@sixb/core 0.1.0 → 0.1.1

package/dist/{chunk-hsv43v58.js → chunk-rgzed50y.js}

@@ -5,17 +5,17 @@ import {
 import {
   createObjectSet,
   exports_service
-} from "./chunk-t358gywy.js";
+} from "./chunk-p7vj8xgb.js";
 import {
   createOntologyMutationRuntime,
   registerOntologyMutationRuntime
 } from "./chunk-v5c085yp.js";
 import {
   registerProjectionRegistry
-} from "./chunk-590dejbp.js";
+} from "./chunk-4hwxq5e6.js";
 import {
   LogsRuntime
-} from "./chunk-c3zd880g.js";
+} from "./chunk-f6kyyeef.js";
 import {
   ConnectorError,
   ConnectorNotFoundError,
@@ -38,11 +38,11 @@ import {
   requestPipelineRun,
   requestSyncRun,
   validateRulesAtStartup
-} from "./chunk-pv1yad91.js";
+} from "./chunk-b5dp7gaf.js";
 import {
   WorkflowsRuntime,
   validateWorkflowsAtStartup
-} from "./chunk-0psb6kdw.js";
+} from "./chunk-btcsywk4.js";
 import {
   validateSchedulesAtStartup
 } from "./chunk-867jxh7c.js";
@@ -51,47 +51,48 @@ import {
 } from "./chunk-k6j72mtt.js";
 import {
   assertDatasetDefinition
-} from "./chunk-r65yscvk.js";
+} from "./chunk-r82k4z7z.js";
 import {
   EventsRuntime,
   OntologyOutboxDispatcher
-} from "./chunk-yxss87qa.js";
+} from "./chunk-yn947ck3.js";
 import {
   ActionRegistry,
   ActionsRuntime
-} from "./chunk-dhmj53mx.js";
+} from "./chunk-nbywkytr.js";
 import {
   requestAction,
   requestActionAndWait
-} from "./chunk-jdwx7vzs.js";
+} from "./chunk-avppcgt6.js";
 import {
   ProjectionRegistry,
   createOntologyMaterializer
-} from "./chunk-yvef9xwc.js";
+} from "./chunk-rjqm6ksg.js";
 import {
   checkStorageSchema,
   isMigrationCapableStorage
-} from "./chunk-aebzcsxr.js";
-import {
-  OntologyRegistry
-} from "./chunk-mx84y05q.js";
+} from "./chunk-raq0x6bd.js";
 import {
   attachSixbErrorReporter,
   reportEventDeliveryFailure,
   shareSixbErrorReporter
 } from "./chunk-t72dvahb.js";
-import {
-  assertObjectTypeRegistered
-} from "./chunk-tsk2bxs3.js";
 import {
   AgentsRuntime,
-  validateAgentGroupReferences
-} from "./chunk-nvamz5dv.js";
+  validateAgentGroupReferences,
+  validateAgentToolsAtStartup
+} from "./chunk-86459jn0.js";
+import {
+  OntologyRegistry
+} from "./chunk-y2ygpd0m.js";
+import {
+  assertObjectTypeRegistered
+} from "./chunk-53s4asfm.js";
 import {
   APPLICATION_IDS,
   AuthRuntime,
   validateSecurityDefinitionsAtStartup
-} from "./chunk-dcgrzj1t.js";
+} from "./chunk-xt6qx9sh.js";
 import {
   AuthRuntimeError,
   isMagicLinkAuthStrategy,
@@ -102,7 +103,7 @@ import {
   canViewEvent,
   isAllowed,
   resolveRoleGrants
-} from "./chunk-0fygrz37.js";
+} from "./chunk-exrfbt2d.js";
 // src/webhooks/errors.ts
 class WebhookValidationError extends Error {
   name = "WebhookValidationError";
@@ -699,6 +700,50 @@ function createRuntimeSecurityRegistry(input) {
   return new RuntimeSecurityRegistry(securityDefinitions.groupsById, securityDefinitions.rolesById, securityDefinitions.membershipPoliciesById, resolvedRoles);
 }
 
+// src/syncs/validation.ts
+function validateKeyedDatasetWriterTopology(input) {
+  for (const sync of input.syncs) {
+    const dataset = input.datasetsById.get(sync.target.dataset.id);
+    if (sync.config.mode === "merge" && dataset?.primaryKey === undefined) {
+      throw new SyncValidationError(`[Sixb] Merge sync '${sync.id}' targets dataset '${sync.target.dataset.id}', which must define a primaryKey.`);
+    }
+  }
+  const firstWriterByDataset = new Map;
+  for (const writer of datasetWriters(input.syncs, input.pipelines)) {
+    const dataset = input.datasetsById.get(writer.datasetId);
+    if (dataset?.primaryKey === undefined)
+      continue;
+    const first = firstWriterByDataset.get(writer.datasetId);
+    if (!first) {
+      firstWriterByDataset.set(writer.datasetId, writer);
+      continue;
+    }
+    throw new SyncValidationError(`[Sixb] Keyed dataset '${writer.datasetId}' has multiple registered writers: ${first.label} and ${writer.label}. V1 allows one writer per keyed dataset.`);
+  }
+}
+function validateMergeSyncProjectionSafety(input) {
+  const mergeSyncByDataset = new Map(input.syncs.filter((sync) => sync.config.mode === "merge").map((sync) => [sync.target.dataset.id, sync]));
+  for (const projection of input.telemetryProjections) {
+    const sync = mergeSyncByDataset.get(projection.datasetId);
+    if (!sync)
+      continue;
+    throw new SyncValidationError(`[Sixb] Telemetry projection '${projection.id}' cannot read merge-written dataset '${projection.datasetId}' from sync '${sync.id}'. V1 merge syncs support object and link replacement projections only.`);
+  }
+}
+function* datasetWriters(syncs, pipelines) {
+  for (const sync of syncs) {
+    yield { datasetId: sync.target.dataset.id, label: `sync '${sync.id}'` };
+  }
+  for (const pipeline of pipelines) {
+    for (const node of pipeline.graph.nodes) {
+      yield {
+        datasetId: node.step.output.id,
+        label: `pipeline '${pipeline.id}' step '${node.step.id}'`
+      };
+    }
+  }
+}
+
 // src/runtime/scoped.ts
 function createScopedSixb(runtime, deps) {
   const canListAction = (action) => isAllowed(runtime.authorization, { kind: "action.apply", actionId: action.id }) && (action.binding.kind === "global" || isAllowed(runtime.authorization, {
@@ -921,6 +966,7 @@ class Sixb {
     this.actionRegistry = new ActionRegistry(options.actions ?? [], this.ontology);
     const registeredActionIds = new Set(this.actionRegistry.list().map((action) => action.id));
     const agents = options.agents ?? [];
+    validateAgentToolsAtStartup(agents);
     this.security = createRuntimeSecurityRegistry({
       groups: options.groups ?? [],
       roles: options.roles ?? [],
@@ -996,6 +1042,11 @@ class Sixb {
       }
       this.pipelinesById.set(pipeline.id, pipeline);
     }
+    validateKeyedDatasetWriterTopology({
+      datasetsById: this.datasetsById,
+      syncs: [...this.syncsById.values()],
+      pipelines: [...this.pipelinesById.values()]
+    });
     validateRulesAtStartup(this.rules, this.ontology);
     for (const rule of this.rules) {
       this.rulesById.set(rule.id, rule);
@@ -1031,6 +1082,10 @@ class Sixb {
       ontology: this.ontology,
       datasetsById: this.datasetsById
     });
+    validateMergeSyncProjectionSafety({
+      syncs: [...this.syncsById.values()],
+      telemetryProjections: this.projectionRegistry.listTelemetryProjections()
+    });
     registerProjectionRegistry(this, this.projectionRegistry);
     const materializer = createOntologyMaterializer({
       projectId: this.projectId,
@@ -1387,4 +1442,4 @@ async function createSixb(options) {
 }
 export { WebhookValidationError, defineWebhook, webhookConnector, UnverifiedWebhookError, resolveWebhookVerification, warnUnverifiedWebhook, Sixb, createSixb };
 
-//# debugId=1140B1FB403AF17D64756E2164756E21
+//# debugId=7B1968C15C65FC4364756E2164756E21

package/dist/chunk-rgzed50y.js.map

@@ -0,0 +1,22 @@
+{
+  "version": 3,
+  "sources": ["../src/webhooks/errors.ts", "../src/webhooks/builders.ts", "../src/webhooks/connector.ts", "../src/webhooks/registry.ts", "../src/webhooks/unverified.ts", "../src/runtime/create.ts", "../src/runtime/sixb.ts", "../src/connectors/runtime.ts", "../src/maintenance/ontology-maintenance.ts", "../src/security/runtime.ts", "../src/syncs/validation.ts", "../src/runtime/scoped.ts", "../src/runtime/storage-readiness.ts"],
+  "sourcesContent": [
+    "export class WebhookValidationError extends Error {\n  readonly name = \"WebhookValidationError\"\n}\n",
+    "import { WebhookValidationError } from \"./errors\"\nimport type {\n  WebhookBodyParser,\n  WebhookBodySchema,\n  WebhookDefinition,\n  WebhookHandlerContext,\n  WebhookHandlerResult,\n  WebhookIdempotencyKeyResolver,\n  WebhookVerifyContext,\n} from \"./types\"\n\ntype WebhookHandler<TBody, TClient> = (\n  ctx: WebhookHandlerContext<TBody, TClient>\n) => Promise<WebhookHandlerResult> | WebhookHandlerResult\n\ntype WebhookVerifyHandler = (ctx: WebhookVerifyContext) => Promise<void> | void\n\ninterface WebhookDraft<TBody> {\n  readonly id: string\n  readonly method: \"POST\"\n  readonly body: WebhookBodyParser<TBody>\n  readonly verify?: WebhookVerifyHandler\n  readonly idempotencyKey?: WebhookIdempotencyKeyResolver<TBody>\n}\n\n/** Define an inbound webhook owned by a connector adapter. */\nexport function defineWebhook(id: string): WebhookMethodBuilder {\n  assertNonEmpty(id, \"Webhook id\")\n  return new WebhookMethodBuilder(id)\n}\n\nexport class WebhookMethodBuilder<TClient = unknown> {\n  constructor(private readonly id: string) {}\n\n  post(): WebhookBodyBuilder<TClient> {\n    return new WebhookBodyBuilder(this.id, \"POST\")\n  }\n}\n\nexport class WebhookBodyBuilder<TClient = unknown> {\n  constructor(\n    private readonly id: string,\n    private readonly method: \"POST\"\n  ) {}\n\n  /**\n   * Decode JSON and keep the handler body as unknown.\n   *\n   * Prefer `.json(schema)` for provider payloads that have a known shape.\n   */\n  json(): WebhookBuilder<unknown, TClient>\n  /** Decode JSON, validate or normalize it at runtime, and infer the handler body. */\n  json<TBody>(schema: WebhookBodySchema<TBody>): WebhookBuilder<TBody, TClient>\n  json<TBody>(schema?: WebhookBodySchema<TBody>): WebhookBuilder<TBody | unknown, TClient> {\n    if (schema !== undefined && typeof schema.parse !== \"function\") {\n      throw new WebhookValidationError(\"[Sixb] Webhook JSON schema must provide parse(value).\")\n    }\n\n    return new WebhookBuilder({\n      id: this.id,\n      method: this.method,\n      body: {\n        format: \"json\",\n        parse(value: unknown) {\n          return schema ? schema.parse(value) : value\n        },\n      },\n    })\n  }\n\n  text(): WebhookBuilder<string, TClient> {\n    return new WebhookBuilder({\n      id: this.id,\n      method: this.method,\n      body: {\n        format: \"text\",\n        parse(value: unknown) {\n          if (typeof value !== \"string\") {\n            throw new Error(\"Expected webhook body to be text.\")\n          }\n\n          return value\n        },\n      },\n    })\n  }\n\n  raw(): WebhookBuilder<Uint8Array, TClient> {\n    return new WebhookBuilder({\n      id: this.id,\n      method: this.method,\n      body: {\n        format: \"raw\",\n        parse(value: unknown) {\n          if (!(value instanceof Uint8Array)) {\n            throw new Error(\"Expected webhook body to be raw bytes.\")\n          }\n\n          return value\n        },\n      },\n    })\n  }\n}\n\nexport class WebhookBuilder<TBody, TClient = unknown> {\n  constructor(private readonly draft: WebhookDraft<TBody>) {}\n\n  verify(verify: WebhookVerifyHandler): WebhookBuilder<TBody, TClient> {\n    if (typeof verify !== \"function\") {\n      throw new WebhookValidationError(\"[Sixb] Webhook verify must be a function.\")\n    }\n\n    return new WebhookBuilder({\n      ...this.draft,\n      verify,\n    })\n  }\n\n  idempotencyKey(resolver: WebhookIdempotencyKeyResolver<TBody>): WebhookBuilder<TBody, TClient> {\n    if (typeof resolver !== \"function\") {\n      throw new WebhookValidationError(\"[Sixb] Webhook idempotencyKey must be a function.\")\n    }\n\n    return new WebhookBuilder({\n      ...this.draft,\n      idempotencyKey: resolver,\n    })\n  }\n\n  handle<TNextClient = TClient>(\n    handle: WebhookHandler<TBody, TNextClient>\n  ): WebhookDefinition<TBody, TNextClient> {\n    if (typeof handle !== \"function\") {\n      throw new WebhookValidationError(\"[Sixb] Webhook handle must be a function.\")\n    }\n\n    return {\n      kind: \"webhook\",\n      id: this.draft.id,\n      method: this.draft.method,\n      body: this.draft.body,\n      idempotencyKey: this.draft.idempotencyKey,\n      verify: this.draft.verify,\n      handle,\n    }\n  }\n}\n\nfunction assertNonEmpty(value: string, field: string): void {\n  if (!value.trim()) {\n    throw new WebhookValidationError(`[Sixb] ${field} must not be empty.`)\n  }\n}\n",
+    "import type { ConnectorAdapter } from \"../connectors/types\"\nimport type { WebhookDefinition } from \"./types\"\n\nexport interface WebhookConnectorClient {\n  readonly kind: \"webhook\"\n}\n\n/** Connector adapter for inbound-only integrations that expose no outbound client. */\nexport function webhookConnector(options: {\n  readonly webhooks: readonly WebhookDefinition<unknown, WebhookConnectorClient>[]\n}): ConnectorAdapter<\"webhook\", WebhookConnectorClient> {\n  return {\n    type: \"webhook\",\n    webhooks: options.webhooks,\n    connect() {\n      return { kind: \"webhook\" }\n    },\n  }\n}\n",
+    "import type { ConnectorDefinition } from \"../connectors/types\"\nimport { WebhookValidationError } from \"./errors\"\nimport type { RegisteredWebhook, WebhookDefinition } from \"./types\"\n\nexport function registerWebhooks(connectors: readonly ConnectorDefinition[]): {\n  readonly webhooks: readonly RegisteredWebhook[]\n} {\n  const registered: RegisteredWebhook[] = []\n  const routes = new Map<string, RegisteredWebhook>()\n\n  for (const connector of connectors) {\n    const webhooks = connector.adapter.webhooks ?? []\n    if (!Array.isArray(webhooks)) {\n      throw new WebhookValidationError(\n        `[Sixb] Connector '${connector.id}' webhooks must be an array when provided.`\n      )\n    }\n\n    const ids = new Set<string>()\n    for (const webhook of webhooks) {\n      assertValidWebhook(connector.id, webhook)\n\n      if (ids.has(webhook.id)) {\n        throw new WebhookValidationError(\n          `[Sixb] Duplicate webhook id '${webhook.id}' for connector '${connector.id}'.`\n        )\n      }\n      ids.add(webhook.id)\n\n      const route = webhookRoute(connector.id, webhook.id)\n      const duplicate = routes.get(route)\n      if (duplicate) {\n        throw new WebhookValidationError(\n          `[Sixb] Duplicate webhook route '${route}' for connectors '${duplicate.connector.id}' and '${connector.id}'.`\n        )\n      }\n\n      const registeredWebhook = {\n        connector,\n        webhook,\n        route,\n      } satisfies RegisteredWebhook\n\n      routes.set(route, registeredWebhook)\n      registered.push(registeredWebhook)\n    }\n  }\n\n  return {\n    webhooks: registered,\n  }\n}\n\nexport function webhookRoute(connectorId: string, webhookId: string): string {\n  return `/api/webhooks/${connectorId}/${webhookId}`\n}\n\nfunction assertValidWebhook(\n  connectorId: string,\n  webhook: unknown\n): asserts webhook is WebhookDefinition {\n  if (!isRecord(webhook)) {\n    throw new WebhookValidationError(`[Sixb] Connector '${connectorId}' has an invalid webhook.`)\n  }\n\n  if (webhook.kind !== \"webhook\") {\n    throw new WebhookValidationError(\n      `[Sixb] Connector '${connectorId}' webhook must be created with defineWebhook(...).`\n    )\n  }\n\n  if (typeof webhook.id !== \"string\" || !webhook.id.trim()) {\n    throw new WebhookValidationError(\n      `[Sixb] Connector '${connectorId}' webhook id must not be empty.`\n    )\n  }\n\n  if (webhook.method !== \"POST\") {\n    throw new WebhookValidationError(\n      `[Sixb] Webhook '${connectorId}/${webhook.id}' must use method POST.`\n    )\n  }\n\n  if (!isRecord(webhook.body)) {\n    throw new WebhookValidationError(\n      `[Sixb] Webhook '${connectorId}/${webhook.id}' body is required.`\n    )\n  }\n\n  if (\n    webhook.body.format !== \"json\" &&\n    webhook.body.format !== \"text\" &&\n    webhook.body.format !== \"raw\"\n  ) {\n    throw new WebhookValidationError(\n      `[Sixb] Webhook '${connectorId}/${webhook.id}' body format must be json, text, or raw.`\n    )\n  }\n\n  if (typeof webhook.body.parse !== \"function\") {\n    throw new WebhookValidationError(\n      `[Sixb] Webhook '${connectorId}/${webhook.id}' body parser must provide parse(value).`\n    )\n  }\n\n  if (webhook.verify !== undefined && typeof webhook.verify !== \"function\") {\n    throw new WebhookValidationError(\n      `[Sixb] Webhook '${connectorId}/${webhook.id}' verify must be a function.`\n    )\n  }\n\n  if (webhook.idempotencyKey !== undefined && typeof webhook.idempotencyKey !== \"function\") {\n    throw new WebhookValidationError(\n      `[Sixb] Webhook '${connectorId}/${webhook.id}' idempotencyKey must be a function.`\n    )\n  }\n\n  if (typeof webhook.handle !== \"function\") {\n    throw new WebhookValidationError(\n      `[Sixb] Webhook '${connectorId}/${webhook.id}' handle must be a function.`\n    )\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n",
