@sixb/core 0.1.1 → 0.1.3

package/dist/chunk-qer6am8w.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/storage/agents/errors.ts", "../src/storage/agents/provider.ts"],
+  "sourcesContent": [
+    "export type AgentStorageErrorCode =\n  | \"thread_not_found\"\n  | \"active_run_exists\"\n  | \"run_not_found\"\n  | \"invalid_input\"\n  | \"invalid_state\"\n  | \"execution_lost\"\n  | \"duplicate_id\"\n\n/**\n * Error for agent-storage invariants and invalid state transitions (single-flight, execution\n * ownership, run lifecycle, message append). Callers branch on `code` rather than message text.\n */\nexport class AgentStorageError extends Error {\n  readonly name = \"AgentStorageError\"\n\n  constructor(\n    readonly code: AgentStorageErrorCode,\n    message: string\n  ) {\n    super(message)\n  }\n}\n",
+    "import { agentServiceAccountId } from \"../../agents/authority\"\nimport type { ExecutionStorage } from \"../executions\"\nimport { findAgentRunExecution } from \"../executions/run-link\"\nimport { AgentStorageError } from \"./errors\"\nimport type {\n  AgentContextCheckpointRecord,\n  AgentMessageRecord,\n  AgentRunRecord,\n  AgentThreadRecord,\n  CreateAgentContextCheckpointInput,\n} from \"./types\"\n\n/** Validate the semantic link between a conversational Agent run and its immutable execution. */\nexport async function assertAgentRunExecution(input: {\n  readonly executions: ExecutionStorage\n  readonly projectId: string\n  readonly executionId: string\n  readonly runId: string\n  readonly agentId: string\n}): Promise<void> {\n  const execution = await findAgentRunExecution({\n    executions: input.executions,\n    projectId: input.projectId,\n    executionId: input.executionId,\n    runId: input.runId,\n    serviceAccountId: agentServiceAccountId(input.agentId),\n  })\n  if (!execution) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[Sixb] Execution '${input.executionId}' does not authorize Agent run '${input.runId}'.`\n    )\n  }\n}\n\n/** Validate provider-independent checkpoint fields before entering a storage critical section. */\nexport function assertCreateAgentContextCheckpointInput(\n  input: CreateAgentContextCheckpointInput,\n  prefix = \"Sixb\"\n): void {\n  for (const [name, value] of [\n    [\"id\", input.id],\n    [\"projectId\", input.projectId],\n    [\"threadId\", input.threadId],\n    [\"createdByRunId\", input.createdByRunId],\n    [\"executionToken\", input.executionToken],\n    [\"summary\", input.summary],\n    [\"summaryModelId\", input.summaryModelId],\n  ] as const) {\n    if (value.trim().length === 0) {\n      throw new AgentStorageError(\n        \"invalid_input\",\n        `[${prefix}] Agent context checkpoint '${name}' must not be empty.`\n      )\n    }\n  }\n\n  if (input.summaryFormatVersion !== 1) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint summary format version must be 1.`\n    )\n  }\n  if (input.reason !== \"threshold\" && input.reason !== \"overflow\") {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint reason must be 'threshold' or 'overflow'.`\n    )\n  }\n  if (\n    input.expectedPreviousCheckpointId !== null &&\n    input.expectedPreviousCheckpointId.trim().length === 0\n  ) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint expected previous id must not be empty.`\n    )\n  }\n  if (input.createdAt && !Number.isFinite(input.createdAt.getTime())) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint createdAt must be a valid date.`\n    )\n  }\n\n  for (const [name, value, minimum] of [\n    [\"expectedHeadSeq\", input.expectedHeadSeq, 1],\n    [\"summarizedThroughSeq\", input.summarizedThroughSeq, 1],\n    [\"observedHeadSeq\", input.observedHeadSeq, 1],\n    [\"estimatedInputTokensBefore\", input.estimatedInputTokensBefore, 0],\n    [\"estimatedInputTokensAfter\", input.estimatedInputTokensAfter, 0],\n  ] as const) {\n    if (!Number.isSafeInteger(value) || value < minimum) {\n      throw new AgentStorageError(\n        \"invalid_input\",\n        `[${prefix}] Agent context checkpoint '${name}' must be a safe integer greater than or equal to ${minimum}.`\n      )\n    }\n  }\n\n  if (input.observedHeadSeq !== input.expectedHeadSeq) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint observed head must equal its expected message head.`\n    )\n  }\n  if (input.summarizedThroughSeq >= input.observedHeadSeq) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint must retain the triggering head message.`\n    )\n  }\n}\n\n/** Assert that the current delivery still owns the active conversational run. */\nexport function assertAgentContextCheckpointAuthority(input: {\n  readonly create: CreateAgentContextCheckpointInput\n  readonly run: AgentRunRecord | null\n  readonly thread: AgentThreadRecord | null\n  readonly prefix?: string\n}): asserts input is typeof input & {\n  readonly run: AgentRunRecord\n  readonly thread: AgentThreadRecord\n} {\n  const { create, run, thread } = input\n  const prefix = input.prefix ?? \"Sixb\"\n  if (!run) {\n    throw new AgentStorageError(\n      \"run_not_found\",\n      `[${prefix}] Agent run '${create.createdByRunId}' not found for project '${create.projectId}'.`\n    )\n  }\n  if (!thread) {\n    throw new AgentStorageError(\n      \"thread_not_found\",\n      `[${prefix}] Agent thread '${create.threadId}' not found for project '${create.projectId}'.`\n    )\n  }\n  if (run.threadId !== create.threadId) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent run '${run.id}' does not belong to thread '${create.threadId}'.`\n    )\n  }\n  if (run.status !== \"running\") {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent run '${run.id}' is not running (status '${run.status}').`\n    )\n  }\n  if (!run.execution || run.execution.token !== create.executionToken) {\n    throw new AgentStorageError(\n      \"execution_lost\",\n      `[${prefix}] Execution token is no longer current on agent run '${run.id}'.`\n    )\n  }\n  if (thread.activeRunId !== run.id) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent run '${run.id}' no longer owns thread '${thread.id}'.`\n    )\n  }\n}\n\n/** Assert both compare-and-swap anchors and the retained-turn boundary. */\nexport function assertAgentContextCheckpointAnchors(input: {\n  readonly create: CreateAgentContextCheckpointInput\n  readonly latest: AgentContextCheckpointRecord | null\n  readonly headSeq: number\n  readonly firstRetained: AgentMessageRecord | null\n  readonly prefix?: string\n}): void {\n  const { create, latest, headSeq, firstRetained } = input\n  const prefix = input.prefix ?? \"Sixb\"\n  if (headSeq !== create.expectedHeadSeq) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent thread '${create.threadId}' message head changed from ${create.expectedHeadSeq} to ${headSeq}.`\n    )\n  }\n\n  const latestId = latest?.id ?? null\n  if (latestId !