@sixb/core 0.1.0 → 0.1.2

package/dist/chunk-nten49ta.js

@@ -0,0 +1,404 @@
+// @bun
+import {
+  createPrimitiveExecutionRecord
+} from "./chunk-8ryen3p3.js";
+import {
+  sha256Canonical
+} from "./chunk-fmx1sz2h.js";
+import {
+  PROJECTION_RUN_FAILURE_CODES,
+  ProjectionRunError,
+  assertProjectionRunDurableExecution,
+  assertProjectionRunIdentityMatches
+} from "./chunk-dysw7nsm.js";
+import {
+  findPrimitiveRunExecution
+} from "./chunk-t9xghkva.js";
+import {
+  reportRunFailure
+} from "./chunk-dsrkgtnh.js";
+import {
+  ProjectionValidationError
+} from "./chunk-34bqh420.js";
+import {
+  createSixbError,
+  toSixbFailure
+} from "./chunk-0172wgm9.js";
+// src/projections/capability.ts
+var projectionRegistryKey = Symbol("sixb.projectionRegistry");
+function registerProjectionRegistry(owner, registry) {
+  const registered = owner[projectionRegistryKey];
+  if (registered && registered !== registry) {
+    throw new Error("[Sixb] Projection registry is already registered for this owner.");
+  }
+  Object.defineProperty(owner, projectionRegistryKey, {
+    configurable: false,
+    enumerable: false,
+    value: registry,
+    writable: false
+  });
+}
+function getProjectionRegistry(owner) {
+  const registry = owner[projectionRegistryKey];
+  if (registry)
+    return registry;
+  throw new Error("[Sixb] Projection registry is not registered for this runtime.");
+}
+function getProjectionDispatchDescriptors(owner) {
+  return getProjectionRegistry(owner).getDispatchDescriptors();
+}
+function shareProjectionRegistry(source, target) {
+  registerProjectionRegistry(target, getProjectionRegistry(source));
+}
+// src/projections/run-dispatch.ts
+import { randomUUID } from "crypto";
+
+// src/projections/run-id.ts
+function createProjectionRunId(projectId, identity) {
+  return sha256Canonical({
+    projectId,
+    projectionId: identity.projectionId,
+    projectionKind: identity.projectionKind,
+    protocol: identity.protocol,
+    datasetId: identity.datasetVersion.datasetId,
+    versionId: identity.datasetVersion.versionId,
+    createdAt: identity.datasetVersion.createdAt,
+    ontologyRevision: identity.ontologyRevision,
+    projectionRevision: identity.projectionRevision,
+    ownershipHash: identity.ownershipHash
+  });
+}
+
+// src/projections/run-dispatch.ts
+var PROJECTION_TELEMETRY_BATCH_SIZE = 500;
+
+class ProjectionRunDispatcher {
+  dependencies;
+  constructor(dependencies) {
+    this.dependencies = dependencies;
+  }
+  async dispatch(input) {
+    assertDispatchInput(input);
+    const registry = getProjectionRegistry(this.dependencies);
+    const descriptor = registry.resolveDispatch(input.projectionId);
+    if (descriptor.datasetId !== input.datasetVersion.datasetId) {
+      throw new ProjectionValidationError(`[Sixb] Projection '${input.projectionId}' consumes dataset '${descriptor.datasetId}', not '${input.datasetVersion.datasetId}'.`);
+    }
+    const projection = this.dependencies.definitions.projections.getById(input.projectionId);
+    if (!projection) {
+      throw new ProjectionValidationError(`[Sixb] Unknown projection '${input.projectionId}'.`);
+    }
+    const version = await this.dependencies.lakeStorage.getVersion(input.datasetVersion.datasetId, input.datasetVersion.versionId);
+    if (!version || version.createdAt.toISOString() !== input.datasetVersion.createdAt) {
+      throw new ProjectionValidationError(`[Sixb] Dataset '${input.datasetVersion.datasetId}' version '${input.datasetVersion.versionId}' does not match its immutable metadata.`);
+    }
+    if (version.mode === "schema") {
+      throw new ProjectionValidationError(`[Sixb] Projection '${input.projectionId}' cannot materialize a schema-only dataset version.`);
+    }
+    const { datasetId: _datasetId, ...semanticIdentity } = descriptor;
+    const identity = {
+      ...semanticIdentity,
+      datasetVersion: structuredClone(input.datasetVersion)
+    };
+    const runId = createProjectionRunId(this.dependencies.id, identity);
+    const projectionRuns = requireProjectionRunStorage(this.dependencies.storage);
+    const existing = await projectionRuns.getById({ projectId: this.dependencies.id, id: runId });
+    const persisted = existing ? await reuseProjectionRun(this.dependencies, existing, identity) : await persistProjectionRun({
+      dependencies: this.dependencies,
+      runId,
+      identity,
+      projection,
+      producerExecution: await resolveProducerExecution(this.dependencies.storage, this.dependencies.id, version.producer)
+    });
+    if (!persisted.publish)
+      return existingResult(persisted.run);
+    return publishProjectionRun(this.dependencies, input.metadata, persisted);
+  }
+}
+async function persistProjectionRun(input) {
+  const execution = createPrimitiveExecutionRecord({
+    id: `exec_${randomUUID()}`,
+    primitive: { kind: "projection", id: input.identity.projectionId, runId: input.runId },
+    origin: {
+      type: "automatic",
+      projectId: input.dependencies.id,
+      source: {
+        type: "datasetVersion",
+        datasetId: input.identity.datasetVersion.datasetId,
+        versionId: input.identity.datasetVersion.versionId
+      },
+      correlationId: input.producerExecution?.correlationId ?? input.runId,
+      ...input.producerExecution?.requestedBy === undefined ? {} : { requestedBy: input.producerExecution.requestedBy }
+    }
+  });
+  const queuedAt = new Date;
+  try {
+    return await input.dependencies.storage.transaction(async (tx) => {
+      const projectionRuns = requireProjectionRunStorage(tx);
+      const raced = await projectionRuns.getById({
+        projectId: input.dependencies.id,
+        id: input.runId
+      });
+      if (raced) {
+        await assertExistingRun(tx, raced, input.identity);
+        return { publish: false, run: raced };
+      }
+      await tx.executions.create(execution);
+      const run = await queueProjectionRun(projectionRuns, {
+        id: input.runId,
+        projectId: input.dependencies.id,
+        executionId: execution.id,
+        identity: input.identity,
+        projection: input.projection,
+        queuedAt
+      });
+      return { publish: true, run, queuedAt, created: true };
+    }, { isolation: "serializable" });
+  } catch (error) {
+    if (!(error instanceof ProjectionRunError))
+      throw error;
+    const raced = await requireProjectionRunStorage(input.dependencies.storage).getById({
+      projectId: input.dependencies.id,
+      id: input.runId
+    });
+    if (!raced)
+      throw error;
+    await assertExistingRun(input.dependencies.storage, raced, input.identity);
+    return { publish: false, run: raced };
+  }
+}
+async function reuseProjectionRun(dependencies, existing, identity) {
+  await assertExistingRun(dependencies.storage, existing, identity);
+  if (existing.status !== "failed" || existing.error?.code !== "queue.enqueue_failed" || !existing.error.retryable) {
+    return { publish: false, run: existing };
+  }
+  const queuedAt = new Date;
+  const projectionRuns = requireProjectionRunStorage(dependencies.storage);
+  try {
+    const run = await requeueProjectionRun(projectionRuns, existing, queuedAt);
+    return { publish: true, run, queuedAt, created: false };
+  } catch (error) {
+    if (!(error instanceof ProjectionRunError))
+      throw error;
+    const raced = await projectionRuns.getById({ projectId: existing.projectId, id: existing.id });