+    "/**\n * How a webhook is allowed to treat the credential its provider sends.\n *\n * A union, so no value carries neither branch. `resolveWebhookVerification` covers the path\n * where the credential arrives as `TCredential | undefined` from the environment, which no type\n * can narrow. Generic because a credential is not always a signing secret: PandaDoc resolves a\n * shared key, Pipedrive compares a username and password.\n */\nexport type WebhookVerification<TCredential = string> =\n  | { readonly credential: TCredential; readonly allowUnverified?: never }\n  | {\n      readonly credential?: never\n      /**\n       * Accept deliveries this webhook cannot verify. Without a credential the route accepts\n       * requests from anyone who can reach it, so it has to be asked for.\n       */\n      readonly allowUnverified: true\n    }\n\n/**\n * How to name a webhook, and its options, in a message about its verification.\n *\n * The options are part of the subject because a connector has two entry points with different\n * names for the same thing: a message fixed to one sends half the callers to an option their\n * API does not have.\n */\nexport interface WebhookVerificationSubject {\n  /** The connector, as it appears in its own message prefix — `SixbGitHub`, `SixbMercury`. */\n  readonly connector: string\n  /** What this webhook checks when a credential is configured, as a noun phrase. */\n  readonly verifies: string\n  /** The option carrying the credential, written as the caller would type it. */\n  readonly credentialOption: string\n  /** The option that accepts unverified deliveries, written as the caller would type it. */\n  readonly allowOption: string\n}\n\nexport class UnverifiedWebhookError extends Error {\n  readonly name = \"UnverifiedWebhookError\"\n}\n\n/**\n * Narrows a credential that may be absent into a {@link WebhookVerification}, or refuses.\n *\n * Returns the union so a caller spreads the result into the builder instead of deciding again.\n * Refusing is the point: a missing credential used to mean `.verify()` returned early and the\n * route accepted anything that reached it. Throwing here fails `createSixb()` instead, so the\n * API role never starts open.\n */\nexport function resolveWebhookVerification<TCredential>(\n  subject: WebhookVerificationSubject,\n  options: { readonly credential?: TCredential; readonly allowUnverified?: boolean }\n): WebhookVerification<TCredential> {\n  if (options.credential) return { credential: options.credential }\n\n  if (!options.allowUnverified) {\n    throw new UnverifiedWebhookError(\n      `[${subject.connector}] This webhook has no credential, so ${subject.verifies} cannot be ` +\n        `checked and the route would accept unverified requests from anyone who can reach it. ` +\n        `Set ${subject.credentialOption}, or pass ${subject.allowOption} to accept that.`\n    )\n  }\n\n  return { allowUnverified: true }\n}\n\n/**\n * Announces a webhook whose author chose to accept unverified deliveries. Called where the\n * webhook is defined, not inside `verify()`: once per boot is a fact, once per request is noise.\n */\nexport function warnUnverifiedWebhook<TCredential>(\n  subject: WebhookVerificationSubject,\n  verification: WebhookVerification<TCredential>\n): void {\n  if (verification.credential) return\n\n  console.warn(\n    `[${subject.connector}] ${subject.allowOption}, so ${subject.verifies} is not checked ` +\n      `and this route accepts unverified requests from anyone who can reach it. ` +\n      `Set ${subject.credentialOption} before exposing it.`\n  )\n}\n",
+    "import { resolve } from \"node:path\"\nimport type { ActionDefinition } from \"../actions\"\nimport type { AgentDefinition } from \"../agents\"\nimport type { SixbAuthConfig } from \"../auth\"\nimport type { BlobStorage } from \"../blob-storage\"\nimport {\n  discoverActions,\n  discoverAgents,\n  discoverConnectors,\n  discoverDatasets,\n  discoverGroups,\n  discoverMembershipPolicies,\n  discoverOntologySources,\n  discoverPipelines,\n  discoverProjections,\n  discoverRoles,\n  discoverRules,\n  discoverSchedules,\n  discoverSyncs,\n  discoverWorkflows,\n} from \"../bootstrap\"\nimport type { Broker } from \"../broker\"\nimport type { ConnectorDefinition } from \"../connectors/types\"\nimport type { DatasetDefinition } from \"../datasets\"\nimport type { SixbErrorHandler } from \"../error-reporting/types\"\nimport type { LakeStorage } from \"../lake-storage\"\nimport type { LoggerProvider, ObservabilityOptions } from \"../logging\"\nimport type { OntologyMaintenanceOptions } from \"../maintenance\"\nimport type { PipelineDefinition } from \"../pipelines/types\"\nimport type { ProjectionDefinition } from \"../projections/types\"\nimport type { Queues } from \"../queues\"\nimport type { RuleDefinition } from \"../rules\"\nimport type { SandboxFactory } from \"../sandboxes\"\nimport type { ScheduleDefinition } from \"../schedules\"\nimport type { GroupDefinition, MembershipPolicyDefinition, RoleDefinition } from \"../security\"\nimport type { Storage } from \"../storage\"\nimport type { SyncDefinition } from \"../syncs\"\nimport type { WorkflowDefinition } from \"../workflows\"\nimport { RuntimeError } from \"./errors\"\nimport { Sixb } from \"./sixb\"\nimport type { OntologySource } from \"./types\"\n\nexport interface CreateSixbOptions {\n  id?: string\n  broker: Broker\n  storage: Storage\n  lakeStorage: LakeStorage\n  blobStorage: BlobStorage\n  queues: Queues\n  sandboxes?: SandboxFactory\n  /** Optional process-level output provider. Omit for broker-only logging. */\n  logger?: LoggerProvider\n  /** Broker capture controls, independent from the output provider. */\n  observability?: ObservabilityOptions\n  /** Observes runtime failures without changing their outcome. */\n  onError?: SixbErrorHandler\n  /** Recovery and retention settings. The runtime constructor never starts maintenance timers. */\n  ontologyMaintenance?: OntologyMaintenanceOptions\n  ontologies?: readonly OntologySource[]\n  actions?: readonly ActionDefinition[]\n  /** Agent definitions to register in addition to auto-discovered `agents/` exports. */\n  agents?: readonly AgentDefinition[]\n  datasets?: readonly DatasetDefinition[]\n  /** Connector definitions to register in addition to auto-discovered `connectors/` exports. */\n  connectors?: readonly ConnectorDefinition[]\n  schedules?: readonly ScheduleDefinition[]\n  syncs?: readonly SyncDefinition[]\n  pipelines?: readonly PipelineDefinition[]\n  projections?: readonly ProjectionDefinition[]\n  rules?: readonly RuleDefinition[]\n  workflows?: readonly WorkflowDefinition[]\n  groups?: readonly GroupDefinition[]\n  roles?: readonly RoleDefinition[]\n  membershipPolicies?: readonly MembershipPolicyDefinition[]\n  auth?: SixbAuthConfig\n  projectRoot?: string\n}\n\n/**\n * Create a Sixb runtime using convention-based discovery.\n *\n * Sixb auto-discovers exported definitions from `ontology/`, `actions/`, `datasets/`,\n * `connectors/`, `syncs/`, `schedules/`, `pipelines/`, `projections/`,\n * `rules/`, `workflows/`, `agents/`, and `security/{groups,roles,policies}/`\n * relative to `projectRoot`.\n */\nexport async function createSixb(\n  options: CreateSixbOptions\n): Promise<Sixb<readonly OntologySource[]>> {\n  const projectRoot = resolve(options.projectRoot ?? process.cwd())\n\n  const discovered = await discoverOntologySources(projectRoot)\n  const allSources = [...(options.ontologies ?? []), ...discovered]\n\n  if (allSources.length === 0) {\n    throw new RuntimeError(\n      \"No ontology found. Create an 'ontology/' folder or pass 'ontologies' to createSixb().\"\n    )\n  }\n\n  const [\n    actions,\n    projections,\n    schedules,\n    syncs,\n    connectors,\n    pipelines,\n    datasets,\n    rules,\n    workflows,\n    groups,\n    roles,\n    membershipPolicies,\n    agents,\n  ] = await Promise.all([\n    discoverActions(projectRoot),\n    discoverProjections(projectRoot),\n    discoverSchedules(projectRoot),\n    discoverSyncs(projectRoot),\n    discoverConnectors(projectRoot),\n    discoverPipelines(projectRoot),\n    discoverDatasets(projectRoot),\n    discoverRules(projectRoot),\n    discoverWorkflows(projectRoot),\n    discoverGroups(projectRoot),\n    discoverRoles(projectRoot),\n    discoverMembershipPolicies(projectRoot),\n    discoverAgents(projectRoot),\n  ])\n\n  // Explicit definitions come first so local setup can override ordering while duplicate ids are\n  // still rejected by the Sixb constructor. Every family merges — `actions` and `projections` used to\n  // *replace* discovery instead, silently and undocumented.\n  return new Sixb<readonly OntologySource[]>({\n    id: options.id,\n    ontology: allSources,\n    broker: options.broker,\n    storage: options.storage,\n    lakeStorage: options.lakeStorage,\n    blobStorage: options.blobStorage,\n    queues: options.queues,\n    sandboxes: options.sandboxes,\n    logger: options.logger,\n    observability: options.observability,\n    onError: options.onError,\n    ontologyMaintenance: options.ontologyMaintenance,\n    projectRoot,\n    actions: [...(options.actions ?? []), ...actions],\n    datasets: [...(options.datasets ?? []), ...datasets],\n    connectors: [...(options.connectors ?? []), ...connectors],\n    schedules: [...(options.schedules ?? []), ...schedules],\n    syncs: [...(options.syncs ?? []), ...syncs],\n    pipelines: [...(options.pipelines ?? []), ...pipelines],\n    projections: [...(options.projections ?? []), ...projections],\n    rules: [...(options.rules ?? []), ...rules],\n    workflows: [...(options.workflows ?? []), ...workflows],\n    groups: [...(options.groups ?? []), ...groups],\n    roles: [...(options.roles ?? []), ...roles],\n    membershipPolicies: [...(options.membershipPolicies ?? []), ...membershipPolicies],\n    agents: [...(options.agents ?? []), ...agents],\n    auth: options.auth,\n  })\n}\n",
+    "/**\n * Sixb is the main runtime entry point.\n *\n * It provides a typed API (`objects(MyType)`) returning ObjectSet with full compile-time inference.\n * For direct runtime access (broker records, events, storage, queued work), use\n * `sixb.broker`, `sixb.events`, `sixb.storage`, and `sixb.queues`.\n */\n\nimport { resolve } from \"node:path\"\nimport { ActionRegistry, ActionsRuntime } from \"../actions\"\nimport type {\n  RequestActionAndWaitInput,\n  RequestActionInput,\n  RequestActionResult,\n} from \"../actions/request\"\nimport {\n  requestAction as requestRuntimeAction,\n  requestActionAndWait as requestRuntimeActionAndWait,\n} from \"../actions/request\"\nimport type { ActionDefinition } from \"../actions/types\"\nimport type { AgentDefinition, RequestAgentRunInput, RequestAgentRunResult } from \"../agents\"\nimport { AgentsRuntime, validateAgentGroupReferences, validateAgentToolsAtStartup } from \"../agents\"\nimport {\n  AuthRuntime,\n  AuthRuntimeError,\n  isMagicLinkAuthStrategy,\n  isOidcAuthStrategy,\n  type SixbAuthConfig,\n} from \"../auth\"\nimport type { AuthorizationContext } from \"../authorization\"\nimport type { BlobStorage } from \"../blob-storage\"\nimport type { Broker } from \"../broker\"\nimport { ConnectorRuntime } from \"../connectors/runtime\"\nimport type { ConnectorAdapter, ConnectorClient, ConnectorDefinition } from \"../connectors/types\"\nimport type { DatasetDefinition } from \"../datasets/types\"\nimport { assertDatasetDefinition } from \"../datasets/validation\"\nimport {\n  attachSixbErrorReporter,\n  reportEventDeliveryFailure,\n  shareSixbErrorReporter,\n} from \"../error-reporting/capability\"\nimport type { SixbErrorHandler } from \"../error-reporting/types\"\nimport { type DomainEventLog, EventsRuntime, OntologyOutboxDispatcher } from \"../events\"\nimport type { LakeStorage } from \"../lake-storage\"\nimport { type LoggerProvider, LogsRuntime, type ObservabilityOptions } from \"../logging\"\nimport {\n  OntologyMaintenance,\n  type OntologyMaintenanceHandle,\n  type OntologyMaintenanceOptions,\n  type OntologyOperationalStatus,\n  type SixbReadiness,\n} from \"../maintenance\"\nimport { createOntologyMaterializer } from \"../materializer\"\nimport { createObjectSet, objectService } from \"../objects\"\nimport {\n  assertObjectTypeRegistered,\n  type ObjectType,\n  OntologyRegistry,\n  type ValueType,\n} from \"../ontology\"\nimport type { ObjectTypeWithPropertyTokens } from \"../ontology/tokens\"\nimport { PipelineError } from \"../pipelines\"\nimport {\n  type PipelineRunRequestResult,\n  type RequestPipelineRunInput,\n  requestPipelineRun,\n} from \"../pipelines/request\"\nimport type { PipelineDefinition } from \"../pipelines/types\"\nimport { registerProjectionRegistry } from \"../projections/internal\"\nimport { ProjectionRegistry } from \"../projections/registry\"\nimport type {\n  LinkProjectionDefinition,\n  ObjectProjectionDefinition,\n  ProjectionDefinition,\n  TelemetryProjectionDefinition,\n} from \"../projections/types\"\nimport type { Queues } from \"../queues\"\nimport type { RuleDefinition } from \"../rules\"\nimport { validateRulesAtStartup } from \"../rules\"\nimport type { SandboxFactory } from \"../sandboxes\"\nimport { SchedulerRuntime } from \"../scheduler\"\nimport type { ScheduleDefinition } from \"../schedules\"\nimport { validateSchedulesAtStartup } from \"../schedules\"\nimport type {\n  GroupDefinition,\n  MembershipPolicyDefinition,\n  RoleDefinition,\n  SecurityRegistry,\n} from \"../security\"\nimport { createRuntimeSecurityRegistry } from \"../security/runtime\"\nimport type { ActionRunRecord, ObjectRow, Storage } from \"../storage\"\nimport type { SyncDefinition } from \"../syncs\"\nimport { SyncValidationError } from \"../syncs\"\nimport {\n  type RequestSyncRunInput,\n  requestSyncRun,\n  type SyncRunRequestResult,\n} from \"../syncs/request\"\nimport {\n  validateKeyedDatasetWriterTopology,\n  validateMergeSyncProjectionSafety,\n} from \"../syncs/validation\"\nimport type { RegisteredWebhook } from \"../webhooks\"\nimport { registerWebhooks, WebhookValidationError, webhookRoute } from \"../webhooks\"\nimport type {\n  RequestWorkflowRunInput,\n  WorkflowDefinition,\n  WorkflowRunRequestResult,\n} from \"../workflows\"\nimport { validateWorkflowsAtStartup, WorkflowsRuntime } from \"../workflows\"\nimport { RuntimeError } from \"./errors\"\nimport {\n  createOntologyMutationRuntime,\n  registerOntologyMutationRuntime,\n} from \"./ontology-mutations\"\nimport { createScopedSixb, type ScopedSixb } from \"./scoped\"\nimport { StorageReadiness } from \"./storage-readiness\"\nimport type {\n  BatchItemResult,\n  ListResult,\n  ObjectSet,\n  OntologySource,\n  RegisteredObjectType,\n  RegisteredValueTypes,\n  SixbInstance,\n  SixbRuntimeContext,\n} from \"./types\"\n\nexport interface SixbOptions<TOntologySources extends readonly OntologySource[]> {\n  id?: string\n  ontology: TOntologySources\n  broker: Broker\n  storage: Storage\n  lakeStorage: LakeStorage\n  blobStorage: BlobStorage\n  queues: Queues\n  sandboxes?: SandboxFactory\n  /** Optional process-level output provider. Omit for broker-only logging. */\n  logger?: LoggerProvider\n  /** Broker capture controls, independent from the output provider. */\n  observability?: ObservabilityOptions\n  /** Observes runtime failures without changing their outcome. */\n  onError?: SixbErrorHandler\n  /** Recovery and retention settings. The runtime constructor never starts maintenance timers. */\n  ontologyMaintenance?: OntologyMaintenanceOptions\n  projectRoot?: string\n  actions?: readonly ActionDefinition[]\n  datasets?: readonly DatasetDefinition[]\n  /** Connector definitions registered with this runtime. */\n  connectors?: readonly ConnectorDefinition[]\n  schedules?: readonly ScheduleDefinition[]\n  syncs?: readonly SyncDefinition[]\n  pipelines?: readonly PipelineDefinition[]\n  projections?: readonly ProjectionDefinition[]\n  rules?: readonly RuleDefinition[]\n  workflows?: readonly WorkflowDefinition[]\n  agents?: readonly AgentDefinition[]\n  groups?: readonly GroupDefinition[]\n  roles?: readonly RoleDefinition[]\n  membershipPolicies?: readonly MembershipPolicyDefinition[]\n  auth?: SixbAuthConfig\n}\n\nexport class Sixb<TOntologySources extends readonly OntologySource[]>\n  implements SixbInstance<TOntologySources>\n{\n  readonly projectId: string\n  private readonly ontologySources: TOntologySources\n  private readonly datasetsById = new Map<string, DatasetDefinition>()\n  private readonly schedulesById = new Map<string, ScheduleDefinition>()\n  private readonly syncsById = new Map<string, SyncDefinition>()\n  private readonly pipelinesById = new Map<string, PipelineDefinition>()\n  private readonly rulesById = new Map<string, RuleDefinition>()\n  private readonly connectorRuntime: ConnectorRuntime\n  private readonly webhooksByRoute = new Map<string, RegisteredWebhook>()\n  private readonly webhooks: readonly RegisteredWebhook[]\n  private readonly runtimeContext: SixbRuntimeContext\n  private readonly committedFacts: OntologyOutboxDispatcher\n  private readonly eventsRuntime: EventsRuntime\n  private readonly ontologyMaintenance: OntologyMaintenance\n  private readonly storageReadiness: StorageReadiness\n  private readonly projectionRegistry: ProjectionRegistry\n  readonly ontology: OntologyRegistry\n  readonly actionRegistry: ActionRegistry\n  readonly actions: ActionsRuntime\n  readonly workflows: WorkflowsRuntime\n  readonly agents: AgentsRuntime\n  readonly broker: Broker\n  readonly events: DomainEventLog\n  readonly logs: LogsRuntime\n  readonly storage: Storage\n  readonly lakeStorage: LakeStorage\n  readonly blobStorage: BlobStorage\n  readonly queues: Queues\n  readonly sandboxes?: SandboxFactory\n  readonly projectRoot: string\n  readonly rules: readonly RuleDefinition[]\n  readonly security: SecurityRegistry\n  readonly auth: AuthRuntime\n  private schedulerRuntime: SchedulerRuntime | null = null\n\n  constructor(options: SixbOptions<TOntologySources>) {\n    attachSixbErrorReporter(this, options.onError)\n    this.projectId = options.id ?? \"default\"\n    this.ontologySources = options.ontology\n    this.broker = options.broker\n    // `host: this` is how `events.emit()` reaches the reporter attached at the top of this constructor.