whose spawned process merely fronts a longer-lived resource (e.g. a VM) is\n * responsible for reaping that resource in its own stop()/destroy().\n */\nexport async function exec(options: ExecOptions): Promise<CommandResult> {\n  const start = Date.now()\n\n  const [head, ...rest] = options.argv\n  if (!head) {\n    return {\n      exitCode: 1,\n      stdout: \"\",\n      stderr: \"[Sandbox] empty argv\",\n      durationMs: 0,\n    }\n  }\n\n  let proc: ReturnType<typeof Bun.spawn>\n  try {\n    proc = Bun.spawn([head, ...rest], {\n      cwd: options.cwd,\n      env: options.env,\n      stdin: \"ignore\",\n      stdout: \"pipe\",\n      stderr: \"pipe\",\n    })\n  } catch (error) {\n    return {\n      exitCode: 127,\n      stdout: \"\",\n      stderr: error instanceof Error ? error.message : String(error),\n      durationMs: Date.now() - start,\n    }\n  }\n\n  let timedOut = false\n  let killed = false\n\n  const timer =\n    options.timeoutMs !== undefined && options.timeoutMs > 0\n      ? setTimeout(() => {\n          timedOut = true\n          killed = true\n          proc.kill(\"SIGKILL\")\n        }, options.timeoutMs)\n      : undefined\n\n  const onAbort = (): void => {\n    if (!killed) {\n      killed = true\n      proc.kill(\"SIGKILL\")\n    }\n  }\n  options.signal?.addEventListener(\"abort\", onAbort)\n  if (options.signal?.aborted) {\n    onAbort()\n  }\n\n  let stdout = \"\"\n  let stderr = \"\"\n  let exitCode = 0\n  try {\n    const [stdoutText, stderrText, code] = await Promise.all([\n      new Response(proc.stdout as ReadableStream<Uint8Array>).text(),\n      new Response(proc.stderr as ReadableStream<Uint8Array>).text(),\n      proc.exited,\n    ])\n    stdout = stdoutText\n    stderr = stderrText\n    exitCode = typeof code === \"number\" ? code : DEFAULT_KILL_EXIT_CODE\n  } finally {\n    if (timer !== undefined) clearTimeout(timer)\n    options.signal?.removeEventListener(\"abort\", onAbort)\n  }\n\n  if (killed && exitCode === 0) {\n    exitCode = DEFAULT_KILL_EXIT_CODE\n  }\n\n  return {\n    exitCode,\n    stdout,\n    stderr,\n    durationMs: Date.now() - start,\n    ...(timedOut ? { timedOut: true } : {}),\n  }\n}\n"
+  ],
+  "mappings": ";;AAIO,MAAM,qBAAqB,MAAM;AAAA,EAC7B,OAAe;AAC1B;AAAA;AAGO,MAAM,+BAA+B,aAAa;AAAA,EACrC,OAAO;AAC3B;AAAA;AAGO,MAAM,4BAA4B,aAAa;AAAA,EAClC,OAAO;AAC3B;AAAA;AAGO,MAAM,yCAAyC,aAAa;AAAA,EAC/C,OAAO;AAC3B;;ACXA,IAAM,yBAAyB;AAS/B,eAAsB,IAAI,CAAC,SAA8C;AAAA,EACvE,MAAM,QAAQ,KAAK,IAAI;AAAA,EAEvB,OAAO,SAAS,QAAQ,QAAQ;AAAA,EAChC,IAAI,CAAC,MAAM;AAAA,IACT,OAAO;AAAA,MACL,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,YAAY;AAAA,IACd;AAAA,EACF;AAAA,EAEA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,OAAO,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG;AAAA,MAChC,KAAK,QAAQ;AAAA,MACb,KAAK,QAAQ;AAAA,MACb,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,OAAO;AAAA,MACL,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC7D,YAAY,KAAK,IAAI,IAAI;AAAA,IAC3B;AAAA;AAAA,EAGF,IAAI,WAAW;AAAA,EACf,IAAI,SAAS;AAAA,EAEb,MAAM,QACJ,QAAQ,cAAc,aAAa,QAAQ,YAAY,IACnD,WAAW,MAAM;AAAA,IACf,WAAW;AAAA,IACX,SAAS;AAAA,IACT,KAAK,KAAK,SAAS;AAAA,KAClB,QAAQ,SAAS,IACpB;AAAA,EAEN,MAAM,UAAU,MAAY;AAAA,IAC1B,IAAI,CAAC,QAAQ;AAAA,MACX,SAAS;AAAA,MACT,KAAK,KAAK,SAAS;AAAA,IACrB;AAAA;AAAA,EAEF,QAAQ,QAAQ,iBAAiB,SAAS,OAAO;AAAA,EACjD,IAAI,QAAQ,QAAQ,SAAS;AAAA,IAC3B,QAAQ;AAAA,EACV;AAAA,EAEA,IAAI,SAAS;AAAA,EACb,IAAI,SAAS;AAAA,EACb,IAAI,WAAW;AAAA,EACf,IAAI;AAAA,IACF,OAAO,YAAY,YAAY,QAAQ,MAAM,QAAQ,IAAI;AAAA,MACvD,IAAI,SAAS,KAAK,MAAoC,EAAE,KAAK;AAAA,MAC7D,IAAI,SAAS,KAAK,MAAoC,EAAE,KAAK;AAAA,MAC7D,KAAK;AAAA,IACP,CAAC;AAAA,IACD,SAAS;AAAA,IACT,SAAS;AAAA,IACT,WAAW,OAAO,SAAS,WAAW,OAAO;AAAA,YAC7C;AAAA,IACA,IAAI,UAAU;AAAA,MAAW,aAAa,KAAK;AAAA,IAC3C,QAAQ,QAAQ,oBAAoB,SAAS,OAAO;AAAA;AAAA,EAGtD,IAAI,UAAU,aAAa,GAAG;AAAA,IAC5B,WAAW;AAAA,EACb;AAAA,EAEA,OAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,KAAK,IAAI,IAAI;AAAA,OACrB,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,EACvC;AAAA;",
+  "debugId": "72438F88FDC6717B64756E2164756E21",
+  "names": []
+}

package/dist/chunk-9dzba0f2.js

@@ -0,0 +1,43 @@
+// @bun
+import {
+  MaterializationConflictError
+} from "./chunk-ry24jbr1.js";
+
+// src/materialization/dataset-watermark.ts
+function comparePinnedDatasetWatermarks(active, next) {
+  if (active.datasetId !== next.datasetId)
+    return "dataset-mismatch";
+  if (active.versionId === next.versionId && active.createdAt !== next.createdAt) {
+    return "version-metadata-mismatch";
+  }
+  const activeAt = Date.parse(active.createdAt);
+  const nextAt = Date.parse(next.createdAt);
+  if (nextAt < activeAt)
+    return "older-version";
+  if (nextAt === activeAt && next.versionId !== active.versionId)
+    return "ambiguous-version";
+  return null;
+}
+function assertPinnedDatasetWatermark(active, next, subject) {
+  const conflict = comparePinnedDatasetWatermarks(active, next);
+  if (!conflict)
+    return;
+  const message = pinnedDatasetWatermarkConflictMessage(conflict, subject);
+  throw new MaterializationConflictError("projection-fence", message);
+}
+function pinnedDatasetWatermarkConflictMessage(conflict, subject) {
+  switch (conflict) {
+    case "dataset-mismatch":
+      return `${subject} dataset does not match the active source dataset.`;
+    case "version-metadata-mismatch":
+      return `${subject} reused an immutable dataset version id with different metadata.`;
+    case "older-version":
+      return `${subject} dataset version is older than the active watermark.`;
+    case "ambiguous-version":
+      return `${subject} dataset watermark is ambiguous.`;
+  }
+}
+
+export { comparePinnedDatasetWatermarks, assertPinnedDatasetWatermark };
+
+//# debugId=73E571415D5A8A9C64756E2164756E21