+    if (!raced || raced.status === "failed" && raced.error?.code === "queue.enqueue_failed" && raced.error.retryable) {
+      throw error;
+    }
+    await assertExistingRun(dependencies.storage, raced, identity);
+    return { publish: false, run: raced };
+  }
+}
+async function publishProjectionRun(dependencies, metadata, persisted) {
+  try {
+    const [job] = await dependencies.queues.projections.enqueue({
+      projectId: dependencies.id,
+      jobs: [
+        {
+          id: persisted.run.id,
+          type: "projection.run.requested",
+          payload: { runId: persisted.run.id },
+          ...metadata === undefined ? {} : { metadata }
+        }
+      ]
+    });
+    return {
+      projectionId: persisted.run.identity.projectionId,
+      runId: persisted.run.id,
+      queuedAt: persisted.queuedAt.toISOString(),
+      ...job?.id ? { jobId: job.id } : {},
+      created: persisted.created
+    };
+  } catch (error) {
+    const failedAt = new Date;
+    const failure = toEnqueueFailure(error, persisted.run, failedAt);
+    const failed = await requireProjectionRunStorage(dependencies.storage).failEnqueue({
+      projectId: dependencies.id,
+      id: persisted.run.id,
+      finishedAt: failedAt,
+      error: failure
+    });
+    reportRunFailure(dependencies, error, {
+      projectId: dependencies.id,
+      runKind: "projection",
+      run: {
+        runId: failed.id,
+        projectionId: failed.identity.projectionId,
+        projectionKind: failed.identity.projectionKind
+      },
+      failure
+    });
+    throw error;
+  }
+}
+async function assertExistingRun(storage, run, identity) {
+  assertProjectionRunIdentityMatches(run, identity);
+  await assertProjectionRunDurableExecution({
+    executions: storage.executions,
+    projectId: run.projectId,
+    executionId: run.executionId,
+    runId: run.id,
+    projectionId: run.identity.projectionId,
+    datasetId: run.identity.datasetVersion.datasetId,
+    datasetVersionId: run.identity.datasetVersion.versionId
+  });
+}
+async function resolveProducerExecution(storage, projectId, producer) {
+  if (!producer?.runId)
+    return null;
+  if (producer.kind === "sync") {
+    const run2 = await storage.syncRuns?.getById({ projectId, id: producer.runId });
+    if (!run2)
+      return null;
+    assertProducerId(producer, run2.syncId);
+    return requireProducerExecution({
+      executions: storage.executions,
+      projectId,
+      executionId: run2.executionId,
+      primitive: { kind: "sync", id: run2.syncId, runId: run2.id }
+    });
+  }
+  const run = await storage.pipelineRuns?.getById({ projectId, id: producer.runId });
+  if (!run)
+    return null;
+  assertProducerId(producer, run.pipelineId);
+  return requireProducerExecution({
+    executions: storage.executions,
+    projectId,
+    executionId: run.executionId,
+    primitive: { kind: "pipeline", id: run.pipelineId, runId: run.id }
+  });
+}
+async function requireProducerExecution(input) {
+  const execution = await findPrimitiveRunExecution({
+    executions: input.executions,
+    projectId: input.projectId,
+    executionId: input.executionId,
+    primitive: input.primitive,
+    sourceTypes: ["execution", "schedule", "event"]
+  });
+  if (execution)
+    return execution;
+  throw new ProjectionValidationError(`[Sixb] Dataset producer run '${input.primitive.runId}' references an invalid execution.`);
+}
+function assertProducerId(producer, runOwnerId) {
+  if (producer.id === undefined || producer.id === runOwnerId)
+    return;
+  throw new ProjectionValidationError(`[Sixb] Dataset producer '${producer.kind}:${producer.id}' does not match run '${producer.runId}'.`);
+}
+function requireProjectionRunStorage(storage) {
+  if (storage.projectionRuns)
+    return storage.projectionRuns;
+  throw new ProjectionValidationError("[Sixb] Projection run storage is not configured.");
+}
+function queueProjectionRun(storage, input) {
+  const common = {
+    id: input.id,
+    projectId: input.projectId,
+    executionId: input.executionId,
+    queuedAt: input.queuedAt
+  };
+  switch (input.projection._tag) {
+    case "ObjectProjectionDefinition":
+      if (input.identity.projectionKind !== "object") {
+        throw invalidProjectionDefinition(input.id);
+      }
+      return storage.queue({
+        ...common,
+        identity: input.identity,
+        target: { objectTypeId: input.projection.objectTypeId }
+      });
+    case "LinkProjectionDefinition":
+      if (input.identity.projectionKind !== "link") {
+        throw invalidProjectionDefinition(input.id);
+      }
+      return storage.queue({
+        ...common,
+        identity: input.identity,
+        target: {
+          sourceObjectTypeId: input.projection.sourceObjectTypeId,
+          targetObjectTypeId: input.projection.targetObjectTypeId
+        }
+      });
+    case "TelemetryProjectionDefinition":
+      if (input.identity.projectionKind !== "telemetry") {
+        throw invalidProjectionDefinition(input.id);
+      }
+      return storage.queue({
+        ...common,
+        identity: input.identity,
+        target: { objectTypeId: input.projection.objectTypeId },
+        fixedBatchSize: PROJECTION_TELEMETRY_BATCH_SIZE
+      });
+  }
+}
+function requeueProjectionRun(storage, run, queuedAt) {
+  const common = {
+    id: run.id,
+    projectId: run.projectId,
+    executionId: run.executionId,
+    queuedAt
+  };
+  switch (run.identity.projectionKind) {
+    case "object": {
+      if (!("objectTypeId" in run.target))
+        throw invalidProjectionDefinition(run.id);
+      return storage.queue({ ...common, identity: run.identity, target: run.target });
+    }
+    case "link": {
+      if (!("sourceObjectTypeId" in run.target))
+        throw invalidProjectionDefinition(run.id);
+      return storage.queue({ ...common, identity: run.identity, target: run.target });
+    }
+    case "telemetry": {
+      if (!("objectTypeId" in run.target) || !run.telemetryCheckpoint) {
+        throw invalidProjectionDefinition(run.id);
+      }
+      return storage.queue({
+        ...common,
+        identity: run.identity,
+        target: run.target,
+        fixedBatchSize: run.telemetryCheckpoint.fixedBatchSize
+      });
+    }
+  }
+}
+function invalidProjectionDefinition(runId) {
+  return new ProjectionValidationError(`[Sixb] Projection run '${runId}' has inconsistent definition metadata.`);
+}
+function existingResult(run) {
+  return {
+    projectionId: run.identity.projectionId,
+    runId: run.id,
+    queuedAt: run.queuedAt.toISOString(),
+    created: false
+  };
+}
+function assertDispatchInput(input) {
+  for (const [field, value] of [
+    ["projectionId", input.projectionId],
+    ["datasetId", input.datasetVersion.datasetId],
+    ["versionId", input.datasetVersion.versionId]
+  ]) {
+    if (!value.trim())
+      throw new ProjectionValidationError(`[Sixb] Projection ${field} is required.`);
+  }
+  const timestamp = Date.parse(input.datasetVersion.createdAt);
+  if (!Number.isFinite(timestamp) || new Date(timestamp).toISOString() !== input.datasetVersion.createdAt) {
+    throw new ProjectionValidationError("[Sixb] Projection dataset version timestamp is invalid.");
+  }
+}
+function toEnqueueFailure(error, run, at) {
+  const enqueueError = createSixbError("queue.enqueue_failed", `[Sixb] Could not enqueue Projection run '${run.id}'.`, {