\n    this.eventsRuntime = new EventsRuntime({\n      projectId: this.projectId,\n      broker: this.broker,\n      host: this,\n    })\n    this.events = this.eventsRuntime\n    this.logs = new LogsRuntime({\n      projectId: this.projectId,\n      broker: this.broker,\n      logger: options.logger,\n      observability: options.observability?.logs,\n    })\n    this.storage = options.storage\n    this.storageReadiness = new StorageReadiness(this.storage)\n    this.lakeStorage = options.lakeStorage\n    this.blobStorage = options.blobStorage\n    this.queues = options.queues\n    this.sandboxes = options.sandboxes\n    this.projectRoot = resolve(options.projectRoot ?? process.cwd())\n    this.rules = options.rules ?? []\n    // Ontology and actions resolve first so every later registry (security,\n    // rules, workflows, projections) can validate its references against them.\n    this.ontology = new OntologyRegistry({ sources: this.ontologySources })\n    this.actionRegistry = new ActionRegistry(options.actions ?? [], this.ontology)\n    const registeredActionIds = new Set(this.actionRegistry.list().map((action) => action.id))\n    const agents = options.agents ?? []\n    validateAgentToolsAtStartup(agents)\n    this.security = createRuntimeSecurityRegistry({\n      groups: options.groups ?? [],\n      roles: options.roles ?? [],\n      membershipPolicies: options.membershipPolicies ?? [],\n      objectTypeIds: new Set(this.ontology.getObjectTypesById().keys()),\n      datasetIds: new Set((options.datasets ?? []).map((dataset) => dataset.id)),\n      actionIds: registeredActionIds,\n      workflowIds: new Set((options.workflows ?? []).map((workflow) => workflow.id)),\n      syncIds: new Set((options.syncs ?? []).map((sync) => sync.id)),\n      pipelineIds: new Set((options.pipelines ?? []).map((pipeline) => pipeline.id)),\n      agentIds: new Set(agents.map((agent) => agent.id)),\n      getSubTypes: (objectTypeId) => this.ontology.listSubTypes(objectTypeId),\n    })\n    this.auth = new AuthRuntime({\n      projectId: this.projectId,\n      storage: this.storage,\n      security: this.security,\n      config: options.auth,\n    })\n    validateAuthStrategySecurityReferences(this.auth.getStrategy(), this.security)\n    this.connectorRuntime = new ConnectorRuntime(this.projectId, options.connectors ?? [])\n    const connectors = this.connectorRuntime.list()\n    assertWebhookDeliveryStorage(connectors, this.storage)\n    this.webhooks = registerWebhooks(connectors).webhooks\n\n    for (const registered of this.webhooks) {\n      this.webhooksByRoute.set(registered.route, registered)\n    }\n\n    // Register datasets first so sync and pipeline definitions can be validated\n    // against the runtime dataset registry during startup.\n    for (const dataset of options.datasets ?? []) {\n      assertDatasetDefinition(dataset, (message) => new RuntimeError(message))\n\n      if (this.datasetsById.has(dataset.id)) {\n        throw new RuntimeError(`Duplicate dataset id: ${dataset.id}`)\n      }\n\n      this.datasetsById.set(dataset.id, dataset)\n    }\n\n    for (const schedule of options.schedules ?? []) {\n      if (this.schedulesById.has(schedule.id)) {\n        throw new RuntimeError(`Duplicate schedule id: ${schedule.id}`)\n      }\n      this.schedulesById.set(schedule.id, schedule)\n    }\n\n    for (const sync of options.syncs ?? []) {\n      if (this.syncsById.has(sync.id)) {\n        throw new RuntimeError(`Duplicate sync id: ${sync.id}`)\n      }\n\n      const dataset = this.datasetsById.get(sync.target.dataset.id)\n      if (!dataset) {\n        throw new RuntimeError(\n          `Sync '${sync.id}' targets unknown dataset '${sync.target.dataset.id}'. Add it to 'datasets' in createSixb() or export it from 'datasets/'.`\n        )\n      }\n\n      this.syncsById.set(sync.id, sync)\n    }\n\n    for (const pipeline of options.pipelines ?? []) {\n      if (this.pipelinesById.has(pipeline.id)) {\n        throw new RuntimeError(`Duplicate pipeline id: ${pipeline.id}`)\n      }\n\n      if (pipeline.graph.nodes.length === 0) {\n        throw new RuntimeError(`Pipeline '${pipeline.id}' must contain at least one step.`)\n      }\n\n      const stepIds = new Set<string>()\n      for (const node of pipeline.graph.nodes) {\n        const { step } = node\n        if (stepIds.has(step.id)) {\n          throw new RuntimeError(\n            `Pipeline '${pipeline.id}' contains duplicate step id '${step.id}'.`\n          )\n        }\n        stepIds.add(step.id)\n\n        for (const [inputName, dataset] of Object.entries(step.inputs)) {\n          if (!this.datasetsById.has(dataset.id)) {\n            throw new RuntimeError(\n              `Pipeline '${pipeline.id}' step '${step.id}' input '${inputName}' references unknown dataset '${dataset.id}'. Add it to 'datasets' in createSixb() or export it from 'datasets/'.`\n            )\n          }\n        }\n\n        if (!this.datasetsById.has(step.output.id)) {\n          throw new RuntimeError(\n            `Pipeline '${pipeline.id}' step '${step.id}' outputs unknown dataset '${step.output.id}'. Add it to 'datasets' in createSixb() or export it from 'datasets/'.`\n          )\n        }\n      }\n\n      this.pipelinesById.set(pipeline.id, pipeline)\n    }\n\n    validateKeyedDatasetWriterTopology({\n      datasetsById: this.datasetsById,\n      syncs: [...this.syncsById.values()],\n      pipelines: [...this.pipelinesById.values()],\n    })\n\n    // Rules validate against the resolved ontology so inherited properties and\n    // links are available before checking predicate references.\n    validateRulesAtStartup(this.rules, this.ontology)\n    for (const rule of this.rules) {\n      this.rulesById.set(rule.id, rule)\n    }\n\n    validateSchedulesAtStartup([...this.schedulesById.values()], this.ontology, {\n      registeredRuleIds: new Set(this.rulesById.keys()),\n      registeredActionIds,\n      registeredDatasetIds: new Set(this.datasetsById.keys()),\n      registeredSyncIds: new Set(this.syncsById.keys()),\n      registeredPipelineIds: new Set(this.pipelinesById.keys()),\n    })\n    for (const sync of this.syncsById.values()) {\n      validateScheduleReferences(\"Sync\", sync.id, sync.triggers, this.schedulesById)\n    }\n    for (const pipeline of this.pipelinesById.values()) {\n      validateScheduleReferences(\"Pipeline\", pipeline.id, pipeline.triggers, this.schedulesById)\n    }\n\n    const workflows = validateWorkflowsAtStartup({\n      workflows: options.workflows ?? [],\n      registeredSchedules: this.schedulesById,\n      registeredActionIds,\n      registeredAgentIds: new Set(agents.map((agent) => agent.id)),\n    })\n\n    const workflowIds = new Set<string>()\n    for (const workflow of workflows) {\n      if (workflowIds.has(workflow.id)) {\n        throw new RuntimeError(`Duplicate workflow id: ${workflow.id}`)\n      }\n      workflowIds.add(workflow.id)\n    }\n\n    this.projectionRegistry = new ProjectionRegistry({\n      projections: options.projections ?? [],\n      ontology: this.ontology,\n      datasetsById: this.datasetsById,\n    })\n    validateMergeSyncProjectionSafety({\n      syncs: [...this.syncsById.values()],\n      telemetryProjections: this.projectionRegistry.listTelemetryProjections(),\n    })\n    registerProjectionRegistry(this, this.projectionRegistry)\n\n    const materializer = createOntologyMaterializer({\n      projectId: this.projectId,\n      ontology: this.ontology,\n      projections: this.projectionRegistry,\n      storage: this.storage,\n    })\n    this.committedFacts = new OntologyOutboxDispatcher({\n      projectId: this.projectId,\n      storage: this.storage,\n      events: this.eventsRuntime,\n      onDeliveryFailure: (error, failure) =>\n        reportEventDeliveryFailure(this, error, {\n          projectId: this.projectId,\n          ...failure,\n        }),\n    })\n    this.ontologyMaintenance = new OntologyMaintenance({\n      projectId: this.projectId,\n      storage: this.storage,\n      dispatcher: this.committedFacts,\n      options: options.ontologyMaintenance,\n    })\n\n    this.runtimeContext = {\n      projectId: this.projectId,\n      ontology: this.ontology,\n      actionRegistry: this.actionRegistry,\n      events: this.events,\n      storage: this.storage,\n      lakeStorage: this.lakeStorage,\n      blobStorage: this.blobStorage,\n      queues: this.queues,\n      sandboxes: this.sandboxes,\n      rules: this.rules,\n    }\n    registerProjectionRegistry(this.runtimeContext, this.projectionRegistry)\n    const ontologyMutations = createOntologyMutationRuntime({\n      materializer,\n      notifyCommittedFacts: () => this.committedFacts.notify(),\n    })\n    registerOntologyMutationRuntime(this, ontologyMutations)\n    registerOntologyMutationRuntime(this.runtimeContext, ontologyMutations)\n    shareSixbErrorReporter(this, this.runtimeContext)\n    this.actions = new ActionsRuntime(this.runtimeContext)\n    this.workflows = new WorkflowsRuntime(this.runtimeContext, workflows)\n\n    const agentIds = new Set<string>()\n    for (const agent of agents) {\n      if (agentIds.has(agent.id)) {\n        throw new RuntimeError(`Duplicate agent id: ${agent.id}`)\n      }\n      agentIds.add(agent.id)\n    }\n    validateAgentGroupReferences(agents, this.security)\n    this.agents = new AgentsRuntime(this.runtimeContext, agents)\n  }\n\n  get id(): string {\n    return this.projectId\n  }\n\n  listObjectTypes(): readonly ObjectTypeWithPropertyTokens[] {\n    return this.ontology.listObjectTypes()\n  }\n\n  getObjectTypeById(objectTypeId: string): ObjectTypeWithPropertyTokens | null {\n    return this.ontology.getObjectTypeById(objectTypeId)\n  }\n\n  resolveObjectType(objectTypeId: string): ObjectTypeWithPropertyTokens {\n    return this.ontology.resolveObjectType(objectTypeId)\n  }\n\n  getValueTypesById(): ReadonlyMap<string, ValueType> {\n    return this.ontology.getValueTypesById()\n  }\n\n  listActions(): readonly ActionDefinition[] {\n    return this.actionRegistry.list()\n  }\n\n  getActionById(actionId: string): ActionDefinition | null {\n    return this.actionRegistry.getById(actionId)\n  }\n\n  listGlobalActions(): readonly ActionDefinition[] {\n    return this.actionRegistry.getGlobalActions()\n  }\n\n  listActionsForType(objectType: ObjectType): readonly ActionDefinition[] {\n    return this.actionRegistry.getActionsForType(objectType)\n  }\n\n  listDatasets(): readonly DatasetDefinition[] {\n    return [...this.datasetsById.values()]\n  }\n\n  getDatasetById(datasetId: string): DatasetDefinition | null {\n    return this.datasetsById.get(datasetId) ?? null\n  }\n\n  listSyncs(): readonly SyncDefinition[] {\n    return [...this.syncsById.values()]\n  }\n\n  getSyncById(syncId: string): SyncDefinition | null {\n    return this.syncsById.get(syncId) ?? null\n  }\n\n  listPipelines(): readonly PipelineDefinition[] {\n    return [...this.pipelinesById.values()]\n  }\n\n  getPipelineById(pipelineId: string): PipelineDefinition | null {\n    return this.pipelinesById.get(pipelineId) ?? null\n  }\n\n  // ── Starting work ─────────────────────────────────────────\n  // Every verb is `request*` because everything here is queued, never run inline. `requestActionAndWait`\n  // is the one that waits, and says so.\n\n  requestAction(input: RequestActionInput): Promise<RequestActionResult> {\n    return requestRuntimeAction(this.runtimeContext, input)\n  }\n\n  requestActionAndWait(input: RequestActionAndWaitInput): Promise<ActionRunRecord> {\n    return requestRuntimeActionAndWait(this.runtimeContext, input)\n  }\n\n  requestWorkflowRun(input: RequestWorkflowRunInput): Promise<WorkflowRunRequestResult> {\n    return this.workflows.requestById(input)\n  }\n\n  async requestSyncRun(input: RequestSyncRunInput): Promise<SyncRunRequestResult> {\n    const sync = this.getSyncById(input.syncId)\n    if (!sync) {\n      throw new SyncValidationError(`[Sixb] Unknown sync '${input.syncId}'`)\n    }\n    return requestSyncRun(this.runtimeContext, sync, input)\n  }\n\n  async requestPipelineRun(input: RequestPipelineRunInput): Promise<PipelineRunRequestResult> {\n    const pipeline = this.getPipelineById(input.pipelineId)\n    if (!pipeline) {\n      throw new PipelineError(`[Sixb] Unknown pipeline '${input.pipelineId}'`)\n    }\n    return requestPipelineRun(this.runtimeContext, pipeline, input)\n  }\n\n  requestAgentRun(input: RequestAgentRunInput): Promise<RequestAgentRunResult> {\n    return this.agents.request(input)\n  }\n\n  listSchedules(): readonly ScheduleDefinition[] {\n    return [...this.schedulesById.values()]\n  }\n\n  getScheduleById(scheduleId: string): ScheduleDefinition | null {\n    return this.schedulesById.get(scheduleId) ?? null\n  }\n\n  listRules(): readonly RuleDefinition[] {\n    return [...this.rulesById.values()]\n  }\n\n  getRuleById(ruleId: string): RuleDefinition | null {\n    return this.rulesById.get(ruleId) ?? null\n  }\n\n  /** All connector definitions registered with this runtime. */\n  listConnectors(): readonly ConnectorDefinition[] {\n    return this.connectorRuntime.list()\n  }\n\n  /** Lookup a registered connector definition by id. */\n  getConnectorById(connectorId: string): ConnectorDefinition | null {\n    return this.connectorRuntime.getById(connectorId)\n  }\n\n  /** All webhook endpoints registered through connector adapters. */\n  listWebhooks(): readonly RegisteredWebhook[] {\n    return this.webhooks\n  }\n\n  /** Lookup a registered connector webhook by connector id and webhook id. */\n  getWebhookById(connectorId: string, webhookId: string): RegisteredWebhook | null {\n    return this.webhooksByRoute.get(webhookRoute(connectorId, webhookId)) ?? null\n  }\n\n  /**\n   * Resolve a connector definition to a connected client.\n   *\n   * Connector definitions are inert. This method performs lazy connection and\n   * reuses the same connected client for subsequent calls.\n   */\n  connector<TAdapter extends ConnectorAdapter>(\n    definition: ConnectorDefinition<string, TAdapter>\n  ): Promise<ConnectorClient<TAdapter>> {\n    return this.connectorRuntime.connect(definition)\n  }\n\n  async startScheduler(): Promise<void> {\n    if (this.schedulerRuntime || this.schedulesById.size === 0) return\n\n    const runtime = new SchedulerRuntime({\n      schedules: this.listSchedules(),\n      events: this.eventsRuntime,\n    })\n\n    await runtime.start()\n    this.schedulerRuntime = runtime\n  }\n\n  async stopScheduler(): Promise<void> {\n    if (!this.schedulerRuntime) return\n\n    const runtime = this.schedulerRuntime\n    this.schedulerRuntime = null\n    await runtime.stop()\n  }\n\n  /** Start the API-owned recovery and retention loop. Embedded runtimes opt in explicitly. */\n  startOntologyMaintenance(): Promise<OntologyMaintenanceHandle> {\n    this.storageReadiness.startSchemaValidation()\n    return this.ontologyMaintenance.start()\n  }\n\n  getOntologyOperationalStatus(): OntologyOperationalStatus {\n    return this.ontologyMaintenance.getOperationalStatus()\n  }\n\n  async checkReadiness(): Promise<SixbReadiness> {\n    return this.storageReadiness.check()\n  }\n\n  /** Disconnect all currently connected connector clients. */\n  async disconnectConnectors(): Promise<void> {\n    await this.connectorRuntime.disconnectAll()\n  }\n\n  /** Flush and close the configured process logger provider. */\n  async closeLogger(): Promise<void> {\n    await this.logs.close()\n  }\n\n  /** Close the runtime broker provider if it owns external resources. */\n  async closeBroker(): Promise<void> {\n    await this.committedFacts.stop()\n    await this.ontologyMaintenance.stop()\n    await this.broker.close?.()\n  }\n\n  /**\n   * Derive a principal-scoped SDK from this runtime.\n   *\n   * The scoped surface is default-deny: operations run only when covered by\n   * the context's grants. This raw runtime stays privileged for trusted\n   * system code (startup, syncs, projections, workers, webhooks, tests).