== create.expectedPreviousCheckpointId) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent thread '${create.threadId}' checkpoint head changed.`\n    )\n  }\n  if (latest && create.summarizedThroughSeq <= latest.summarizedThroughSeq) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint boundary must advance beyond sequence ${latest.summarizedThroughSeq}.`\n    )\n  }\n  if (!firstRetained || firstRetained.seq !== create.summarizedThroughSeq + 1) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent context checkpoint boundary does not align with stored thread messages.`\n    )\n  }\n  if (firstRetained.role !== \"user\") {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint must retain a complete turn beginning with a user message.`\n    )\n  }\n}\n\n/** Validate the mutable anchors again before returning an idempotently created checkpoint. */\nexport function assertAgentContextCheckpointReplayState(input: {\n  readonly create: CreateAgentContextCheckpointInput\n  readonly existing: AgentContextCheckpointRecord\n  readonly latest: AgentContextCheckpointRecord | null\n  readonly headSeq: number\n  readonly prefix?: string\n}): void {\n  const prefix = input.prefix ?? \"Sixb\"\n  if (input.headSeq !== input.create.expectedHeadSeq) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent thread '${input.create.threadId}' message head changed from ${input.create.expectedHeadSeq} to ${input.headSeq}.`\n    )\n  }\n  if (input.latest?.id !== input.existing.id) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent thread '${input.create.threadId}' checkpoint head changed after '${input.existing.id}'.`\n    )\n  }\n}\n\n/** Compare the durable semantic payload; delivery token and generated timestamp are not content. */\nexport function agentContextCheckpointMatchesCreateInput(\n  record: AgentContextCheckpointRecord,\n  input: CreateAgentContextCheckpointInput\n): boolean {\n  return (\n    record.id === input.id &&\n    record.projectId === input.projectId &&\n    record.threadId === input.threadId &&\n    record.createdByRunId === input.createdByRunId &&\n    (record.previousCheckpointId ?? null) === input.expectedPreviousCheckpointId &&\n    record.reason === input.reason &&\n    record.summary === input.summary &&\n    record.summaryFormatVersion === input.summaryFormatVersion &&\n    record.summarizedThroughSeq === input.summarizedThroughSeq &&\n    record.observedHeadSeq === input.observedHeadSeq &&\n    record.estimatedInputTokensBefore === input.estimatedInputTokensBefore &&\n    record.estimatedInputTokensAfter === input.estimatedInputTokensAfter &&\n    record.summaryModelId === input.summaryModelId\n  )\n}\n"
+  ],
+  "mappings": ";;;;;;;;;AAaO,MAAM,0BAA0B,MAAM;AAAA,EAIhC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA;AAAA,IACA,MAAM,OAAO;AAAA,IAHJ;AAAA;AAKb;;;ACTA,eAAsB,uBAAuB,CAAC,OAM5B;AAAA,EAChB,MAAM,YAAY,MAAM,sBAAsB;AAAA,IAC5C,YAAY,MAAM;AAAA,IAClB,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,OAAO,MAAM;AAAA,IACb,kBAAkB,sBAAsB,MAAM,OAAO;AAAA,EACvD,CAAC;AAAA,EACD,IAAI,CAAC,WAAW;AAAA,IACd,MAAM,IAAI,kBACR,iBACA,qBAAqB,MAAM,8CAA8C,MAAM,SACjF;AAAA,EACF;AAAA;AAIK,SAAS,uCAAuC,CACrD,OACA,SAAS,QACH;AAAA,EACN,YAAY,MAAM,UAAU;AAAA,IAC1B,CAAC,MAAM,MAAM,EAAE;AAAA,IACf,CAAC,aAAa,MAAM,SAAS;AAAA,IAC7B,CAAC,YAAY,MAAM,QAAQ;AAAA,IAC3B,CAAC,kBAAkB,MAAM,cAAc;AAAA,IACvC,CAAC,kBAAkB,MAAM,cAAc;AAAA,IACvC,CAAC,WAAW,MAAM,OAAO;AAAA,IACzB,CAAC,kBAAkB,MAAM,cAAc;AAAA,EACzC,GAAY;AAAA,IACV,IAAI,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,MAC7B,MAAM,IAAI,kBACR,iBACA,IAAI,qCAAqC,0BAC3C;AAAA,IACF;AAAA,EACF;AAAA,EAEA,IAAI,MAAM,yBAAyB,GAAG;AAAA,IACpC,MAAM,IAAI,kBACR,iBACA,IAAI,oEACN;AAAA,EACF;AAAA,EACA,IAAI,MAAM,WAAW,eAAe,MAAM,WAAW,YAAY;AAAA,IAC/D,MAAM,IAAI,kBACR,iBACA,IAAI,4EACN;AAAA,EACF;AAAA,EACA,IACE,MAAM,iCAAiC,QACvC,MAAM,6BAA6B,KAAK,EAAE,WAAW,GACrD;AAAA,IACA,MAAM,IAAI,kBACR,iBACA,IAAI,0EACN;AAAA,EACF;AAAA,EACA,IAAI,MAAM,aAAa,CAAC,OAAO,SAAS,MAAM,UAAU,QAAQ,CAAC,GAAG;AAAA,IAClE,MAAM,IAAI,kBACR,iBACA,IAAI,kEACN;AAAA,EACF;AAAA,EAEA,YAAY,MAAM,OAAO,YAAY;AAAA,IACnC,CAAC,mBAAmB,MAAM,iBAAiB,CAAC;AAAA,IAC5C,CAAC,wBAAwB,MAAM,sBAAsB,CAAC;AAAA,IACtD,CAAC,mBAAmB,MAAM,iBAAiB,CAAC;AAAA,IAC5C,CAAC,8BAA8B,MAAM,4BAA4B,CAAC;AAAA,IAClE,CAAC,6BAA6B,MAAM,2BAA2B,CAAC;AAAA,EAClE,GAAY;AAAA,IACV,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,SAAS;AAAA,MACnD,MAAM,IAAI,kBACR,iBACA,IAAI,qCAAqC,yDAAyD,UACpG;AAAA,IACF;AAAA,EACF;AAAA,EAEA,IAAI,MAAM,oBAAoB,MAAM,iBAAiB;AAAA,IACnD,MAAM,IAAI,kBACR,iBACA,IAAI,sFACN;AAAA,EACF;AAAA,EACA,IAAI,MAAM,wBAAwB,MAAM,iBAAiB;AAAA,IACvD,MAAM,IAAI,kBACR,iBACA,IAAI,2EACN;AAAA,EACF;AAAA;AAIK,SAAS,qCAAqC,CAAC,OAQpD;AAAA,EACA,QAAQ,QAAQ,KAAK,WAAW;AAAA,EAChC,MAAM,SAAS,MAAM,UAAU;AAAA,EAC/B,IAAI,CAAC,KAAK;AAAA,IACR,MAAM,IAAI,kBACR,iBACA,IAAI,sBAAsB,OAAO,0CAA0C,OAAO,aACpF;AAAA,EACF;AAAA,EACA,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,kBACR,oBACA,IAAI,yBAAyB,OAAO,oCAAoC,OAAO,aACjF;AAAA,EACF;AAAA,EACA,IAAI,IAAI,aAAa,OAAO,UAAU;AAAA,IACpC,MAAM,IAAI,kBACR,iBACA,IAAI,sBAAsB,IAAI,kCAAkC,OAAO,YACzE;AAAA,EACF;AAAA,EACA,IAAI,IAAI,WAAW,WAAW;AAAA,IAC5B,MAAM,IAAI,kBACR,iBACA,IAAI,sBAAsB,IAAI,+BAA+B,IAAI,WACnE;AAAA,EACF;AAAA,EACA,IAAI,CAAC,IAAI,aAAa,IAAI,UAAU,UAAU,OAAO,gBAAgB;AAAA,IACnE,MAAM,IAAI,kBACR,kBACA,IAAI,8DAA8D,IAAI,MACxE;AAAA,EACF;AAAA,EACA,IAAI,OAAO,gBAAgB,IAAI,IAAI;AAAA,IACjC,MAAM,IAAI,kBACR,iBACA,IAAI,sBAAsB,IAAI,8BAA8B,OAAO,MACrE;AAAA,EACF;AAAA;AAIK,SAAS,mCAAmC,CAAC,OAM3C;AAAA,EACP,QAAQ,QAAQ,QAAQ,SAAS,kBAAkB;AAAA,EACnD,MAAM,SAAS,MAAM,UAAU;AAAA,EAC/B,IAAI,YAAY,OAAO,iBAAiB;AAAA,IACtC,MAAM,IAAI,kBACR,iBACA,IAAI,yBAAyB,OAAO,uCAAuC,OAAO,sBAAsB,UAC1G;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,QAAQ,MAAM;AAAA,EAC/B,IAAI,aAAa,OAAO,8BAA8B;AAAA,IACpD,MAAM,IAAI,kBACR,iBACA,IAAI,yBAAyB,OAAO,oCACtC;AAAA,EACF;AAAA,EACA,IAAI,UAAU,OAAO,wBAAwB,OAAO,sBAAsB;AAAA,IACxE,MAAM,IAAI,kBACR,iBACA,IAAI,0EAA0E,OAAO,uBACvF;AAAA,EACF;AAAA,EACA,IAAI,CAAC,iBAAiB,cAAc,QAAQ,OAAO,uBAAuB,GAAG;AAAA,IAC3E,MAAM,IAAI,kBACR,iBACA,IAAI,uFACN;AAAA,EACF;AAAA,EACA,IAAI,cAAc,SAAS,QAAQ;AAAA,IACjC,MAAM,IAAI,kBACR,iBACA,IAAI,6FACN;AAAA,EACF;AAAA;AAIK,SAAS,uCAAuC,CAAC,OAM/C;AAAA,EACP,MAAM,SAAS,MAAM,UAAU;AAAA,EAC/B,IAAI,MAAM,YAAY,MAAM,OAAO,iBAAiB;AAAA,IAClD,MAAM,IAAI,kBACR,iBACA,IAAI,yBAAyB,MAAM,OAAO,uCAAuC,MAAM,OAAO,sBAAsB,MAAM,UAC5H;AAAA,EACF;AAAA,EACA,IAAI,MAAM,QAAQ,OAAO,MAAM,SAAS,IAAI;AAAA,IAC1C,MAAM,IAAI,kBACR,iBACA,IAAI,yBAAyB,MAAM,OAAO,4CAA4C,MAAM,SAAS,MACvG;AAAA,EACF;AAAA;AAIK,SAAS,wCAAwC,CACtD,QACA,OACS;AAAA,EACT,OACE,OAAO,OAAO,MAAM,MACpB,OAAO,cAAc,MAAM,aAC3B,OAAO,aAAa,MAAM,YAC1B,OAAO,mBAAmB,MAAM,mBAC/B,OAAO,wBAAwB,UAAU,MAAM,gCAChD,OAAO,WAAW,MAAM,UACxB,OAAO,YAAY,MAAM,WACzB,OAAO,yBAAyB,MAAM,wBACtC,OAAO,yBAAyB,MAAM,wBACtC,OAAO,oBAAoB,MAAM,mBACjC,OAAO,+BAA+B,MAAM,8BAC5C,OAAO,8BAA8B,MAAM,6BAC3C,OAAO,mBAAmB,MAAM;AAAA;",
+  "debugId": "C4E16AF3EE9252A464756E2164756E21",
+  "names": []
+}

