@sixb/core 0.1.1 → 0.1.2

package/dist/events/types/workflows.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflows.d.ts","sourceRoot":"","sources":["../../../src/events/types/workflows.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEhD,MAAM,WAAW,sBAAuB,SAAQ,aAAa;IAC3D,IAAI,EAAE,qBAAqB,CAAA;IAC3B,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,MAAM,CAAC,EAAE,iBAAiB,CAAA;KAC3B,CAAA;CACF;AAED,MAAM,WAAW,uBAAwB,SAAQ,aAAa;IAC5D,IAAI,EAAE,sBAAsB,CAAA;IAC5B,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,2BAA4B,SAAQ,aAAa;IAChE,IAAI,EAAE,2BAA2B,CAAA;IACjC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,CAAA;QACtD,MAAM,EAAE,MAAM,CAAA;QACd,OAAO,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,uBAAwB,SAAQ,aAAa;IAC5D,IAAI,EAAE,sBAAsB,CAAA;IAC5B,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,2BAA4B,SAAQ,aAAa;IAChE,IAAI,EAAE,2BAA2B,CAAA;IACjC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAA;QAClC,MAAM,EAAE,MAAM,CAAA;QACd,OAAO,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,4BAA6B,SAAQ,aAAa;IACjE,IAAI,EAAE,4BAA4B,CAAA;IAClC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,CAAA;QACtD,MAAM,EAAE,MAAM,CAAA;QACd,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAA;QAC5C,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;CACF;AAED,MAAM,WAAW,wBAAyB,SAAQ,aAAa;IAC7D,IAAI,EAAE,uBAAuB,CAAA;IAC7B,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAA;QAC5C,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;CACF;AAED,MAAM,WAAW,kCAAmC,SAAQ,aAAa;IACvE,IAAI,EAAE,iCAAiC,CAAA;IACvC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;QACtB,qBAAqB,EAAE,MAAM,CAAA;QAC7B,WAAW,EAAE,MAAM,CAAA;KACpB,CAAA;CACF;AAED,MAAM,WAAW,kCAAmC,SAAQ,aAAa;IACvE,IAAI,EAAE,iCAAiC,CAAA;IACvC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;QACtB,qBAAqB,EAAE,MAAM,CAAA;QAC7B,WAAW,EAAE,MAAM,CAAA;KACpB,CAAA;CACF;AAED,MAAM,WAAW,kCAAmC,SAAQ,aAAa;IACvE,IAAI,EAAE,iCAAiC,CAAA;IACvC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;QACtB,qBAAqB,EAAE,MAAM,CAAA;QAC7B,WAAW,EAAE,MAAM,CAAA;KACpB,CAAA;CACF;AAED,MAAM,WAAW,gCAAiC,SAAQ,aAAa;IACrE,IAAI,EAAE,+BAA+B,CAAA;IACrC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;QACtB,qBAAqB,EAAE,MAAM,CAAA;QAC7B,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,MAAM,aAAa,GACrB,sBAAsB,GACtB,uBAAuB,GACvB,2BAA2B,GAC3B,uBAAuB,GACvB,2BAA2B,GAC3B,4BAA4B,GAC5B,wBAAwB,GACxB,kCAAkC,GAClC,kCAAkC,GAClC,kCAAkC,GAClC,gCAAgC,CAAA"}
+{"version":3,"file":"workflows.d.ts","sourceRoot":"","sources":["../../../src/events/types/workflows.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEhD,MAAM,WAAW,sBAAuB,SAAQ,aAAa;IAC3D,IAAI,EAAE,qBAAqB,CAAA;IAC3B,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,MAAM,CAAC,EAAE,iBAAiB,CAAA;KAC3B,CAAA;CACF;AAED,MAAM,WAAW,uBAAwB,SAAQ,aAAa;IAC5D,IAAI,EAAE,sBAAsB,CAAA;IAC5B,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,2BAA4B,SAAQ,aAAa;IAChE,IAAI,EAAE,2BAA2B,CAAA;IACjC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,CAAA;QACtD,MAAM,EAAE,MAAM,CAAA;QACd,OAAO,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,uBAAwB,SAAQ,aAAa;IAC5D,IAAI,EAAE,sBAAsB,CAAA;IAC5B,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,2BAA4B,SAAQ,aAAa;IAChE,IAAI,EAAE,2BAA2B,CAAA;IACjC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAA;QAClC,MAAM,EAAE,MAAM,CAAA;QACd,OAAO,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,4BAA6B,SAAQ,aAAa;IACjE,IAAI,EAAE,4BAA4B,CAAA;IAClC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,CAAA;QACtD,MAAM,EAAE,MAAM,CAAA;QACd,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAA;QAC5C,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,CAAC,EAAE,WAAW,CAAC,sBAAsB,CAAC,CAAA;KAC5C,CAAA;CACF;AAED,MAAM,WAAW,wBAAyB,SAAQ,aAAa;IAC7D,IAAI,EAAE,uBAAuB,CAAA;IAC7B,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAA;QAC5C,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,CAAC,EAAE,WAAW,CAAC,sBAAsB,CAAC,CAAA;KAC5C,CAAA;CACF;AAED,MAAM,WAAW,kCAAmC,SAAQ,aAAa;IACvE,IAAI,EAAE,iCAAiC,CAAA;IACvC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;QACtB,qBAAqB,EAAE,MAAM,CAAA;QAC7B,WAAW,EAAE,MAAM,CAAA;KACpB,CAAA;CACF;AAED,MAAM,WAAW,kCAAmC,SAAQ,aAAa;IACvE,IAAI,EAAE,iCAAiC,CAAA;IACvC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;QACtB,qBAAqB,EAAE,MAAM,CAAA;QAC7B,WAAW,EAAE,MAAM,CAAA;KACpB,CAAA;CACF;AAED,MAAM,WAAW,kCAAmC,SAAQ,aAAa;IACvE,IAAI,EAAE,iCAAiC,CAAA;IACvC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;QACtB,qBAAqB,EAAE,MAAM,CAAA;QAC7B,WAAW,EAAE,MAAM,CAAA;KACpB,CAAA;CACF;AAED,MAAM,WAAW,gCAAiC,SAAQ,aAAa;IACrE,IAAI,EAAE,+BAA+B,CAAA;IACrC,KAAK,EAAE,WAAW,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;QACtB,qBAAqB,EAAE,MAAM,CAAA;QAC7B,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,MAAM,aAAa,GACrB,sBAAsB,GACtB,uBAAuB,GACvB,2BAA2B,GAC3B,uBAAuB,GACvB,2BAA2B,GAC3B,4BAA4B,GAC5B,wBAAwB,GACxB,kCAAkC,GAClC,kCAAkC,GAClC,kCAAkC,GAClC,gCAAgC,CAAA"}