\n   */\n  as(context: AuthorizationContext): ScopedSixb<TOntologySources> {\n    return createScopedSixb<TOntologySources>(\n      { ...this.runtimeContext, authorization: context },\n      {\n        datasets: {\n          list: () => this.listDatasets(),\n          getById: (datasetId) => this.getDatasetById(datasetId),\n        },\n        syncs: {\n          list: () => this.listSyncs(),\n          getById: (syncId) => this.getSyncById(syncId),\n        },\n        pipelines: {\n          list: () => this.listPipelines(),\n          getById: (pipelineId) => this.getPipelineById(pipelineId),\n        },\n        workflows: this.workflows,\n        agents: this.agents,\n      }\n    )\n  }\n\n  objects<TObjectType extends RegisteredObjectType<TOntologySources>>(\n    objectType: TObjectType\n  ): ObjectSet<\n    TObjectType,\n    RegisteredValueTypes<TOntologySources>,\n    RegisteredObjectType<TOntologySources>\n  > {\n    assertObjectTypeRegistered(this.ontology.getObjectTypesById(), objectType)\n\n    return createObjectSet<\n      TObjectType,\n      RegisteredObjectType<TOntologySources>,\n      RegisteredValueTypes<TOntologySources>\n    >({ ...this.runtimeContext, objectType })\n  }\n\n  async upsertObject(\n    objectTypeId: string,\n    properties: Record<string, unknown>\n  ): Promise<ObjectRow> {\n    return objectService.upsertObject(this.runtimeContext, objectTypeId, properties)\n  }\n\n  async upsertObjectBatch(\n    objectTypeId: string,\n    items: readonly { properties: Record<string, unknown> }[]\n  ): Promise<readonly BatchItemResult<ObjectRow>[]> {\n    return objectService.upsertObjectBatch(this.runtimeContext, objectTypeId, items)\n  }\n\n  async upsertLinkBatch(\n    items: readonly {\n      objectTypeId: string\n      sourceId: string\n      linkId: string\n      target: { targetTypeId: string; targetId: string; properties?: Record<string, unknown> }\n    }[]\n  ): Promise<readonly BatchItemResult<void>[]> {\n    return objectService.upsertLinkBatch(this.runtimeContext, items)\n  }\n\n  async appendTelemetry(\n    objectTypeId: string,\n    items: readonly { id: string; properties: Record<string, unknown>; at?: Date }[]\n  ): Promise<void> {\n    await objectService.appendTelemetry(this.runtimeContext, objectTypeId, items)\n  }\n\n  async upsertLink(\n    objectTypeId: string,\n    sourceId: string,\n    linkId: string,\n    target: { targetTypeId: string; targetId: string; properties?: Record<string, unknown> }\n  ): Promise<void> {\n    await objectService.upsertLink(this.runtimeContext, objectTypeId, sourceId, linkId, target)\n  }\n\n  async removeLink(\n    objectTypeId: string,\n    sourceId: string,\n    linkId: string,\n    target: { targetTypeId: string; targetId: string }\n  ): Promise<void> {\n    await objectService.removeLink(this.runtimeContext, objectTypeId, sourceId, linkId, target)\n  }\n\n  getPrimaryPropertyId(objectTypeId: string): string {\n    return this.ontology.getPrimaryPropertyId(objectTypeId)\n  }\n\n  listObjectProjections(): readonly ObjectProjectionDefinition[] {\n    return this.projectionRegistry.listObjectProjections()\n  }\n\n  listLinkProjections(): readonly LinkProjectionDefinition[] {\n    return this.projectionRegistry.listLinkProjections()\n  }\n\n  listTelemetryProjections(): readonly TelemetryProjectionDefinition[] {\n    return this.projectionRegistry.listTelemetryProjections()\n  }\n\n  getProjectionById(projectionId: string): ProjectionDefinition | null {\n    return this.projectionRegistry.getProjectionById(projectionId)\n  }\n\n  /**\n   * Global list for cross-type queries (e.g., dashboards, search).\n   * Use sixb.objects(Type).query().where(...).list() for type-safe property filtering.\n   */\n  async list(params: {\n    objectTypeIds?: readonly string[]\n    idPrefix?: string\n    idSuffix?: string\n    updatedAfter?: Date\n    updatedBefore?: Date\n    createdAfter?: Date\n    createdBefore?: Date\n    limit?: number\n    offset?: number\n    orderBy?: \"createdAt\" | \"updatedAt\" | \"primaryId\"\n    order?: \"asc\" | \"desc\"\n  }): Promise<ListResult<ObjectRow>> {\n    return objectService.listObjects(this.runtimeContext, params)\n  }\n\n  listSubTypes(objectTypeId: string): string[] {\n    return this.ontology.listSubTypes(objectTypeId)\n  }\n\n  isValidLinkTarget(expected: string | string[], actual: string): boolean {\n    return this.ontology.isValidLinkTarget(expected, actual)\n  }\n}\n\nfunction validateScheduleReferences(\n  consumerKind: \"Sync\" | \"Pipeline\",\n  consumerId: string,\n  references: readonly { readonly scheduleId: string }[],\n  schedulesById: ReadonlyMap<string, ScheduleDefinition>\n): void {\n  for (const reference of references) {\n    if (!schedulesById.has(reference.scheduleId)) {\n      throw new RuntimeError(\n        `${consumerKind} '${consumerId}' references unknown schedule '${reference.scheduleId}'. Add it to 'schedules' in createSixb() or export it from 'schedules/'.`\n      )\n    }\n  }\n}\n\nfunction validateAuthStrategySecurityReferences(\n  strategy: ReturnType<AuthRuntime[\"getStrategy\"]>,\n  security: SecurityRegistry\n): void {\n  if (!isMagicLinkAuthStrategy(strategy) && !isOidcAuthStrategy(strategy)) {\n    return\n  }\n\n  for (const groupId of strategy.bootstrapGroupIds ?? []) {\n    if (!security.getGroupById(groupId)) {\n      throw new AuthRuntimeError(\n        \"invalid_auth_config\",\n        `[Sixb] Auth bootstrapGroups references unknown group '${groupId}'. Add it to 'security/groups/' or pass it to createSixb({ groups }).`\n      )\n    }\n  }\n}\n\nfunction assertWebhookDeliveryStorage(\n  connectors: readonly ConnectorDefinition[],\n  storage: Storage\n): void {\n  if (storage.webhookDeliveries !== undefined) {\n    return\n  }\n\n  for (const connector of connectors) {\n    const webhooks = connector.adapter.webhooks\n    if (!Array.isArray(webhooks)) {\n      continue\n    }\n\n    if (webhooks.some((webhook) => webhook.idempotencyKey !== undefined)) {\n      throw new WebhookValidationError(\n        \"[Sixb] Webhook idempotency requires storage.webhookDeliveries to be configured.\"\n      )\n    }\n  }\n}\n",
+    "import { ConnectorError, ConnectorNotFoundError } from \"./errors\"\nimport type { ConnectorAdapter, ConnectorClient, ConnectorDefinition } from \"./types\"\n\ntype ConnectorConnectionState = {\n  controller: AbortController\n  clientPromise: Promise<unknown>\n}\n\nexport class ConnectorRuntime {\n  private readonly definitionsById = new Map<string, ConnectorDefinition>()\n  private readonly connectionStates = new Map<ConnectorDefinition, ConnectorConnectionState>()\n\n  constructor(\n    private readonly projectId: string,\n    definitions: readonly ConnectorDefinition[]\n  ) {\n    for (const definition of definitions) {\n      if (this.definitionsById.has(definition.id)) {\n        throw new ConnectorError(`Duplicate connector id: ${definition.id}`)\n      }\n\n      this.definitionsById.set(definition.id, definition)\n    }\n  }\n\n  list(): readonly ConnectorDefinition[] {\n    return [...this.definitionsById.values()]\n  }\n\n  getById(id: string): ConnectorDefinition | null {\n    return this.definitionsById.get(id) ?? null\n  }\n\n  async connect<TAdapter extends ConnectorAdapter>(\n    definition: ConnectorDefinition<string, TAdapter>\n  ): Promise<ConnectorClient<TAdapter>> {\n    const registeredDefinition = this.definitionsById.get(definition.id)\n\n    if (!registeredDefinition) {\n      throw new ConnectorNotFoundError(definition.id)\n    }\n\n    if (registeredDefinition !== definition) {\n      throw new ConnectorError(\n        `Connector '${definition.id}' is not the registered definition instance.`\n      )\n    }\n\n    let state = this.connectionStates.get(definition)\n    if (!state) {\n      const controller = new AbortController()\n      const clientPromise = Promise.resolve(\n        definition.adapter.connect({\n          projectId: this.projectId,\n          connectorId: definition.id,\n          signal: controller.signal,\n        })\n      )\n\n      state = { controller, clientPromise }\n      this.connectionStates.set(definition, state)\n    }\n\n    try {\n      return (await state.clientPromise) as ConnectorClient<TAdapter>\n    } catch (error) {\n      if (this.connectionStates.get(definition) === state) {\n        this.connectionStates.delete(definition)\n      }\n      throw error\n    }\n  }\n\n  async disconnectAll(): Promise<void> {\n    const activeConnections = [...this.connectionStates.entries()]\n    this.connectionStates.clear()\n\n    for (const [definition, state] of activeConnections) {\n      await this.disconnectState(definition, state)\n    }\n  }\n\n  private async disconnectState(\n    definition: ConnectorDefinition,\n    state: ConnectorConnectionState\n  ): Promise<void> {\n    state.controller.abort()\n\n    let client: unknown\n    try {\n      client = await state.clientPromise\n    } catch {\n      return\n    }\n\n    if (typeof definition.adapter.disconnect === \"function\") {\n      await definition.adapter.disconnect(client as never)\n    }\n  }\n}\n",
+    "import type { OntologyOutboxDispatcher } from \"../events\"\nimport type { Storage } from \"../storage\"\nimport type {\n  OntologyMaintenanceCleanupSnapshot,\n  OntologyMaintenanceHandle,\n  OntologyMaintenanceOptions,\n  OntologyMaintenanceSnapshot,\n  OntologyOperationalStatus,\n} from \"./types\"\n\nconst DEFAULT_INTERVAL_MS = 60_000\nconst DEFAULT_RETENTION_MS = 24 * 60 * 60_000\nconst DEFAULT_CLEANUP_LIMIT = 1_000\nconst DEFAULT_SHUTDOWN_TIMEOUT_MS = 30_000\nconst DEGRADED_ATTEMPT_THRESHOLD = 3\nconst DEGRADED_FAILURE_THRESHOLD = 2\n\ninterface OntologyMaintenanceDependencies {\n  readonly projectId: string\n  readonly storage: Storage\n  readonly dispatcher: OntologyOutboxDispatcher\n  readonly options?: OntologyMaintenanceOptions\n  readonly now?: () => Date\n  readonly onError?: (error: unknown) => void\n}\n\n/** API-owned catch-up, retention, and operational snapshot lifecycle. */\nexport class OntologyMaintenance {\n  private readonly projectId: string\n  private readonly storage: Storage\n  private readonly dispatcher: OntologyOutboxDispatcher\n  private readonly intervalMs: number\n  private readonly publishedOutboxRetentionMs: number\n  private readonly terminalSourceRetentionMs: number\n  private readonly cleanupLimit: number\n  private readonly shutdownTimeoutMs: number\n  private readonly now: () => Date\n  private readonly onError: (error: unknown) => void\n  private readonly owners = new Set<symbol>()\n  private timer: ReturnType<typeof setTimeout> | null = null\n  private pass: Promise<void> | null = null\n  private stopping: Promise<void> | null = null\n  private snapshot: OntologyMaintenanceSnapshot\n\n  constructor(dependencies: OntologyMaintenanceDependencies) {\n    assertNonblank(dependencies.projectId, \"projectId\")\n    const options = dependencies.options ?? {}\n    this.projectId = dependencies.projectId\n    this.storage = dependencies.storage\n    this.dispatcher = dependencies.dispatcher\n    this.intervalMs = positiveInteger(options.intervalMs ?? DEFAULT_INTERVAL_MS, \"intervalMs\")\n    this.publishedOutboxRetentionMs = nonnegativeInteger(\n      options.publishedOutboxRetentionMs ?? DEFAULT_RETENTION_MS,\n      \"publishedOutboxRetentionMs\"\n    )\n    this.terminalSourceRetentionMs = nonnegativeInteger(\n      options.terminalSourceRetentionMs ?? DEFAULT_RETENTION_MS,\n      \"terminalSourceRetentionMs\"\n    )\n    this.cleanupLimit = positiveInteger(\n      options.cleanupLimit ?? DEFAULT_CLEANUP_LIMIT,\n      \"cleanupLimit\"\n    )\n    this.shutdownTimeoutMs = nonnegativeInteger(\n      options.shutdownTimeoutMs ?? DEFAULT_SHUTDOWN_TIMEOUT_MS,\n      \"shutdownTimeoutMs\"\n    )\n    this.now = dependencies.now ?? (() => new Date())\n    this.onError =\n      dependencies.onError ??\n      ((error) => console.error(\"[Sixb] Ontology maintenance error:\", error))\n    this.snapshot = emptySnapshot(this.intervalMs)\n  }\n\n  /** Acquires maintenance ownership and starts catch-up without blocking the host from listening. */\n  async start(): Promise<OntologyMaintenanceHandle> {\n    if (this.stopping) await this.stopping\n    const owner = Symbol(\"ontology-maintenance-owner\")\n    const startsHosting = this.owners.size === 0\n    this.owners.add(owner)\n    if (startsHosting) this.startHostedPass()\n\n    let released = false\n    return {\n      stop: async () => {\n        if (released) return\n        released = true\n        this.owners.delete(owner)\n        if (this.owners.size === 0) await this.stopLoop()\n      },\n    }\n  }\n\n  /** Runs one coalesced pass. Exposed for deterministic hosting and tests. */\n  runNow(): Promise<void> {\n    this.pass ??= this.runPass().finally(() => {\n      this.pass = null\n    })\n    return this.pass\n  }\n\n  /** Force-stops every owner; used during provider shutdown. */\n  async stop(): Promise<void> {\n    this.owners.clear()\n    await this.stopLoop()\n  }\n\n  getSnapshot(): OntologyMaintenanceSnapshot {\n    return structuredClone(this.snapshot)\n  }\n\n  getOperationalStatus(): OntologyOperationalStatus {\n    const snapshot = this.getSnapshot()\n    const lastActivityAt = latestTimestamp(snapshot.lastStartedAt, snapshot.lastCompletedAt)\n    const overdue =\n      lastActivityAt !== null &&\n      this.now().getTime() - Date.parse(lastActivityAt) > this.intervalMs * 2\n    const oldestPendingAt = snapshot.outbox?.oldestPendingAt ?? null\n    const pendingTooLong =\n      oldestPendingAt !== null &&\n      this.now().getTime() - Date.parse(oldestPendingAt) > this.intervalMs * 2\n    const repeatedlyFailing = (snapshot.outbox?.maxAttempts ?? 0) >= DEGRADED_ATTEMPT_THRESHOLD\n    const degraded =\n      snapshot.consecutiveFailures >= DEGRADED_FAILURE_THRESHOLD ||\n      repeatedlyFailing ||\n      pendingTooLong ||\n      overdue\n    return { status: degraded ? \"degraded\" : \"ok\", maintenance: snapshot }\n  }\n\n  private startHostedPass(): void {\n    void this.runNow()\n      .catch((error) => this.reportError(error))\n      .finally(() => this.scheduleNextPass())\n  }\n\n  private async runPass(): Promise<void> {\n    const started = this.now()\n    this.snapshot = { ...this.snapshot, running: true, lastStartedAt: started.toISOString() }\n\n    const failures: unknown[] = []\n    await captureFailure(() => this.dispatcher.drain(), failures)\n    const cleanup = await this.cleanupExpiredRows(started, failures)\n    const { outbox, terminalSources } = await this.readOperationalSummaries(failures)\n    this.completePass({ started, failures, cleanup, outbox, terminalSources })\n  }\n\n  private async cleanupExpiredRows(\n    started: Date,\n    failures: unknown[]\n  ): Promise<OntologyMaintenanceCleanupSnapshot> {\n    const publishedOutboxRowsDeleted = await captureFailure(\n      () =>\n        this.storage.ontology.outbox.purgePublished({\n          projectId: this.projectId,\n          publishedBefore: new Date(\n            started.getTime() - this.publishedOutboxRetentionMs\n          ).toISOString(),\n          limit: this.cleanupLimit,\n        }),\n      failures,\n      0\n    )\n    const terminalSources = await captureFailure(\n      () =>\n        this.storage.ontology.sources.cleanupTerminal({\n          projectId: this.projectId,\n          terminalBefore: new Date(\n            started.getTime() - this.terminalSourceRetentionMs\n          ).toISOString(),\n          limit: this.cleanupLimit,\n        }),\n      failures,\n      { rowsDeleted: 0, materializationsDeleted: 0 }\n    )\n\n    return {\n      publishedOutboxRowsDeleted,\n      terminalSourceRowsDeleted: terminalSources.rowsDeleted,\n      terminalSourceMaterializationsDeleted: terminalSources.materializationsDeleted,\n    }\n  }\n\n  private async readOperationalSummaries(failures: unknown[]): Promise<{\n    readonly outbox: OntologyMaintenanceSnapshot[\"outbox\"]\n    readonly terminalSources: OntologyMaintenanceSnapshot[\"terminalSources\"]\n  }> {\n    const outbox = await captureFailure(\n      () => this.storage.ontology.outbox.summarize({ projectId: this.projectId }),\n      failures,\n      this.snapshot.outbox\n    )\n    const terminalSummary = await captureFailure(\n      () => this.storage.ontology.sources.summarizeTerminal({ projectId: this.projectId }),\n      failures,\n      this.snapshot.terminalSources\n    )\n    return { outbox, terminalSources: terminalSummary }\n  }\n\n  private completePass(input: {\n    readonly started: Date\n    readonly failures: readonly unknown[]\n    readonly cleanup: OntologyMaintenanceCleanupSnapshot\n    readonly outbox: OntologyMaintenanceSnapshot[\"outbox\"]\n    readonly terminalSources: OntologyMaintenanceSnapshot[\"terminalSources\"]\n  }): void {\n    const completed = this.now()\n    const failure =\n      input.failures.length > 0\n        ? new AggregateError(input.failures, \"Maintenance pass failed.\")\n        : null\n    this.snapshot = {\n      running: false,\n      intervalMs: this.intervalMs,\n      lastStartedAt: input.started.toISOString(),\n      lastCompletedAt: completed.toISOString(),\n      lastDurationMs: Math.max(0, completed.getTime() - input.started.getTime()),\n      consecutiveFailures: failure ? this.snapshot.consecutiveFailures + 1 : 0,\n      lastError: failure ? errorMessage(failure) : null,\n      outbox: input.outbox,\n      terminalSources: input.terminalSources,\n      cleanup: input.cleanup,\n    }\n    if (failure) this.reportError(failure)\n  }\n\n  private scheduleNextPass(): void {\n    if (this.owners.size === 0 || this.timer !== null) return\n    this.timer = setTimeout(() => {\n      this.timer = null\n      if (this.owners.size === 0) return\n      void this.runNow()\n        .catch((error) => this.reportError(error))\n        .finally(() => this.scheduleNextPass())\n    }, this.intervalMs)\n    this.timer.unref?.()\n  }\n\n  private stopLoop(): Promise<void> {\n    if (this.stopping) return this.stopping\n    if (this.timer !== null) {\n      clearTimeout(this.timer)\n      this.timer = null\n    }\n    const activePass = this.pass ?? Promise.resolve()\n    const stopping = settlesWithin(activePass, this.shutdownTimeoutMs).then((settled) => {\n      if (!settled) {\n        this.reportError(\n          new Error(`[Sixb] Ontology maintenance did not stop within ${this.shutdownTimeoutMs}ms.`)\n        )\n      }\n    })\n    this.stopping = stopping.finally(() => {\n      this.stopping = null\n    })\n    return this.stopping\n  }\n\n  private reportError(error: unknown): void {\n    try {\n      this.onError(error)\n    } catch {\n      // Maintenance failures stay observable without escaping into runtime lifecycle code.\n    }\n  }\n}\n\nfunction emptySnapshot(intervalMs: number): OntologyMaintenanceSnapshot {\n  return {\n    running: false,\n    intervalMs,\n    lastStartedAt: null,\n    lastCompletedAt: null,\n    lastDurationMs: null,\n    consecutiveFailures: 0,\n    lastError: null,\n    outbox: null,\n    terminalSources: null,\n    cleanup: null,\n  }\n}\n\nfunction positiveInteger(value: number, name: string): number {\n  if (!Number.isSafeInteger(value) || value <= 0) {\n    throw new Error(`[Sixb] Ontology maintenance ${name} must be a positive integer.`)\n  }\n  return value\n}\n\nfunction nonnegativeInteger(value: number, name: string): number {\n  if (!Number.isSafeInteger(value) || value < 0) {\n    throw new Error(`[Sixb] Ontology maintenance ${name} must be a nonnegative integer.`)\n  }\n  return value\n}\n\nfunction assertNonblank(value: string, name: string): void {\n  if (value.trim().length === 0) {\n    throw new Error(`[Sixb] Ontology maintenance ${name} must not be blank.`)\n  }\n}\n\nfunction errorMessage(error: unknown): string {\n  if (error instanceof AggregateError) {\n    return [...error.errors].map(errorMessage).join(\" | \").slice(0, 2_000)\n  }\n  const message = error instanceof Error ? `${error.name}: ${error.message}` : String(error)\n  return message.slice(0, 2_000)\n}\n\nfunction latestTimestamp(left: string | null, right: string | null): string | null {\n  if (left === null) return right\n  if (right === null) return left\n  return Date.parse(left) >= Date.parse(right) ? left : right\n}\n\nasync function settlesWithin(promise: Promise<void>, timeoutMs: number): Promise<boolean> {\n  let timer: ReturnType<typeof setTimeout> | undefined\n  const timedOut = new Promise<false>((resolve) => {\n    timer = setTimeout(() => resolve(false), timeoutMs)\n  })\n  const result = await Promise.race([\n    promise.then(\n      () => true as const,\n      () => true as const\n    ),\n    timedOut,\n  ])\n  if (timer !== undefined) clearTimeout(timer)\n  return result\n}\n\nasync function captureFailure(run: () => Promise<void>, failures: unknown[]): Promise<void>\nasync function captureFailure<T>(\n  run: () => Promise<T>,\n  failures: unknown[],\n  fallback: T\n): Promise<T>\nasync function captureFailure<T>(\n  run: () => Promise<T>,\n  failures: unknown[],\n  fallback?: T\n): Promise<T | undefined> {\n  try {\n    return await run()\n  } catch (error) {\n    failures.push(error)\n    return fallback\n  }\n}\n",