package/dist/{chunk-sb0shdvv.js → chunk-rdeagz6b.js}

@@ -3,7 +3,7 @@ import {
   cloneJsonValue,
   getInvalidJsonValueReason,
   stableJsonStringify
-} from "./chunk-be9vm29v.js";
+} from "./chunk-t8t39h7v.js";
 
 // src/agents/errors.ts
 class AgentDefinitionError extends Error {
@@ -23,7 +23,7 @@ class AgentToolResultValidationError extends Error {
   reason;
   name = "AgentToolResultValidationError";
   constructor(toolName, reason, options) {
-    super(`[Sixb] Agent tool '${toolName}' result must be a JSON value; ${reason}.`, options);
+    super(`[Sixb] Agent tool '${toolName}' returned an invalid result; ${reason}.`, options);
     this.toolName = toolName;
     this.reason = reason;
   }
@@ -153,4 +153,4 @@ function invalidContext(message) {
 
 export { AgentDefinitionError, AgentMessageAdapterError, AgentToolPublicError, AgentToolResultValidationError, AgentRequestError, MAX_AGENT_CONTEXT_ENTRIES, MAX_AGENT_APP_STATE_ENTRY_BYTES, MAX_AGENT_APP_STATE_TOTAL_BYTES, agentContext, agentContextIdentity, agentContextFingerprint, normalizeAgentContextEntries };
 
-//# debugId=86564C87A0ED8E7F64756E2164756E21
+//# debugId=0BA2036A5CD1F1D964756E2164756E21