package/dist/execution/agent.d.ts

@@ -0,0 +1,42 @@
+import type { AuthorizationContext } from "../authorization";
+import type { OntologySource } from "../ontology";
+import { type Sixb } from "../runtime/sixb";
+import type { CreateExecutionInput, ExecutionRecord } from "../storage/executions";
+import type { AuthorizablePrincipal, ExecutionScope } from "./types";
+/** Minimal host boundary required by agent workers. */
+export interface AgentExecutionHost {
+    readonly id: string;
+    withScope(scope: ExecutionScope): object;
+}
+/** Build the immutable child execution owned by one direct or Workflow Agent run. */
+export declare function createAgentExecutionRecord(input: {
+    readonly id: string;
+    readonly parent: ExecutionRecord;
+    readonly agentId: string;
+    readonly runId: string;
+    readonly principal: Extract<AuthorizablePrincipal, {
+        readonly type: "serviceAccount";
+    }>;
+}): CreateExecutionInput;
+/** Bind a worker to the immutable execution already owned by its durable Agent run. */
+export declare function bindDurableAgentExecution(host: AgentExecutionHost, input: {
+    readonly execution: ExecutionRecord;
+    readonly agentId: string;
+    readonly runId: string;
+    readonly authorization: AuthorizationContext;
+}): Sixb<readonly OntologySource[]>;
+/** Restore one provider-validated Agent execution with its currently resolved grants. */
+export declare function restoreAgentExecutionScope(input: {
+    readonly execution: ExecutionRecord;
+    readonly agentId: string;
+    readonly runId: string;
+    readonly authorization: AuthorizationContext;
+}): ExecutionScope;
+/** Validate that a durable record belongs to the exact resolved Agent execution. */
+export declare function assertAgentExecutionRecord(input: {
+    readonly execution: ExecutionRecord;
+    readonly agentId: string;
+    readonly runId: string;
+    readonly authorization: AuthorizationContext;
+}): void;
+//# sourceMappingURL=agent.d.ts.map

package/dist/execution/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/execution/agent.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAe,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAGlF,OAAO,KAAK,EAAE,qBAAqB,EAAoB,cAAc,EAAE,MAAM,SAAS,CAAA;AAEtF,uDAAuD;AACvD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAA;CACzC;AAED,qFAAqF;AACrF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,qBAAqB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAA;CACxF,GAAG,oBAAoB,CAgBvB;AAED,uFAAuF;AACvF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE;IACL,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;CAC7C,GACA,IAAI,CAAC,SAAS,cAAc,EAAE,CAAC,CAOjC;AAED,yFAAyF;AACzF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;CAC7C,GAAG,cAAc,CAsBjB;AAED,oFAAoF;AACpF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;CAC7C,GAAG,IAAI,CAeP"}

package/dist/execution/agent.js

@@ -0,0 +1,70 @@
+// @bun
+import {
+  assertAgentExecutionRecord,
+  bindDurableAgentExecution,
+  createAgentExecutionRecord,
+  restoreAgentExecutionScope
+} from "../chunk-0mbx247x.js";
+import"../chunk-bct7hmfc.js";
+import"../chunk-zg9yryhz.js";
+import"../chunk-k9pts48t.js";
+import"../chunk-gqdd7508.js";
+import"../chunk-xhy826cz.js";
+import"../chunk-nnyp53zt.js";
+import"../chunk-88ppkr54.js";
+import"../chunk-63te770v.js";
+import"../chunk-8b55ygje.js";
+import"../chunk-51fjndv0.js";
+import"../chunk-8m5ejdpn.js";
+import"../chunk-nf4r78r4.js";
+import"../chunk-5egfka8j.js";
+import"../chunk-c6qd89g5.js";
+import"../chunk-st4xgxey.js";
+import"../chunk-8ryen3p3.js";
+import"../chunk-ys1nse2v.js";
+import"../chunk-fmx1sz2h.js";
+import"../chunk-57r1cpxx.js";
+import"../chunk-cy0n5dms.js";
+import"../chunk-dysw7nsm.js";
+import"../chunk-62c7t4jc.js";
+import"../chunk-ezake7g1.js";
+import"../chunk-4x43bkbp.js";
+import"../chunk-htq0qh7z.js";
+import"../chunk-xkthy56g.js";
+import"../chunk-vp1vc6ee.js";
+import"../chunk-qvybnnpe.js";
+import"../chunk-t9xghkva.js";
+import"../chunk-5gd7tpv6.js";
+import"../chunk-h9kxd41f.js";
+import"../chunk-9dzba0f2.js";
+import"../chunk-vybf6pkp.js";
+import"../chunk-ry24jbr1.js";
+import"../chunk-6wetht33.js";
+import"../chunk-3j7573mj.js";
+import"../chunk-4gz41why.js";
+import"../chunk-zcnhxkvd.js";
+import"../chunk-1evzqhks.js";
+import"../chunk-dsrkgtnh.js";
+import"../chunk-bhxaq2nn.js";
+import"../chunk-rnshztfq.js";
+import"../chunk-04b07a9q.js";
+import"../chunk-dktq02ne.js";
+import"../chunk-zqysyfjt.js";
+import"../chunk-yt8wphsx.js";
+import"../chunk-85j5ybfj.js";
+import"../chunk-57zpb99z.js";
+import"../chunk-663csy96.js";
+import"../chunk-jaj13078.js";
+import"../chunk-xwnf87e1.js";
+import"../chunk-34bqh420.js";
+import"../chunk-0172wgm9.js";
+import"../chunk-t8t39h7v.js";
+import"../chunk-y64skrwp.js";
+export {
+  restoreAgentExecutionScope,
+  createAgentExecutionRecord,
+  bindDurableAgentExecution,
+  assertAgentExecutionRecord
+};
+
+//# debugId=8C2844BF10870D2364756E2164756E21