+    cause: error,
+    details: {
+      projectionId: run.identity.projectionId,
+      projectionKind: run.identity.projectionKind,
+      runId: run.id,
+      phase: "enqueue"
+    }
+  });
+  return toSixbFailure(enqueueError, { allowedCodes: PROJECTION_RUN_FAILURE_CODES, at });
+}
+export { registerProjectionRegistry, getProjectionRegistry, getProjectionDispatchDescriptors, shareProjectionRegistry, createProjectionRunId, PROJECTION_TELEMETRY_BATCH_SIZE, ProjectionRunDispatcher };
+
+//# debugId=E8546CFEC17DF5E464756E2164756E21

package/dist/chunk-nten49ta.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../src/projections/capability.ts", "../src/projections/run-dispatch.ts", "../src/projections/run-id.ts"],
+  "sourcesContent": [
+    "import type { ProjectionRegistry } from \"./registry\"\nimport type { ProjectionDispatchDescriptor } from \"./types\"\n\nconst projectionRegistryKey: unique symbol = Symbol(\"sixb.projectionRegistry\")\n\ninterface ProjectionRegistryOwner {\n  readonly [projectionRegistryKey]?: ProjectionRegistry\n}\n\nexport function registerProjectionRegistry(owner: object, registry: ProjectionRegistry): void {\n  const registered = (owner as ProjectionRegistryOwner)[projectionRegistryKey]\n  if (registered && registered !== registry) {\n    throw new Error(\"[Sixb] Projection registry is already registered for this owner.\")\n  }\n  Object.defineProperty(owner, projectionRegistryKey, {\n    configurable: false,\n    enumerable: false,\n    value: registry,\n    writable: false,\n  })\n}\n\nexport function getProjectionRegistry(owner: object): ProjectionRegistry {\n  const registry = (owner as ProjectionRegistryOwner)[projectionRegistryKey]\n  if (registry) return registry\n  throw new Error(\"[Sixb] Projection registry is not registered for this runtime.\")\n}\n\nexport function getProjectionDispatchDescriptors(\n  owner: object\n): readonly ProjectionDispatchDescriptor[] {\n  return getProjectionRegistry(owner).getDispatchDescriptors()\n}\n\nexport function shareProjectionRegistry(source: object, target: object): void {\n  registerProjectionRegistry(target, getProjectionRegistry(source))\n}\n",
+    "import { randomUUID } from \"node:crypto\"\nimport { reportRunFailure } from \"../error-reporting/capability\"\nimport { createSixbError, toSixbFailure } from \"../errors/internal\"\nimport type { SixbFailure } from \"../errors/types\"\nimport type { RunDispatcher } from \"../execution/dispatch\"\nimport { createPrimitiveExecutionRecord } from \"../execution/durable\"\nimport type { LakeStorage } from \"../lake-storage\"\nimport type { Queues } from \"../queues\"\nimport type { SixbDefinitions } from \"../runtime/definitions\"\nimport type { ExecutionRecord, ProjectionRunRecord, Storage } from \"../storage\"\nimport { ProjectionRunError } from \"../storage\"\nimport { findPrimitiveRunExecution } from \"../storage/executions/run-link\"\nimport {\n  assertProjectionRunDurableExecution,\n  assertProjectionRunIdentityMatches,\n} from \"../storage/projection-runs/provider\"\nimport { getProjectionRegistry } from \"./capability\"\nimport { ProjectionValidationError } from \"./errors\"\nimport { createProjectionRunId } from \"./run-id\"\nimport {\n  PROJECTION_RUN_FAILURE_CODES,\n  type ProjectionDefinition,\n  type ProjectionRunFailureCode,\n} from \"./types\"\n\nexport const PROJECTION_TELEMETRY_BATCH_SIZE = 500\n\nexport interface ProjectionRunDispatchInput {\n  readonly projectionId: string\n  readonly datasetVersion: {\n    readonly datasetId: string\n    readonly versionId: string\n    readonly createdAt: string\n  }\n  readonly metadata?: Readonly<Record<string, string>>\n}\n\nexport interface ProjectionRunDispatchResult {\n  readonly projectionId: string\n  readonly runId: string\n  readonly queuedAt: string\n  readonly jobId?: string\n  readonly created: boolean\n}\n\nexport type ProjectionRunDispatchPort = RunDispatcher<\n  ProjectionRunDispatchInput,\n  ProjectionRunDispatchResult\n>\n\nexport interface ProjectionRunDispatcherDependencies {\n  readonly id: string\n  readonly definitions: Pick<SixbDefinitions, \"projections\">\n  readonly lakeStorage: Pick<LakeStorage, \"getVersion\">\n  readonly storage: Storage\n  readonly queues: Pick<Queues, \"projections\">\n}\n\ntype PersistedProjectionRun =\n  | { readonly publish: false; readonly run: ProjectionRunRecord }\n  | {\n      readonly publish: true\n      readonly run: ProjectionRunRecord\n      readonly queuedAt: Date\n      readonly created: boolean\n    }\n\n/** Core-owned durable dispatch boundary for immutable dataset-version materialization. */\nexport class ProjectionRunDispatcher implements ProjectionRunDispatchPort {\n  constructor(private readonly dependencies: ProjectionRunDispatcherDependencies) {}\n\n  async dispatch(input: ProjectionRunDispatchInput): Promise<ProjectionRunDispatchResult> {\n    assertDispatchInput(input)\n    const registry = getProjectionRegistry(this.dependencies)\n    const descriptor = registry.resolveDispatch(input.projectionId)\n    if (descriptor.datasetId !== input.datasetVersion.datasetId) {\n      throw new ProjectionValidationError(\n        `[Sixb] Projection '${input.projectionId}' consumes dataset '${descriptor.datasetId}', not '${input.datasetVersion.datasetId}'.`\n      )\n    }\n    const projection = this.dependencies.definitions.projections.getById(input.projectionId)\n    if (!projection) {\n      throw new ProjectionValidationError(`[Sixb] Unknown projection '${input.projectionId}'.`)\n    }\n    const version = await this.dependencies.lakeStorage.getVersion(\n      input.datasetVersion.datasetId,\n      input.datasetVersion.versionId\n    )\n    if (!version || version.createdAt.toISOString() !== input.datasetVersion.createdAt) {\n      throw new ProjectionValidationError(\n        `[Sixb] Dataset '${input.datasetVersion.datasetId}' version '${input.datasetVersion.versionId}' does not match its immutable metadata.`\n      )\n    }\n    if (version.mode === \"schema\") {\n      throw new ProjectionValidationError(\n        `[Sixb] Projection '${input.projectionId}' cannot materialize a schema-only dataset version.`\n      )\n    }\n\n    const { datasetId: _datasetId, ...semanticIdentity } = descriptor\n    const identity = {\n      ...semanticIdentity,\n      datasetVersion: structuredClone(input.datasetVersion),\n    }\n    const runId = createProjectionRunId(this.dependencies.id, identity)\n    const projectionRuns = requireProjectionRunStorage(this.dependencies.storage)\n    const existing = await projectionRuns.getById({ projectId: this.dependencies.id, id: runId })\n    const persisted = existing\n      ? await reuseProjectionRun(this.dependencies, existing, identity)\n      : await persistProjectionRun({\n          dependencies: this.dependencies,\n          runId,\n          identity,\n          projection,\n          producerExecution: await resolveProducerExecution(\n            this.dependencies.storage,\n            this.dependencies.id,\n            version.producer\n          ),\n        })\n\n    if (!persisted.publish) return existingResult(persisted.run)\n    return publishProjectionRun(this.dependencies, input.metadata, persisted)\n  }\n}\n\nasync function persistProjectionRun(input: {\n  readonly dependencies: ProjectionRunDispatcherDependencies\n  readonly runId: string\n  readonly identity: ProjectionRunRecord[\"identity\"]\n  readonly projection: ProjectionDefinition\n  readonly producerExecution: ExecutionRecord | null\n}): Promise<PersistedProjectionRun> {\n  const execution = createPrimitiveExecutionRecord({\n    id: `exec_${randomUUID()}`,\n    primitive: { kind: \"projection\", id: input.identity.projectionId, runId: input.runId },\n    origin: {\n      type: \"automatic\",\n      projectId: input.dependencies.id,\n      source: {\n        type: \"datasetVersion\",\n        datasetId: input.identity.datasetVersion.datasetId,\n        versionId: input.identity.datasetVersion.versionId,\n      },\n      correlationId: input.producerExecution?.correlationId ?? input.runId,\n      ...