package/dist/{chunk-sb0shdvv.js.map → chunk-rdeagz6b.js.map}

@@ -2,10 +2,10 @@
   "version": 3,
   "sources": ["../src/agents/errors.ts", "../src/agents/context.ts"],
   "sourcesContent": [
-    "/**\n * Base error for the agents module. Specific subclasses extend this so callers\n * can catch any agent-scoped failure with a single `instanceof AgentDefinitionError` check.\n */\nexport class AgentDefinitionError extends Error {\n  readonly name: string = \"AgentDefinitionError\"\n}\n\n/**\n * Raised by the message adapters. `fromAiSdk` is **total**: rather than silently dropping a part it\n * cannot model, it throws this — which both prevents data loss and pinpoints exactly when the\n * {@link AgentMessage} part union must be extended. It also fires on transient/streaming parts that\n * must never be persisted, and on out-of-contract (non-JSON) payloads.\n */\nexport class AgentMessageAdapterError extends Error {\n  readonly name = \"AgentMessageAdapterError\"\n}\n\n/**\n * An agent-tool failure whose message is intentionally safe to expose to the model and persist in\n * the durable trace. Tool authors must keep the message free of credentials and internal details;\n * unknown errors remain masked by the worker.\n */\nexport class AgentToolPublicError extends Error {\n  readonly name: string = \"AgentToolPublicError\"\n}\n\n/** Raised when an agent tool result cannot cross the durable JSON message boundary. */\nexport class AgentToolResultValidationError extends Error {\n  readonly name = \"AgentToolResultValidationError\"\n\n  constructor(\n    readonly toolName: string,\n    readonly reason: string,\n    options?: ErrorOptions\n  ) {\n    super(`[Sixb] Agent tool '${toolName}' result must be a JSON value; ${reason}.`, options)\n  }\n}\n\nexport type AgentRequestErrorCode =\n  | \"agent_not_found\"\n  | \"thread_not_found\"\n  | \"thread_agent_mismatch\"\n  | \"active_run_exists\"\n  | \"invalid_context\"\n  | \"storage_unavailable\"\n\n/**\n * Raised by {@link requestAgentRun} (the trigger). Callers branch on `code` rather than message text\n * — e.g. the HTTP layer maps `active_run_exists` to 409 and `agent_not_found` to 404.\n */\nexport class AgentRequestError extends Error {\n  readonly name = \"AgentRequestError\"\n\n  constructor(\n    readonly code: AgentRequestErrorCode,\n    message: string\n  ) {\n    super(message)\n  }\n}\n",
+    "/**\n * Base error for the agents module. Specific subclasses extend this so callers\n * can catch any agent-scoped failure with a single `instanceof AgentDefinitionError` check.\n */\nexport class AgentDefinitionError extends Error {\n  readonly name: string = \"AgentDefinitionError\"\n}\n\n/**\n * Raised by the message adapters. `fromAiSdk` is **total**: rather than silently dropping a part it\n * cannot model, it throws this — which both prevents data loss and pinpoints exactly when the\n * {@link AgentMessage} part union must be extended. It also fires on transient/streaming parts that\n * must never be persisted, and on out-of-contract (non-JSON) payloads.\n */\nexport class AgentMessageAdapterError extends Error {\n  readonly name = \"AgentMessageAdapterError\"\n}\n\n/**\n * An agent-tool failure whose message is intentionally safe to expose to the model and persist in\n * the durable trace. Tool authors must keep the message free of credentials and internal details;\n * unknown errors remain masked by the worker.\n */\nexport class AgentToolPublicError extends Error {\n  readonly name: string = \"AgentToolPublicError\"\n}\n\n/** Raised when an agent tool result cannot cross the durable message boundary. */\nexport class AgentToolResultValidationError extends Error {\n  readonly name = \"AgentToolResultValidationError\"\n\n  constructor(\n    readonly toolName: string,\n    readonly reason: string,\n    options?: ErrorOptions\n  ) {\n    super(`[Sixb] Agent tool '${toolName}' returned an invalid result; ${reason}.`, options)\n  }\n}\n\nexport type AgentRequestErrorCode =\n  | \"agent_not_found\"\n  | \"run_not_found\"\n  | \"run_not_retryable\"\n  | \"thread_not_found\"\n  | \"thread_agent_mismatch\"\n  | \"active_run_exists\"\n  | \"invalid_context\"\n  | \"storage_unavailable\"\n\n/**\n * Raised by {@link requestAgentRun} (the trigger). Callers branch on `code` rather than message text\n * — e.g. the HTTP layer maps `active_run_exists` to 409 and `agent_not_found` to 404.\n */\nexport class AgentRequestError extends Error {\n  readonly name = \"AgentRequestError\"\n\n  constructor(\n    readonly code: AgentRequestErrorCode,\n    message: string\n  ) {\n    super(message)\n  }\n}\n",
     "import type { JsonValue } from \"../json\"\nimport { cloneJsonValue, getInvalidJsonValueReason, stableJsonStringify } from \"../json\"\nimport type { ObjectRef } from \"../ontology/refs\"\nimport { AgentRequestError } from \"./errors\"\n\nexport type AgentContextInput =\n  | { readonly kind: \"object\"; readonly ref: ObjectRef }\n  | {\n      readonly kind: \"app-state\"\n      readonly id: string\n      readonly label: string\n      readonly description: string\n      readonly value: JsonValue\n    }\n\nexport type AgentContextOrigin = \"ambient\" | \"explicit\"\n\nexport interface AgentContextEntryInput {\n  readonly context: AgentContextInput\n  readonly origin: AgentContextOrigin\n}\n\n/** Durable user-message part. Origin is display provenance, never an authorization grant. */\nexport interface AgentContextPart extends AgentContextEntryInput {\n  readonly type: \"context\"\n}\n\nexport const MAX_AGENT_CONTEXT_ENTRIES = 12\nexport const MAX_AGENT_APP_STATE_ENTRY_BYTES = 16 * 1024\nexport const MAX_AGENT_APP_STATE_TOTAL_BYTES = 64 * 1024\n\n/** Typed constructors for context values shared by custom apps and agent clients. */\nexport const agentContext = {\n  object<const TObjectTypeId extends string>(\n    objectType: { readonly id: TObjectTypeId },\n    primaryId: string\n  ) {\n    return {\n      kind: \"object\" as const,\n      ref: { objectTypeId: objectType.id, primaryId },\n    }\n  },\n\n  appState<const TValue extends JsonValue>(\n    id: string,\n    input: {\n      readonly label: string\n      readonly description: string\n      readonly value: TValue\n    }\n  ) {\n    return { kind: \"app-state\" as const, id, ...input }\n  },\n}\n\n/** Stable identity shared by core deduplication and context-aware clients. */\nexport function agentContextIdentity(context: AgentContextInput): string {\n  return context.kind === \"object\"\n    ? `object:${encodeURIComponent(context.ref.objectTypeId)}:${encodeURIComponent(context.ref.primaryId)}`\n    : `app-state:${encodeURIComponent(context.id)}`\n}\n\n/** Stable semantic key for client-side comparisons. */\nexport function agentContextFingerprint(context: AgentContextInput): string {\n  return stableJsonStringify(context)\n}\n\n/**\n * Validate transport-independent context rules and clone mutable app state before it can become\n * durable. Object existence and visibility are resolved separately because they require a runtime.\n */\nexport function normalizeAgentContextEntries(\n  input: readonly AgentContextEntryInput[] | undefined\n): readonly AgentContextEntryInput[] {\n  if (input === undefined) return []\n  if (!Array.isArray(input)) invalidContext(\"context must be an array\")\n  if (input.length > MAX_AGENT_CONTEXT_ENTRIES) {\n    invalidContext(`context cannot contain more than ${MAX_AGENT_CONTEXT_ENTRIES} entries`)\n  }\n\n  const entries: AgentContextEntryInput[] = []\n  const byIdentity = new Map<string, string>()\n  let totalAppStateBytes = 0\n\n  for (const [index, rawEntry] of input.entries()) {\n    const entry = normalizeEntry(rawEntry, index)\n    const identity = agentContextIdentity(entry.context)\n    const serialized = stableJsonStringify(entry)\n    const existing = byIdentity.get(identity)\n\n    if (existing !== undefined) {\n      if (existing === serialized) continue\n      invalidContext(`context contains conflicting entries for '${identity}'`)\n    }\n\n    if (entry.context.kind === \"app-state\") {\n      const bytes = utf8ByteLength(serialized)\n      if (bytes > MAX_AGENT_APP_STATE_ENTRY_BYTES) {\n        invalidContext(\n          `context entry '${identity}' exceeds the ${MAX_AGENT_APP_STATE_ENTRY_BYTES}-byte limit`\n        )\n      }\n      totalAppStateBytes += bytes\n      if (totalAppStateBytes > MAX_AGENT_APP_STATE_TOTAL_BYTES) {\n        invalidContext(\n          `app-state context exceeds the ${MAX_AGENT_APP_STATE_TOTAL_BYTES}-byte message limit`\n        )\n      }\n    }\n\n    byIdentity.set(identity, serialized)\n    entries.push(entry)\n  }\n\n  return entries\n}\n\nfunction normalizeEntry(rawEntry: unknown, index: number): AgentContextEntryInput {\n  if (!isRecord(rawEntry)) invalidContext(`context[${index}] must be an object`)\n  if (rawEntry.origin !== \"ambient\" && rawEntry.origin !== \"explicit\") {\n    invalidContext(`context[${index}].origin must be 'ambient' or 'explicit'`)\n  }\n  if (!isRecord(rawEntry.context)) invalidContext(`context[${index}].context must be an object`)\n\n  const context = rawEntry.context\n  if (context.kind === \"object\") {\n    if (!isRecord(context.ref)) invalidContext(`context[${index}].context.ref must be an object`)\n    const objectTypeId = requireNonEmptyString(\n      context.ref.objectTypeId,\n      `context[${index}].context.ref.objectTypeId`\n    )\n    const primaryId = requireNonEmptyString(\n      context.ref.primaryId,\n      `context[${index}].context.ref.primaryId`\n    )\n    return {\n      context: { kind: \"object\", ref: { objectTypeId, primaryId } },\n      origin: rawEntry.origin,\n    }\n  }\n\n  if (context.kind === \"app-state\") {\n    const id = requireNonEmptyString(context.id, `context[${index}].context.id`)\n    const label = requireNonEmptyString(context.label, `context[${index}].context.label`)\n    const description = requireNonEmptyString(\n      context.description,\n      `context[${index}].context.description`\n    )\n    const reason = getInvalidJsonValueReason(context.value, `context[${index}].context.value`)\n    if (reason) {\n      invalidContext(`context[${index}].context.value must be a JSON value; ${reason}`)\n    }\n    return {\n      context: {\n        kind: \"app-state\",\n        id,\n        label,\n        description,\n        value: cloneJsonValue(context.value as JsonValue),\n      },\n      origin: rawEntry.origin,\n    }\n  }\n\n  invalidContext(`context[${index}].context.kind must be 'object' or 'app-state'`)\n}\n\nfunction requireNonEmptyString(value: unknown, label: string): string {\n  if (typeof value !== \"string\" || value.trim().length === 0) {\n    invalidContext(`${label} must be a non-empty string`)\n  }\n  return value\n}\n\nfunction utf8ByteLength(value: string): number {\n  return new TextEncoder().encode(value).byteLength\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nfunction invalidContext(message: string): never {\n  throw new AgentRequestError(\"invalid_context\", `[Sixb] Invalid agent context: ${message}.`)\n}\n"
   ],
-  "mappings": ";;;;;;;;AAIO,MAAM,6BAA6B,MAAM;AAAA,EACrC,OAAe;AAC1B;AAAA;AAQO,MAAM,iCAAiC,MAAM;AAAA,EACzC,OAAO;AAClB;AAAA;AAOO,MAAM,6BAA6B,MAAM;AAAA,EACrC,OAAe;AAC1B;AAAA;AAGO,MAAM,uCAAuC,MAAM;AAAA,EAI7C;AAAA,EACA;AAAA,EAJF,OAAO;AAAA,EAEhB,WAAW,CACA,UACA,QACT,SACA;AAAA,IACA,MAAM,sBAAsB,0CAA0C,WAAW,OAAO;AAAA,IAJ/E;AAAA,IACA;AAAA;AAKb;AAAA;AAcO,MAAM,0BAA0B,MAAM;AAAA,EAIhC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA;AAAA,IACA,MAAM,OAAO;AAAA,IAHJ;AAAA;AAKb;;;AClCO,IAAM,4BAA4B;AAClC,IAAM,kCAAkC,KAAK;AAC7C,IAAM,kCAAkC,KAAK;AAG7C,IAAM,eAAe;AAAA,EAC1B,MAA0C,CACxC,YACA,WACA;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,KAAK,EAAE,cAAc,WAAW,IAAI,UAAU;AAAA,IAChD;AAAA;AAAA,EAGF,QAAwC,CACtC,IACA,OAKA;AAAA,IACA,OAAO,EAAE,MAAM,aAAsB,OAAO,MAAM;AAAA;AAEtD;AAGO,SAAS,oBAAoB,CAAC,SAAoC;AAAA,EACvE,OAAO,QAAQ,SAAS,WACpB,UAAU,mBAAmB,QAAQ,IAAI,YAAY,KAAK,mBAAmB,QAAQ,IAAI,SAAS,MAClG,aAAa,mBAAmB,QAAQ,EAAE;AAAA;AAIzC,SAAS,uBAAuB,CAAC,SAAoC;AAAA,EAC1E,OAAO,oBAAoB,OAAO;AAAA;AAO7B,SAAS,4BAA4B,CAC1C,OACmC;AAAA,EACnC,IAAI,UAAU;AAAA,IAAW,OAAO,CAAC;AAAA,EACjC,IAAI,CAAC,MAAM,QAAQ,KAAK;AAAA,IAAG,eAAe,0BAA0B;AAAA,EACpE,IAAI,MAAM,SAAS,2BAA2B;AAAA,IAC5C,eAAe,oCAAoC,mCAAmC;AAAA,EACxF;AAAA,EAEA,MAAM,UAAoC,CAAC;AAAA,EAC3C,MAAM,aAAa,IAAI;AAAA,EACvB,IAAI,qBAAqB;AAAA,EAEzB,YAAY,OAAO,aAAa,MAAM,QAAQ,GAAG;AAAA,IAC/C,MAAM,QAAQ,eAAe,UAAU,KAAK;AAAA,IAC5C,MAAM,WAAW,qBAAqB,MAAM,OAAO;AAAA,IACnD,MAAM,aAAa,oBAAoB,KAAK;AAAA,IAC5C,MAAM,WAAW,WAAW,IAAI,QAAQ;AAAA,IAExC,IAAI,aAAa,WAAW;AAAA,MAC1B,IAAI,aAAa;AAAA,QAAY;AAAA,MAC7B,eAAe,6CAA6C,WAAW;AAAA,IACzE;AAAA,IAEA,IAAI,MAAM,QAAQ,SAAS,aAAa;AAAA,MACtC,MAAM,QAAQ,eAAe,UAAU;AAAA,MACvC,IAAI,QAAQ,iCAAiC;AAAA,QAC3C,eACE,kBAAkB,yBAAyB,4CAC7C;AAAA,MACF;AAAA,MACA,sBAAsB;AAAA,MACtB,IAAI,qBAAqB,iCAAiC;AAAA,QACxD,eACE,iCAAiC,oDACnC;AAAA,MACF;AAAA,IACF;AAAA,IAEA,WAAW,IAAI,UAAU,UAAU;AAAA,IACnC,QAAQ,KAAK,KAAK;AAAA,EACpB;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,cAAc,CAAC,UAAmB,OAAuC;AAAA,EAChF,IAAI,CAAC,SAAS,QAAQ;AAAA,IAAG,eAAe,WAAW,0BAA0B;AAAA,EAC7E,IAAI,SAAS,WAAW,aAAa,SAAS,WAAW,YAAY;AAAA,IACnE,eAAe,WAAW,+CAA+C;AAAA,EAC3E;AAAA,EACA,IAAI,CAAC,SAAS,SAAS,OAAO;AAAA,IAAG,eAAe,WAAW,kCAAkC;AAAA,EAE7F,MAAM,UAAU,SAAS;AAAA,EACzB,IAAI,QAAQ,SAAS,UAAU;AAAA,IAC7B,IAAI,CAAC,SAAS,QAAQ,GAAG;AAAA,MAAG,eAAe,WAAW,sCAAsC;AAAA,IAC5F,MAAM,eAAe,sBACnB,QAAQ,IAAI,cACZ,WAAW,iCACb;AAAA,IACA,MAAM,YAAY,sBAChB,QAAQ,IAAI,WACZ,WAAW,8BACb;AAAA,IACA,OAAO;AAAA,MACL,SAAS,EAAE,MAAM,UAAU,KAAK,EAAE,cAAc,UAAU,EAAE;AAAA,MAC5D,QAAQ,SAAS;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,IAAI,QAAQ,SAAS,aAAa;AAAA,IAChC,MAAM,KAAK,sBAAsB,QAAQ,IAAI,WAAW,mBAAmB;AAAA,IAC3E,MAAM,QAAQ,sBAAsB,QAAQ,OAAO,WAAW,sBAAsB;AAAA,IACpF,MAAM,cAAc,sBAClB,QAAQ,aACR,WAAW,4BACb;AAAA,IACA,MAAM,SAAS,0BAA0B,QAAQ,OAAO,WAAW,sBAAsB;AAAA,IACzF,IAAI,QAAQ;AAAA,MACV,eAAe,WAAW,8CAA8C,QAAQ;AAAA,IAClF;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,QACP,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,eAAe,QAAQ,KAAkB;AAAA,MAClD;AAAA,MACA,QAAQ,SAAS;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,eAAe,WAAW,qDAAqD;AAAA;AAGjF,SAAS,qBAAqB,CAAC,OAAgB,OAAuB;AAAA,EACpE,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,IAC1D,eAAe,GAAG,kCAAkC;AAAA,EACtD;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,cAAc,CAAC,OAAuB;AAAA,EAC7C,OAAO,IAAI,YAAY,EAAE,OAAO,KAAK,EAAE;AAAA;AAGzC,SAAS,QAAQ,CAAC,OAAkD;AAAA,EAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAG5E,SAAS,cAAc,CAAC,SAAwB;AAAA,EAC9C,MAAM,IAAI,kBAAkB,mBAAmB,iCAAiC,UAAU;AAAA;",
-  "debugId": "86564C87A0ED8E7F64756E2164756E21",
+  "mappings": ";;;;;;;;AAIO,MAAM,6BAA6B,MAAM;AAAA,EACrC,OAAe;AAC1B;AAAA;AAQO,MAAM,iCAAiC,MAAM;AAAA,EACzC,OAAO;AAClB;AAAA;AAOO,MAAM,6BAA6B,MAAM;AAAA,EACrC,OAAe;AAC1B;AAAA;AAGO,MAAM,uCAAuC,MAAM;AAAA,EAI7C;AAAA,EACA;AAAA,EAJF,OAAO;AAAA,EAEhB,WAAW,CACA,UACA,QACT,SACA;AAAA,IACA,MAAM,sBAAsB,yCAAyC,WAAW,OAAO;AAAA,IAJ9E;AAAA,IACA;AAAA;AAKb;AAAA;AAgBO,MAAM,0BAA0B,MAAM;AAAA,EAIhC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA;AAAA,IACA,MAAM,OAAO;AAAA,IAHJ;AAAA;AAKb;;;ACpCO,IAAM,4BAA4B;AAClC,IAAM,kCAAkC,KAAK;AAC7C,IAAM,kCAAkC,KAAK;AAG7C,IAAM,eAAe;AAAA,EAC1B,MAA0C,CACxC,YACA,WACA;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,KAAK,EAAE,cAAc,WAAW,IAAI,UAAU;AAAA,IAChD;AAAA;AAAA,EAGF,QAAwC,CACtC,IACA,OAKA;AAAA,IACA,OAAO,EAAE,MAAM,aAAsB,OAAO,MAAM;AAAA;AAEtD;AAGO,SAAS,oBAAoB,CAAC,SAAoC;AAAA,EACvE,OAAO,QAAQ,SAAS,WACpB,UAAU,mBAAmB,QAAQ,IAAI,YAAY,KAAK,mBAAmB,QAAQ,IAAI,SAAS,MAClG,aAAa,mBAAmB,QAAQ,EAAE;AAAA;AAIzC,SAAS,uBAAuB,CAAC,SAAoC;AAAA,EAC1E,OAAO,oBAAoB,OAAO;AAAA;AAO7B,SAAS,4BAA4B,CAC1C,OACmC;AAAA,EACnC,IAAI,UAAU;AAAA,IAAW,OAAO,CAAC;AAAA,EACjC,IAAI,CAAC,MAAM,QAAQ,KAAK;AAAA,IAAG,eAAe,0BAA0B;AAAA,EACpE,IAAI,MAAM,SAAS,2BAA2B;AAAA,IAC5C,eAAe,oCAAoC,mCAAmC;AAAA,EACxF;AAAA,EAEA,MAAM,UAAoC,CAAC;AAAA,EAC3C,MAAM,aAAa,IAAI;AAAA,EACvB,IAAI,qBAAqB;AAAA,EAEzB,YAAY,OAAO,aAAa,MAAM,QAAQ,GAAG;AAAA,IAC/C,MAAM,QAAQ,eAAe,UAAU,KAAK;AAAA,IAC5C,MAAM,WAAW,qBAAqB,MAAM,OAAO;AAAA,IACnD,MAAM,aAAa,oBAAoB,KAAK;AAAA,IAC5C,MAAM,WAAW,WAAW,IAAI,QAAQ;AAAA,IAExC,IAAI,aAAa,WAAW;AAAA,MAC1B,IAAI,aAAa;AAAA,QAAY;AAAA,MAC7B,eAAe,6CAA6C,WAAW;AAAA,IACzE;AAAA,IAEA,IAAI,MAAM,QAAQ,SAAS,aAAa;AAAA,MACtC,MAAM,QAAQ,eAAe,UAAU;AAAA,MACvC,IAAI,QAAQ,iCAAiC;AAAA,QAC3C,eACE,kBAAkB,yBAAyB,4CAC7C;AAAA,MACF;AAAA,MACA,sBAAsB;AAAA,MACtB,IAAI,qBAAqB,iCAAiC;AAAA,QACxD,eACE,iCAAiC,oDACnC;AAAA,MACF;AAAA,IACF;AAAA,IAEA,WAAW,IAAI,UAAU,UAAU;AAAA,IACnC,QAAQ,KAAK,KAAK;AAAA,EACpB;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,cAAc,CAAC,UAAmB,OAAuC;AAAA,EAChF,IAAI,CAAC,SAAS,QAAQ;AAAA,IAAG,eAAe,WAAW,0BAA0B;AAAA,EAC7E,IAAI,SAAS,WAAW,aAAa,SAAS,WAAW,YAAY;AAAA,IACnE,eAAe,WAAW,+CAA+C;AAAA,EAC3E;AAAA,EACA,IAAI,CAAC,SAAS,SAAS,OAAO;AAAA,IAAG,eAAe,WAAW,kCAAkC;AAAA,EAE7F,MAAM,UAAU,SAAS;AAAA,EACzB,IAAI,QAAQ,SAAS,UAAU;AAAA,IAC7B,IAAI,CAAC,SAAS,QAAQ,GAAG;AAAA,MAAG,eAAe,WAAW,sCAAsC;AAAA,IAC5F,MAAM,eAAe,sBACnB,QAAQ,IAAI,cACZ,WAAW,iCACb;AAAA,IACA,MAAM,YAAY,sBAChB,QAAQ,IAAI,WACZ,WAAW,8BACb;AAAA,IACA,OAAO;AAAA,MACL,SAAS,EAAE,MAAM,UAAU,KAAK,EAAE,cAAc,UAAU,EAAE;AAAA,MAC5D,QAAQ,SAAS;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,IAAI,QAAQ,SAAS,aAAa;AAAA,IAChC,MAAM,KAAK,sBAAsB,QAAQ,IAAI,WAAW,mBAAmB;AAAA,IAC3E,MAAM,QAAQ,sBAAsB,QAAQ,OAAO,WAAW,sBAAsB;AAAA,IACpF,MAAM,cAAc,sBAClB,QAAQ,aACR,WAAW,4BACb;AAAA,IACA,MAAM,SAAS,0BAA0B,QAAQ,OAAO,WAAW,sBAAsB;AAAA,IACzF,IAAI,QAAQ;AAAA,MACV,eAAe,WAAW,8CAA8C,QAAQ;AAAA,IAClF;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,QACP,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,eAAe,QAAQ,KAAkB;AAAA,MAClD;AAAA,MACA,QAAQ,SAAS;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,eAAe,WAAW,qDAAqD;AAAA;AAGjF,SAAS,qBAAqB,CAAC,OAAgB,OAAuB;AAAA,EACpE,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,IAC1D,eAAe,GAAG,kCAAkC;AAAA,EACtD;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,cAAc,CAAC,OAAuB;AAAA,EAC7C,OAAO,IAAI,YAAY,EAAE,OAAO,KAAK,EAAE;AAAA;AAGzC,SAAS,QAAQ,CAAC,OAAkD;AAAA,EAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAG5E,SAAS,cAAc,CAAC,SAAwB;AAAA,EAC9C,MAAM,IAAI,kBAAkB,mBAAmB,iCAAiC,UAAU;AAAA;",
+  "debugId": "0BA2036A5CD1F1D964756E2164756E21",
   "names": []
 }