package/dist/execution/agent.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "8C2844BF10870D2364756E2164756E21",
+  "names": []
+}

package/dist/execution/authorization.d.ts

@@ -0,0 +1,60 @@
+import type { AuthorizationContext } from "../authorization/types";
+import { type AuthorizationRef, type ExecutionScope, type KernelOperation, type RuntimeAuthorization, type TrustedPrimitiveRef } from "./types";
+export type ResolvedRuntimeAuthorization = {
+    readonly type: "principal";
+    readonly projectId: string;
+    readonly context: AuthorizationContext;
+    readonly ref: Extract<AuthorizationRef, {
+        readonly type: "principal";
+    }>;
+    /** Process-local binding used by provider façades that explicitly support agent runs. */
+    readonly executionBinding?: AgentExecutionBinding;
+} | {
+    readonly type: "unrestricted";
+    readonly projectId: string;
+    readonly ref: Exclude<AuthorizationRef, {
+        readonly type: "principal";
+    }>;
+} | {
+    readonly type: "denied";
+};
+type RegisteredRuntimeAuthorization = Exclude<ResolvedRuntimeAuthorization, {
+    readonly type: "denied";
+}>;
+interface AgentExecutionBinding {
+    readonly type: "agent";
+    readonly executionId: string;
+    readonly agentId: string;
+    readonly runId: string;
+}
+export declare function createPrincipalRuntimeAuthorization(input: {
+    readonly projectId: string;
+    readonly context: AuthorizationContext;
+    readonly credential?: Extract<AuthorizationRef, {
+        readonly type: "principal";
+    }>["credential"];
+}): RuntimeAuthorization;
+/** Register service-account authority bound to one exact agent run. */
+export declare function createAgentRuntimeAuthorization(input: {
+    readonly projectId: string;
+    readonly context: AuthorizationContext;
+    readonly executionId: string;
+    readonly agentId: string;
+    readonly runId: string;
+}): RuntimeAuthorization;
+export declare function createDisabledRuntimeAuthorization(projectId: string): RuntimeAuthorization;
+export declare function createTrustedPrimitiveRuntimeAuthorization(input: {
+    readonly projectId: string;
+    readonly primitive: TrustedPrimitiveRef;
+}): RuntimeAuthorization;
+export declare function createKernelRuntimeAuthorization(input: {
+    readonly projectId: string;
+    readonly operation: KernelOperation;
+}): RuntimeAuthorization;
+export declare function resolveRuntimeAuthorization(authorization: unknown): ResolvedRuntimeAuthorization;
+export declare function getAuthorizationRef(authorization: RuntimeAuthorization): AuthorizationRef;
+export declare function assertExecutionScopeProject(projectId: string, scope: ExecutionScope): void;
+/** Validate that one registered authority belongs to the exact execution it accompanies. */
+export declare function resolveExecutionScopeAuthorization(projectId: string, scope: ExecutionScope): RegisteredRuntimeAuthorization;
+export {};
+//# sourceMappingURL=authorization.d.ts.map

package/dist/execution/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../src/execution/authorization.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAc,MAAM,wBAAwB,CAAA;AAE9E,OAAO,EAEL,KAAK,gBAAgB,EAErB,KAAK,cAAc,EAEnB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAEzB,KAAK,mBAAmB,EACzB,MAAM,SAAS,CAAA;AAEhB,MAAM,MAAM,4BAA4B,GACpC;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAA;IACvE,yFAAyF;IACzF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,qBAAqB,CAAA;CAClD,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAA;CACxE,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAA;AAE/B,KAAK,8BAA8B,GAAG,OAAO,CAC3C,4BAA4B,EAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAC5B,CAAA;AAMD,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAID,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC,YAAY,CAAC,CAAA;CAC9F,GAAG,oBAAoB,CAEvB;AAED,uEAAuE;AACvE,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,GAAG,oBAAoB,CAavB;AA6BD,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAE1F;AAED,wBAAgB,0CAA0C,CAAC,KAAK,EAAE;IAChE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;CACxC,GAAG,oBAAoB,CAOvB;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;CACpC,GAAG,oBAAoB,CAOvB;AAED,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,OAAO,GAAG,4BAA4B,CAKhG;AAED,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,oBAAoB,GAAG,gBAAgB,CAMzF;AAED,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI,CAqC1F;AAED,4FAA4F;AAC5F,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,cAAc,GACpB,8BAA8B,CAqFhC"}