(input.producerExecution?.requestedBy === undefined\n        ? {}\n        : { requestedBy: input.producerExecution.requestedBy }),\n    },\n  })\n  const queuedAt = new Date()\n\n  try {\n    return await input.dependencies.storage.transaction(\n      async (tx): Promise<PersistedProjectionRun> => {\n        const projectionRuns = requireProjectionRunStorage(tx)\n        const raced = await projectionRuns.getById({\n          projectId: input.dependencies.id,\n          id: input.runId,\n        })\n        if (raced) {\n          await assertExistingRun(tx, raced, input.identity)\n          return { publish: false, run: raced }\n        }\n        await tx.executions.create(execution)\n        const run = await queueProjectionRun(projectionRuns, {\n          id: input.runId,\n          projectId: input.dependencies.id,\n          executionId: execution.id,\n          identity: input.identity,\n          projection: input.projection,\n          queuedAt,\n        })\n        return { publish: true, run, queuedAt, created: true }\n      },\n      { isolation: \"serializable\" }\n    )\n  } catch (error) {\n    if (!(error instanceof ProjectionRunError)) throw error\n    const raced = await requireProjectionRunStorage(input.dependencies.storage).getById({\n      projectId: input.dependencies.id,\n      id: input.runId,\n    })\n    if (!raced) throw error\n    await assertExistingRun(input.dependencies.storage, raced, input.identity)\n    return { publish: false, run: raced }\n  }\n}\n\nasync function reuseProjectionRun(\n  dependencies: ProjectionRunDispatcherDependencies,\n  existing: ProjectionRunRecord,\n  identity: ProjectionRunRecord[\"identity\"]\n): Promise<PersistedProjectionRun> {\n  await assertExistingRun(dependencies.storage, existing, identity)\n  if (\n    existing.status !== \"failed\" ||\n    existing.error?.code !== \"queue.enqueue_failed\" ||\n    !existing.error.retryable\n  ) {\n    return { publish: false, run: existing }\n  }\n  const queuedAt = new Date()\n  const projectionRuns = requireProjectionRunStorage(dependencies.storage)\n  try {\n    const run = await requeueProjectionRun(projectionRuns, existing, queuedAt)\n    return { publish: true, run, queuedAt, created: false }\n  } catch (error) {\n    if (!(error instanceof ProjectionRunError)) throw error\n    const raced = await projectionRuns.getById({ projectId: existing.projectId, id: existing.id })\n    if (\n      !raced ||\n      (raced.status === \"failed\" &&\n        raced.error?.code === \"queue.enqueue_failed\" &&\n        raced.error.retryable)\n    ) {\n      throw error\n    }\n    await assertExistingRun(dependencies.storage, raced, identity)\n    return { publish: false, run: raced }\n  }\n}\n\nasync function publishProjectionRun(\n  dependencies: ProjectionRunDispatcherDependencies,\n  metadata: Readonly<Record<string, string>> | undefined,\n  persisted: Extract<PersistedProjectionRun, { readonly publish: true }>\n): Promise<ProjectionRunDispatchResult> {\n  try {\n    const [job] = await dependencies.queues.projections.enqueue({\n      projectId: dependencies.id,\n      jobs: [\n        {\n          id: persisted.run.id,\n          type: \"projection.run.requested\",\n          payload: { runId: persisted.run.id },\n          ...(metadata === undefined ? {} : { metadata }),\n        },\n      ],\n    })\n    return {\n      projectionId: persisted.run.identity.projectionId,\n      runId: persisted.run.id,\n      queuedAt: persisted.queuedAt.toISOString(),\n      ...(job?.id ? { jobId: job.id } : {}),\n      created: persisted.created,\n    }\n  } catch (error) {\n    const failedAt = new Date()\n    const failure = toEnqueueFailure(error, persisted.run, failedAt)\n    const failed = await requireProjectionRunStorage(dependencies.storage).failEnqueue({\n      projectId: dependencies.id,\n      id: persisted.run.id,\n      finishedAt: failedAt,\n      error: failure,\n    })\n    reportRunFailure(dependencies, error, {\n      projectId: dependencies.id,\n      runKind: \"projection\",\n      run: {\n        runId: failed.id,\n        projectionId: failed.identity.projectionId,\n        projectionKind: failed.identity.projectionKind,\n      },\n      failure,\n    })\n    throw error\n  }\n}\n\nasync function assertExistingRun(\n  storage: Storage,\n  run: ProjectionRunRecord,\n  identity: ProjectionRunRecord[\"identity\"]\n): Promise<void> {\n  assertProjectionRunIdentityMatches(run, identity)\n  await assertProjectionRunDurableExecution({\n    executions: storage.executions,\n    projectId: run.projectId,\n    executionId: run.executionId,\n    runId: run.id,\n    projectionId: run.identity.projectionId,\n    datasetId: run.identity.datasetVersion.datasetId,\n    datasetVersionId: run.identity.datasetVersion.versionId,\n  })\n}\n\nasync function resolveProducerExecution(\n  storage: Storage,\n  projectId: string,\n  producer:\n    | {\n        readonly kind: \"sync\" | \"pipeline\"\n        readonly id?: string\n        readonly runId?: string\n      }\n    | undefined\n): Promise<ExecutionRecord | null> {\n  if (!producer?.runId) return null\n  if (producer.kind === \"sync\") {\n    const run = await storage.syncRuns?.getById({ projectId, id: producer.runId })\n    if (!run) return null\n    assertProducerId(producer, run.syncId)\n    return requireProducerExecution({\n      executions: storage.executions,\n      projectId,\n      executionId: run.executionId,\n      primitive: { kind: \"sync\", id: run.syncId, runId: run.id },\n    })\n  }\n\n  const run = await storage.pipelineRuns?.getById({ projectId, id: producer.runId })\n  if (!run) return null\n  assertProducerId(producer, run.pipelineId)\n  return requireProducerExecution({\n    executions: storage.executions,\n    projectId,\n    executionId: run.executionId,\n    primitive: { kind: \"pipeline\", id: run.pipelineId, runId: run.id },\n  })\n}\n\nasync function requireProducerExecution(input: {\n  readonly executions: Storage[\"executions\"]\n  readonly projectId: string\n  readonly executionId: string\n  readonly primitive:\n    | { readonly kind: \"sync\"; readonly id: string; readonly runId: string }\n    | { readonly kind: \"pipeline\"; readonly id: string; readonly runId: string }\n}): Promise<ExecutionRecord> {\n  const execution = await findPrimitiveRunExecution({\n    executions: input.executions,\n    projectId: input.projectId,\n    executionId: input.executionId,\n    primitive: input.primitive,\n    sourceTypes: [\"execution\", \"schedule\", \"event\"],\n  })\n  if (execution) return execution\n  throw new ProjectionValidationError(\n    `[Sixb] Dataset producer run '${input.primitive.runId}' references an invalid execution.