+    "import { type ResolvedRole, resolveRoleGrants } from \"../authorization\"\nimport { APPLICATION_IDS } from \"./applications\"\nimport type {\n  GroupDefinition,\n  MembershipPolicyDefinition,\n  RoleDefinition,\n  SecurityRegistry,\n} from \"./types\"\nimport { validateSecurityDefinitionsAtStartup } from \"./validation\"\n\nclass RuntimeSecurityRegistry implements SecurityRegistry {\n  constructor(\n    private readonly groupsById: ReadonlyMap<string, GroupDefinition>,\n    private readonly rolesById: ReadonlyMap<string, RoleDefinition>,\n    private readonly membershipPoliciesById: ReadonlyMap<string, MembershipPolicyDefinition>,\n    private readonly resolvedRoles: readonly ResolvedRole[]\n  ) {}\n\n  listGroups(): readonly GroupDefinition[] {\n    return [...this.groupsById.values()]\n  }\n\n  getGroupById(groupId: string): GroupDefinition | null {\n    return this.groupsById.get(groupId) ?? null\n  }\n\n  listRoles(): readonly RoleDefinition[] {\n    return [...this.rolesById.values()]\n  }\n\n  getRoleById(roleId: string): RoleDefinition | null {\n    return this.rolesById.get(roleId) ?? null\n  }\n\n  listResolvedRoles(): readonly ResolvedRole[] {\n    return this.resolvedRoles\n  }\n\n  listMembershipPolicies(): readonly MembershipPolicyDefinition[] {\n    return [...this.membershipPoliciesById.values()]\n  }\n\n  getMembershipPolicyById(policyId: string): MembershipPolicyDefinition | null {\n    return this.membershipPoliciesById.get(policyId) ?? null\n  }\n}\n\nexport function createRuntimeSecurityRegistry(input: {\n  readonly groups?: readonly GroupDefinition[]\n  readonly roles?: readonly RoleDefinition[]\n  readonly membershipPolicies?: readonly MembershipPolicyDefinition[]\n  readonly applicationIds?: ReadonlySet<string>\n  readonly objectTypeIds?: ReadonlySet<string>\n  readonly datasetIds?: ReadonlySet<string>\n  readonly actionIds?: ReadonlySet<string>\n  readonly workflowIds?: ReadonlySet<string>\n  readonly syncIds?: ReadonlySet<string>\n  readonly pipelineIds?: ReadonlySet<string>\n  readonly agentIds?: ReadonlySet<string>\n  readonly getSubTypes?: (objectTypeId: string) => readonly string[]\n}): SecurityRegistry {\n  const securityDefinitions = validateSecurityDefinitionsAtStartup({\n    groups: input.groups ?? [],\n    roles: input.roles ?? [],\n    membershipPolicies: input.membershipPolicies ?? [],\n    applicationIds: input.applicationIds ?? APPLICATION_IDS,\n    objectTypeIds: input.objectTypeIds,\n    datasetIds: input.datasetIds,\n    actionIds: input.actionIds,\n    workflowIds: input.workflowIds,\n    syncIds: input.syncIds,\n    pipelineIds: input.pipelineIds,\n    agentIds: input.agentIds,\n    observableIds: new Set([\"logs\"]),\n  })\n\n  const universe = {\n    applicationIds: input.applicationIds ?? APPLICATION_IDS,\n    objectTypeIds: input.objectTypeIds ?? new Set<string>(),\n    datasetIds: input.datasetIds ?? new Set<string>(),\n    actionIds: input.actionIds ?? new Set<string>(),\n    workflowIds: input.workflowIds ?? new Set<string>(),\n    syncIds: input.syncIds ?? new Set<string>(),\n    pipelineIds: input.pipelineIds ?? new Set<string>(),\n    agentIds: input.agentIds ?? new Set<string>(),\n    observableIds: new Set([\"logs\"]),\n    getSubTypes: input.getSubTypes ?? (() => []),\n  }\n  const resolvedRoles = securityDefinitions.roles.map((role) => ({\n    id: role.id,\n    grantedToGroupIds: role.grantedToGroupIds,\n    grants: resolveRoleGrants(role, universe),\n  }))\n\n  return new RuntimeSecurityRegistry(\n    securityDefinitions.groupsById,\n    securityDefinitions.rolesById,\n    securityDefinitions.membershipPoliciesById,\n    resolvedRoles\n  )\n}\n",
+    "import type { DatasetDefinition } from \"../datasets\"\nimport type { PipelineDefinition } from \"../pipelines\"\nimport type { TelemetryProjectionDefinition } from \"../projections\"\nimport { SyncValidationError } from \"./errors\"\nimport type { SyncDefinition } from \"./types\"\n\ninterface DatasetWriter {\n  readonly datasetId: string\n  readonly label: string\n}\n\nexport function validateKeyedDatasetWriterTopology(input: {\n  readonly datasetsById: ReadonlyMap<string, DatasetDefinition>\n  readonly syncs: readonly SyncDefinition[]\n  readonly pipelines: readonly PipelineDefinition[]\n}): void {\n  for (const sync of input.syncs) {\n    const dataset = input.datasetsById.get(sync.target.dataset.id)\n    if (sync.config.mode === \"merge\" && dataset?.primaryKey === undefined) {\n      throw new SyncValidationError(\n        `[Sixb] Merge sync '${sync.id}' targets dataset '${sync.target.dataset.id}', which must define a primaryKey.`\n      )\n    }\n  }\n\n  const firstWriterByDataset = new Map<string, DatasetWriter>()\n  for (const writer of datasetWriters(input.syncs, input.pipelines)) {\n    const dataset = input.datasetsById.get(writer.datasetId)\n    if (dataset?.primaryKey === undefined) continue\n\n    const first = firstWriterByDataset.get(writer.datasetId)\n    if (!first) {\n      firstWriterByDataset.set(writer.datasetId, writer)\n      continue\n    }\n\n    throw new SyncValidationError(\n      `[Sixb] Keyed dataset '${writer.datasetId}' has multiple registered writers: ${first.label} and ${writer.label}. V1 allows one writer per keyed dataset.`\n    )\n  }\n}\n\nexport function validateMergeSyncProjectionSafety(input: {\n  readonly syncs: readonly SyncDefinition[]\n  readonly telemetryProjections: readonly TelemetryProjectionDefinition[]\n}): void {\n  const mergeSyncByDataset = new Map(\n    input.syncs\n      .filter((sync) => sync.config.mode === \"merge\")\n      .map((sync) => [sync.target.dataset.id, sync] as const)\n  )\n\n  for (const projection of input.telemetryProjections) {\n    const sync = mergeSyncByDataset.get(projection.datasetId)\n    if (!sync) continue\n    throw new SyncValidationError(\n      `[Sixb] Telemetry projection '${projection.id}' cannot read merge-written dataset '${projection.datasetId}' from sync '${sync.id}'. V1 merge syncs support object and link replacement projections only.`\n    )\n  }\n}\n\nfunction* datasetWriters(\n  syncs: readonly SyncDefinition[],\n  pipelines: readonly PipelineDefinition[]\n): Iterable<DatasetWriter> {\n  for (const sync of syncs) {\n    yield { datasetId: sync.target.dataset.id, label: `sync '${sync.id}'` }\n  }\n  for (const pipeline of pipelines) {\n    for (const node of pipeline.graph.nodes) {\n      yield {\n        datasetId: node.step.output.id,\n        label: `pipeline '${pipeline.id}' step '${node.step.id}'`,\n      }\n    }\n  }\n}\n",
+    "/**\n * Scoped SDK surface returned by `sixb.as(context)`.\n *\n * The scoped types are masks over the full SDK types — derived from the same\n * declarations, never copies — so signatures cannot drift and new surface area\n * stays hidden until its grants are enforceable end to end. The runtime values\n * are the same factories running over an authorization-carrying runtime\n * context; leaf asserts and query planning enforce the grants.\n */\n\nimport type {\n  ActionDefinition,\n  RequestActionAndWaitInput,\n  RequestActionInput,\n  RequestActionResult,\n} from \"../actions\"\nimport {\n  requestAction as requestRuntimeAction,\n  requestActionAndWait as requestRuntimeActionAndWait,\n} from \"../actions/request\"\nimport type {\n  AgentDefinition,\n  AgentsRuntime,\n  RequestAgentRunInput,\n  RequestAgentRunResult,\n  ScopedListAgentThreadsInput,\n} from \"../agents\"\nimport {\n  type AuthorizationContext,\n  type AuthzRequest,\n  assertAuthorized,\n  canViewEvent,\n  isAllowed,\n} from \"../authorization\"\nimport type { DatasetDefinition } from \"../datasets\"\nimport type { EventsReadInput, StoredDomainEvent } from \"../events\"\nimport { createObjectSet, objectService } from \"../objects\"\nimport type { ListObjectsParams } from \"../objects/service\"\nimport type { ValueType } from \"../ontology\"\nimport { assertObjectTypeRegistered } from \"../ontology\"\nimport type { ObjectTypeWithPropertyTokens } from \"../ontology/tokens\"\nimport type { PipelineDefinition } from \"../pipelines\"\nimport { PipelineError } from \"../pipelines\"\nimport {\n  type PipelineRunRequestResult,\n  type RequestPipelineRunInput,\n  requestPipelineRun,\n} from \"../pipelines/request\"\nimport type { ObjectRow } from \"../storage\"\nimport type { ActionRunRecord } from \"../storage/action-runs\"\nimport type { AgentThreadRecord, ListAgentThreadsResult } from \"../storage/agents\"\nimport type { SyncDefinition } from \"../syncs\"\nimport { SyncValidationError } from \"../syncs\"\nimport {\n  type RequestSyncRunInput,\n  requestSyncRun,\n  type SyncRunRequestResult,\n} from \"../syncs/request\"\nimport type {\n  RequestWorkflowRunInput,\n  WorkflowDefinition,\n  WorkflowRunRequestResult,\n  WorkflowsRuntime,\n} from \"../workflows\"\nimport type {\n  ListResult,\n  ObjectByIdHandle,\n  ObjectSet,\n  OntologySource,\n  RegisteredObjectType,\n  RegisteredValueTypes,\n  SixbInstance,\n  SixbRuntimeContext,\n} from \"./types\"\n\n// Scoped members are indexed accesses of the full SDK types rather than\n// `Pick`s: signatures stay single-sourced (no drift), while indexed access\n// stays lazy — mapped types would eagerly materialize every method's deep\n// query/telemetry conditionals and blow the instantiation depth limit.\nexport interface ScopedObjectByIdHandle<\n  TObjectType extends ObjectTypeWithPropertyTokens,\n  TValueTypes extends readonly ValueType[],\n> {\n  get: ObjectByIdHandle<TObjectType, TValueTypes>[\"get\"]\n  requestAction: ObjectByIdHandle<TObjectType, TValueTypes>[\"requestAction\"]\n  requestActionAndWait: ObjectByIdHandle<TObjectType, TValueTypes>[\"requestActionAndWait\"]\n  /** Requires `edit:object` on this type and `view:object` on the link target. */\n  link: ObjectByIdHandle<TObjectType, TValueTypes>[\"link\"]\n  /** Requires `edit:object` on this type and `view:object` on the link target. */\n  unlink: ObjectByIdHandle<TObjectType, TValueTypes>[\"unlink\"]\n  /** Requires `edit:object`. */\n  delete: ObjectByIdHandle<TObjectType, TValueTypes>[\"delete\"]\n  /** Requires `edit:object`. */\n  restore: ObjectByIdHandle<TObjectType, TValueTypes>[\"restore\"]\n  /** `append()` requires `append:telemetry`; `history()` requires `view:object`. */\n  telemetry: ObjectByIdHandle<TObjectType, TValueTypes>[\"telemetry\"]\n  // `listLinks` stays off this surface: its rows name target types that no read grant covers.\n}\n\nexport interface ScopedObjectSet<\n  TObjectType extends ObjectTypeWithPropertyTokens,\n  TValueTypes extends readonly ValueType[],\n  TRegisteredObjectTypes extends ObjectTypeWithPropertyTokens = TObjectType,\n> {\n  get: ObjectSet<TObjectType, TValueTypes, TRegisteredObjectTypes>[\"get\"]\n  list: ObjectSet<TObjectType, TValueTypes, TRegisteredObjectTypes>[\"list\"]\n  query: ObjectSet<TObjectType, TValueTypes, TRegisteredObjectTypes>[\"query\"]\n  requestAction: ObjectSet<TObjectType, TValueTypes, TRegisteredObjectTypes>[\"requestAction\"]\n  requestActionAndWait: ObjectSet<\n    TObjectType,\n    TValueTypes,\n    TRegisteredObjectTypes\n  >[\"requestActionAndWait\"]\n  /** Requires `view:object` and `edit:object`. */\n  upsert: ObjectSet<TObjectType, TValueTypes, TRegisteredObjectTypes>[\"upsert\"]\n  /** Requires `edit:object` on this type and `view:object` on the link target. */\n  upsertLink: ObjectSet<TObjectType, TValueTypes, TRegisteredObjectTypes>[\"upsertLink\"]\n  /** Requires `edit:object` on this type and `view:object` on the link target. */\n  removeLink: ObjectSet<TObjectType, TValueTypes, TRegisteredObjectTypes>[\"removeLink\"]\n  /** Requires `append:telemetry` — and notably not `view:object`. */\n  appendTelemetryBatch: ObjectSet<\n    TObjectType,\n    TValueTypes,\n    TRegisteredObjectTypes\n  >[\"appendTelemetryBatch\"]\n\n  /** Bind read, write, and action operations to a specific object id. */\n  byId(id: string): ScopedObjectByIdHandle<TObjectType, TValueTypes>\n}\n\n/**\n * Principal-scoped runtime surface.\n *\n * Exposes only operations whose grants are enforceable end to end (`can.view`, `can.edit`,\n * `can.append`, `can.apply`, `can.run`, `can.observe`). Infra handles, lifecycle, auth\n * administration, and `listLinks` stay on the privileged runtime.\n */\nexport interface ScopedSixb<TOntologySources extends readonly OntologySource[]> {\n  /** The authorization context this SDK instance enforces. */\n  readonly authorization: AuthorizationContext\n\n  /** Type-safe ObjectSet narrowed to grant-enforceable operations. */\n  objects<TObjectType extends RegisteredObjectType<TOntologySources>>(\n    objectType: TObjectType\n  ): ScopedObjectSet<\n    TObjectType,\n    RegisteredValueTypes<TOntologySources>,\n    RegisteredObjectType<TOntologySources>\n  >\n\n  /** Cross-type listing narrowed to the principal's viewable object types. */\n  list(params: ListObjectsParams): Promise<ListResult<ObjectRow>>\n\n  /** Get an object by type id and primary id (server / dynamic contexts). */\n  getObject(objectTypeId: string, primaryId: string): Promise<ObjectRow | null>\n\n  /**\n   * The primary property of a type the principal may view.\n   *\n   * Asserts before it looks the type up, which is the whole point of having it here: the privileged\n   * lookup answers \"unknown type\" for an unregistered id and a primary property for a registered\n   * one, so a caller that reaches it before any grant check can tell the two apart. Every other\n   * ontology read is grant-filtered — `listObjectTypes` returns only viewable types — and this\n   * matches them.\n   */\n  getPrimaryPropertyId: SixbInstance<TOntologySources>[\"getPrimaryPropertyId\"]\n\n  // The string-based write entry points, indexed off the full runtime rather than restated, so the\n  // surface that now carries authorization cannot drift from the one it delegates to.