package/dist/execution/dispatch.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Typed boundary for turning one resolved primitive run intent into durable state and transport.
+ * Implementations own their primitive-specific validation, persistence, and queue publication.
+ */
+export interface RunDispatcher<TInput, TResult> {
+    dispatch(input: TInput): Promise<TResult>;
+}
+//# sourceMappingURL=dispatch.d.ts.map

package/dist/execution/dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../src/execution/dispatch.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,aAAa,CAAC,MAAM,EAAE,OAAO;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC1C"}

package/dist/execution/durable.d.ts

@@ -0,0 +1,37 @@
+import { type CreateExecutionInput, type ExecutionRecord, type ExecutionStorage } from "../storage/executions";
+import type { ExecutionContext, ExecutionScope, RuntimeAuthorization, TrustedPrimitiveRef } from "./types";
+/** Convert one currently bound execution to the immutable provider representation. */
+export declare function executionRecordInputFromRuntime(input: {
+    readonly execution: ExecutionContext;
+    readonly runtimeAuthorization: RuntimeAuthorization;
+}): CreateExecutionInput;
+/**
+ * Store a caller execution once. Repeated boundaries may observe the same immutable execution;
+ * only an exact match is idempotent.
+ */
+export declare function ensureExecutionRecord(storage: ExecutionStorage, input: CreateExecutionInput): Promise<ExecutionRecord>;
+type PrimitiveExecutionOrigin = {
+    readonly type: "execution";
+    readonly parent: ExecutionRecord;
+} | {
+    readonly type: "automatic";
+    readonly projectId: string;
+    readonly source: Extract<CreateExecutionInput["source"], {
+        readonly type: "schedule" | "event" | "datasetVersion" | "webhook";
+    }>;
+    readonly correlationId: string;
+    readonly requestedBy?: CreateExecutionInput["requestedBy"];
+};
+/** Build an immutable primitive execution from its parent execution or automatic trigger. */
+export declare function createPrimitiveExecutionRecord(input: {
+    readonly id: string;
+    readonly primitive: TrustedPrimitiveRef;
+    readonly origin: PrimitiveExecutionOrigin;
+}): CreateExecutionInput;
+/** Restore the trusted scope of a provider-validated primitive execution record. */
+export declare function restoreTrustedPrimitiveExecutionScope(input: {
+    readonly execution: ExecutionRecord;
+    readonly primitive: TrustedPrimitiveRef;
+}): ExecutionScope;
+export {};
+//# sourceMappingURL=durable.d.ts.map

package/dist/execution/durable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durable.d.ts","sourceRoot":"","sources":["../../src/execution/durable.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAEtB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,SAAS,CAAA;AAEhB,sFAAsF;AACtF,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAA;CACpD,GAAG,oBAAoB,CAavB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,eAAe,CAAC,CAmB1B;AAED,KAAK,wBAAwB,GACzB;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;CACjC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CACtB,oBAAoB,CAAC,QAAQ,CAAC,EAC9B;QAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAAA;KAAE,CACvE,CAAA;IACD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAA;CAC3D,CAAA;AAEL,6FAA6F;AAC7F,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;IACvC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;CAC1C,GAAG,oBAAoB,CAiCvB;AAED,oFAAoF;AACpF,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;CACxC,GAAG,cAAc,CAmBjB"}

package/dist/execution/index.d.ts

@@ -0,0 +1,2 @@
+export type { AuthorizablePrincipal, AuthorizationRef, ExecutionContext, ExecutionExecutor, ExecutionScope, ExecutionSource, KernelOperation, RuntimeAuthorization, TrustedPrimitiveKind, TrustedPrimitiveRef, } from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/execution/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,SAAS,CAAA"}

package/dist/execution/primitive.d.ts

@@ -0,0 +1,21 @@
+import type { OntologySource } from "../ontology";
+import type { OntologyMutationRuntime } from "../runtime/ontology-mutations";
+import { type Sixb } from "../runtime/sixb";
+import type { ExecutionRecord } from "../storage/executions";
+import type { ExecutionScope, TrustedPrimitiveRef } from "./types";
+/** Minimal host boundary required by trusted primitive workers. */
+export interface PrimitiveExecutionHost {
+    readonly id: string;
+    withScope(scope: ExecutionScope): object;
+}
+export interface BoundPrimitiveExecution {
+    readonly sixb: Sixb<readonly OntologySource[]>;
+    /** Internal mutation port guarded by the same runtime authority as `sixb`. */
+    readonly ontologyMutations: OntologyMutationRuntime;
+}
+/** Bind a worker to the immutable execution already owned by its durable primitive run. */
+export declare function bindDurablePrimitiveExecution(host: PrimitiveExecutionHost, input: {
+    readonly execution: ExecutionRecord;
+    readonly primitive: TrustedPrimitiveRef;
+}): BoundPrimitiveExecution;
+//# sourceMappingURL=primitive.d.ts.map

package/dist/execution/primitive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitive.d.ts","sourceRoot":"","sources":["../../src/execution/primitive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AAE5E,OAAO,EAAe,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAElE,mEAAmE;AACnE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAA;CACzC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,cAAc,EAAE,CAAC,CAAA;IAC9C,8EAA8E;IAC9E,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAA;CACpD;AAED,2FAA2F;AAC3F,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,sBAAsB,EAC5B,KAAK,EAAE;IACL,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;CACxC,GACA,uBAAuB,CAEzB"}