`\n  )\n}\n\nfunction assertProducerId(\n  producer: { readonly kind: \"sync\" | \"pipeline\"; readonly id?: string; readonly runId?: string },\n  runOwnerId: string\n): void {\n  if (producer.id === undefined || producer.id === runOwnerId) return\n  throw new ProjectionValidationError(\n    `[Sixb] Dataset producer '${producer.kind}:${producer.id}' does not match run '${producer.runId}'.`\n  )\n}\n\nfunction requireProjectionRunStorage(storage: Storage): NonNullable<Storage[\"projectionRuns\"]> {\n  if (storage.projectionRuns) return storage.projectionRuns\n  throw new ProjectionValidationError(\"[Sixb] Projection run storage is not configured.\")\n}\n\nfunction queueProjectionRun(\n  storage: NonNullable<Storage[\"projectionRuns\"]>,\n  input: {\n    readonly id: string\n    readonly projectId: string\n    readonly executionId: string\n    readonly identity: ProjectionRunRecord[\"identity\"]\n    readonly projection: ProjectionDefinition\n    readonly queuedAt: Date\n  }\n): Promise<ProjectionRunRecord> {\n  const common = {\n    id: input.id,\n    projectId: input.projectId,\n    executionId: input.executionId,\n    queuedAt: input.queuedAt,\n  }\n  switch (input.projection._tag) {\n    case \"ObjectProjectionDefinition\":\n      if (input.identity.projectionKind !== \"object\") {\n        throw invalidProjectionDefinition(input.id)\n      }\n      return storage.queue({\n        ...common,\n        identity: input.identity,\n        target: { objectTypeId: input.projection.objectTypeId },\n      })\n    case \"LinkProjectionDefinition\":\n      if (input.identity.projectionKind !== \"link\") {\n        throw invalidProjectionDefinition(input.id)\n      }\n      return storage.queue({\n        ...common,\n        identity: input.identity,\n        target: {\n          sourceObjectTypeId: input.projection.sourceObjectTypeId,\n          targetObjectTypeId: input.projection.targetObjectTypeId,\n        },\n      })\n    case \"TelemetryProjectionDefinition\":\n      if (input.identity.projectionKind !== \"telemetry\") {\n        throw invalidProjectionDefinition(input.id)\n      }\n      return storage.queue({\n        ...common,\n        identity: input.identity,\n        target: { objectTypeId: input.projection.objectTypeId },\n        fixedBatchSize: PROJECTION_TELEMETRY_BATCH_SIZE,\n      })\n  }\n}\n\nfunction requeueProjectionRun(\n  storage: NonNullable<Storage[\"projectionRuns\"]>,\n  run: ProjectionRunRecord,\n  queuedAt: Date\n): Promise<ProjectionRunRecord> {\n  const common = {\n    id: run.id,\n    projectId: run.projectId,\n    executionId: run.executionId,\n    queuedAt,\n  }\n  switch (run.identity.projectionKind) {\n    case \"object\": {\n      if (!(\"objectTypeId\" in run.target)) throw invalidProjectionDefinition(run.id)\n      return storage.queue({ ...common, identity: run.identity, target: run.target })\n    }\n    case \"link\": {\n      if (!(\"sourceObjectTypeId\" in run.target)) throw invalidProjectionDefinition(run.id)\n      return storage.queue({ ...common, identity: run.identity, target: run.target })\n    }\n    case \"telemetry\": {\n      if (!(\"objectTypeId\" in run.target) || !run.telemetryCheckpoint) {\n        throw invalidProjectionDefinition(run.id)\n      }\n      return storage.queue({\n        ...common,\n        identity: run.identity,\n        target: run.target,\n        fixedBatchSize: run.telemetryCheckpoint.fixedBatchSize,\n      })\n    }\n  }\n}\n\nfunction invalidProjectionDefinition(runId: string): ProjectionValidationError {\n  return new ProjectionValidationError(\n    `[Sixb] Projection run '${runId}' has inconsistent definition metadata.`\n  )\n}\n\nfunction existingResult(run: ProjectionRunRecord): ProjectionRunDispatchResult {\n  return {\n    projectionId: run.identity.projectionId,\n    runId: run.id,\n    queuedAt: run.queuedAt.toISOString(),\n    created: false,\n  }\n}\n\nfunction assertDispatchInput(input: ProjectionRunDispatchInput): void {\n  for (const [field, value] of [\n    [\"projectionId\", input.projectionId],\n    [\"datasetId\", input.datasetVersion.datasetId],\n    [\"versionId\", input.datasetVersion.versionId],\n  ] as const) {\n    if (!value.trim())\n      throw new ProjectionValidationError(`[Sixb] Projection ${field} is required.`)\n  }\n  const timestamp = Date.parse(input.datasetVersion.createdAt)\n  if (\n    !Number.isFinite(timestamp) ||\n    new Date(timestamp).toISOString() !== input.datasetVersion.createdAt\n  ) {\n    throw new ProjectionValidationError(\"[Sixb] Projection dataset version timestamp is invalid.\")\n  }\n}\n\nfunction toEnqueueFailure(\n  error: unknown,\n  run: ProjectionRunRecord,\n  at: Date\n): SixbFailure<ProjectionRunFailureCode> {\n  const enqueueError = createSixbError(\n    \"queue.enqueue_failed\",\n    `[Sixb] Could not enqueue Projection run '${run.id}'.`,\n    {\n      cause: error,\n      details: {\n        projectionId: run.identity.projectionId,\n        projectionKind: run.identity.projectionKind,\n        runId: run.id,\n        phase: \"enqueue\",\n      },\n    }\n  )\n  return toSixbFailure(enqueueError, { allowedCodes: PROJECTION_RUN_FAILURE_CODES, at })\n}\n",
+    "import { sha256Canonical } from \"../materialization/identity\"\nimport type { ProjectionMaterializationIdentity } from \"../materialization/model\"\n\nexport function createProjectionRunId(\n  projectId: string,\n  identity: ProjectionMaterializationIdentity\n): string {\n  return sha256Canonical({\n    projectId,\n    projectionId: identity.projectionId,\n    projectionKind: identity.projectionKind,\n    protocol: identity.protocol,\n    datasetId: identity.datasetVersion.datasetId,\n    versionId: identity.datasetVersion.versionId,\n    createdAt: identity.datasetVersion.createdAt,\n    ontologyRevision: identity.ontologyRevision,\n    projectionRevision: identity.projectionRevision,\n    ownershipHash: identity.ownershipHash,\n  })\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,IAAM,wBAAuC,OAAO,yBAAyB;AAMtE,SAAS,0BAA0B,CAAC,OAAe,UAAoC;AAAA,EAC5F,MAAM,aAAc,MAAkC;AAAA,EACtD,IAAI,cAAc,eAAe,UAAU;AAAA,IACzC,MAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AAAA,EACA,OAAO,eAAe,OAAO,uBAAuB;AAAA,IAClD,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,UAAU;AAAA,EACZ,CAAC;AAAA;AAGI,SAAS,qBAAqB,CAAC,OAAmC;AAAA,EACvE,MAAM,WAAY,MAAkC;AAAA,EACpD,IAAI;AAAA,IAAU,OAAO;AAAA,EACrB,MAAM,IAAI,MAAM,gEAAgE;AAAA;AAG3E,SAAS,gCAAgC,CAC9C,OACyC;AAAA,EACzC,OAAO,sBAAsB,KAAK,EAAE,uBAAuB;AAAA;AAGtD,SAAS,uBAAuB,CAAC,QAAgB,QAAsB;AAAA,EAC5E,2BAA2B,QAAQ,sBAAsB,MAAM,CAAC;AAAA;;ACnClE;;;ACGO,SAAS,qBAAqB,CACnC,WACA,UACQ;AAAA,EACR,OAAO,gBAAgB;AAAA,IACrB;AAAA,IACA,cAAc,SAAS;AAAA,IACvB,gBAAgB,SAAS;AAAA,IACzB,UAAU,SAAS;AAAA,IACnB,WAAW,SAAS,eAAe;AAAA,IACnC,WAAW,SAAS,eAAe;AAAA,IACnC,WAAW,SAAS,eAAe;AAAA,IACnC,kBAAkB,SAAS;AAAA,IAC3B,oBAAoB,SAAS;AAAA,IAC7B,eAAe,SAAS;AAAA,EAC1B,CAAC;AAAA;;;ADOI,IAAM,kCAAkC;AAAA;AA2CxC,MAAM,wBAA6D;AAAA,EAC3C;AAAA,EAA7B,WAAW,CAAkB,cAAmD;AAAA,IAAnD;AAAA;AAAA,OAEvB,SAAQ,CAAC,OAAyE;AAAA,IACtF,oBAAoB,KAAK;AAAA,IACzB,MAAM,WAAW,sBAAsB,KAAK,YAAY;AAAA,IACxD,MAAM,aAAa,SAAS,gBAAgB,MAAM,YAAY;AAAA,IAC9D,IAAI,WAAW,cAAc,MAAM,eAAe,WAAW;AAAA,MAC3D,MAAM,IAAI,0BACR,sBAAsB,MAAM,mCAAmC,WAAW,oBAAoB,MAAM,eAAe,aACrH;AAAA,IACF;AAAA,IACA,MAAM,aAAa,KAAK,aAAa,YAAY,YAAY,QAAQ,MAAM,YAAY;AAAA,IACvF,IAAI,CAAC,YAAY;AAAA,MACf,MAAM,IAAI,0BAA0B,8BAA8B,MAAM,gBAAgB;AAAA,IAC1F;AAAA,IACA,MAAM,UAAU,MAAM,KAAK,aAAa,YAAY,WAClD,MAAM,eAAe,WACrB,MAAM,eAAe,SACvB;AAAA,IACA,IAAI,CAAC,WAAW,QAAQ,UAAU,YAAY,MAAM,MAAM,eAAe,WAAW;AAAA,MAClF,MAAM,IAAI,0BACR,mBAAmB,MAAM,eAAe,uBAAuB,MAAM,eAAe,mDACtF;AAAA,IACF;AAAA,IACA,IAAI,QAAQ,SAAS,UAAU;AAAA,MAC7B,MAAM,IAAI,0BACR,sBAAsB,MAAM,iEAC9B;AAAA,IACF;AAAA,IAEA,QAAQ,WAAW,eAAe,qBAAqB;AAAA,IACvD,MAAM,WAAW;AAAA,SACZ;AAAA,MACH,gBAAgB,gBAAgB,MAAM,cAAc;AAAA,IACtD;AAAA,IACA,MAAM,QAAQ,sBAAsB,KAAK,aAAa,IAAI,QAAQ;AAAA,IAClE,MAAM,iBAAiB,4BAA4B,KAAK,aAAa,OAAO;AAAA,IAC5E,MAAM,WAAW,MAAM,eAAe,QAAQ,EAAE,WAAW,KAAK,aAAa,IAAI,IAAI,MAAM,CAAC;AAAA,IAC5F,MAAM,YAAY,WACd,MAAM,mBAAmB,KAAK,cAAc,UAAU,QAAQ,IAC9D,MAAM,qBAAqB;AAAA,MACzB,cAAc,KAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA,mBAAmB,MAAM,yBACvB,KAAK,aAAa,SAClB,KAAK,aAAa,IAClB,QAAQ,QACV;AAAA,IACF,CAAC;AAAA,IAEL,IAAI,CAAC,UAAU;AAAA,MAAS,OAAO,eAAe,UAAU,GAAG;AAAA,IAC3D,OAAO,qBAAqB,KAAK,cAAc,MAAM,UAAU,SAAS;AAAA;AAE5E;AAEA,eAAe,oBAAoB,CAAC,OAMA;AAAA,EAClC,MAAM,YAAY,+BAA+B;AAAA,IAC/C,IAAI,QAAQ,WAAW;AAAA,IACvB,WAAW,EAAE,MAAM,cAAc,IAAI,MAAM,SAAS,cAAc,OAAO,MAAM,MAAM;AAAA,IACrF,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,WAAW,MAAM,aAAa;AAAA,MAC9B,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,WAAW,MAAM,SAAS,eAAe;AAAA,QACzC,WAAW,MAAM,SAAS,eAAe;AAAA,MAC3C;AAAA,MACA,eAAe,MAAM,mBAAmB,iBAAiB,MAAM;AAAA,SAC3D,MAAM,mBAAmB,gBAAgB,YACzC,CAAC,IACD,EAAE,aAAa,MAAM,kBAAkB,YAAY;AAAA,IACzD;AAAA,EACF,CAAC;AAAA,EACD,MAAM,WAAW,IAAI;AAAA,EAErB,IAAI;AAAA,IACF,OAAO,MAAM,MAAM,aAAa,QAAQ,YACtC,OAAO,OAAwC;AAAA,MAC7C,MAAM,iBAAiB,4BAA4B,EAAE;AAAA,MACrD,MAAM,QAAQ,MAAM,eAAe,QAAQ;AAAA,QACzC,WAAW,MAAM,aAAa;AAAA,QAC9B,IAAI,MAAM;AAAA,MACZ,CAAC;AAAA,MACD,IAAI,OAAO;AAAA,QACT,MAAM,kBAAkB,IAAI,OAAO,MAAM,QAAQ;AAAA,QACjD,OAAO,EAAE,SAAS,OAAO,KAAK,MAAM;AAAA,MACtC;AAAA,MACA,MAAM,GAAG,WAAW,OAAO,SAAS;AAAA,MACpC,MAAM,MAAM,MAAM,mBAAmB,gBAAgB;AAAA,QACnD,IAAI,MAAM;AAAA,QACV,WAAW,MAAM,aAAa;AAAA,QAC9B,aAAa,UAAU;AAAA,QACvB,UAAU,MAAM;AAAA,QAChB,YAAY,MAAM;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,MACD,OAAO,EAAE,SAAS,MAAM,KAAK,UAAU,SAAS,KAAK;AAAA,OAEvD,EAAE,WAAW,eAAe,CAC9B;AAAA,IACA,OAAO,OAAO;AAAA,IACd,IAAI,EAAE,iBAAiB;AAAA,MAAqB,MAAM;AAAA,IAClD,MAAM,QAAQ,MAAM,4BAA4B,MAAM,aAAa,OAAO,EAAE,QAAQ;AAAA,MAClF,WAAW,MAAM,aAAa;AAAA,MAC9B,IAAI,MAAM;AAAA,IACZ,CAAC;AAAA,IACD,IAAI,CAAC;AAAA,MAAO,MAAM;AAAA,IAClB,MAAM,kBAAkB,MAAM,aAAa,SAAS,OAAO,MAAM,QAAQ;AAAA,IACzE,OAAO,EAAE,SAAS,OAAO,KAAK,MAAM;AAAA;AAAA;AAIxC,eAAe,kBAAkB,CAC/B,cACA,UACA,UACiC;AAAA,EACjC,MAAM,kBAAkB,aAAa,SAAS,UAAU,QAAQ;AAAA,EAChE,IACE,SAAS,WAAW,YACpB,SAAS,OAAO,SAAS,0BACzB,CAAC,SAAS,MAAM,WAChB;AAAA,IACA,OAAO,EAAE,SAAS,OAAO,KAAK,SAAS;AAAA,EACzC;AAAA,EACA,MAAM,WAAW,IAAI;AAAA,EACrB,MAAM,iBAAiB,4BAA4B,aAAa,OAAO;AAAA,EACvE,IAAI;AAAA,IACF,MAAM,MAAM,MAAM,qBAAqB,gBAAgB,UAAU,QAAQ;AAAA,IACzE,OAAO,EAAE,SAAS,MAAM,KAAK,UAAU,SAAS,MAAM;AAAA,IACtD,OAAO,OAAO;AAAA,IACd,IAAI,EAAE,iBAAiB;AAAA,MAAqB,MAAM;AAAA,IAClD,MAAM,QAAQ,MAAM,eAAe,QAAQ,EAAE,WAAW,SAAS,WAAW,IAAI,SAAS,GAAG,CAAC;AAAA,IAC7F,IACE,CAAC,SACA,MAAM,WAAW,YAChB,MAAM,OAAO,SAAS,0BACtB,MAAM,MAAM,WACd;AAAA,MACA,MAAM;AAAA,IACR;AAAA,IACA,MAAM,kBAAkB,aAAa,SAAS,OAAO,QAAQ;AAAA,IAC7D,OAAO,EAAE,SAAS,OAAO,KAAK,MAAM;AAAA;AAAA;AAIxC,eAAe,oBAAoB,CACjC,cACA,UACA,WACsC;AAAA,EACtC,IAAI;AAAA,IACF,OAAO,OAAO,MAAM,aAAa,OAAO,YAAY,QAAQ;AAAA,MAC1D,WAAW,aAAa;AAAA,MACxB,MAAM;AAAA,QACJ;AAAA,UACE,IAAI,UAAU,IAAI;AAAA,UAClB,MAAM;AAAA,UACN,SAAS,EAAE,OAAO,UAAU,IAAI,GAAG;AAAA,aAC/B,aAAa,YAAY,CAAC,IAAI,EAAE,SAAS;AAAA,QAC/C;AAAA,MACF;AAAA,IACF,CAAC;AAAA,IACD,OAAO;AAAA,MACL,cAAc,UAAU,IAAI,SAAS;AAAA,MACrC,OAAO,UAAU,IAAI;AAAA,MACrB,UAAU,UAAU,SAAS,YAAY;AAAA,SACrC,KAAK,KAAK,EAAE,OAAO,IAAI,GAAG,IAAI,CAAC;AAAA,MACnC,SAAS,UAAU;AAAA,IACrB;AAAA,IACA,OAAO,OAAO;AAAA,IACd,MAAM,WAAW,IAAI;AAAA,IACrB,MAAM,UAAU,iBAAiB,OAAO,UAAU,KAAK,QAAQ;AAAA,IAC/D,MAAM,SAAS,MAAM,4BAA4B,aAAa,OAAO,EAAE,YAAY;AAAA,MACjF,WAAW,aAAa;AAAA,MACxB,IAAI,UAAU,IAAI;AAAA,MAClB,YAAY;AAAA,MACZ,OAAO;AAAA,IACT,CAAC;AAAA,IACD,iBAAiB,cAAc,OAAO;AAAA,MACpC,WAAW,aAAa;AAAA,MACxB,SAAS;AAAA,MACT,KAAK;AAAA,QACH,OAAO,OAAO;AAAA,QACd,cAAc,OAAO,SAAS;AAAA,QAC9B,gBAAgB,OAAO,SAAS;AAAA,MAClC;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,MAAM;AAAA;AAAA;AAIV,eAAe,iBAAiB,CAC9B,SACA,KACA,UACe;AAAA,EACf,mCAAmC,KAAK,QAAQ;AAAA,EAChD,MAAM,oCAAoC;AAAA,IACxC,YAAY,QAAQ;AAAA,IACpB,WAAW,IAAI;AAAA,IACf,aAAa,IAAI;AAAA,IACjB,OAAO,IAAI;AAAA,IACX,cAAc,IAAI,SAAS;AAAA,IAC3B,WAAW,IAAI,SAAS,eAAe;AAAA,IACvC,kBAAkB,IAAI,SAAS,eAAe;AAAA,EAChD,CAAC;AAAA;AAGH,eAAe,wBAAwB,CACrC,SACA,WACA,UAOiC;AAAA,EACjC,IAAI,CAAC,UAAU;AAAA,IAAO,OAAO;AAAA,EAC7B,IAAI,SAAS,SAAS,QAAQ;AAAA,IAC5B,MAAM,OAAM,MAAM,QAAQ,UAAU,QAAQ,EAAE,WAAW,IAAI,SAAS,MAAM,CAAC;AAAA,IAC7E,IAAI,CAAC;AAAA,MAAK,OAAO;AAAA,IACjB,iBAAiB,UAAU,KAAI,MAAM;AAAA,IACrC,OAAO,yBAAyB;AAAA,MAC9B,YAAY,QAAQ;AAAA,MACpB;AAAA,MACA,aAAa,KAAI;AAAA,MACjB,WAAW,EAAE,MAAM,QAAQ,IAAI,KAAI,QAAQ,OAAO,KAAI,GAAG;AAAA,IAC3D,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,MAAM,MAAM,QAAQ,cAAc,QAAQ,EAAE,WAAW,IAAI,SAAS,MAAM,CAAC;AAAA,EACjF,IAAI,CAAC;AAAA,IAAK,OAAO;AAAA,EACjB,iBAAiB,UAAU,IAAI,UAAU;AAAA,EACzC,OAAO,yBAAyB;AAAA,IAC9B,YAAY,QAAQ;AAAA,IACpB;AAAA,IACA,aAAa,IAAI;AAAA,IACjB,WAAW,EAAE,MAAM,YAAY,IAAI,IAAI,YAAY,OAAO,IAAI,GAAG;AAAA,EACnE,CAAC;AAAA;AAGH,eAAe,wBAAwB,CAAC,OAOX;AAAA,EAC3B,MAAM,YAAY,MAAM,0BAA0B;AAAA,IAChD,YAAY,MAAM;AAAA,IAClB,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,WAAW,MAAM;AAAA,IACjB,aAAa,CAAC,aAAa,YAAY,OAAO;AAAA,EAChD,CAAC;AAAA,EACD,IAAI;AAAA,IAAW,OAAO;AAAA,EACtB,MAAM,IAAI,0BACR,gCAAgC,MAAM,UAAU,yCAClD;AAAA;AAGF,SAAS,gBAAgB,CACvB,UACA,YACM;AAAA,EACN,IAAI,SAAS,OAAO,aAAa,SAAS,OAAO;AAAA,IAAY;AAAA,EAC7D,MAAM,IAAI,0BACR,4BAA4B,SAAS,QAAQ,SAAS,2BAA2B,SAAS,SAC5F;AAAA;AAGF,SAAS,2BAA2B,CAAC,SAA0D;AAAA,EAC7F,IAAI,QAAQ;AAAA,IAAgB,OAAO,QAAQ;AAAA,EAC3C,MAAM,IAAI,0BAA0B,kDAAkD;AAAA;AAGxF,SAAS,kBAAkB,CACzB,SACA,OAQ8B;AAAA,EAC9B,MAAM,SAAS;AAAA,IACb,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,UAAU,MAAM;AAAA,EAClB;AAAA,EACA,QAAQ,MAAM,WAAW;AAAA,SAClB;AAAA,MACH,IAAI,MAAM,SAAS,mBAAmB,UAAU;AAAA,QAC9C,MAAM,4BAA4B,MAAM,EAAE;AAAA,MAC5C;AAAA,MACA,OAAO,QAAQ,MAAM;AAAA,WAChB;AAAA,QACH,UAAU,MAAM;AAAA,QAChB,QAAQ,EAAE,cAAc,MAAM,WAAW,aAAa;AAAA,MACxD,CAAC;AAAA,SACE;AAAA,MACH,IAAI,MAAM,SAAS,mBAAmB,QAAQ;AAAA,QAC5C,MAAM,4BAA4B,MAAM,EAAE;AAAA,MAC5C;AAAA,MACA,OAAO,QAAQ,MAAM;AAAA,WAChB;AAAA,QACH,UAAU,MAAM;AAAA,QAChB,QAAQ;AAAA,UACN,oBAAoB,MAAM,WAAW;AAAA,UACrC,oBAAoB,MAAM,WAAW;AAAA,QACvC;AAAA,MACF,CAAC;AAAA,SACE;AAAA,MACH,IAAI,MAAM,SAAS,mBAAmB,aAAa;AAAA,QACjD,MAAM,4BAA4B,MAAM,EAAE;AAAA,MAC5C;AAAA,MACA,OAAO,QAAQ,MAAM;AAAA,WAChB;AAAA,QACH,UAAU,MAAM;AAAA,QAChB,QAAQ,EAAE,cAAc,MAAM,WAAW,aAAa;AAAA,QACtD,gBAAgB;AAAA,MAClB,CAAC;AAAA;AAAA;AAIP,SAAS,oBAAoB,CAC3B,SACA,KACA,UAC8B;AAAA,EAC9B,MAAM,SAAS;AAAA,IACb,IAAI,IAAI;AAAA,IACR,WAAW,IAAI;AAAA,IACf,aAAa,IAAI;AAAA,IACjB;AAAA,EACF;AAAA,EACA,QAAQ,IAAI,SAAS;AAAA,SACd,UAAU;AAAA,MACb,IAAI,EAAE,kBAAkB,IAAI;AAAA,QAAS,MAAM,4BAA4B,IAAI,EAAE;AAAA,MAC7E,OAAO,QAAQ,MAAM,KAAK,QAAQ,UAAU,IAAI,UAAU,QAAQ,IAAI,OAAO,CAAC;AAAA,IAChF;AAAA,SACK,QAAQ;AAAA,MACX,IAAI,EAAE,wBAAwB,IAAI;AAAA,QAAS,MAAM,4BAA4B,IAAI,EAAE;AAAA,MACnF,OAAO,QAAQ,MAAM,KAAK,QAAQ,UAAU,IAAI,UAAU,QAAQ,IAAI,OAAO,CAAC;AAAA,IAChF;AAAA,SACK,aAAa;AAAA,MAChB,IAAI,EAAE,kBAAkB,IAAI,WAAW,CAAC,IAAI,qBAAqB;AAAA,QAC/D,MAAM,4BAA4B,IAAI,EAAE;AAAA,MAC1C;AAAA,MACA,OAAO,QAAQ,MAAM;AAAA,WAChB;AAAA,QACH,UAAU,IAAI;AAAA,QACd,QAAQ,IAAI;AAAA,QACZ,gBAAgB,IAAI,oBAAoB;AAAA,MAC1C,CAAC;AAAA,IACH;AAAA;AAAA;AAIJ,SAAS,2BAA2B,CAAC,OAA0C;AAAA,EAC7E,OAAO,IAAI,0BACT,0BAA0B,8CAC5B;AAAA;AAGF,SAAS,cAAc,CAAC,KAAuD;AAAA,EAC7E,OAAO;AAAA,IACL,cAAc,IAAI,SAAS;AAAA,IAC3B,OAAO,IAAI;AAAA,IACX,UAAU,IAAI,SAAS,YAAY;AAAA,IACnC,SAAS;AAAA,EACX;AAAA;AAGF,SAAS,mBAAmB,CAAC,OAAyC;AAAA,EACpE,YAAY,OAAO,UAAU;AAAA,IAC3B,CAAC,gBAAgB,MAAM,YAAY;AAAA,IACnC,CAAC,aAAa,MAAM,eAAe,SAAS;AAAA,IAC5C,CAAC,aAAa,MAAM,eAAe,SAAS;AAAA,EAC9C,GAAY;AAAA,IACV,IAAI,CAAC,MAAM,KAAK;AAAA,MACd,MAAM,IAAI,0BAA0B,qBAAqB,oBAAoB;AAAA,EACjF;AAAA,EACA,MAAM,YAAY,KAAK,MAAM,MAAM,eAAe,SAAS;AAAA,EAC3D,IACE,CAAC,OAAO,SAAS,SAAS,KAC1B,IAAI,KAAK,SAAS,EAAE,YAAY,MAAM,MAAM,eAAe,WAC3D;AAAA,IACA,MAAM,IAAI,0BAA0B,yDAAyD;AAAA,EAC/F;AAAA;AAGF,SAAS,gBAAgB,CACvB,OACA,KACA,IACuC;AAAA,EACvC,MAAM,eAAe,gBACnB,wBACA,4CAA4C,IAAI,QAChD;AAAA,IACE,OAAO;AAAA,IACP,SAAS;AAAA,MACP,cAAc,IAAI,SAAS;AAAA,MAC3B,gBAAgB,IAAI,SAAS;AAAA,MAC7B,OAAO,IAAI;AAAA,MACX,OAAO;AAAA,IACT;AAAA,EACF,CACF;AAAA,EACA,OAAO,cAAc,cAAc,EAAE,cAAc,8BAA8B,GAAG,CAAC;AAAA;",