package/dist/chunk-rhrbz7d4.js

@@ -0,0 +1,36 @@
+// @bun
+import {
+  compareStrings
+} from "./chunk-t8t39h7v.js";
+
+// src/auth/attribution.ts
+async function snapshotRequesterGroupIds(input) {
+  if (input.principal.type === "system" || !input.auth) {
+    return [];
+  }
+  const memberships = input.principal.type === "user" ? await input.auth.groupMemberships.listForUser({
+    projectId: input.projectId,
+    userId: input.principal.id
+  }) : await input.auth.serviceAccountGroupMemberships.listForServiceAccount({
+    projectId: input.projectId,
+    serviceAccountId: input.principal.id
+  });
+  return normalizeRequesterGroupIds(memberships.map((membership) => membership.groupId));
+}
+function normalizeRequesterGroupIds(groupIds) {
+  if (!Array.isArray(groupIds)) {
+    throw new TypeError("[Sixb] requesterGroupIds must be an array.");
+  }
+  const unique = new Set;
+  for (const groupId of groupIds) {
+    if (typeof groupId !== "string" || groupId.trim().length === 0) {
+      throw new TypeError("[Sixb] requesterGroupIds entries must be nonblank.");
+    }
+    unique.add(groupId);
+  }
+  return [...unique].sort(compareStrings);
+}
+
+export { snapshotRequesterGroupIds, normalizeRequesterGroupIds };
+
+//# debugId=9060B30B6C744AE864756E2164756E21