package/dist/execution/primitive.js

@@ -0,0 +1,88 @@
+// @bun
+import {
+  isBoundSixb
+} from "../chunk-0mbx247x.js";
+import"../chunk-bct7hmfc.js";
+import"../chunk-zg9yryhz.js";
+import"../chunk-k9pts48t.js";
+import"../chunk-gqdd7508.js";
+import {
+  getOntologyMutationRuntime
+} from "../chunk-xhy826cz.js";
+import"../chunk-nnyp53zt.js";
+import"../chunk-88ppkr54.js";
+import"../chunk-63te770v.js";
+import"../chunk-8b55ygje.js";
+import"../chunk-51fjndv0.js";
+import"../chunk-8m5ejdpn.js";
+import"../chunk-nf4r78r4.js";
+import"../chunk-5egfka8j.js";
+import"../chunk-c6qd89g5.js";
+import"../chunk-st4xgxey.js";
+import {
+  restoreTrustedPrimitiveExecutionScope
+} from "../chunk-8ryen3p3.js";
+import"../chunk-ys1nse2v.js";
+import"../chunk-fmx1sz2h.js";
+import"../chunk-57r1cpxx.js";
+import"../chunk-cy0n5dms.js";
+import"../chunk-dysw7nsm.js";
+import"../chunk-62c7t4jc.js";
+import"../chunk-ezake7g1.js";
+import"../chunk-4x43bkbp.js";
+import"../chunk-htq0qh7z.js";
+import"../chunk-xkthy56g.js";
+import"../chunk-vp1vc6ee.js";
+import"../chunk-qvybnnpe.js";
+import"../chunk-t9xghkva.js";
+import"../chunk-5gd7tpv6.js";
+import"../chunk-h9kxd41f.js";
+import"../chunk-9dzba0f2.js";
+import"../chunk-vybf6pkp.js";
+import"../chunk-ry24jbr1.js";
+import"../chunk-6wetht33.js";
+import"../chunk-3j7573mj.js";
+import"../chunk-4gz41why.js";
+import"../chunk-zcnhxkvd.js";
+import"../chunk-1evzqhks.js";
+import"../chunk-dsrkgtnh.js";
+import"../chunk-bhxaq2nn.js";
+import"../chunk-rnshztfq.js";
+import"../chunk-04b07a9q.js";
+import"../chunk-dktq02ne.js";
+import"../chunk-zqysyfjt.js";
+import"../chunk-yt8wphsx.js";
+import"../chunk-85j5ybfj.js";
+import"../chunk-57zpb99z.js";
+import"../chunk-663csy96.js";
+import"../chunk-jaj13078.js";
+import"../chunk-xwnf87e1.js";
+import"../chunk-34bqh420.js";
+import"../chunk-0172wgm9.js";
+import"../chunk-t8t39h7v.js";
+import"../chunk-y64skrwp.js";
+
+// src/execution/primitive.ts
+function bindDurablePrimitiveExecution(host, input) {
+  return bindPrimitiveScope(host, restoreTrustedPrimitiveExecutionScope(input));
+}
+function bindPrimitiveScope(host, scope) {
+  let ontologyMutations;
+  const sixb = host.withScope(scope);
+  if (!isBoundSixb(sixb)) {
+    throw new Error("[Sixb] Primitive execution host returned an invalid bound SDK.");
+  }
+  const bound = {
+    sixb,
+    get ontologyMutations() {
+      ontologyMutations ??= getOntologyMutationRuntime(sixb);
+      return ontologyMutations;
+    }
+  };
+  return Object.freeze(bound);
+}
+export {
+  bindDurablePrimitiveExecution
+};
+
+//# debugId=4F7596760A4099A664756E2164756E21

package/dist/execution/primitive.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/execution/primitive.ts"],
+  "sourcesContent": [
+    "import type { OntologySource } from \"../ontology\"\nimport type { OntologyMutationRuntime } from \"../runtime/ontology-mutations\"\nimport { getOntologyMutationRuntime } from \"../runtime/ontology-mutations\"\nimport { isBoundSixb, type Sixb } from \"../runtime/sixb\"\nimport type { ExecutionRecord } from \"../storage/executions\"\nimport { restoreTrustedPrimitiveExecutionScope } from \"./durable\"\nimport type { ExecutionScope, TrustedPrimitiveRef } from \"./types\"\n\n/** Minimal host boundary required by trusted primitive workers. */\nexport interface PrimitiveExecutionHost {\n  readonly id: string\n  withScope(scope: ExecutionScope): object\n}\n\nexport interface BoundPrimitiveExecution {\n  readonly sixb: Sixb<readonly OntologySource[]>\n  /** Internal mutation port guarded by the same runtime authority as `sixb`. */\n  readonly ontologyMutations: OntologyMutationRuntime\n}\n\n/** Bind a worker to the immutable execution already owned by its durable primitive run. */\nexport function bindDurablePrimitiveExecution(\n  host: PrimitiveExecutionHost,\n  input: {\n    readonly execution: ExecutionRecord\n    readonly primitive: TrustedPrimitiveRef\n  }\n): BoundPrimitiveExecution {\n  return bindPrimitiveScope(host, restoreTrustedPrimitiveExecutionScope(input))\n}\n\nfunction bindPrimitiveScope(\n  host: PrimitiveExecutionHost,\n  scope: ExecutionScope\n): BoundPrimitiveExecution {\n  let ontologyMutations: OntologyMutationRuntime | undefined\n\n  const sixb = host.withScope(scope)\n  if (!isBoundSixb(sixb)) {\n    throw new Error(\"[Sixb] Primitive execution host returned an invalid bound SDK.\")\n  }\n  const bound: BoundPrimitiveExecution = {\n    sixb,\n    get ontologyMutations() {\n      ontologyMutations ??= getOntologyMutationRuntime(sixb)\n      return ontologyMutations\n    },\n  }\n  return Object.freeze(bound)\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBO,SAAS,6BAA6B,CAC3C,MACA,OAIyB;AAAA,EACzB,OAAO,mBAAmB,MAAM,sCAAsC,KAAK,CAAC;AAAA;AAG9E,SAAS,kBAAkB,CACzB,MACA,OACyB;AAAA,EACzB,IAAI;AAAA,EAEJ,MAAM,OAAO,KAAK,UAAU,KAAK;AAAA,EACjC,IAAI,CAAC,YAAY,IAAI,GAAG;AAAA,IACtB,MAAM,IAAI,MAAM,gEAAgE;AAAA,EAClF;AAAA,EACA,MAAM,QAAiC;AAAA,IACrC;AAAA,QACI,iBAAiB,GAAG;AAAA,MACtB,sBAAsB,2BAA2B,IAAI;AAAA,MACrD,OAAO;AAAA;AAAA,EAEX;AAAA,EACA,OAAO,OAAO,OAAO,KAAK;AAAA;",
+  "debugId": "4F7596760A4099A664756E2164756E21",
+  "names": []
+}