+  "debugId": "E8546CFEC17DF5E464756E2164756E21",
+  "names": []
+}

package/dist/chunk-qvybnnpe.js

@@ -0,0 +1,137 @@
+// @bun
+import {
+  AuthStorageError,
+  SYSTEM_PRINCIPAL
+} from "./chunk-jaj13078.js";
+import {
+  resolveAuthorizationContext
+} from "./chunk-34bqh420.js";
+
+// src/agents/authority.ts
+function agentServiceAccountId(agentId) {
+  return `svc_agent_${agentId}`;
+}
+async function ensureAgentExecutionIdentity(input) {
+  const auth = requireAuthStorage(input.auth);
+  const id = agentServiceAccountId(input.agent.id);
+  const name = input.agent.name;
+  const description = `Managed service account for agent '${input.agent.id}'.`;
+  const now = new Date;
+  const loaded = await loadOrCreateAgentServiceAccount(auth, {
+    id,
+    projectId: input.projectId,
+    name,
+    description,
+    updatedAt: now
+  });
+  assertActiveAgentServiceAccount(input.agent.id, loaded);
+  const serviceAccount = await updateAgentServiceAccountMetadata(auth, {
+    existing: loaded,
+    name,
+    description,
+    updatedAt: now
+  });
+  assertActiveAgentServiceAccount(input.agent.id, serviceAccount);
+  const groupMemberships = await auth.serviceAccountGroupMemberships.reconcileForServiceAccount({
+    projectId: input.projectId,
+    serviceAccountId: id,
+    groupIds: input.agent.groupIds,
+    source: "agent",
+    updatedAt: now
+  });
+  return {
+    serviceAccount,
+    principal: { type: "serviceAccount", id },
+    groupMemberships
+  };
+}
+async function loadOrCreateAgentServiceAccount(auth, input) {
+  const existing = await auth.serviceAccounts.getById({
+    projectId: input.projectId,
+    id: input.id
+  });
+  if (existing)
+    return existing;
+  try {
+    return await auth.serviceAccounts.create({
+      id: input.id,
+      projectId: input.projectId,
+      name: input.name,
+      description: input.description,
+      status: "active",
+      createdByPrincipal: SYSTEM_PRINCIPAL,
+      createdAt: input.updatedAt,
+      updatedAt: input.updatedAt
+    });
+  } catch (error) {
+    if (!(error instanceof AuthStorageError) || error.code !== "duplicate_service_account") {
+      throw error;
+    }
+    const concurrent = await auth.serviceAccounts.getById({
+      projectId: input.projectId,
+      id: input.id
+    });
+    if (!concurrent)
+      throw error;
+    return concurrent;
+  }
+}
+function assertActiveAgentServiceAccount(agentId, serviceAccount) {
+  if (serviceAccount.status === "suspended") {
+    throw new Error(`[Sixb] Agent '${agentId}' service account '${serviceAccount.id}' is suspended.`);
+  }
+}
+async function resolveAgentExecutionAuthorization(input) {
+  const auth = requireAuthStorage(input.auth);
+  const expectedId = agentServiceAccountId(input.agentId);
+  const principal = input.authorizationRef.type === "principal" ? input.authorizationRef.principal : null;
+  if (principal?.type !== "serviceAccount" || principal.id !== expectedId) {
+    throw new Error(`[Sixb] Agent '${input.agentId}' execution authority must reference service account '${expectedId}'.`);
+  }
+  const serviceAccount = await auth.serviceAccounts.getById({
+    projectId: input.projectId,
+    id: principal.id
+  });
+  if (!serviceAccount || serviceAccount.status !== "active") {
+    throw new Error(`[Sixb] Agent service account '${principal.id}' is not active.`);
+  }
+  const groupMemberships = await auth.serviceAccountGroupMemberships.listForServiceAccount({
+    projectId: input.projectId,
+    serviceAccountId: principal.id
+  });
+  const identity = {
+    serviceAccount,
+    principal: { type: "serviceAccount", id: principal.id },
+    groupMemberships
+  };
+  return {
+    identity,
+    context: resolveAuthorizationContext({
+      principal: identity.principal,
+      groupIds: groupMemberships.map((membership) => membership.groupId),
+      roles: input.security.listResolvedRoles()
+    })
+  };
+}
+function requireAuthStorage(auth) {
+  if (!auth) {
+    throw new Error("[Sixb] Agent executions require auth storage.");
+  }
+  return auth;
+}
+async function updateAgentServiceAccountMetadata(auth, input) {
+  if (input.existing.name === input.name && input.existing.description === input.description) {
+    return input.existing;
+  }
+  return auth.serviceAccounts.update({
+    projectId: input.existing.projectId,
+    id: input.existing.id,
+    name: input.name,
+    description: input.description,
+    updatedAt: input.updatedAt
+  });
+}
+
+export { agentServiceAccountId, ensureAgentExecutionIdentity, resolveAgentExecutionAuthorization };
+
+//# debugId=BAD526CB9A059A9B64756E2164756E21

package/dist/chunk-qvybnnpe.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/agents/authority.ts"],
+  "sourcesContent": [
+    "import { SYSTEM_PRINCIPAL } from \"../auth\"\nimport type { AuthorizationContext } from \"../authorization\"\nimport { resolveAuthorizationContext } from \"../authorization\"\nimport type { AuthorizablePrincipal, AuthorizationRef } from \"../execution\"\nimport type { SecurityDefinitionCatalog } from \"../security\"\nimport type {\n  AuthStorage,\n  ServiceAccountGroupMembershipRecord,\n  ServiceAccountRecord,\n} from \"../storage/auth\"\nimport { AuthStorageError } from \"../storage/auth\"\nimport type { AgentDefinition } from \"./types\"\n\nexport interface AgentExecutionIdentity {\n  readonly serviceAccount: ServiceAccountRecord\n  readonly principal: Extract<AuthorizablePrincipal, { readonly type: \"serviceAccount\" }>\n  readonly groupMemberships: readonly ServiceAccountGroupMembershipRecord[]\n}\n\nexport function agentServiceAccountId(agentId: string): string {\n  return `svc_agent_${agentId}`\n}\n\n/** Ensure the definition-owned service account exists before an Agent execution is admitted. */\nexport async function ensureAgentExecutionIdentity(input: {\n  readonly auth: AuthStorage | undefined\n  readonly projectId: string\n  readonly agent: AgentDefinition\n}): Promise<AgentExecutionIdentity> {\n  const auth = requireAuthStorage(input.auth)\n  const id = agentServiceAccountId(input.agent.id)\n  const name = input.agent.name\n  const description = `Managed service account for agent '${input.agent.id}'.