package/dist/chunk-9dzba0f2.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/materialization/dataset-watermark.ts"],
+  "sourcesContent": [
+    "import { MaterializationConflictError } from \"./errors\"\nimport type { PinnedDatasetVersion } from \"./model\"\n\nexport type PinnedDatasetWatermarkConflict =\n  | \"dataset-mismatch\"\n  | \"version-metadata-mismatch\"\n  | \"older-version\"\n  | \"ambiguous-version\"\n\nexport function comparePinnedDatasetWatermarks(\n  active: PinnedDatasetVersion,\n  next: PinnedDatasetVersion\n): PinnedDatasetWatermarkConflict | null {\n  if (active.datasetId !== next.datasetId) return \"dataset-mismatch\"\n  if (active.versionId === next.versionId && active.createdAt !== next.createdAt) {\n    return \"version-metadata-mismatch\"\n  }\n\n  const activeAt = Date.parse(active.createdAt)\n  const nextAt = Date.parse(next.createdAt)\n  if (nextAt < activeAt) return \"older-version\"\n  if (nextAt === activeAt && next.versionId !== active.versionId) return \"ambiguous-version\"\n  return null\n}\n\nexport function assertPinnedDatasetWatermark(\n  active: PinnedDatasetVersion,\n  next: PinnedDatasetVersion,\n  subject: string\n): void {\n  const conflict = comparePinnedDatasetWatermarks(active, next)\n  if (!conflict) return\n\n  const message = pinnedDatasetWatermarkConflictMessage(conflict, subject)\n  throw new MaterializationConflictError(\"projection-fence\", message)\n}\n\nfunction pinnedDatasetWatermarkConflictMessage(\n  conflict: PinnedDatasetWatermarkConflict,\n  subject: string\n): string {\n  switch (conflict) {\n    case \"dataset-mismatch\":\n      return `${subject} dataset does not match the active source dataset.`\n    case \"version-metadata-mismatch\":\n      return `${subject} reused an immutable dataset version id with different metadata.`\n    case \"older-version\":\n      return `${subject} dataset version is older than the active watermark.`\n    case \"ambiguous-version\":\n      return `${subject} dataset watermark is ambiguous.`\n  }\n}\n"
+  ],
+  "mappings": ";;;;;;AASO,SAAS,8BAA8B,CAC5C,QACA,MACuC;AAAA,EACvC,IAAI,OAAO,cAAc,KAAK;AAAA,IAAW,OAAO;AAAA,EAChD,IAAI,OAAO,cAAc,KAAK,aAAa,OAAO,cAAc,KAAK,WAAW;AAAA,IAC9E,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,KAAK,MAAM,OAAO,SAAS;AAAA,EAC5C,MAAM,SAAS,KAAK,MAAM,KAAK,SAAS;AAAA,EACxC,IAAI,SAAS;AAAA,IAAU,OAAO;AAAA,EAC9B,IAAI,WAAW,YAAY,KAAK,cAAc,OAAO;AAAA,IAAW,OAAO;AAAA,EACvE,OAAO;AAAA;AAGF,SAAS,4BAA4B,CAC1C,QACA,MACA,SACM;AAAA,EACN,MAAM,WAAW,+BAA+B,QAAQ,IAAI;AAAA,EAC5D,IAAI,CAAC;AAAA,IAAU;AAAA,EAEf,MAAM,UAAU,sCAAsC,UAAU,OAAO;AAAA,EACvE,MAAM,IAAI,6BAA6B,oBAAoB,OAAO;AAAA;AAGpE,SAAS,qCAAqC,CAC5C,UACA,SACQ;AAAA,EACR,QAAQ;AAAA,SACD;AAAA,MACH,OAAO,GAAG;AAAA,SACP;AAAA,MACH,OAAO,GAAG;AAAA,SACP;AAAA,MACH,OAAO,GAAG;AAAA,SACP;AAAA,MACH,OAAO,GAAG;AAAA;AAAA;",
+  "debugId": "73E571415D5A8A9C64756E2164756E21",
+  "names": []
+}