package/dist/execution/request.d.ts

@@ -0,0 +1,38 @@
+import type { AuthorizationContext } from "../authorization";
+import type { OntologySource } from "../ontology";
+import { type Sixb } from "../runtime/sixb";
+import type { AuthorizationRef, ExecutionScope } from "./types";
+export type { ActionRunsRuntime, ActionsRuntime } from "../actions/execution";
+export type { AgentRunListResult, AgentRunsRuntime, AgentRunView, AgentsRuntime, AgentThreadsRuntime, CreateExecutionAgentThreadInput, ExecutionAgentRequestInput, ListExecutionAgentThreadsInput, } from "../agents/execution";
+export type { AuthorizationContext } from "../authorization";
+export type { DatasetsRuntime } from "../datasets/execution";
+export type { EventsRuntime } from "../events/execution";
+export type { LogsRuntime } from "../logging/execution";
+export type { ExecutionObjectByIdHandle, ExecutionObjectSet, ObjectsRuntime, } from "../objects/execution";
+export type { PipelineRunsRuntime, PipelinesRuntime, } from "../pipelines/execution";
+export type { ProjectionRunsRuntime, ProjectionsRuntime, } from "../projections/execution";
+export type { RuleStatesRuntime, RulesRuntime } from "../rules/execution";
+export type { Sixb } from "../runtime/sixb";
+export type { SyncRunsRuntime, SyncsRuntime } from "../syncs/execution";
+export type { LatestWorkflowRunListResult, ListWorkflowRunNodesInput, WorkflowAgentNodeRunView, WorkflowInterventionsRuntime, WorkflowNodeRunListResult, WorkflowNodeRunView, WorkflowRunListResult, WorkflowRunsRuntime, WorkflowRunView, WorkflowsRuntime, } from "../workflows/execution";
+export type { AuthorizationRef, ExecutionContext } from "./types";
+export type RequestExecutionAuthorization = {
+    readonly type: "principal";
+    readonly context: AuthorizationContext;
+    readonly credential?: Extract<AuthorizationRef, {
+        readonly type: "principal";
+    }>["credential"];
+} | {
+    readonly type: "disabled";
+};
+export interface BindRequestExecutionInput {
+    readonly request: Request;
+    readonly authorization: RequestExecutionAuthorization;
+}
+export interface RequestExecutionHost {
+    readonly id: string;
+    withScope(scope: ExecutionScope): object;
+}
+/** Bind one HTTP or WebSocket request without exposing trusted or kernel capability factories. */
+export declare function bindRequestExecution(host: RequestExecutionHost, input: BindRequestExecutionInput): Sixb<readonly OntologySource[]>;
+//# sourceMappingURL=request.d.ts.map

package/dist/execution/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/execution/request.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAe,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAExD,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE/D,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC7E,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,+BAA+B,EAC/B,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACvD,YAAY,EACV,yBAAyB,EACzB,kBAAkB,EAClB,cAAc,GACf,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EACV,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,0BAA0B,CAAA;AACjC,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACzE,YAAY,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAC3C,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACvE,YAAY,EACV,2BAA2B,EAC3B,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,EAC5B,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,GACjB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAEjE,MAAM,MAAM,6BAA6B,GACrC;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC,YAAY,CAAC,CAAA;CAC9F,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAA;AAEjC,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,6BAA6B,CAAA;CACtD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAA;CACzC;AAED,kGAAkG;AAClG,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,yBAAyB,GAC/B,IAAI,CAAC,SAAS,cAAc,EAAE,CAAC,CAqBjC"}