`\n  const now = new Date()\n  const loaded = await loadOrCreateAgentServiceAccount(auth, {\n    id,\n    projectId: input.projectId,\n    name,\n    description,\n    updatedAt: now,\n  })\n  assertActiveAgentServiceAccount(input.agent.id, loaded)\n  const serviceAccount = await updateAgentServiceAccountMetadata(auth, {\n    existing: loaded,\n    name,\n    description,\n    updatedAt: now,\n  })\n  assertActiveAgentServiceAccount(input.agent.id, serviceAccount)\n\n  const groupMemberships = await auth.serviceAccountGroupMemberships.reconcileForServiceAccount({\n    projectId: input.projectId,\n    serviceAccountId: id,\n    groupIds: input.agent.groupIds,\n    source: \"agent\",\n    updatedAt: now,\n  })\n\n  return {\n    serviceAccount,\n    principal: { type: \"serviceAccount\", id },\n    groupMemberships,\n  }\n}\n\n/** Load the managed identity, recovering only the expected concurrent-create race. */\nasync function loadOrCreateAgentServiceAccount(\n  auth: AuthStorage,\n  input: {\n    readonly id: string\n    readonly projectId: string\n    readonly name: string\n    readonly description: string\n    readonly updatedAt: Date\n  }\n): Promise<ServiceAccountRecord> {\n  const existing = await auth.serviceAccounts.getById({\n    projectId: input.projectId,\n    id: input.id,\n  })\n  if (existing) return existing\n\n  try {\n    return await auth.serviceAccounts.create({\n      id: input.id,\n      projectId: input.projectId,\n      name: input.name,\n      description: input.description,\n      status: \"active\",\n      createdByPrincipal: SYSTEM_PRINCIPAL,\n      createdAt: input.updatedAt,\n      updatedAt: input.updatedAt,\n    })\n  } catch (error) {\n    if (!(error instanceof AuthStorageError) || error.code !== \"duplicate_service_account\") {\n      throw error\n    }\n    const concurrent = await auth.serviceAccounts.getById({\n      projectId: input.projectId,\n      id: input.id,\n    })\n    if (!concurrent) throw error\n    return concurrent\n  }\n}\n\nfunction assertActiveAgentServiceAccount(\n  agentId: string,\n  serviceAccount: ServiceAccountRecord\n): void {\n  if (serviceAccount.status === \"suspended\") {\n    throw new Error(\n      `[Sixb] Agent '${agentId}' service account '${serviceAccount.id}' is suspended.`\n    )\n  }\n}\n\n/** Resolve current grants for the service account referenced by a durable Agent execution. */\nexport async function resolveAgentExecutionAuthorization(input: {\n  readonly auth: AuthStorage | undefined\n  readonly projectId: string\n  readonly agentId: string\n  readonly authorizationRef: AuthorizationRef\n  readonly security: SecurityDefinitionCatalog\n}): Promise<{ readonly identity: AgentExecutionIdentity; readonly context: AuthorizationContext }> {\n  const auth = requireAuthStorage(input.auth)\n  const expectedId = agentServiceAccountId(input.agentId)\n  const principal =\n    input.authorizationRef.type === \"principal\" ? input.authorizationRef.principal : null\n  if (principal?.type !== \"serviceAccount\" || principal.id !== expectedId) {\n    throw new Error(\n      `[Sixb] Agent '${input.agentId}' execution authority must reference service account '${expectedId}'.`\n    )\n  }\n\n  const serviceAccount = await auth.serviceAccounts.getById({\n    projectId: input.projectId,\n    id: principal.id,\n  })\n  if (!serviceAccount || serviceAccount.status !== \"active\") {\n    throw new Error(`[Sixb] Agent service account '${principal.id}' is not active.`)\n  }\n\n  const groupMemberships = await auth.serviceAccountGroupMemberships.listForServiceAccount({\n    projectId: input.projectId,\n    serviceAccountId: principal.id,\n  })\n  const identity: AgentExecutionIdentity = {\n    serviceAccount,\n    principal: { type: \"serviceAccount\", id: principal.id },\n    groupMemberships,\n  }\n  return {\n    identity,\n    context: resolveAuthorizationContext({\n      principal: identity.principal,\n      groupIds: groupMemberships.map((membership) => membership.groupId),\n      roles: input.security.listResolvedRoles(),\n    }),\n  }\n}\n\nfunction requireAuthStorage(auth: AuthStorage | undefined): AuthStorage {\n  if (!auth) {\n    throw new Error(\"[Sixb] Agent executions require auth storage.\")\n  }\n  return auth\n}\n\nasync function updateAgentServiceAccountMetadata(\n  auth: AuthStorage,\n  input: {\n    readonly existing: ServiceAccountRecord\n    readonly name: string\n    readonly description: string\n    readonly updatedAt: Date\n  }\n): Promise<ServiceAccountRecord> {\n  if (input.existing.name === input.name && input.existing.description === input.description) {\n    return input.existing\n  }\n  return auth.serviceAccounts.update({\n    projectId: input.existing.projectId,\n    id: input.existing.id,\n    name: input.name,\n    description: input.description,\n    updatedAt: input.updatedAt,\n  })\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;AAmBO,SAAS,qBAAqB,CAAC,SAAyB;AAAA,EAC7D,OAAO,aAAa;AAAA;AAItB,eAAsB,4BAA4B,CAAC,OAIf;AAAA,EAClC,MAAM,OAAO,mBAAmB,MAAM,IAAI;AAAA,EAC1C,MAAM,KAAK,sBAAsB,MAAM,MAAM,EAAE;AAAA,EAC/C,MAAM,OAAO,MAAM,MAAM;AAAA,EACzB,MAAM,cAAc,sCAAsC,MAAM,MAAM;AAAA,EACtE,MAAM,MAAM,IAAI;AAAA,EAChB,MAAM,SAAS,MAAM,gCAAgC,MAAM;AAAA,IACzD;AAAA,IACA,WAAW,MAAM;AAAA,IACjB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAAA,EACD,gCAAgC,MAAM,MAAM,IAAI,MAAM;AAAA,EACtD,MAAM,iBAAiB,MAAM,kCAAkC,MAAM;AAAA,IACnE,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAAA,EACD,gCAAgC,MAAM,MAAM,IAAI,cAAc;AAAA,EAE9D,MAAM,mBAAmB,MAAM,KAAK,+BAA+B,2BAA2B;AAAA,IAC5F,WAAW,MAAM;AAAA,IACjB,kBAAkB;AAAA,IAClB,UAAU,MAAM,MAAM;AAAA,IACtB,QAAQ;AAAA,IACR,WAAW;AAAA,EACb,CAAC;AAAA,EAED,OAAO;AAAA,IACL;AAAA,IACA,WAAW,EAAE,MAAM,kBAAkB,GAAG;AAAA,IACxC;AAAA,EACF;AAAA;AAIF,eAAe,+BAA+B,CAC5C,MACA,OAO+B;AAAA,EAC/B,MAAM,WAAW,MAAM,KAAK,gBAAgB,QAAQ;AAAA,IAClD,WAAW,MAAM;AAAA,IACjB,IAAI,MAAM;AAAA,EACZ,CAAC;AAAA,EACD,IAAI;AAAA,IAAU,OAAO;AAAA,EAErB,IAAI;AAAA,IACF,OAAO,MAAM,KAAK,gBAAgB,OAAO;AAAA,MACvC,IAAI,MAAM;AAAA,MACV,WAAW,MAAM;AAAA,MACjB,MAAM,MAAM;AAAA,MACZ,aAAa,MAAM;AAAA,MACnB,QAAQ;AAAA,MACR,oBAAoB;AAAA,MACpB,WAAW,MAAM;AAAA,MACjB,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,IAAI,EAAE,iBAAiB,qBAAqB,MAAM,SAAS,6BAA6B;AAAA,MACtF,MAAM;AAAA,IACR;AAAA,IACA,MAAM,aAAa,MAAM,KAAK,gBAAgB,QAAQ;AAAA,MACpD,WAAW,MAAM;AAAA,MACjB,IAAI,MAAM;AAAA,IACZ,CAAC;AAAA,IACD,IAAI,CAAC;AAAA,MAAY,MAAM;AAAA,IACvB,OAAO;AAAA;AAAA;AAIX,SAAS,+BAA+B,CACtC,SACA,gBACM;AAAA,EACN,IAAI,eAAe,WAAW,aAAa;AAAA,IACzC,MAAM,IAAI,MACR,iBAAiB,6BAA6B,eAAe,mBAC/D;AAAA,EACF;AAAA;AAIF,eAAsB,kCAAkC,CAAC,OAM0C;AAAA,EACjG,MAAM,OAAO,mBAAmB,MAAM,IAAI;AAAA,EAC1C,MAAM,aAAa,sBAAsB,MAAM,OAAO;AAAA,EACtD,MAAM,YACJ,MAAM,iBAAiB,SAAS,cAAc,MAAM,iBAAiB,YAAY;AAAA,EACnF,IAAI,WAAW,SAAS,oBAAoB,UAAU,OAAO,YAAY;AAAA,IACvE,MAAM,IAAI,MACR,iBAAiB,MAAM,gEAAgE,cACzF;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,QAAQ;AAAA,IACxD,WAAW,MAAM;AAAA,IACjB,IAAI,UAAU;AAAA,EAChB,CAAC;AAAA,EACD,IAAI,CAAC,kBAAkB,eAAe,WAAW,UAAU;AAAA,IACzD,MAAM,IAAI,MAAM,iCAAiC,UAAU,oBAAoB;AAAA,EACjF;AAAA,EAEA,MAAM,mBAAmB,MAAM,KAAK,+BAA+B,sBAAsB;AAAA,IACvF,WAAW,MAAM;AAAA,IACjB,kBAAkB,UAAU;AAAA,EAC9B,CAAC;AAAA,EACD,MAAM,WAAmC;AAAA,IACvC;AAAA,IACA,WAAW,EAAE,MAAM,kBAAkB,IAAI,UAAU,GAAG;AAAA,IACtD;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL;AAAA,IACA,SAAS,4BAA4B;AAAA,MACnC,WAAW,SAAS;AAAA,MACpB,UAAU,iBAAiB,IAAI,CAAC,eAAe,WAAW,OAAO;AAAA,MACjE,OAAO,MAAM,SAAS,kBAAkB;AAAA,IAC1C,CAAC;AAAA,EACH;AAAA;AAGF,SAAS,kBAAkB,CAAC,MAA4C;AAAA,EACtE,IAAI,CAAC,MAAM;AAAA,IACT,MAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAAA,EACA,OAAO;AAAA;AAGT,eAAe,iCAAiC,CAC9C,MACA,OAM+B;AAAA,EAC/B,IAAI,MAAM,SAAS,SAAS,MAAM,QAAQ,MAAM,SAAS,gBAAgB,MAAM,aAAa;AAAA,IAC1F,OAAO,MAAM;AAAA,EACf;AAAA,EACA,OAAO,KAAK,gBAAgB,OAAO;AAAA,IACjC,WAAW,MAAM,SAAS;AAAA,IAC1B,IAAI,MAAM,SAAS;AAAA,IACnB,MAAM,MAAM;AAAA,IACZ,aAAa,MAAM;AAAA,IACnB,WAAW,MAAM;AAAA,EACnB,CAAC;AAAA;",
+  "debugId": "BAD526CB9A059A9B64756E2164756E21",
+  "names": []
+}