\n  /** Upsert an object by type id. Requires `view:object` and `edit:object`. */\n  upsertObject: SixbInstance<TOntologySources>[\"upsertObject\"]\n  /** Batch upsert objects of one type. Requires `view:object` and `edit:object`. */\n  upsertObjectBatch: SixbInstance<TOntologySources>[\"upsertObjectBatch\"]\n  /** Create or update a link. Requires `edit:object` on the source, `view:object` on the target. */\n  upsertLink: SixbInstance<TOntologySources>[\"upsertLink\"]\n  /** Batch upsert links. Asserted for every item before anything commits. */\n  upsertLinkBatch: SixbInstance<TOntologySources>[\"upsertLinkBatch\"]\n  /** Remove a link. Requires `edit:object` on the source, `view:object` on the target. */\n  removeLink: SixbInstance<TOntologySources>[\"removeLink\"]\n  /** Append telemetry. Requires `append:telemetry` — and notably not `view:object`. */\n  appendTelemetry: SixbInstance<TOntologySources>[\"appendTelemetry\"]\n\n  /** Dataset definitions the principal may view. */\n  listDatasets(): readonly DatasetDefinition[]\n\n  /** Look up a viewable dataset definition; null hides ungranted datasets. */\n  getDatasetById(datasetId: string): DatasetDefinition | null\n\n  /** Action definitions the principal may apply. */\n  listActions(): readonly ActionDefinition[]\n\n  /** Look up an applicable action definition; null hides ungranted actions. */\n  getActionById(actionId: string): ActionDefinition | null\n\n  /** Request an action by id (server / dynamic contexts). Requires `can.apply`. */\n  requestAction(input: RequestActionInput): Promise<RequestActionResult>\n\n  /** Request an action by id and wait for the run to settle. Requires `can.apply`. */\n  requestActionAndWait(input: RequestActionAndWaitInput): Promise<ActionRunRecord>\n\n  /** Workflow definitions the principal may run. */\n  listWorkflows(): readonly WorkflowDefinition[]\n\n  /** Look up a runnable workflow definition; null hides workflows the principal cannot run. */\n  getWorkflowById(workflowId: string): WorkflowDefinition | null\n\n  /** Queue a workflow run. Requires `can.run`. */\n  requestWorkflowRun(input: RequestWorkflowRunInput): Promise<WorkflowRunRequestResult>\n\n  /** Sync definitions the principal may run. */\n  listSyncs(): readonly SyncDefinition[]\n\n  /** Look up a runnable sync definition; null hides syncs the principal cannot run. */\n  getSyncById(syncId: string): SyncDefinition | null\n\n  /** Queue a sync run. Requires `can.run`. */\n  requestSyncRun(input: RequestSyncRunInput): Promise<SyncRunRequestResult>\n\n  /** Pipeline definitions the principal may run. */\n  listPipelines(): readonly PipelineDefinition[]\n\n  /** Look up a runnable pipeline definition; null hides pipelines the principal cannot run. */\n  getPipelineById(pipelineId: string): PipelineDefinition | null\n\n  /** Queue a pipeline run. Requires `can.run`. */\n  requestPipelineRun(input: RequestPipelineRunInput): Promise<PipelineRunRequestResult>\n\n  /** Agent definitions the principal may run. */\n  listAgents(): readonly AgentDefinition[]\n\n  /** Look up a runnable agent definition; null hides agents the principal cannot run. */\n  getAgentById(agentId: string): AgentDefinition | null\n\n  /** Request an agent turn. Requires `can.run`. */\n  requestAgentRun(input: RequestAgentRunInput): Promise<RequestAgentRunResult>\n\n  /** List agent threads the principal owns and may run (owner + `run:agent` filtered). */\n  listThreads(input?: ScopedListAgentThreadsInput): Promise<ListAgentThreadsResult>\n\n  /** Read one agent thread the principal owns and may run; null hides inaccessible threads. */\n  getThread(threadId: string): Promise<AgentThreadRecord | null>\n\n  /** Read the domain events the principal is allowed to see (derived from grants). */\n  readEvents(input?: EventsReadInput): Promise<readonly StoredDomainEvent[]>\n}\n\nexport function createScopedSixb<TOntologySources extends readonly OntologySource[]>(\n  runtime: SixbRuntimeContext & { readonly authorization: AuthorizationContext },\n  deps: {\n    readonly datasets: {\n      readonly list: () => readonly DatasetDefinition[]\n      readonly getById: (datasetId: string) => DatasetDefinition | null\n    }\n    readonly syncs: {\n      readonly list: () => readonly SyncDefinition[]\n      readonly getById: (syncId: string) => SyncDefinition | null\n    }\n    readonly pipelines: {\n      readonly list: () => readonly PipelineDefinition[]\n      readonly getById: (pipelineId: string) => PipelineDefinition | null\n    }\n    readonly workflows: WorkflowsRuntime\n    readonly agents: AgentsRuntime\n  }\n): ScopedSixb<TOntologySources> {\n  const canListAction = (action: ActionDefinition) =>\n    isAllowed(runtime.authorization, { kind: \"action.apply\", actionId: action.id }) &&\n    (action.binding.kind === \"global\" ||\n      isAllowed(runtime.authorization, {\n        kind: \"object.view\",\n        objectTypeId: action.binding.objectType.id,\n      }))\n\n  // A scoped catalog narrows a definition source to what the principal may see.\n  // The run/view grant doubles as catalog visibility: a definition the principal\n  // cannot run/view is not worth surfacing, and hiding it also hides the\n  // (possibly ungranted) resources its shape references.\n  const scopedCatalog = <T extends { readonly id: string }>(\n    source: { list(): readonly T[]; getById(id: string): T | null },\n    toRequest: (id: string) => AuthzRequest\n  ) => {\n    const allowed = (id: string) => isAllowed(runtime.authorization, toRequest(id))\n    return {\n      list: () => source.list().filter((item) => allowed(item.id)),\n      getById: (id: string) => {\n        const item = source.getById(id)\n        return item && allowed(id) ? item : null\n      },\n    }\n  }\n\n  const datasets = scopedCatalog(deps.datasets, (datasetId) => ({\n    kind: \"dataset.view\",\n    datasetId,\n  }))\n  const syncs = scopedCatalog(deps.syncs, (syncId) => ({ kind: \"sync.run\", syncId }))\n  const pipelines = scopedCatalog(deps.pipelines, (pipelineId) => ({\n    kind: \"pipeline.run\",\n    pipelineId,\n  }))\n  const workflows = scopedCatalog(deps.workflows, (workflowId) => ({\n    kind: \"workflow.run\",\n    workflowId,\n  }))\n  const agents = scopedCatalog(deps.agents, (agentId) => ({ kind: \"agent.run\", agentId }))\n\n  const scoped = {\n    authorization: runtime.authorization,\n\n    objects<TObjectType extends RegisteredObjectType<TOntologySources>>(objectType: TObjectType) {\n      assertObjectTypeRegistered(runtime.ontology.getObjectTypesById(), objectType)\n\n      return createObjectSet<\n        TObjectType,\n        RegisteredObjectType<TOntologySources>,\n        RegisteredValueTypes<TOntologySources>\n      >({ ...runtime, objectType })\n    },\n\n    list: (params: ListObjectsParams) => objectService.listObjects(runtime, params),\n\n    getObject: async (objectTypeId: string, primaryId: string) => {\n      assertAuthorized(runtime, { kind: \"object.view\", objectTypeId })\n      return runtime.storage.objects.getByPrimaryId({\n        projectId: runtime.projectId,\n        objectTypeId,\n        primaryId,\n      })\n    },\n\n    getPrimaryPropertyId: (objectTypeId: string) => {\n      assertAuthorized(runtime, { kind: \"object.view\", objectTypeId })\n      return runtime.ontology.getPrimaryPropertyId(objectTypeId)\n    },\n\n    // Same delegation as the privileged runtime's own methods; the leaves assert the grants off\n    // `runtime.authorization`, which is present here by construction.\n    upsertObject: (objectTypeId: string, properties: Record<string, unknown>) =>\n      objectService.upsertObject(runtime, objectTypeId, properties),\n\n    upsertObjectBatch: (\n      objectTypeId: string,\n      items: readonly { properties: Record<string, unknown> }[]\n    ) => objectService.upsertObjectBatch(runtime, objectTypeId, items),\n\n    upsertLink: (\n      objectTypeId: string,\n      sourceId: string,\n      linkId: string,\n      target: { targetTypeId: string; targetId: string; properties?: Record<string, unknown> }\n    ) => objectService.upsertLink(runtime, objectTypeId, sourceId, linkId, target),\n\n    upsertLinkBatch: (\n      items: readonly {\n        objectTypeId: string\n        sourceId: string\n        linkId: string\n        target: { targetTypeId: string; targetId: string; properties?: Record<string, unknown> }\n      }[]\n    ) => objectService.upsertLinkBatch(runtime, items),\n\n    removeLink: (\n      objectTypeId: string,\n      sourceId: string,\n      linkId: string,\n      target: { targetTypeId: string; targetId: string }\n    ) => objectService.removeLink(runtime, objectTypeId, sourceId, linkId, target),\n\n    appendTelemetry: (\n      objectTypeId: string,\n      items: readonly { id: string; properties: Record<string, unknown>; at?: Date }[]\n    ) => objectService.appendTelemetry(runtime, objectTypeId, items),\n\n    listDatasets: datasets.list,\n    getDatasetById: datasets.getById,\n\n    listActions: () => runtime.actionRegistry.list().filter((action) => canListAction(action)),\n\n    getActionById: (actionId: string) => {\n      const action = runtime.actionRegistry.getById(actionId)\n      return action && canListAction(action) ? action : null\n    },\n\n    requestAction: (input: RequestActionInput) => requestRuntimeAction(runtime, input),\n\n    // Gated by the same `can.apply` assertion: `requestActionAndWait` requests through\n    // `requestAction` and then only reads the run it just created.\n    requestActionAndWait: (input: RequestActionAndWaitInput) =>\n      requestRuntimeActionAndWait(runtime, input),\n\n    listWorkflows: workflows.list,\n    getWorkflowById: workflows.getById,\n\n    requestWorkflowRun: (input: RequestWorkflowRunInput) =>\n      deps.workflows.requestByIdAs(runtime, input),\n\n    listSyncs: syncs.list,\n    getSyncById: syncs.getById,\n    requestSyncRun: async (input: RequestSyncRunInput) => {\n      // Resolve against the full registry, not the grant-filtered one: an existing sync the caller\n      // may not run has to report \"forbidden\", the same as `requestAction`. Only a genuinely unknown\n      // id is \"unknown\". `requestSyncRun` asserts the grant.\n      const sync = deps.syncs.getById(input.syncId)\n      if (!sync) throw new SyncValidationError(`[Sixb] Unknown sync '${input.syncId}'`)\n      return requestSyncRun(runtime, sync, input)\n    },\n\n    listPipelines: pipelines.list,\n    getPipelineById: pipelines.getById,\n    requestPipelineRun: async (input: RequestPipelineRunInput) => {\n      const pipeline = deps.pipelines.getById(input.pipelineId)\n      if (!pipeline) throw new PipelineError(`[Sixb] Unknown pipeline '${input.pipelineId}'`)\n      return requestPipelineRun(runtime, pipeline, input)\n    },\n\n    listAgents: agents.list,\n    getAgentById: agents.getById,\n    requestAgentRun: (input: RequestAgentRunInput) => deps.agents.requestAs(runtime, input),\n    listThreads: (input?: ScopedListAgentThreadsInput) => deps.agents.listThreadsAs(runtime, input),\n    getThread: (threadId: string) => deps.agents.getThreadAs(runtime, threadId),\n\n    // No standalone events grant: the stream is filtered to events whose\n    // subject the principal may view/apply/run. `limit` applies before this\n    // filter, so a page may return fewer events than requested — acceptable for\n    // a best-effort recent log (storage-level filtering is the planned fix).\n    readEvents: async (input?: EventsReadInput) => {\n      const events = await runtime.events.read(input)\n      return events.filter((event) => canViewEvent(runtime.authorization, event))\n    },\n  }\n\n  // Boundary cast: checking the literal against ScopedSixb<TOntologySources>\n  // triggers excessively deep ObjectSet instantiation (same constraint noted\n  // on SixbInstance). The mask only hides members of the full SDK values.\n  return scoped as unknown as ScopedSixb<TOntologySources>\n}\n",
+    "import type { SixbReadiness } from \"../maintenance\"\nimport { checkStorageSchema, isMigrationCapableStorage, type Storage } from \"../storage\"\n\nconst DEFAULT_SCHEMA_RETRY_DELAY_MS = 60_000\n\ntype SchemaReadiness =\n  | { readonly status: \"unchecked\" | \"checking\" }\n  | { readonly status: \"valid\" }\n  | { readonly status: \"invalid\"; readonly reason: string; readonly retryAt: number }\n\ninterface StorageReadinessOptions {\n  readonly schemaRetryDelayMs?: number\n  readonly now?: () => Date\n}\n\n/** Caches the process schema invariant while keeping each readiness probe lock-free. */\nexport class StorageReadiness {\n  private schema: SchemaReadiness\n  private readonly schemaRetryDelayMs: number\n  private readonly now: () => Date\n\n  constructor(\n    private readonly storage: Storage,\n    options: StorageReadinessOptions = {}\n  ) {\n    this.schemaRetryDelayMs = positiveInteger(\n      options.schemaRetryDelayMs ?? DEFAULT_SCHEMA_RETRY_DELAY_MS,\n      \"schemaRetryDelayMs\"\n    )\n    this.now = options.now ?? (() => new Date())\n    this.schema = isMigrationCapableStorage(storage) ? { status: \"unchecked\" } : { status: \"valid\" }\n  }\n\n  startSchemaValidation(): void {\n    if (this.schema.status === \"checking\" || this.schema.status === \"valid\") return\n    if (this.schema.status === \"invalid\" && this.now().getTime() < this.schema.retryAt) return\n    this.schema = { status: \"checking\" }\n    void this.validateSchema()\n  }\n\n  async check(): Promise<SixbReadiness> {\n    try {\n      await this.storage.ping()\n    } catch {\n      return {\n        status: \"unready\",\n        storage: { reachable: false, schemaValid: false },\n        reason: \"Storage is unreachable.\",\n      }\n    }\n\n    this.startSchemaValidation()\n    if (this.schema.status === \"valid\") {\n      return { status: \"ready\", storage: { reachable: true, schemaValid: true } }\n    }\n\n    return {\n      status: \"unready\",\n      storage: { reachable: true, schemaValid: false },\n      reason:\n        this.schema.status === \"invalid\"\n          ? this.schema.reason\n          : \"Storage schema validation is in progress.\",\n    }\n  }\n\n  private async validateSchema(): Promise<void> {\n    // Shared with `sixb check`, so the panel an author reads before deploying and the\n    // `/ready` a load balancer polls after cannot disagree about what \"usable\" means.\n    const result = await checkStorageSchema(this.storage)\n\n    this.schema = result.ok\n      ? { status: \"valid\" }\n      : this.invalidSchema(result.reason ?? \"Storage schema is not usable.\")\n  }\n\n  private invalidSchema(reason: string): SchemaReadiness {\n    return {\n      status: \"invalid\",\n      reason,\n      retryAt: this.now().getTime() + this.schemaRetryDelayMs,\n    }\n  }\n}\n\nfunction positiveInteger(value: number, name: string): number {\n  if (!Number.isSafeInteger(value) || value <= 0) {\n    throw new Error(`[Sixb] Storage readiness ${name} must be a positive integer.`)\n  }\n  return value\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAO,MAAM,+BAA+B,MAAM;AAAA,EACvC,OAAO;AAClB;;;ACwBO,SAAS,aAAa,CAAC,IAAkC;AAAA,EAC9D,eAAe,IAAI,YAAY;AAAA,EAC/B,OAAO,IAAI,qBAAqB,EAAE;AAAA;AAAA;AAG7B,MAAM,qBAAwC;AAAA,EACtB;AAAA,EAA7B,WAAW,CAAkB,IAAY;AAAA,IAAZ;AAAA;AAAA,EAE7B,IAAI,GAAgC;AAAA,IAClC,OAAO,IAAI,mBAAmB,KAAK,IAAI,MAAM;AAAA;AAEjD;AAAA;AAEO,MAAM,mBAAsC;AAAA,EAE9B;AAAA,EACA;AAAA,EAFnB,WAAW,CACQ,IACA,QACjB;AAAA,IAFiB;AAAA,IACA;AAAA;AAAA,EAWnB,IAAW,CAAC,QAA6E;AAAA,IACvF,IAAI,WAAW,aAAa,OAAO,OAAO,UAAU,YAAY;AAAA,MAC9D,MAAM,IAAI,uBAAuB,uDAAuD;AAAA,IAC1F;AAAA,IAEA,OAAO,IAAI,eAAe;AAAA,MACxB,IAAI,KAAK;AAAA,MACT,QAAQ,KAAK;AAAA,MACb,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR,KAAK,CAAC,OAAgB;AAAA,UACpB,OAAO,SAAS,OAAO,MAAM,KAAK,IAAI;AAAA;AAAA,MAE1C;AAAA,IACF,CAAC;AAAA;AAAA,EAGH,IAAI,GAAoC;AAAA,IACtC,OAAO,IAAI,eAAe;AAAA,MACxB,IAAI,KAAK;AAAA,MACT,QAAQ,KAAK;AAAA,MACb,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR,KAAK,CAAC,OAAgB;AAAA,UACpB,IAAI,OAAO,UAAU,UAAU;AAAA,YAC7B,MAAM,IAAI,MAAM,mCAAmC;AAAA,UACrD;AAAA,UAEA,OAAO;AAAA;AAAA,MAEX;AAAA,IACF,CAAC;AAAA;AAAA,EAGH,GAAG,GAAwC;AAAA,IACzC,OAAO,IAAI,eAAe;AAAA,MACxB,IAAI,KAAK;AAAA,MACT,QAAQ,KAAK;AAAA,MACb,MAAM;AAAA,QACJ,QAAQ;AAAA,QACR,KAAK,CAAC,OAAgB;AAAA,UACpB,IAAI,EAAE,iBAAiB,aAAa;AAAA,YAClC,MAAM,IAAI,MAAM,wCAAwC;AAAA,UAC1D;AAAA,UAEA,OAAO;AAAA;AAAA,MAEX;AAAA,IACF,CAAC;AAAA;AAEL;AAAA;AAEO,MAAM,eAAyC;AAAA,EACvB;AAAA,EAA7B,WAAW,CAAkB,OAA4B;AAAA,IAA5B;AAAA;AAAA,EAE7B,MAAM,CAAC,QAA8D;AAAA,IACnE,IAAI,OAAO,WAAW,YAAY;AAAA,MAChC,MAAM,IAAI,uBAAuB,2CAA2C;AAAA,IAC9E;AAAA,IAEA,OAAO,IAAI,eAAe;AAAA,SACrB,KAAK;AAAA,MACR;AAAA,IACF,CAAC;AAAA;AAAA,EAGH,cAAc,CAAC,UAAgF;AAAA,IAC7F,IAAI,OAAO,aAAa,YAAY;AAAA,MAClC,MAAM,IAAI,uBAAuB,mDAAmD;AAAA,IACtF;AAAA,IAEA,OAAO,IAAI,eAAe;AAAA,SACrB,KAAK;AAAA,MACR,gBAAgB;AAAA,IAClB,CAAC;AAAA;AAAA,EAGH,MAA6B,CAC3B,QACuC;AAAA,IACvC,IAAI,OAAO,WAAW,YAAY;AAAA,MAChC,MAAM,IAAI,uBAAuB,2CAA2C;AAAA,IAC9E;AAAA,IAEA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,IAAI,KAAK,MAAM;AAAA,MACf,QAAQ,KAAK,MAAM;AAAA,MACnB,MAAM,KAAK,MAAM;AAAA,MACjB,gBAAgB,KAAK,MAAM;AAAA,MAC3B,QAAQ,KAAK,MAAM;AAAA,MACnB;AAAA,IACF;AAAA;AAEJ;AAEA,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,CAAC,MAAM,KAAK,GAAG;AAAA,IACjB,MAAM,IAAI,uBAAuB,UAAU,0BAA0B;AAAA,EACvE;AAAA;;AChJK,SAAS,gBAAgB,CAAC,SAEuB;AAAA,EACtD,OAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU,QAAQ;AAAA,IAClB,OAAO,GAAG;AAAA,MACR,OAAO,EAAE,MAAM,UAAU;AAAA;AAAA,EAE7B;AAAA;;ACbK,SAAS,gBAAgB,CAAC,YAE/B;AAAA,EACA,MAAM,aAAkC,CAAC;AAAA,EACzC,MAAM,SAAS,IAAI;AAAA,EAEnB,WAAW,aAAa,YAAY;AAAA,IAClC,MAAM,WAAW,UAAU,QAAQ,YAAY,CAAC;AAAA,IAChD,IAAI,CAAC,MAAM,QAAQ,QAAQ,GAAG;AAAA,MAC5B,MAAM,IAAI,uBACR,qBAAqB,UAAU,8CACjC;AAAA,IACF;AAAA,IAEA,MAAM,MAAM,IAAI;AAAA,IAChB,WAAW,WAAW,UAAU;AAAA,MAC9B,mBAAmB,UAAU,IAAI,OAAO;AAAA,MAExC,IAAI,IAAI,IAAI,QAAQ,EAAE,GAAG;AAAA,QACvB,MAAM,IAAI,uBACR,gCAAgC,QAAQ,sBAAsB,UAAU,MAC1E;AAAA,MACF;AAAA,MACA,IAAI,IAAI,QAAQ,EAAE;AAAA,MAElB,MAAM,QAAQ,aAAa,UAAU,IAAI,QAAQ,EAAE;AAAA,MACnD,MAAM,YAAY,OAAO,IAAI,KAAK;AAAA,MAClC,IAAI,WAAW;AAAA,QACb,MAAM,IAAI,uBACR,mCAAmC,0BAA0B,UAAU,UAAU,YAAY,UAAU,MACzG;AAAA,MACF;AAAA,MAEA,MAAM,oBAAoB;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MAEA,OAAO,IAAI,OAAO,iBAAiB;AAAA,MACnC,WAAW,KAAK,iBAAiB;AAAA,IACnC;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACL,UAAU;AAAA,EACZ;AAAA;AAGK,SAAS,YAAY,CAAC,aAAqB,WAA2B;AAAA,EAC3E,OAAO,iBAAiB,eAAe;AAAA;AAGzC,SAAS,kBAAkB,CACzB,aACA,SACsC;AAAA,EACtC,IAAI,CAAC,SAAS,OAAO,GAAG;AAAA,IACtB,MAAM,IAAI,uBAAuB,qBAAqB,sCAAsC;AAAA,EAC9F;AAAA,EAEA,IAAI,QAAQ,SAAS,WAAW;AAAA,IAC9B,MAAM,IAAI,uBACR,qBAAqB,+DACvB;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,QAAQ,OAAO,YAAY,CAAC,QAAQ,GAAG,KAAK,GAAG;AAAA,IACxD,MAAM,IAAI,uBACR,qBAAqB,4CACvB;AAAA,EACF;AAAA,EAEA,IAAI,QAAQ,WAAW,QAAQ;AAAA,IAC7B,MAAM,IAAI,uBACR,mBAAmB,eAAe,QAAQ,2BAC5C;AAAA,EACF;AAAA,EAEA,IAAI,CAAC,SAAS,QAAQ,IAAI,GAAG;AAAA,IAC3B,MAAM,IAAI,uBACR,mBAAmB,eAAe,QAAQ,uBAC5C;AAAA,EACF;AAAA,EAEA,IACE,QAAQ,KAAK,WAAW,UACxB,QAAQ,KAAK,WAAW,UACxB,QAAQ,KAAK,WAAW,OACxB;AAAA,IACA,MAAM,IAAI,uBACR,mBAAmB,eAAe,QAAQ,6CAC5C;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,QAAQ,KAAK,UAAU,YAAY;AAAA,IAC5C,MAAM,IAAI,uBACR,mBAAmB,eAAe,QAAQ,4CAC5C;AAAA,EACF;AAAA,EAEA,IAAI,QAAQ,WAAW,aAAa,OAAO,QAAQ,WAAW,YAAY;AAAA,IACxE,MAAM,IAAI,uBACR,mBAAmB,eAAe,QAAQ,gCAC5C;AAAA,EACF;AAAA,EAEA,IAAI,QAAQ,mBAAmB,aAAa,OAAO,QAAQ,mBAAmB,YAAY;AAAA,IACxF,MAAM,IAAI,uBACR,mBAAmB,eAAe,QAAQ,wCAC5C;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,QAAQ,WAAW,YAAY;AAAA,IACxC,MAAM,IAAI,uBACR,mBAAmB,eAAe,QAAQ,gCAC5C;AAAA,EACF;AAAA;AAGF,SAAS,QAAQ,CAAC,OAAkD;AAAA,EAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;;ACxFrE,MAAM,+BAA+B,MAAM;AAAA,EACvC,OAAO;AAClB;AAUO,SAAS,0BAAuC,CACrD,SACA,SACkC;AAAA,EAClC,IAAI,QAAQ;AAAA,IAAY,OAAO,EAAE,YAAY,QAAQ,WAAW;AAAA,EAEhE,IAAI,CAAC,QAAQ,iBAAiB;AAAA,IAC5B,MAAM,IAAI,uBACR,IAAI,QAAQ,iDAAiD,QAAQ,wBACnE,0FACA,OAAO,QAAQ,6BAA6B,QAAQ,6BACxD;AAAA,EACF;AAAA,EAEA,OAAO,EAAE,iBAAiB,KAAK;AAAA;AAO1B,SAAS,qBAAkC,CAChD,SACA,cACM;AAAA,EACN,IAAI,aAAa;AAAA,IAAY;AAAA,EAE7B,QAAQ,KACN,IAAI,QAAQ,cAAc,QAAQ,mBAAmB,QAAQ,6BAC3D,8EACA,OAAO,QAAQ,sCACnB;AAAA;;AChFF,oBAAS;;;ACQT;;;ACAO,MAAM,iBAAiB;AAAA,EAKT;AAAA,EAJF,kBAAkB,IAAI;AAAA,EACtB,mBAAmB,IAAI;AAAA,EAExC,WAAW,CACQ,WACjB,aACA;AAAA,IAFiB;AAAA,IAGjB,WAAW,cAAc,aAAa;AAAA,MACpC,IAAI,KAAK,gBAAgB,IAAI,WAAW,EAAE,GAAG;AAAA,QAC3C,MAAM,IAAI,eAAe,2BAA2B,WAAW,IAAI;AAAA,MACrE;AAAA,MAEA,KAAK,gBAAgB,IAAI,WAAW,IAAI,UAAU;AAAA,IACpD;AAAA;AAAA,EAGF,IAAI,GAAmC;AAAA,IACrC,OAAO,CAAC,GAAG,KAAK,gBAAgB,OAAO,CAAC;AAAA;AAAA,EAG1C,OAAO,CAAC,IAAwC;AAAA,IAC9C,OAAO,KAAK,gBAAgB,IAAI,EAAE,KAAK;AAAA;AAAA,OAGnC,QAA0C,CAC9C,YACoC;AAAA,IACpC,MAAM,uBAAuB,KAAK,gBAAgB,IAAI,WAAW,EAAE;AAAA,IAEnE,IAAI,CAAC,sBAAsB;AAAA,MACzB,MAAM,IAAI,uBAAuB,WAAW,EAAE;AAAA,IAChD;AAAA,IAEA,IAAI,yBAAyB,YAAY;AAAA,MACvC,MAAM,IAAI,eACR,cAAc,WAAW,gDAC3B;AAAA,IACF;AAAA,IAEA,IAAI,QAAQ,KAAK,iBAAiB,IAAI,UAAU;AAAA,IAChD,IAAI,CAAC,OAAO;AAAA,MACV,MAAM,aAAa,IAAI;AAAA,MACvB,MAAM,gBAAgB,QAAQ,QAC5B,WAAW,QAAQ,QAAQ;AAAA,QACzB,WAAW,KAAK;AAAA,QAChB,aAAa,WAAW;AAAA,QACxB,QAAQ,WAAW;AAAA,MACrB,CAAC,CACH;AAAA,MAEA,QAAQ,EAAE,YAAY,cAAc;AAAA,MACpC,KAAK,iBAAiB,IAAI,YAAY,KAAK;AAAA,IAC7C;AAAA,IAEA,IAAI;AAAA,MACF,OAAQ,MAAM,MAAM;AAAA,MACpB,OAAO,OAAO;AAAA,MACd,IAAI,KAAK,iBAAiB,IAAI,UAAU,MAAM,OAAO;AAAA,QACnD,KAAK,iBAAiB,OAAO,UAAU;AAAA,MACzC;AAAA,MACA,MAAM;AAAA;AAAA;AAAA,OAIJ,cAAa,GAAkB;AAAA,IACnC,MAAM,oBAAoB,CAAC,GAAG,KAAK,iBAAiB,QAAQ,CAAC;AAAA,IAC7D,KAAK,iBAAiB,MAAM;AAAA,IAE5B,YAAY,YAAY,UAAU,mBAAmB;AAAA,MACnD,MAAM,KAAK,gBAAgB,YAAY,KAAK;AAAA,IAC9C;AAAA;AAAA,OAGY,gBAAe,CAC3B,YACA,OACe;AAAA,IACf,MAAM,WAAW,MAAM;AAAA,IAEvB,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,SAAS,MAAM,MAAM;AAAA,MACrB,MAAM;AAAA,MACN;AAAA;AAAA,IAGF,IAAI,OAAO,WAAW,QAAQ,eAAe,YAAY;AAAA,MACvD,MAAM,WAAW,QAAQ,WAAW,MAAe;AAAA,IACrD;AAAA;AAEJ;;;ACzFA,IAAM,sBAAsB;AAC5B,IAAM,uBAAuB,KAAK,KAAK;AACvC,IAAM,wBAAwB;AAC9B,IAAM,8BAA8B;AACpC,IAAM,6BAA6B;AACnC,IAAM,6BAA6B;AAAA;AAY5B,MAAM,oBAAoB;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS,IAAI;AAAA,EACtB,QAA8C;AAAA,EAC9C,OAA6B;AAAA,EAC7B,WAAiC;AAAA,EACjC;AAAA,EAER,WAAW,CAAC,cAA+C;AAAA,IACzD,eAAe,aAAa,WAAW,WAAW;AAAA,IAClD,MAAM,UAAU,aAAa,WAAW,CAAC;AAAA,IACzC,KAAK,YAAY,aAAa;AAAA,IAC9B,KAAK,UAAU,aAAa;AAAA,IAC5B,KAAK,aAAa,aAAa;AAAA,IAC/B,KAAK,aAAa,gBAAgB,QAAQ,cAAc,qBAAqB,YAAY;AAAA,IACzF,KAAK,6BAA6B,mBAChC,QAAQ,8BAA8B,sBACtC,4BACF;AAAA,IACA,KAAK,4BAA4B,mBAC/B,QAAQ,6BAA6B,sBACrC,2BACF;AAAA,IACA,KAAK,eAAe,gBAClB,QAAQ,gBAAgB,uBACxB,cACF;AAAA,IACA,KAAK,oBAAoB,mBACvB,QAAQ,qBAAqB,6BAC7B,mBACF;AAAA,IACA,KAAK,MAAM,aAAa,QAAQ,MAAM,IAAI;AAAA,IAC1C,KAAK,UACH,aAAa,YACZ,CAAC,UAAU,QAAQ,MAAM,sCAAsC,KAAK;AAAA,IACvE,KAAK,WAAW,cAAc,KAAK,UAAU;AAAA;AAAA,OAIzC,MAAK,GAAuC;AAAA,IAChD,IAAI,KAAK;AAAA,MAAU,MAAM,KAAK;AAAA,IAC9B,MAAM,QAAQ,OAAO,4BAA4B;AAAA,IACjD,MAAM,gBAAgB,KAAK,OAAO,SAAS;AAAA,IAC3C,KAAK,OAAO,IAAI,KAAK;AAAA,IACrB,IAAI;AAAA,MAAe,KAAK,gBAAgB;AAAA,IAExC,IAAI,WAAW;AAAA,IACf,OAAO;AAAA,MACL,MAAM,YAAY;AAAA,QAChB,IAAI;AAAA,UAAU;AAAA,QACd,WAAW;AAAA,QACX,KAAK,OAAO,OAAO,KAAK;AAAA,QACxB,IAAI,KAAK,OAAO,SAAS;AAAA,UAAG,MAAM,KAAK,SAAS;AAAA;AAAA,IAEpD;AAAA;AAAA,EAIF,MAAM,GAAkB;AAAA,IACtB,KAAK,SAAS,KAAK,QAAQ,EAAE,QAAQ,MAAM;AAAA,MACzC,KAAK,OAAO;AAAA,KACb;AAAA,IACD,OAAO,KAAK;AAAA;AAAA,OAIR,KAAI,GAAkB;AAAA,IAC1B,KAAK,OAAO,MAAM;AAAA,IAClB,MAAM,KAAK,SAAS;AAAA;AAAA,EAGtB,WAAW,GAAgC;AAAA,IACzC,OAAO,gBAAgB,KAAK,QAAQ;AAAA;AAAA,EAGtC,oBAAoB,GAA8B;AAAA,IAChD,MAAM,WAAW,KAAK,YAAY;AAAA,IAClC,MAAM,iBAAiB,gBAAgB,SAAS,eAAe,SAAS,eAAe;AAAA,IACvF,MAAM,UACJ,mBAAmB,QACnB,KAAK,IAAI,EAAE,QAAQ,IAAI,KAAK,MAAM,cAAc,IAAI,KAAK,aAAa;AAAA,IACxE,MAAM,kBAAkB,SAAS,QAAQ,mBAAmB;AAAA,IAC5D,MAAM,iBACJ,oBAAoB,QACpB,KAAK,IAAI,EAAE,QAAQ,IAAI,KAAK,MAAM,eAAe,IAAI,KAAK,aAAa;AAAA,IACzE,MAAM,qBAAqB,SAAS,QAAQ,eAAe,MAAM;AAAA,IACjE,MAAM,WACJ,SAAS,uBAAuB,8BAChC,qBACA,kBACA;AAAA,IACF,OAAO,EAAE,QAAQ,WAAW,aAAa,MAAM,aAAa,SAAS;AAAA;AAAA,EAG/D,eAAe,GAAS;AAAA,IACzB,KAAK,OAAO,EACd,MAAM,CAAC,UAAU,KAAK,YAAY,KAAK,CAAC,EACxC,QAAQ,MAAM,KAAK,iBAAiB,CAAC;AAAA;AAAA,OAG5B,QAAO,GAAkB;AAAA,IACrC,MAAM,UAAU,KAAK,IAAI;AAAA,IACzB,KAAK,WAAW,KAAK,KAAK,UAAU,SAAS,MAAM,eAAe,QAAQ,YAAY,EAAE;AAAA,IAExF,MAAM,WAAsB,CAAC;AAAA,IAC7B,MAAM,eAAe,MAAM,KAAK,WAAW,MAAM,GAAG,QAAQ;AAAA,IAC5D,MAAM,UAAU,MAAM,KAAK,mBAAmB,SAAS,QAAQ;AAAA,IAC/D,QAAQ,QAAQ,oBAAoB,MAAM,KAAK,yBAAyB,QAAQ;AAAA,IAChF,KAAK,aAAa,EAAE,SAAS,UAAU,SAAS,QAAQ,gBAAgB,CAAC;AAAA;AAAA,OAG7D,mBAAkB,CAC9B,SACA,UAC6C;AAAA,IAC7C,MAAM,6BAA6B,MAAM,eACvC,MACE,KAAK,QAAQ,SAAS,OAAO,eAAe;AAAA,MAC1C,WAAW,KAAK;AAAA,MAChB,iBAAiB,IAAI,KACnB,QAAQ,QAAQ,IAAI,KAAK,0BAC3B,EAAE,YAAY;AAAA,MACd,OAAO,KAAK;AAAA,IACd,CAAC,GACH,UACA,CACF;AAAA,IACA,MAAM,kBAAkB,MAAM,eAC5B,MACE,KAAK,QAAQ,SAAS,QAAQ,gBAAgB;AAAA,MAC5C,WAAW,KAAK;AAAA,MAChB,gBAAgB,IAAI,KAClB,QAAQ,QAAQ,IAAI,KAAK,yBAC3B,EAAE,YAAY;AAAA,MACd,OAAO,KAAK;AAAA,IACd,CAAC,GACH,UACA,EAAE,aAAa,GAAG,yBAAyB,EAAE,CAC/C;AAAA,IAEA,OAAO;AAAA,MACL;AAAA,MACA,2BAA2B,gBAAgB;AAAA,MAC3C,uCAAuC,gBAAgB;AAAA,IACzD;AAAA;AAAA,OAGY,yBAAwB,CAAC,UAGpC;AAAA,IACD,MAAM,SAAS,MAAM,eACnB,MAAM,KAAK,QAAQ,SAAS,OAAO,UAAU,EAAE,WAAW,KAAK,UAAU,CAAC,GAC1E,UACA,KAAK,SAAS,MAChB;AAAA,IACA,MAAM,kBAAkB,MAAM,eAC5B,MAAM,KAAK,QAAQ,SAAS,QAAQ,kBAAkB,EAAE,WAAW,KAAK,UAAU,CAAC,GACnF,UACA,KAAK,SAAS,eAChB;AAAA,IACA,OAAO,EAAE,QAAQ,iBAAiB,gBAAgB;AAAA;AAAA,EAG5C,YAAY,CAAC,OAMZ;AAAA,IACP,MAAM,YAAY,KAAK,IAAI;AAAA,IAC3B,MAAM,UACJ,MAAM,SAAS,SAAS,IACpB,IAAI,eAAe,MAAM,UAAU,0BAA0B,IAC7D;AAAA,IACN,KAAK,WAAW;AAAA,MACd,SAAS;AAAA,MACT,YAAY,KAAK;AAAA,MACjB,eAAe,MAAM,QAAQ,YAAY;AAAA,MACzC,iBAAiB,UAAU,YAAY;AAAA,MACvC,gBAAgB,KAAK,IAAI,GAAG,UAAU,QAAQ,IAAI,MAAM,QAAQ,QAAQ,CAAC;AAAA,MACzE,qBAAqB,UAAU,KAAK,SAAS,sBAAsB,IAAI;AAAA,MACvE,WAAW,UAAU,aAAa,OAAO,IAAI;AAAA,MAC7C,QAAQ,MAAM;AAAA,MACd,iBAAiB,MAAM;AAAA,MACvB,SAAS,MAAM;AAAA,IACjB;AAAA,IACA,IAAI;AAAA,MAAS,KAAK,YAAY,OAAO;AAAA;AAAA,EAG/B,gBAAgB,GAAS;AAAA,IAC/B,IAAI,KAAK,OAAO,SAAS,KAAK,KAAK,UAAU;AAAA,MAAM;AAAA,IACnD,KAAK,QAAQ,WAAW,MAAM;AAAA,MAC5B,KAAK,QAAQ;AAAA,MACb,IAAI,KAAK,OAAO,SAAS;AAAA,QAAG;AAAA,MACvB,KAAK,OAAO,EACd,MAAM,CAAC,UAAU,KAAK,YAAY,KAAK,CAAC,EACxC,QAAQ,MAAM,KAAK,iBAAiB,CAAC;AAAA,OACvC,KAAK,UAAU;AAAA,IAClB,KAAK,MAAM,QAAQ;AAAA;AAAA,EAGb,QAAQ,GAAkB;AAAA,IAChC,IAAI,KAAK;AAAA,MAAU,OAAO,KAAK;AAAA,IAC/B,IAAI,KAAK,UAAU,MAAM;AAAA,MACvB,aAAa,KAAK,KAAK;AAAA,MACvB,KAAK,QAAQ;AAAA,IACf;AAAA,IACA,MAAM,aAAa,KAAK,QAAQ,QAAQ,QAAQ;AAAA,IAChD,MAAM,WAAW,cAAc,YAAY,KAAK,iBAAiB,EAAE,KAAK,CAAC,YAAY;AAAA,MACnF,IAAI,CAAC,SAAS;AAAA,QACZ,KAAK,YACH,IAAI,MAAM,mDAAmD,KAAK,sBAAsB,CAC1F;AAAA,MACF;AAAA,KACD;AAAA,IACD,KAAK,WAAW,SAAS,QAAQ,MAAM;AAAA,MACrC,KAAK,WAAW;AAAA,KACjB;AAAA,IACD,OAAO,KAAK;AAAA;AAAA,EAGN,WAAW,CAAC,OAAsB;AAAA,IACxC,IAAI;AAAA,MACF,KAAK,QAAQ,KAAK;AAAA,MAClB,MAAM;AAAA;AAIZ;AAEA,SAAS,aAAa,CAAC,YAAiD;AAAA,EACtE,OAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,IACA,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,gBAAgB;AAAA,IAChB,qBAAqB;AAAA,IACrB,WAAW;AAAA,IACX,QAAQ;AAAA,IACR,iBAAiB;AAAA,IACjB,SAAS;AAAA,EACX;AAAA;AAGF,SAAS,eAAe,CAAC,OAAe,MAAsB;AAAA,EAC5D,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,SAAS,GAAG;AAAA,IAC9C,MAAM,IAAI,MAAM,+BAA+B,kCAAkC;AAAA,EACnF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,kBAAkB,CAAC,OAAe,MAAsB;AAAA,EAC/D,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAAG;AAAA,IAC7C,MAAM,IAAI,MAAM,+BAA+B,qCAAqC;AAAA,EACtF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,cAAc,CAAC,OAAe,MAAoB;AAAA,EACzD,IAAI,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,IAC7B,MAAM,IAAI,MAAM,+BAA+B,yBAAyB;AAAA,EAC1E;AAAA;AAGF,SAAS,YAAY,CAAC,OAAwB;AAAA,EAC5C,IAAI,iBAAiB,gBAAgB;AAAA,IACnC,OAAO,CAAC,GAAG,MAAM,MAAM,EAAE,IAAI,YAAY,EAAE,KAAK,KAAK,EAAE,MAAM,GAAG,IAAK;AAAA,EACvE;AAAA,EACA,MAAM,UAAU,iBAAiB,QAAQ,GAAG,MAAM,SAAS,MAAM,YAAY,OAAO,KAAK;AAAA,EACzF,OAAO,QAAQ,MAAM,GAAG,IAAK;AAAA;AAG/B,SAAS,eAAe,CAAC,MAAqB,OAAqC;AAAA,EACjF,IAAI,SAAS;AAAA,IAAM,OAAO;AAAA,EAC1B,IAAI,UAAU;AAAA,IAAM,OAAO;AAAA,EAC3B,OAAO,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,KAAK,IAAI,OAAO;AAAA;AAGxD,eAAe,aAAa,CAAC,SAAwB,WAAqC;AAAA,EACxF,IAAI;AAAA,EACJ,MAAM,WAAW,IAAI,QAAe,CAAC,YAAY;AAAA,IAC/C,QAAQ,WAAW,MAAM,QAAQ,KAAK,GAAG,SAAS;AAAA,GACnD;AAAA,EACD,MAAM,SAAS,MAAM,QAAQ,KAAK;AAAA,IAChC,QAAQ,KACN,MAAM,MACN,MAAM,IACR;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACD,IAAI,UAAU;AAAA,IAAW,aAAa,KAAK;AAAA,EAC3C,OAAO;AAAA;AAST,eAAe,cAAiB,CAC9B,KACA,UACA,UACwB;AAAA,EACxB,IAAI;AAAA,IACF,OAAO,MAAM,IAAI;AAAA,IACjB,OAAO,OAAO;AAAA,IACd,SAAS,KAAK,KAAK;AAAA,IACnB,OAAO;AAAA;AAAA;;AClVX,MAAM,wBAAoD;AAAA,EAErC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAJnB,WAAW,CACQ,YACA,WACA,wBACA,eACjB;AAAA,IAJiB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,EAGnB,UAAU,GAA+B;AAAA,IACvC,OAAO,CAAC,GAAG,KAAK,WAAW,OAAO,CAAC;AAAA;AAAA,EAGrC,YAAY,CAAC,SAAyC;AAAA,IACpD,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK;AAAA;AAAA,EAGzC,SAAS,GAA8B;AAAA,IACrC,OAAO,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA;AAAA,EAGpC,WAAW,CAAC,QAAuC;AAAA,IACjD,OAAO,KAAK,UAAU,IAAI,MAAM,KAAK;AAAA;AAAA,EAGvC,iBAAiB,GAA4B;AAAA,IAC3C,OAAO,KAAK;AAAA;AAAA,EAGd,sBAAsB,GAA0C;AAAA,IAC9D,OAAO,CAAC,GAAG,KAAK,uBAAuB,OAAO,CAAC;AAAA;AAAA,EAGjD,uBAAuB,CAAC,UAAqD;AAAA,IAC3E,OAAO,KAAK,uBAAuB,IAAI,QAAQ,KAAK;AAAA;AAExD;AAEO,SAAS,6BAA6B,CAAC,OAazB;AAAA,EACnB,MAAM,sBAAsB,qCAAqC;AAAA,IAC/D,QAAQ,MAAM,UAAU,CAAC;AAAA,IACzB,OAAO,MAAM,SAAS,CAAC;AAAA,IACvB,oBAAoB,MAAM,sBAAsB,CAAC;AAAA,IACjD,gBAAgB,MAAM,kBAAkB;AAAA,IACxC,eAAe,MAAM;AAAA,IACrB,YAAY,MAAM;AAAA,IAClB,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,SAAS,MAAM;AAAA,IACf,aAAa,MAAM;AAAA,IACnB,UAAU,MAAM;AAAA,IAChB,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC;AAAA,EACjC,CAAC;AAAA,EAED,MAAM,WAAW;AAAA,IACf,gBAAgB,MAAM,kBAAkB;AAAA,IACxC,eAAe,MAAM,iBAAiB,IAAI;AAAA,IAC1C,YAAY,MAAM,cAAc,IAAI;AAAA,IACpC,WAAW,MAAM,aAAa,IAAI;AAAA,IAClC,aAAa,MAAM,eAAe,IAAI;AAAA,IACtC,SAAS,MAAM,WAAW,IAAI;AAAA,IAC9B,aAAa,MAAM,eAAe,IAAI;AAAA,IACtC,UAAU,MAAM,YAAY,IAAI;AAAA,IAChC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC;AAAA,IAC/B,aAAa,MAAM,gBAAgB,MAAM,CAAC;AAAA,EAC5C;AAAA,EACA,MAAM,gBAAgB,oBAAoB,MAAM,IAAI,CAAC,UAAU;AAAA,IAC7D,IAAI,KAAK;AAAA,IACT,mBAAmB,KAAK;AAAA,IACxB,QAAQ,kBAAkB,MAAM,QAAQ;AAAA,EAC1C,EAAE;AAAA,EAEF,OAAO,IAAI,wBACT,oBAAoB,YACpB,oBAAoB,WACpB,oBAAoB,wBACpB,aACF;AAAA;;;ACxFK,SAAS,kCAAkC,CAAC,OAI1C;AAAA,EACP,WAAW,QAAQ,MAAM,OAAO;AAAA,IAC9B,MAAM,UAAU,MAAM,aAAa,IAAI,KAAK,OAAO,QAAQ,EAAE;AAAA,IAC7D,IAAI,KAAK,OAAO,SAAS,WAAW,SAAS,eAAe,WAAW;AAAA,MACrE,MAAM,IAAI,oBACR,sBAAsB,KAAK,wBAAwB,KAAK,OAAO,QAAQ,sCACzE;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,uBAAuB,IAAI;AAAA,EACjC,WAAW,UAAU,eAAe,MAAM,OAAO,MAAM,SAAS,GAAG;AAAA,IACjE,MAAM,UAAU,MAAM,aAAa,IAAI,OAAO,SAAS;AAAA,IACvD,IAAI,SAAS,eAAe;AAAA,MAAW;AAAA,IAEvC,MAAM,QAAQ,qBAAqB,IAAI,OAAO,SAAS;AAAA,IACvD,IAAI,CAAC,OAAO;AAAA,MACV,qBAAqB,IAAI,OAAO,WAAW,MAAM;AAAA,MACjD;AAAA,IACF;AAAA,IAEA,MAAM,IAAI,oBACR,yBAAyB,OAAO,+CAA+C,MAAM,aAAa,OAAO,gDAC3G;AAAA,EACF;AAAA;AAGK,SAAS,iCAAiC,CAAC,OAGzC;AAAA,EACP,MAAM,qBAAqB,IAAI,IAC7B,MAAM,MACH,OAAO,CAAC,SAAS,KAAK,OAAO,SAAS,OAAO,EAC7C,IAAI,CAAC,SAAS,CAAC,KAAK,OAAO,QAAQ,IAAI,IAAI,CAAU,CAC1D;AAAA,EAEA,WAAW,cAAc,MAAM,sBAAsB;AAAA,IACnD,MAAM,OAAO,mBAAmB,IAAI,WAAW,SAAS;AAAA,IACxD,IAAI,CAAC;AAAA,MAAM;AAAA,IACX,MAAM,IAAI,oBACR,gCAAgC,WAAW,0CAA0C,WAAW,yBAAyB,KAAK,2EAChI;AAAA,EACF;AAAA;AAGF,UAAU,cAAc,CACtB,OACA,WACyB;AAAA,EACzB,WAAW,QAAQ,OAAO;AAAA,IACxB,MAAM,EAAE,WAAW,KAAK,OAAO,QAAQ,IAAI,OAAO,SAAS,KAAK,MAAM;AAAA,EACxE;AAAA,EACA,WAAW,YAAY,WAAW;AAAA,IAChC,WAAW,QAAQ,SAAS,MAAM,OAAO;AAAA,MACvC,MAAM;AAAA,QACJ,WAAW,KAAK,KAAK,OAAO;AAAA,QAC5B,OAAO,aAAa,SAAS,aAAa,KAAK,KAAK;AAAA,MACtD;AAAA,IACF;AAAA,EACF;AAAA;;;AC2KK,SAAS,gBAAoE,CAClF,SACA,MAgB8B;AAAA,EAC9B,MAAM,gBAAgB,CAAC,WACrB,UAAU,QAAQ,eAAe,EAAE,MAAM,gBAAgB,UAAU,OAAO,GAAG,CAAC,MAC7E,OAAO,QAAQ,SAAS,YACvB,UAAU,QAAQ,eAAe;AAAA,IAC/B,MAAM;AAAA,IACN,cAAc,OAAO,QAAQ,WAAW;AAAA,EAC1C,CAAC;AAAA,EAML,MAAM,gBAAgB,CACpB,QACA,cACG;AAAA,IACH,MAAM,UAAU,CAAC,OAAe,UAAU,QAAQ,eAAe,UAAU,EAAE,CAAC;AAAA,IAC9E,OAAO;AAAA,MACL,MAAM,MAAM,OAAO,KAAK,EAAE,OAAO,CAAC,SAAS,QAAQ,KAAK,EAAE,CAAC;AAAA,MAC3D,SAAS,CAAC,OAAe;AAAA,QACvB,MAAM,OAAO,OAAO,QAAQ,EAAE;AAAA,QAC9B,OAAO,QAAQ,QAAQ,EAAE,IAAI,OAAO;AAAA;AAAA,IAExC;AAAA;AAAA,EAGF,MAAM,WAAW,cAAc,KAAK,UAAU,CAAC,eAAe;AAAA,IAC5D,MAAM;AAAA,IACN;AAAA,EACF,EAAE;AAAA,EACF,MAAM,QAAQ,cAAc,KAAK,OAAO,CAAC,YAAY,EAAE,MAAM,YAAY,OAAO,EAAE;AAAA,EAClF,MAAM,YAAY,cAAc,KAAK,WAAW,CAAC,gBAAgB;AAAA,IAC/D,MAAM;AAAA,IACN;AAAA,EACF,EAAE;AAAA,EACF,MAAM,YAAY,cAAc,KAAK,WAAW,CAAC,gBAAgB;AAAA,IAC/D,MAAM;AAAA,IACN;AAAA,EACF,EAAE;AAAA,EACF,MAAM,SAAS,cAAc,KAAK,QAAQ,CAAC,aAAa,EAAE,MAAM,aAAa,QAAQ,EAAE;AAAA,EAEvF,MAAM,SAAS;AAAA,IACb,eAAe,QAAQ;AAAA,IAEvB,OAAmE,CAAC,YAAyB;AAAA,MAC3F,2BAA2B,QAAQ,SAAS,mBAAmB,GAAG,UAAU;AAAA,MAE5E,OAAO,gBAIL,KAAK,SAAS,WAAW,CAAC;AAAA;AAAA,IAG9B,MAAM,CAAC,WAA8B,gBAAc,YAAY,SAAS,MAAM;AAAA,IAE9E,WAAW,OAAO,cAAsB,cAAsB;AAAA,MAC5D,iBAAiB,SAAS,EAAE,MAAM,eAAe,aAAa,CAAC;AAAA,MAC/D,OAAO,QAAQ,QAAQ,QAAQ,eAAe;AAAA,QAC5C,WAAW,QAAQ;AAAA,QACnB;AAAA,QACA;AAAA,MACF,CAAC;AAAA;AAAA,IAGH,sBAAsB,CAAC,iBAAyB;AAAA,MAC9C,iBAAiB,SAAS,EAAE,MAAM,eAAe,aAAa,CAAC;AAAA,MAC/D,OAAO,QAAQ,SAAS,qBAAqB,YAAY;AAAA;AAAA,IAK3D,cAAc,CAAC,cAAsB,eACnC,gBAAc,aAAa,SAAS,cAAc,UAAU;AAAA,IAE9D,mBAAmB,CACjB,cACA,UACG,gBAAc,kBAAkB,SAAS,cAAc,KAAK;AAAA,IAEjE,YAAY,CACV,cACA,UACA,QACA,WACG,gBAAc,WAAW,SAAS,cAAc,UAAU,QAAQ,MAAM;AAAA,IAE7E,iBAAiB,CACf,UAMG,gBAAc,gBAAgB,SAAS,KAAK;AAAA,IAEjD,YAAY,CACV,cACA,UACA,QACA,WACG,gBAAc,WAAW,SAAS,cAAc,UAAU,QAAQ,MAAM;AAAA,IAE7E,iBAAiB,CACf,cACA,UACG,gBAAc,gBAAgB,SAAS,cAAc,KAAK;AAAA,IAE/D,cAAc,SAAS;AAAA,IACvB,gBAAgB,SAAS;AAAA,IAEzB,aAAa,MAAM,QAAQ,eAAe,KAAK,EAAE,OAAO,CAAC,WAAW,cAAc,MAAM,CAAC;AAAA,IAEzF,eAAe,CAAC,aAAqB;AAAA,MACnC,MAAM,SAAS,QAAQ,eAAe,QAAQ,QAAQ;AAAA,MACtD,OAAO,UAAU,cAAc,MAAM,IAAI,SAAS;AAAA;AAAA,IAGpD,eAAe,CAAC,UAA8B,cAAqB,SAAS,KAAK;AAAA,IAIjF,sBAAsB,CAAC,UACrB,qBAA4B,SAAS,KAAK;AAAA,IAE5C,eAAe,UAAU;AAAA,IACzB,iBAAiB,UAAU;AAAA,IAE3B,oBAAoB,CAAC,UACnB,KAAK,UAAU,cAAc,SAAS,KAAK;AAAA,IAE7C,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,gBAAgB,OAAO,UAA+B;AAAA,MAIpD,MAAM,OAAO,KAAK,MAAM,QAAQ,MAAM,MAAM;AAAA,MAC5C,IAAI,CAAC;AAAA,QAAM,MAAM,IAAI,oBAAoB,wBAAwB,MAAM,SAAS;AAAA,MAChF,OAAO,eAAe,SAAS,MAAM,KAAK;AAAA;AAAA,IAG5C,eAAe,UAAU;AAAA,IACzB,iBAAiB,UAAU;AAAA,IAC3B,oBAAoB,OAAO,UAAmC;AAAA,MAC5D,MAAM,WAAW,KAAK,UAAU,QAAQ,MAAM,UAAU;AAAA,MACxD,IAAI,CAAC;AAAA,QAAU,MAAM,IAAI,cAAc,4BAA4B,MAAM,aAAa;AAAA,MACtF,OAAO,mBAAmB,SAAS,UAAU,KAAK;AAAA;AAAA,IAGpD,YAAY,OAAO;AAAA,IACnB,cAAc,OAAO;AAAA,IACrB,iBAAiB,CAAC,UAAgC,KAAK,OAAO,UAAU,SAAS,KAAK;AAAA,IACtF,aAAa,CAAC,UAAwC,KAAK,OAAO,cAAc,SAAS,KAAK;AAAA,IAC9F,WAAW,CAAC,aAAqB,KAAK,OAAO,YAAY,SAAS,QAAQ;AAAA,IAM1E,YAAY,OAAO,UAA4B;AAAA,MAC7C,MAAM,SAAS,MAAM,QAAQ,OAAO,KAAK,KAAK;AAAA,MAC9C,OAAO,OAAO,OAAO,CAAC,UAAU,aAAa,QAAQ,eAAe,KAAK,CAAC;AAAA;AAAA,EAE9E;AAAA,EAKA,OAAO;AAAA;;;AC/aT,IAAM,gCAAgC;AAAA;AAa/B,MAAM,iBAAiB;AAAA,EAMT;AAAA,EALX;AAAA,EACS;AAAA,EACA;AAAA,EAEjB,WAAW,CACQ,SACjB,UAAmC,CAAC,GACpC;AAAA,IAFiB;AAAA,IAGjB,KAAK,qBAAqB,iBACxB,QAAQ,sBAAsB,+BAC9B,oBACF;AAAA,IACA,KAAK,MAAM,QAAQ,QAAQ,MAAM,IAAI;AAAA,IACrC,KAAK,SAAS,0BAA0B,OAAO,IAAI,EAAE,QAAQ,YAAY,IAAI,EAAE,QAAQ,QAAQ;AAAA;AAAA,EAGjG,qBAAqB,GAAS;AAAA,IAC5B,IAAI,KAAK,OAAO,WAAW,cAAc,KAAK,OAAO,WAAW;AAAA,MAAS;AAAA,IACzE,IAAI,KAAK,OAAO,WAAW,aAAa,KAAK,IAAI,EAAE,QAAQ,IAAI,KAAK,OAAO;AAAA,MAAS;AAAA,IACpF,KAAK,SAAS,EAAE,QAAQ,WAAW;AAAA,IAC9B,KAAK,eAAe;AAAA;AAAA,OAGrB,MAAK,GAA2B;AAAA,IACpC,IAAI;AAAA,MACF,MAAM,KAAK,QAAQ,KAAK;AAAA,MACxB,MAAM;AAAA,MACN,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,SAAS,EAAE,WAAW,OAAO,aAAa,MAAM;AAAA,QAChD,QAAQ;AAAA,MACV;AAAA;AAAA,IAGF,KAAK,sBAAsB;AAAA,IAC3B,IAAI,KAAK,OAAO,WAAW,SAAS;AAAA,MAClC,OAAO,EAAE,QAAQ,SAAS,SAAS,EAAE,WAAW,MAAM,aAAa,KAAK,EAAE;AAAA,IAC5E;AAAA,IAEA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,SAAS,EAAE,WAAW,MAAM,aAAa,MAAM;AAAA,MAC/C,QACE,KAAK,OAAO,WAAW,YACnB,KAAK,OAAO,SACZ;AAAA,IACR;AAAA;AAAA,OAGY,eAAc,GAAkB;AAAA,IAG5C,MAAM,SAAS,MAAM,mBAAmB,KAAK,OAAO;AAAA,IAEpD,KAAK,SAAS,OAAO,KACjB,EAAE,QAAQ,QAAQ,IAClB,KAAK,cAAc,OAAO,UAAU,+BAA+B;AAAA;AAAA,EAGjE,aAAa,CAAC,QAAiC;AAAA,IACrD,OAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA,SAAS,KAAK,IAAI,EAAE,QAAQ,IAAI,KAAK;AAAA,IACvC;AAAA;AAEJ;AAEA,SAAS,gBAAe,CAAC,OAAe,MAAsB;AAAA,EAC5D,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,SAAS,GAAG;AAAA,IAC9C,MAAM,IAAI,MAAM,4BAA4B,kCAAkC;AAAA,EAChF;AAAA,EACA,OAAO;AAAA;;;AN0EF,MAAM,KAEb;AAAA,EACW;AAAA,EACQ;AAAA,EACA,eAAe,IAAI;AAAA,EACnB,gBAAgB,IAAI;AAAA,EACpB,YAAY,IAAI;AAAA,EAChB,gBAAgB,IAAI;AAAA,EACpB,YAAY,IAAI;AAAA,EAChB;AAAA,EACA,kBAAkB,IAAI;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACD,mBAA4C;AAAA,EAEpD,WAAW,CAAC,SAAwC;AAAA,IAClD,wBAAwB,MAAM,QAAQ,OAAO;AAAA,IAC7C,KAAK,YAAY,QAAQ,MAAM;AAAA,IAC/B,KAAK,kBAAkB,QAAQ;AAAA,IAC/B,KAAK,SAAS,QAAQ;AAAA,IAEtB,KAAK,gBAAgB,IAAI,cAAc;AAAA,MACrC,WAAW,KAAK;AAAA,MAChB,QAAQ,KAAK;AAAA,MACb,MAAM;AAAA,IACR,CAAC;AAAA,IACD,KAAK,SAAS,KAAK;AAAA,IACnB,KAAK,OAAO,IAAI,YAAY;AAAA,MAC1B,WAAW,KAAK;AAAA,MAChB,QAAQ,KAAK;AAAA,MACb,QAAQ,QAAQ;AAAA,MAChB,eAAe,QAAQ,eAAe;AAAA,IACxC,CAAC;AAAA,IACD,KAAK,UAAU,QAAQ;AAAA,IACvB,KAAK,mBAAmB,IAAI,iBAAiB,KAAK,OAAO;AAAA,IACzD,KAAK,cAAc,QAAQ;AAAA,IAC3B,KAAK,cAAc,QAAQ;AAAA,IAC3B,KAAK,SAAS,QAAQ;AAAA,IACtB,KAAK,YAAY,QAAQ;AAAA,IACzB,KAAK,cAAc,QAAQ,QAAQ,eAAe,QAAQ,IAAI,CAAC;AAAA,IAC/D,KAAK,QAAQ,QAAQ,SAAS,CAAC;AAAA,IAG/B,KAAK,WAAW,IAAI,iBAAiB,EAAE,SAAS,KAAK,gBAAgB,CAAC;AAAA,IACtE,KAAK,iBAAiB,IAAI,eAAe,QAAQ,WAAW,CAAC,GAAG,KAAK,QAAQ;AAAA,IAC7E,MAAM,sBAAsB,IAAI,IAAI,KAAK,eAAe,KAAK,EAAE,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC;AAAA,IACzF,MAAM,SAAS,QAAQ,UAAU,CAAC;AAAA,IAClC,4BAA4B,MAAM;AAAA,IAClC,KAAK,WAAW,8BAA8B;AAAA,MAC5C,QAAQ,QAAQ,UAAU,CAAC;AAAA,MAC3B,OAAO,QAAQ,SAAS,CAAC;AAAA,MACzB,oBAAoB,QAAQ,sBAAsB,CAAC;AAAA,MACnD,eAAe,IAAI,IAAI,KAAK,SAAS,mBAAmB,EAAE,KAAK,CAAC;AAAA,MAChE,YAAY,IAAI,KAAK,QAAQ,YAAY,CAAC,GAAG,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC;AAAA,MACzE,WAAW;AAAA,MACX,aAAa,IAAI,KAAK,QAAQ,aAAa,CAAC,GAAG,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC;AAAA,MAC7E,SAAS,IAAI,KAAK,QAAQ,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAAA,MAC7D,aAAa,IAAI,KAAK,QAAQ,aAAa,CAAC,GAAG,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC;AAAA,MAC7E,UAAU,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,MAAM,EAAE,CAAC;AAAA,MACjD,aAAa,CAAC,iBAAiB,KAAK,SAAS,aAAa,YAAY;AAAA,IACxE,CAAC;AAAA,IACD,KAAK,OAAO,IAAI,YAAY;AAAA,MAC1B,WAAW,KAAK;AAAA,MAChB,SAAS,KAAK;AAAA,MACd,UAAU,KAAK;AAAA,MACf,QAAQ,QAAQ;AAAA,IAClB,CAAC;AAAA,IACD,uCAAuC,KAAK,KAAK,YAAY,GAAG,KAAK,QAAQ;AAAA,IAC7E,KAAK,mBAAmB,IAAI,iBAAiB,KAAK,WAAW,QAAQ,cAAc,CAAC,CAAC;AAAA,IACrF,MAAM,aAAa,KAAK,iBAAiB,KAAK;AAAA,IAC9C,6BAA6B,YAAY,KAAK,OAAO;AAAA,IACrD,KAAK,WAAW,iBAAiB,UAAU,EAAE;AAAA,IAE7C,WAAW,cAAc,KAAK,UAAU;AAAA,MACtC,KAAK,gBAAgB,IAAI,WAAW,OAAO,UAAU;AAAA,IACvD;AAAA,IAIA,WAAW,WAAW,QAAQ,YAAY,CAAC,GAAG;AAAA,MAC5C,wBAAwB,SAAS,CAAC,YAAY,IAAI,aAAa,OAAO,CAAC;AAAA,MAEvE,IAAI,KAAK,aAAa,IAAI,QAAQ,EAAE,GAAG;AAAA,QACrC,MAAM,IAAI,aAAa,yBAAyB,QAAQ,IAAI;AAAA,MAC9D;AAAA,MAEA,KAAK,aAAa,IAAI,QAAQ,IAAI,OAAO;AAAA,IAC3C;AAAA,IAEA,WAAW,YAAY,QAAQ,aAAa,CAAC,GAAG;AAAA,MAC9C,IAAI,KAAK,cAAc,IAAI,SAAS,EAAE,GAAG;AAAA,QACvC,MAAM,IAAI,aAAa,0BAA0B,SAAS,IAAI;AAAA,MAChE;AAAA,MACA,KAAK,cAAc,IAAI,SAAS,IAAI,QAAQ;AAAA,IAC9C;AAAA,IAEA,WAAW,QAAQ,QAAQ,SAAS,CAAC,GAAG;AAAA,MACtC,IAAI,KAAK,UAAU,IAAI,KAAK,EAAE,GAAG;AAAA,QAC/B,MAAM,IAAI,aAAa,sBAAsB,KAAK,IAAI;AAAA,MACxD;AAAA,MAEA,MAAM,UAAU,KAAK,aAAa,IAAI,KAAK,OAAO,QAAQ,EAAE;AAAA,MAC5D,IAAI,CAAC,SAAS;AAAA,QACZ,MAAM,IAAI,aACR,SAAS,KAAK,gCAAgC,KAAK,OAAO,QAAQ,0EACpE;AAAA,MACF;AAAA,MAEA,KAAK,UAAU,IAAI,KAAK,IAAI,IAAI;AAAA,IAClC;AAAA,IAEA,WAAW,YAAY,QAAQ,aAAa,CAAC,GAAG;AAAA,MAC9C,IAAI,KAAK,cAAc,IAAI,SAAS,EAAE,GAAG;AAAA,QACvC,MAAM,IAAI,aAAa,0BAA0B,SAAS,IAAI;AAAA,MAChE;AAAA,MAEA,IAAI,SAAS,MAAM,MAAM,WAAW,GAAG;AAAA,QACrC,MAAM,IAAI,aAAa,aAAa,SAAS,qCAAqC;AAAA,MACpF;AAAA,MAEA,MAAM,UAAU,IAAI;AAAA,MACpB,WAAW,QAAQ,SAAS,MAAM,OAAO;AAAA,QACvC,QAAQ,SAAS;AAAA,QACjB,IAAI,QAAQ,IAAI,KAAK,EAAE,GAAG;AAAA,UACxB,MAAM,IAAI,aACR,aAAa,SAAS,mCAAmC,KAAK,MAChE;AAAA,QACF;AAAA,QACA,QAAQ,IAAI,KAAK,EAAE;AAAA,QAEnB,YAAY,WAAW,YAAY,OAAO,QAAQ,KAAK,MAAM,GAAG;AAAA,UAC9D,IAAI,CAAC,KAAK,aAAa,IAAI,QAAQ,EAAE,GAAG;AAAA,YACtC,MAAM,IAAI,aACR,aAAa,SAAS,aAAa,KAAK,cAAc,0CAA0C,QAAQ,0EAC1G;AAAA,UACF;AAAA,QACF;AAAA,QAEA,IAAI,CAAC,KAAK,aAAa,IAAI,KAAK,OAAO,EAAE,GAAG;AAAA,UAC1C,MAAM,IAAI,aACR,aAAa,SAAS,aAAa,KAAK,gCAAgC,KAAK,OAAO,0EACtF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,cAAc,IAAI,SAAS,IAAI,QAAQ;AAAA,IAC9C;AAAA,IAEA,mCAAmC;AAAA,MACjC,cAAc,KAAK;AAAA,MACnB,OAAO,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,MAClC,WAAW,CAAC,GAAG,KAAK,cAAc,OAAO,CAAC;AAAA,IAC5C,CAAC;AAAA,IAID,uBAAuB,KAAK,OAAO,KAAK,QAAQ;AAAA,IAChD,WAAW,QAAQ,KAAK,OAAO;AAAA,MAC7B,KAAK,UAAU,IAAI,KAAK,IAAI,IAAI;AAAA,IAClC;AAAA,IAEA,2BAA2B,CAAC,GAAG,KAAK,cAAc,OAAO,CAAC,GAAG,KAAK,UAAU;AAAA,MAC1E,mBAAmB,IAAI,IAAI,KAAK,UAAU,KAAK,CAAC;AAAA,MAChD;AAAA,MACA,sBAAsB,IAAI,IAAI,KAAK,aAAa,KAAK,CAAC;AAAA,MACtD,mBAAmB,IAAI,IAAI,KAAK,UAAU,KAAK,CAAC;AAAA,MAChD,uBAAuB,IAAI,IAAI,KAAK,cAAc,KAAK,CAAC;AAAA,IAC1D,CAAC;AAAA,IACD,WAAW,QAAQ,KAAK,UAAU,OAAO,GAAG;AAAA,MAC1C,2BAA2B,QAAQ,KAAK,IAAI,KAAK,UAAU,KAAK,aAAa;AAAA,IAC/E;AAAA,IACA,WAAW,YAAY,KAAK,cAAc,OAAO,GAAG;AAAA,MAClD,2BAA2B,YAAY,SAAS,IAAI,SAAS,UAAU,KAAK,aAAa;AAAA,IAC3F;AAAA,IAEA,MAAM,YAAY,2BAA2B;AAAA,MAC3C,WAAW,QAAQ,aAAa,CAAC;AAAA,MACjC,qBAAqB,KAAK;AAAA,MAC1B;AAAA,MACA,oBAAoB,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,MAAM,EAAE,CAAC;AAAA,IAC7D,CAAC;AAAA,IAED,MAAM,cAAc,IAAI;AAAA,IACxB,WAAW,YAAY,WAAW;AAAA,MAChC,IAAI,YAAY,IAAI,SAAS,EAAE,GAAG;AAAA,QAChC,MAAM,IAAI,aAAa,0BAA0B,SAAS,IAAI;AAAA,MAChE;AAAA,MACA,YAAY,IAAI,SAAS,EAAE;AAAA,IAC7B;AAAA,IAEA,KAAK,qBAAqB,IAAI,mBAAmB;AAAA,MAC/C,aAAa,QAAQ,eAAe,CAAC;AAAA,MACrC,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,IACrB,CAAC;AAAA,IACD,kCAAkC;AAAA,MAChC,OAAO,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,MAClC,sBAAsB,KAAK,mBAAmB,yBAAyB;AAAA,IACzE,CAAC;AAAA,IACD,2BAA2B,MAAM,KAAK,kBAAkB;AAAA,IAExD,MAAM,eAAe,2BAA2B;AAAA,MAC9C,WAAW,KAAK;AAAA,MAChB,UAAU,KAAK;AAAA,MACf,aAAa,KAAK;AAAA,MAClB,SAAS,KAAK;AAAA,IAChB,CAAC;AAAA,IACD,KAAK,iBAAiB,IAAI,yBAAyB;AAAA,MACjD,WAAW,KAAK;AAAA,MAChB,SAAS,KAAK;AAAA,MACd,QAAQ,KAAK;AAAA,MACb,mBAAmB,CAAC,OAAO,YACzB,2BAA2B,MAAM,OAAO;AAAA,QACtC,WAAW,KAAK;AAAA,WACb;AAAA,MACL,CAAC;AAAA,IACL,CAAC;AAAA,IACD,KAAK,sBAAsB,IAAI,oBAAoB;AAAA,MACjD,WAAW,KAAK;AAAA,MAChB,SAAS,KAAK;AAAA,MACd,YAAY,KAAK;AAAA,MACjB,SAAS,QAAQ;AAAA,IACnB,CAAC;AAAA,IAED,KAAK,iBAAiB;AAAA,MACpB,WAAW,KAAK;AAAA,MAChB,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,SAAS,KAAK;AAAA,MACd,aAAa,KAAK;AAAA,MAClB,aAAa,KAAK;AAAA,MAClB,QAAQ,KAAK;AAAA,MACb,WAAW,KAAK;AAAA,MAChB,OAAO,KAAK;AAAA,IACd;AAAA,IACA,2BAA2B,KAAK,gBAAgB,KAAK,kBAAkB;AAAA,IACvE,MAAM,oBAAoB,8BAA8B;AAAA,MACtD;AAAA,MACA,sBAAsB,MAAM,KAAK,eAAe,OAAO;AAAA,IACzD,CAAC;AAAA,IACD,gCAAgC,MAAM,iBAAiB;AAAA,IACvD,gCAAgC,KAAK,gBAAgB,iBAAiB;AAAA,IACtE,uBAAuB,MAAM,KAAK,cAAc;AAAA,IAChD,KAAK,UAAU,IAAI,eAAe,KAAK,cAAc;AAAA,IACrD,KAAK,YAAY,IAAI,iBAAiB,KAAK,gBAAgB,SAAS;AAAA,IAEpE,MAAM,WAAW,IAAI;AAAA,IACrB,WAAW,SAAS,QAAQ;AAAA,MAC1B,IAAI,SAAS,IAAI,MAAM,EAAE,GAAG;AAAA,QAC1B,MAAM,IAAI,aAAa,uBAAuB,MAAM,IAAI;AAAA,MAC1D;AAAA,MACA,SAAS,IAAI,MAAM,EAAE;AAAA,IACvB;AAAA,IACA,6BAA6B,QAAQ,KAAK,QAAQ;AAAA,IAClD,KAAK,SAAS,IAAI,cAAc,KAAK,gBAAgB,MAAM;AAAA;AAAA,MAGzD,EAAE,GAAW;AAAA,IACf,OAAO,KAAK;AAAA;AAAA,EAGd,eAAe,GAA4C;AAAA,IACzD,OAAO,KAAK,SAAS,gBAAgB;AAAA;AAAA,EAGvC,iBAAiB,CAAC,cAA2D;AAAA,IAC3E,OAAO,KAAK,SAAS,kBAAkB,YAAY;AAAA;AAAA,EAGrD,iBAAiB,CAAC,cAAoD;AAAA,IACpE,OAAO,KAAK,SAAS,kBAAkB,YAAY;AAAA;AAAA,EAGrD,iBAAiB,GAAmC;AAAA,IAClD,OAAO,KAAK,SAAS,kBAAkB;AAAA;AAAA,EAGzC,WAAW,GAAgC;AAAA,IACzC,OAAO,KAAK,eAAe,KAAK;AAAA;AAAA,EAGlC,aAAa,CAAC,UAA2C;AAAA,IACvD,OAAO,KAAK,eAAe,QAAQ,QAAQ;AAAA;AAAA,EAG7C,iBAAiB,GAAgC;AAAA,IAC/C,OAAO,KAAK,eAAe,iBAAiB;AAAA;AAAA,EAG9C,kBAAkB,CAAC,YAAqD;AAAA,IACtE,OAAO,KAAK,eAAe,kBAAkB,UAAU;AAAA;AAAA,EAGzD,YAAY,GAAiC;AAAA,IAC3C,OAAO,CAAC,GAAG,KAAK,aAAa,OAAO,CAAC;AAAA;AAAA,EAGvC,cAAc,CAAC,WAA6C;AAAA,IAC1D,OAAO,KAAK,aAAa,IAAI,SAAS,KAAK;AAAA;AAAA,EAG7C,SAAS,GAA8B;AAAA,IACrC,OAAO,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA;AAAA,EAGpC,WAAW,CAAC,QAAuC;AAAA,IACjD,OAAO,KAAK,UAAU,IAAI,MAAM,KAAK;AAAA;AAAA,EAGvC,aAAa,GAAkC;AAAA,IAC7C,OAAO,CAAC,GAAG,KAAK,cAAc,OAAO,CAAC;AAAA;AAAA,EAGxC,eAAe,CAAC,YAA+C;AAAA,IAC7D,OAAO,KAAK,cAAc,IAAI,UAAU,KAAK;AAAA;AAAA,EAO/C,aAAa,CAAC,OAAyD;AAAA,IACrE,OAAO,cAAqB,KAAK,gBAAgB,KAAK;AAAA;AAAA,EAGxD,oBAAoB,CAAC,OAA4D;AAAA,IAC/E,OAAO,qBAA4B,KAAK,gBAAgB,KAAK;AAAA;AAAA,EAG/D,kBAAkB,CAAC,OAAmE;AAAA,IACpF,OAAO,KAAK,UAAU,YAAY,KAAK;AAAA;AAAA,OAGnC,eAAc,CAAC,OAA2D;AAAA,IAC9E,MAAM,OAAO,KAAK,YAAY,MAAM,MAAM;AAAA,IAC1C,IAAI,CAAC,MAAM;AAAA,MACT,MAAM,IAAI,oBAAoB,wBAAwB,MAAM,SAAS;AAAA,IACvE;AAAA,IACA,OAAO,eAAe,KAAK,gBAAgB,MAAM,KAAK;AAAA;AAAA,OAGlD,mBAAkB,CAAC,OAAmE;AAAA,IAC1F,MAAM,WAAW,KAAK,gBAAgB,MAAM,UAAU;AAAA,IACtD,IAAI,CAAC,UAAU;AAAA,MACb,MAAM,IAAI,cAAc,4BAA4B,MAAM,aAAa;AAAA,IACzE;AAAA,IACA,OAAO,mBAAmB,KAAK,gBAAgB,UAAU,KAAK;AAAA;AAAA,EAGhE,eAAe,CAAC,OAA6D;AAAA,IAC3E,OAAO,KAAK,OAAO,QAAQ,KAAK;AAAA;AAAA,EAGlC,aAAa,GAAkC;AAAA,IAC7C,OAAO,CAAC,GAAG,KAAK,cAAc,OAAO,CAAC;AAAA;AAAA,EAGxC,eAAe,CAAC,YAA+C;AAAA,IAC7D,OAAO,KAAK,cAAc,IAAI,UAAU,KAAK;AAAA;AAAA,EAG/C,SAAS,GAA8B;AAAA,IACrC,OAAO,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA;AAAA,EAGpC,WAAW,CAAC,QAAuC;AAAA,IACjD,OAAO,KAAK,UAAU,IAAI,MAAM,KAAK;AAAA;AAAA,EAIvC,cAAc,GAAmC;AAAA,IAC/C,OAAO,KAAK,iBAAiB,KAAK;AAAA;AAAA,EAIpC,gBAAgB,CAAC,aAAiD;AAAA,IAChE,OAAO,KAAK,iBAAiB,QAAQ,WAAW;AAAA;AAAA,EAIlD,YAAY,GAAiC;AAAA,IAC3C,OAAO,KAAK;AAAA;AAAA,EAId,cAAc,CAAC,aAAqB,WAA6C;AAAA,IAC/E,OAAO,KAAK,gBAAgB,IAAI,aAAa,aAAa,SAAS,CAAC,KAAK;AAAA;AAAA,EAS3E,SAA4C,CAC1C,YACoC;AAAA,IACpC,OAAO,KAAK,iBAAiB,QAAQ,UAAU;AAAA;AAAA,OAG3C,eAAc,GAAkB;AAAA,IACpC,IAAI,KAAK,oBAAoB,KAAK,cAAc,SAAS;AAAA,MAAG;AAAA,IAE5D,MAAM,UAAU,IAAI,iBAAiB;AAAA,MACnC,WAAW,KAAK,cAAc;AAAA,MAC9B,QAAQ,KAAK;AAAA,IACf,CAAC;AAAA,IAED,MAAM,QAAQ,MAAM;AAAA,IACpB,KAAK,mBAAmB;AAAA;AAAA,OAGpB,cAAa,GAAkB;AAAA,IACnC,IAAI,CAAC,KAAK;AAAA,MAAkB;AAAA,IAE5B,MAAM,UAAU,KAAK;AAAA,IACrB,KAAK,mBAAmB;AAAA,IACxB,MAAM,QAAQ,KAAK;AAAA;AAAA,EAIrB,wBAAwB,GAAuC;AAAA,IAC7D,KAAK,iBAAiB,sBAAsB;AAAA,IAC5C,OAAO,KAAK,oBAAoB,MAAM;AAAA;AAAA,EAGxC,4BAA4B,GAA8B;AAAA,IACxD,OAAO,KAAK,oBAAoB,qBAAqB;AAAA;AAAA,OAGjD,eAAc,GAA2B;AAAA,IAC7C,OAAO,KAAK,iBAAiB,MAAM;AAAA;AAAA,OAI/B,qBAAoB,GAAkB;AAAA,IAC1C,MAAM,KAAK,iBAAiB,cAAc;AAAA;AAAA,OAItC,YAAW,GAAkB;AAAA,IACjC,MAAM,KAAK,KAAK,MAAM;AAAA;AAAA,OAIlB,YAAW,GAAkB;AAAA,IACjC,MAAM,KAAK,eAAe,KAAK;AAAA,IAC/B,MAAM,KAAK,oBAAoB,KAAK;AAAA,IACpC,MAAM,KAAK,OAAO,QAAQ;AAAA;AAAA,EAU5B,EAAE,CAAC,SAA6D;AAAA,IAC9D,OAAO,iBACL,KAAK,KAAK,gBAAgB,eAAe,QAAQ,GACjD;AAAA,MACE,UAAU;AAAA,QACR,MAAM,MAAM,KAAK,aAAa;AAAA,QAC9B,SAAS,CAAC,cAAc,KAAK,eAAe,SAAS;AAAA,MACvD;AAAA,MACA,OAAO;AAAA,QACL,MAAM,MAAM,KAAK,UAAU;AAAA,QAC3B,SAAS,CAAC,WAAW,KAAK,YAAY,MAAM;AAAA,MAC9C;AAAA,MACA,WAAW;AAAA,QACT,MAAM,MAAM,KAAK,cAAc;AAAA,QAC/B,SAAS,CAAC,eAAe,KAAK,gBAAgB,UAAU;AAAA,MAC1D;AAAA,MACA,WAAW,KAAK;AAAA,MAChB,QAAQ,KAAK;AAAA,IACf,CACF;AAAA;AAAA,EAGF,OAAmE,CACjE,YAKA;AAAA,IACA,2BAA2B,KAAK,SAAS,mBAAmB,GAAG,UAAU;AAAA,IAEzE,OAAO,gBAIL,KAAK,KAAK,gBAAgB,WAAW,CAAC;AAAA;AAAA,OAGpC,aAAY,CAChB,cACA,YACoB;AAAA,IACpB,OAAO,gBAAc,aAAa,KAAK,gBAAgB,cAAc,UAAU;AAAA;AAAA,OAG3E,kBAAiB,CACrB,cACA,OACgD;AAAA,IAChD,OAAO,gBAAc,kBAAkB,KAAK,gBAAgB,cAAc,KAAK;AAAA;AAAA,OAG3E,gBAAe,CACnB,OAM2C;AAAA,IAC3C,OAAO,gBAAc,gBAAgB,KAAK,gBAAgB,KAAK;AAAA;AAAA,OAG3D,gBAAe,CACnB,cACA,OACe;AAAA,IACf,MAAM,gBAAc,gBAAgB,KAAK,gBAAgB,cAAc,KAAK;AAAA;AAAA,OAGxE,WAAU,CACd,cACA,UACA,QACA,QACe;AAAA,IACf,MAAM,gBAAc,WAAW,KAAK,gBAAgB,cAAc,UAAU,QAAQ,MAAM;AAAA;AAAA,OAGtF,WAAU,CACd,cACA,UACA,QACA,QACe;AAAA,IACf,MAAM,gBAAc,WAAW,KAAK,gBAAgB,cAAc,UAAU,QAAQ,MAAM;AAAA;AAAA,EAG5F,oBAAoB,CAAC,cAA8B;AAAA,IACjD,OAAO,KAAK,SAAS,qBAAqB,YAAY;AAAA;AAAA,EAGxD,qBAAqB,GAA0C;AAAA,IAC7D,OAAO,KAAK,mBAAmB,sBAAsB;AAAA;AAAA,EAGvD,mBAAmB,GAAwC;AAAA,IACzD,OAAO,KAAK,mBAAmB,oBAAoB;AAAA;AAAA,EAGrD,wBAAwB,GAA6C;AAAA,IACnE,OAAO,KAAK,mBAAmB,yBAAyB;AAAA;AAAA,EAG1D,iBAAiB,CAAC,cAAmD;AAAA,IACnE,OAAO,KAAK,mBAAmB,kBAAkB,YAAY;AAAA;AAAA,OAOzD,KAAI,CAAC,QAYwB;AAAA,IACjC,OAAO,gBAAc,YAAY,KAAK,gBAAgB,MAAM;AAAA;AAAA,EAG9D,YAAY,CAAC,cAAgC;AAAA,IAC3C,OAAO,KAAK,SAAS,aAAa,YAAY;AAAA;AAAA,EAGhD,iBAAiB,CAAC,UAA6B,QAAyB;AAAA,IACtE,OAAO,KAAK,SAAS,kBAAkB,UAAU,MAAM;AAAA;AAE3D;AAEA,SAAS,0BAA0B,CACjC,cACA,YACA,YACA,eACM;AAAA,EACN,WAAW,aAAa,YAAY;AAAA,IAClC,IAAI,CAAC,cAAc,IAAI,UAAU,UAAU,GAAG;AAAA,MAC5C,MAAM,IAAI,aACR,GAAG,iBAAiB,4CAA4C,UAAU,oFAC5E;AAAA,IACF;AAAA,EACF;AAAA;AAGF,SAAS,sCAAsC,CAC7C,UACA,UACM;AAAA,EACN,IAAI,CAAC,wBAAwB,QAAQ,KAAK,CAAC,mBAAmB,QAAQ,GAAG;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,WAAW,WAAW,SAAS,qBAAqB,CAAC,GAAG;AAAA,IACtD,IAAI,CAAC,SAAS,aAAa,OAAO,GAAG;AAAA,MACnC,MAAM,IAAI,iBACR,uBACA,yDAAyD,8EAC3D;AAAA,IACF;AAAA,EACF;AAAA;AAGF,SAAS,4BAA4B,CACnC,YACA,SACM;AAAA,EACN,IAAI,QAAQ,sBAAsB,WAAW;AAAA,IAC3C;AAAA,EACF;AAAA,EAEA,WAAW,aAAa,YAAY;AAAA,IAClC,MAAM,WAAW,UAAU,QAAQ;AAAA,IACnC,IAAI,CAAC,MAAM,QAAQ,QAAQ,GAAG;AAAA,MAC5B;AAAA,IACF;AAAA,IAEA,IAAI,SAAS,KAAK,CAAC,YAAY,QAAQ,mBAAmB,SAAS,GAAG;AAAA,MACpE,MAAM,IAAI,uBACR,iFACF;AAAA,IACF;AAAA,EACF;AAAA;;;AD7uBF,eAAsB,UAAU,CAC9B,SAC0C;AAAA,EAC1C,MAAM,cAAc,SAAQ,QAAQ,eAAe,QAAQ,IAAI,CAAC;AAAA,EAEhE,MAAM,aAAa,MAAM,wBAAwB,WAAW;AAAA,EAC5D,MAAM,aAAa,CAAC,GAAI,QAAQ,cAAc,CAAC,GAAI,GAAG,UAAU;AAAA,EAEhE,IAAI,WAAW,WAAW,GAAG;AAAA,IAC3B,MAAM,IAAI,aACR,uFACF;AAAA,EACF;AAAA,EAEA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE,MAAM,QAAQ,IAAI;AAAA,IACpB,gBAAgB,WAAW;AAAA,IAC3B,oBAAoB,WAAW;AAAA,IAC/B,kBAAkB,WAAW;AAAA,IAC7B,cAAc,WAAW;AAAA,IACzB,mBAAmB,WAAW;AAAA,IAC9B,kBAAkB,WAAW;AAAA,IAC7B,iBAAiB,WAAW;AAAA,IAC5B,cAAc,WAAW;AAAA,IACzB,kBAAkB,WAAW;AAAA,IAC7B,eAAe,WAAW;AAAA,IAC1B,cAAc,WAAW;AAAA,IACzB,2BAA2B,WAAW;AAAA,IACtC,eAAe,WAAW;AAAA,EAC5B,CAAC;AAAA,EAKD,OAAO,IAAI,KAAgC;AAAA,IACzC,IAAI,QAAQ;AAAA,IACZ,UAAU;AAAA,IACV,QAAQ,QAAQ;AAAA,IAChB,SAAS,QAAQ;AAAA,IACjB,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,QAAQ,QAAQ;AAAA,IAChB,WAAW,QAAQ;AAAA,IACnB,QAAQ,QAAQ;AAAA,IAChB,eAAe,QAAQ;AAAA,IACvB,SAAS,QAAQ;AAAA,IACjB,qBAAqB,QAAQ;AAAA,IAC7B;AAAA,IACA,SAAS,CAAC,GAAI,QAAQ,WAAW,CAAC,GAAI,GAAG,OAAO;AAAA,IAChD,UAAU,CAAC,GAAI,QAAQ,YAAY,CAAC,GAAI,GAAG,QAAQ;AAAA,IACnD,YAAY,CAAC,GAAI,QAAQ,cAAc,CAAC,GAAI,GAAG,UAAU;AAAA,IACzD,WAAW,CAAC,GAAI,QAAQ,aAAa,CAAC,GAAI,GAAG,SAAS;AAAA,IACtD,OAAO,CAAC,GAAI,QAAQ,SAAS,CAAC,GAAI,GAAG,KAAK;AAAA,IAC1C,WAAW,CAAC,GAAI,QAAQ,aAAa,CAAC,GAAI,GAAG,SAAS;AAAA,IACtD,aAAa,CAAC,GAAI,QAAQ,eAAe,CAAC,GAAI,GAAG,WAAW;AAAA,IAC5D,OAAO,CAAC,GAAI,QAAQ,SAAS,CAAC,GAAI,GAAG,KAAK;AAAA,IAC1C,WAAW,CAAC,GAAI,QAAQ,aAAa,CAAC,GAAI,GAAG,SAAS;AAAA,IACtD,QAAQ,CAAC,GAAI,QAAQ,UAAU,CAAC,GAAI,GAAG,MAAM;AAAA,IAC7C,OAAO,CAAC,GAAI,QAAQ,SAAS,CAAC,GAAI,GAAG,KAAK;AAAA,IAC1C,oBAAoB,CAAC,GAAI,QAAQ,sBAAsB,CAAC,GAAI,GAAG,kBAAkB;AAAA,IACjF,QAAQ,CAAC,GAAI,QAAQ,UAAU,CAAC,GAAI,GAAG,MAAM;AAAA,IAC7C,MAAM,QAAQ;AAAA,EAChB,CAAC;AAAA;",
+  "debugId": "7B1968C15C65FC4364756E2164756E21",
+  "names": []
+}

package/dist/{chunk-yvef9xwc.js → chunk-rjqm6ksg.js}

@@ -1,17 +1,17 @@
 // @bun
 import {
   isStorageSerializationFailure
-} from "./chunk-aebzcsxr.js";
+} from "./chunk-raq0x6bd.js";
 import {
   materializationApplyPhase
-} from "./chunk-q4qzq0ea.js";
+} from "./chunk-hb9xcx9c.js";
 import {
   createCommitId,
   createEventId,
   createRequestHash,
   materializationEventKindOrdinal,
   sha256Canonical
-} from "./chunk-wxhdnwh4.js";
+} from "./chunk-bh8bwma3.js";
 import {
   assertPinnedDatasetWatermark
 } from "./chunk-9dzba0f2.js";
@@ -32,7 +32,7 @@ import {
   telemetryPointKey,
   telemetryPointSortKey,
   utf8JsonByteLength
-} from "./chunk-p6r5g77m.js";
+} from "./chunk-8kv2sez0.js";
 import {
   MaterializationCancellationError,
   MaterializationConflictError,
@@ -48,18 +48,18 @@ import {
   validateObjectProperties,
   validatePropertyValue,
   validateTelemetryUnit
-} from "./chunk-tsk2bxs3.js";
+} from "./chunk-53s4asfm.js";
 import {
   ProjectionValidationError,
   isProjectionDefinition,
   validateProjectionsAtStartup
-} from "./chunk-btpe64e4.js";
+} from "./chunk-m9w0artv.js";
 import {
   assertJsonValue,
   cloneJsonValue,
   compareStrings,
   stableJsonStringify
-} from "./chunk-1vffvydj.js";
+} from "./chunk-be9vm29v.js";
 // src/projections/revision.ts
 function computeOntologyRevision(ontology) {
   const referencedValueTypeIds = collectOntologyValueTypeDependencies(ontology);

package/dist/{chunk-f2b5e2gf.js → chunk-sb0shdvv.js}

@@ -3,7 +3,7 @@ import {
   cloneJsonValue,
   getInvalidJsonValueReason,
   stableJsonStringify
-} from "./chunk-1vffvydj.js";
+} from "./chunk-be9vm29v.js";
 
 // src/agents/errors.ts
 class AgentDefinitionError extends Error {
@@ -14,6 +14,21 @@ class AgentMessageAdapterError extends Error {
   name = "AgentMessageAdapterError";
 }
 
+class AgentToolPublicError extends Error {
+  name = "AgentToolPublicError";
+}
+
+class AgentToolResultValidationError extends Error {
+  toolName;
+  reason;
+  name = "AgentToolResultValidationError";
+  constructor(toolName, reason, options) {
+    super(`[Sixb] Agent tool '${toolName}' result must be a JSON value; ${reason}.`, options);
+    this.toolName = toolName;
+    this.reason = reason;
+  }
+}
+
 class AgentRequestError extends Error {
   code;
   name = "AgentRequestError";
@@ -136,6 +151,6 @@ function invalidContext(message) {
   throw new AgentRequestError("invalid_context", `[Sixb] Invalid agent context: ${message}.`);
 }
 
-export { AgentDefinitionError, AgentMessageAdapterError, AgentRequestError, MAX_AGENT_CONTEXT_ENTRIES, MAX_AGENT_APP_STATE_ENTRY_BYTES, MAX_AGENT_APP_STATE_TOTAL_BYTES, agentContext, agentContextIdentity, agentContextFingerprint, normalizeAgentContextEntries };
+export { AgentDefinitionError, AgentMessageAdapterError, AgentToolPublicError, AgentToolResultValidationError, AgentRequestError, MAX_AGENT_CONTEXT_ENTRIES, MAX_AGENT_APP_STATE_ENTRY_BYTES, MAX_AGENT_APP_STATE_TOTAL_BYTES, agentContext, agentContextIdentity, agentContextFingerprint, normalizeAgentContextEntries };
 
-//# debugId=2356DA13EB8987D664756E2164756E21
+//# debugId=86564C87A0ED8E7F64756E2164756E21