package/dist/execution/request.js

@@ -0,0 +1,97 @@
+// @bun
+import {
+  createDisabledRequestScope,
+  createPrincipalRequestScope
+} from "../chunk-g9t3kdtx.js";
+import {
+  isBoundSixb
+} from "../chunk-0mbx247x.js";
+import"../chunk-bct7hmfc.js";
+import"../chunk-zg9yryhz.js";
+import"../chunk-k9pts48t.js";
+import"../chunk-gqdd7508.js";
+import"../chunk-xhy826cz.js";
+import"../chunk-nnyp53zt.js";
+import"../chunk-88ppkr54.js";
+import"../chunk-63te770v.js";
+import"../chunk-8b55ygje.js";
+import"../chunk-51fjndv0.js";
+import"../chunk-8m5ejdpn.js";
+import"../chunk-nf4r78r4.js";
+import"../chunk-5egfka8j.js";
+import"../chunk-c6qd89g5.js";
+import"../chunk-st4xgxey.js";
+import"../chunk-8ryen3p3.js";
+import"../chunk-ys1nse2v.js";
+import"../chunk-fmx1sz2h.js";
+import"../chunk-57r1cpxx.js";
+import"../chunk-cy0n5dms.js";
+import"../chunk-dysw7nsm.js";
+import"../chunk-62c7t4jc.js";
+import"../chunk-ezake7g1.js";
+import"../chunk-4x43bkbp.js";
+import"../chunk-htq0qh7z.js";
+import"../chunk-xkthy56g.js";
+import"../chunk-vp1vc6ee.js";
+import"../chunk-qvybnnpe.js";
+import"../chunk-t9xghkva.js";
+import"../chunk-5gd7tpv6.js";
+import"../chunk-h9kxd41f.js";
+import"../chunk-9dzba0f2.js";
+import"../chunk-vybf6pkp.js";
+import"../chunk-ry24jbr1.js";
+import"../chunk-6wetht33.js";
+import"../chunk-3j7573mj.js";
+import"../chunk-4gz41why.js";
+import"../chunk-zcnhxkvd.js";
+import"../chunk-1evzqhks.js";
+import"../chunk-dsrkgtnh.js";
+import"../chunk-bhxaq2nn.js";
+import"../chunk-rnshztfq.js";
+import"../chunk-04b07a9q.js";
+import"../chunk-dktq02ne.js";
+import"../chunk-zqysyfjt.js";
+import"../chunk-yt8wphsx.js";
+import"../chunk-85j5ybfj.js";
+import"../chunk-57zpb99z.js";
+import"../chunk-663csy96.js";
+import"../chunk-jaj13078.js";
+import"../chunk-xwnf87e1.js";
+import"../chunk-34bqh420.js";
+import"../chunk-0172wgm9.js";
+import"../chunk-t8t39h7v.js";
+import"../chunk-y64skrwp.js";
+
+// src/execution/request.ts
+import { randomUUID } from "crypto";
+function bindRequestExecution(host, input) {
+  const requestId = requestIdentifier(input.request);
+  const correlationId = correlationIdentifier(input.request, requestId);
+  const scope = input.authorization.type === "principal" ? createPrincipalRequestScope({
+    projectId: host.id,
+    requestId,
+    correlationId,
+    context: input.authorization.context,
+    ...input.authorization.credential === undefined ? {} : { credential: input.authorization.credential }
+  }) : createDisabledRequestScope({ projectId: host.id, requestId, correlationId });
+  const sixb = host.withScope(scope);
+  if (!isBoundSixb(sixb)) {
+    throw new Error("[Sixb] Request host did not return an execution-bound Sixb SDK.");
+  }
+  return sixb;
+}
+function requestIdentifier(request) {
+  return headerIdentifier(request, "x-request-id") ?? `req_${randomUUID()}`;
+}
+function correlationIdentifier(request, requestId) {
+  return headerIdentifier(request, "x-correlation-id") ?? requestId;
+}
+function headerIdentifier(request, name) {
+  const value = request.headers.get(name)?.trim();
+  return value ? value : undefined;
+}
+export {
+  bindRequestExecution
+};
+
+//# debugId=F830B50C978608F064756E2164756E21

package/dist/execution/request.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/execution/request.ts"],
+  "sourcesContent": [
+    "import { randomUUID } from \"node:crypto\"\nimport type { AuthorizationContext } from \"../authorization\"\nimport type { OntologySource } from \"../ontology\"\nimport { isBoundSixb, type Sixb } from \"../runtime/sixb\"\nimport { createDisabledRequestScope, createPrincipalRequestScope } from \"./scopes\"\nimport type { AuthorizationRef, ExecutionScope } from \"./types\"\n\nexport type { ActionRunsRuntime, ActionsRuntime } from \"../actions/execution\"\nexport type {\n  AgentRunListResult,\n  AgentRunsRuntime,\n  AgentRunView,\n  AgentsRuntime,\n  AgentThreadsRuntime,\n  CreateExecutionAgentThreadInput,\n  ExecutionAgentRequestInput,\n  ListExecutionAgentThreadsInput,\n} from \"../agents/execution\"\nexport type { AuthorizationContext } from \"../authorization\"\nexport type { DatasetsRuntime } from \"../datasets/execution\"\nexport type { EventsRuntime } from \"../events/execution\"\nexport type { LogsRuntime } from \"../logging/execution\"\nexport type {\n  ExecutionObjectByIdHandle,\n  ExecutionObjectSet,\n  ObjectsRuntime,\n} from \"../objects/execution\"\nexport type {\n  PipelineRunsRuntime,\n  PipelinesRuntime,\n} from \"../pipelines/execution\"\nexport type {\n  ProjectionRunsRuntime,\n  ProjectionsRuntime,\n} from \"../projections/execution\"\nexport type { RuleStatesRuntime, RulesRuntime } from \"../rules/execution\"\nexport type { Sixb } from \"../runtime/sixb\"\nexport type { SyncRunsRuntime, SyncsRuntime } from \"../syncs/execution\"\nexport type {\n  LatestWorkflowRunListResult,\n  ListWorkflowRunNodesInput,\n  WorkflowAgentNodeRunView,\n  WorkflowInterventionsRuntime,\n  WorkflowNodeRunListResult,\n  WorkflowNodeRunView,\n  WorkflowRunListResult,\n  WorkflowRunsRuntime,\n  WorkflowRunView,\n  WorkflowsRuntime,\n} from \"../workflows/execution\"\nexport type { AuthorizationRef, ExecutionContext } from \"./types\"\n\nexport type RequestExecutionAuthorization =\n  | {\n      readonly type: \"principal\"\n      readonly context: AuthorizationContext\n      readonly credential?: Extract<AuthorizationRef, { readonly type: \"principal\" }>[\"credential\"]\n    }\n  | { readonly type: \"disabled\" }\n\nexport interface BindRequestExecutionInput {\n  readonly request: Request\n  readonly authorization: RequestExecutionAuthorization\n}\n\nexport interface RequestExecutionHost {\n  readonly id: string\n  withScope(scope: ExecutionScope): object\n}\n\n/** Bind one HTTP or WebSocket request without exposing trusted or kernel capability factories. */\nexport function bindRequestExecution(\n  host: RequestExecutionHost,\n  input: BindRequestExecutionInput\n): Sixb<readonly OntologySource[]> {\n  const requestId = requestIdentifier(input.request)\n  const correlationId = correlationIdentifier(input.request, requestId)\n  const scope =\n    input.authorization.type === \"principal\"\n      ? createPrincipalRequestScope({\n          projectId: host.id,\n          requestId,\n          correlationId,\n          context: input.authorization.context,\n          ...(input.authorization.credential === undefined\n            ? {}\n            : { credential: input.authorization.credential }),\n        })\n      : createDisabledRequestScope({ projectId: host.id, requestId, correlationId })\n\n  const sixb = host.withScope(scope)\n  if (!isBoundSixb(sixb)) {\n    throw new Error(\"[Sixb] Request host did not return an execution-bound Sixb SDK.\")\n  }\n  return sixb\n}\n\nfunction requestIdentifier(request: Request): string {\n  return headerIdentifier(request, \"x-request-id\") ?? `req_${randomUUID()}`\n}\n\nfunction correlationIdentifier(request: Request, requestId: string): string {\n  return headerIdentifier(request, \"x-correlation-id\") ?? requestId\n}\n\nfunction headerIdentifier(request: Request, name: string): string | undefined {\n  const value = request.headers.get(name)?.trim()\n  return value ? value : undefined\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAuEO,SAAS,oBAAoB,CAClC,MACA,OACiC;AAAA,EACjC,MAAM,YAAY,kBAAkB,MAAM,OAAO;AAAA,EACjD,MAAM,gBAAgB,sBAAsB,MAAM,SAAS,SAAS;AAAA,EACpE,MAAM,QACJ,MAAM,cAAc,SAAS,cACzB,4BAA4B;AAAA,IAC1B,WAAW,KAAK;AAAA,IAChB;AAAA,IACA;AAAA,IACA,SAAS,MAAM,cAAc;AAAA,OACzB,MAAM,cAAc,eAAe,YACnC,CAAC,IACD,EAAE,YAAY,MAAM,cAAc,WAAW;AAAA,EACnD,CAAC,IACD,2BAA2B,EAAE,WAAW,KAAK,IAAI,WAAW,cAAc,CAAC;AAAA,EAEjF,MAAM,OAAO,KAAK,UAAU,KAAK;AAAA,EACjC,IAAI,CAAC,YAAY,IAAI,GAAG;AAAA,IACtB,MAAM,IAAI,MAAM,iEAAiE;AAAA,EACnF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,iBAAiB,CAAC,SAA0B;AAAA,EACnD,OAAO,iBAAiB,SAAS,cAAc,KAAK,OAAO,WAAW;AAAA;AAGxE,SAAS,qBAAqB,CAAC,SAAkB,WAA2B;AAAA,EAC1E,OAAO,iBAAiB,SAAS,kBAAkB,KAAK;AAAA;AAG1D,SAAS,gBAAgB,CAAC,SAAkB,MAAkC;AAAA,EAC5E,MAAM,QAAQ,QAAQ,QAAQ,IAAI,IAAI,GAAG,KAAK;AAAA,EAC9C,OAAO,QAAQ,QAAQ;AAAA;",
+  "debugId": "F830B50C978608F064756E2164756E21",
+  "names": []
+}

package/dist/execution/scopes.d.ts

@@ -0,0 +1,30 @@
+import type { AuthorizationContext } from "../authorization";
+import type { AuthorizationRef, ExecutionScope, ExecutionSource, KernelOperation } from "./types";
+export declare function createPrincipalRequestScope(input: {
+    readonly projectId: string;
+    readonly requestId: string;
+    readonly correlationId: string;
+    readonly context: AuthorizationContext;
+    readonly credential?: Extract<AuthorizationRef, {
+        readonly type: "principal";
+    }>["credential"];
+}): ExecutionScope;
+export declare function createDisabledRequestScope(input: {
+    readonly projectId: string;
+    readonly requestId: string;
+    readonly correlationId: string;
+}): ExecutionScope;
+export declare function createKernelScope(input: {
+    readonly projectId: string;
+    readonly operation: KernelOperation;
+    readonly source: ExecutionSource;
+    readonly correlationId?: string;
+}): ExecutionScope;
+export declare function createTestingScope(input: {
+    readonly projectId: string;
+    readonly context?: AuthorizationContext;
+    readonly executionId?: string;
+    readonly requestId?: string;
+    readonly correlationId?: string;
+}): ExecutionScope;
+//# sourceMappingURL=scopes.d.ts.map

package/dist/execution/scopes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopes.d.ts","sourceRoot":"","sources":["../../src/execution/scopes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAM5D,OAAO,KAAK,EAEV,gBAAgB,EAEhB,cAAc,EACd,eAAe,EACf,eAAe,EAChB,MAAM,SAAS,CAAA;AAEhB,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC,YAAY,CAAC,CAAA;CAC9F,GAAG,cAAc,CAgBjB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B,GAAG,cAAc,CAKjB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAChC,GAAG,cAAc,CAYjB;AAyBD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAA;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAChC,GAAG,cAAc,CAgBjB"}