package/dist/chunk-rhrbz7d4.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/auth/attribution.ts"],
+  "sourcesContent": [
+    "import { compareStrings } from \"../json\"\nimport type { AuthStorage } from \"../storage/auth\"\nimport type { Principal } from \"./types\"\n\n/**\n * Resolve the durable group-membership snapshot used to attribute admitted work.\n *\n * Authorization contexts can carry a token-restricted subset of the principal's groups, so they\n * are deliberately not accepted here. Accounting attribution comes from auth storage whenever it\n * is configured. A system principal, or a runtime with no durable auth storage, has no groups.\n */\nexport async function snapshotRequesterGroupIds(input: {\n  readonly auth: AuthStorage | undefined\n  readonly projectId: string\n  readonly principal: Principal\n}): Promise<readonly string[]> {\n  if (input.principal.type === \"system\" || !input.auth) {\n    return []\n  }\n\n  const memberships =\n    input.principal.type === \"user\"\n      ? await input.auth.groupMemberships.listForUser({\n          projectId: input.projectId,\n          userId: input.principal.id,\n        })\n      : await input.auth.serviceAccountGroupMemberships.listForServiceAccount({\n          projectId: input.projectId,\n          serviceAccountId: input.principal.id,\n        })\n\n  return normalizeRequesterGroupIds(memberships.map((membership) => membership.groupId))\n}\n\n/** Validate and canonicalize an immutable requester-group snapshot at a storage boundary. */\nexport function normalizeRequesterGroupIds(groupIds: readonly string[]): readonly string[] {\n  if (!Array.isArray(groupIds)) {\n    throw new TypeError(\"[Sixb] requesterGroupIds must be an array.\")\n  }\n  const unique = new Set<string>()\n  for (const groupId of groupIds) {\n    if (typeof groupId !== \"string\" || groupId.trim().length === 0) {\n      throw new TypeError(\"[Sixb] requesterGroupIds entries must be nonblank.\")\n    }\n    unique.add(groupId)\n  }\n  return [...unique].sort(compareStrings)\n}\n"
+  ],
+  "mappings": ";;;;;;AAWA,eAAsB,yBAAyB,CAAC,OAIjB;AAAA,EAC7B,IAAI,MAAM,UAAU,SAAS,YAAY,CAAC,MAAM,MAAM;AAAA,IACpD,OAAO,CAAC;AAAA,EACV;AAAA,EAEA,MAAM,cACJ,MAAM,UAAU,SAAS,SACrB,MAAM,MAAM,KAAK,iBAAiB,YAAY;AAAA,IAC5C,WAAW,MAAM;AAAA,IACjB,QAAQ,MAAM,UAAU;AAAA,EAC1B,CAAC,IACD,MAAM,MAAM,KAAK,+BAA+B,sBAAsB;AAAA,IACpE,WAAW,MAAM;AAAA,IACjB,kBAAkB,MAAM,UAAU;AAAA,EACpC,CAAC;AAAA,EAEP,OAAO,2BAA2B,YAAY,IAAI,CAAC,eAAe,WAAW,OAAO,CAAC;AAAA;AAIhF,SAAS,0BAA0B,CAAC,UAAgD;AAAA,EACzF,IAAI,CAAC,MAAM,QAAQ,QAAQ,GAAG;AAAA,IAC5B,MAAM,IAAI,UAAU,4CAA4C;AAAA,EAClE;AAAA,EACA,MAAM,SAAS,IAAI;AAAA,EACnB,WAAW,WAAW,UAAU;AAAA,IAC9B,IAAI,OAAO,YAAY,YAAY,QAAQ,KAAK,EAAE,WAAW,GAAG;AAAA,MAC9D,MAAM,IAAI,UAAU,oDAAoD;AAAA,IAC1E;AAAA,IACA,OAAO,IAAI,OAAO;AAAA,EACpB;AAAA,EACA,OAAO,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc;AAAA;",
+  "debugId": "9060B30B6C744AE864756E2164756E21",
+  "names": []
+}

package/dist/{chunk-53s4asfm.js → chunk-rnshztfq.js}

@@ -8,11 +8,11 @@ import {
 } from "./chunk-dktq02ne.js";
 import {
   isFileRef
-} from "./chunk-hz8m927w.js";
+} from "./chunk-zqysyfjt.js";
 import {
   assertJsonValue,
   cloneJsonValue
-} from "./chunk-be9vm29v.js";
+} from "./chunk-t8t39h7v.js";
 
 // src/ontology/validation/schema.ts
 function validateSchemaValue(schema, value, path, valueTypesById) {

package/dist/chunk-t0jjkep3.js

@@ -0,0 +1,35 @@
+// @bun
+// src/storage/agents/types.ts
+var AGENT_RUN_FAILURE_CODES = [
+  "internal.unexpected",
+  "runtime.cancelled",
+  "agent.execution_failed"
+];
+var AGENT_RUN_FINISH_REASONS = [
+  "stop",
+  "length",
+  "content-filter",
+  "tool-calls",
+  "timeout",
+  "error",
+  "other",
+  "unknown"
+];
+function coerceAgentRunFinishReason(value) {
+  if (value === null || value === undefined) {
+    return;
+  }
+  return AGENT_RUN_FINISH_REASONS.includes(value) ? value : "unknown";
+}
+var AGENT_RUN_DIAGNOSTIC_CODES = [
+  "output_file_limit_exceeded",
+  "output_file_too_large",
+  "output_budget_exhausted",
+  "output_collection_failed",
+  "output_file_changed",
+  "output_storage_failed"
+];
+
+export { AGENT_RUN_FAILURE_CODES, AGENT_RUN_FINISH_REASONS, coerceAgentRunFinishReason, AGENT_RUN_DIAGNOSTIC_CODES };
+
+//# debugId=E6142794534A3A5D64756E2164756E21

package/dist/chunk-t0jjkep3.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/storage/agents/types.ts"],
+  "sourcesContent": [
+    "import type { AgentMessage, AgentMessagePart, AgentMessageRole } from \"../../agents/message\"\nimport type { Principal } from \"../../auth\"\nimport type { SixbErrorCode, SixbFailure } from \"../../errors/types\"\nimport type { JsonValue } from \"../../json\"\n\n// ── agent_threads — one conversation with an agent ──────────────────────────────────────────────\n\nexport type AgentThreadStatus = \"active\" | \"archived\"\n\nexport interface AgentThreadRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly agentId: string\n  /** Who owns/opened the thread. Reuses the canonical auth principal (gains `agent` later for free). */\n  readonly ownerPrincipal: Principal\n  readonly title?: string\n  readonly status: AgentThreadStatus\n  /** Single-flight anchor: the id of the one run currently allowed to write, or `null` when idle. */\n  readonly activeRunId: string | null\n  readonly lastMessageAt?: Date\n  readonly messageCount: number\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface CreateAgentThreadInput {\n  readonly id: string\n  readonly projectId: string\n  readonly agentId: string\n  readonly ownerPrincipal: Principal\n  readonly title?: string\n  readonly status?: AgentThreadStatus\n  readonly createdAt?: Date\n  readonly updatedAt?: Date\n}\n\nexport interface ListAgentThreadsInput {\n  readonly projectId: string\n  readonly agentId?: string\n  /** Optional allowlist intersected with `agentId` when both are provided. Empty means no rows. */\n  readonly agentIds?: readonly string[]\n  readonly statuses?: readonly AgentThreadStatus[]\n  readonly ownerPrincipal?: Principal\n  readonly limit?: number\n  readonly offset?: number\n  readonly order?: \"asc\" | \"desc\"\n}\n\nexport interface ListAgentThreadsResult {\n  readonly threads: readonly AgentThreadRecord[]\n  readonly hasMore: boolean\n  readonly total: number\n}\n\n// ── agent_runs — one loop execution (the worker job; attribution + fencing) ───────────────────\n\n/** Lifecycle shared by every durable agent execution, conversational or workflow-owned. */\nexport type AgentExecutionStatus = \"queued\" | \"running\" | \"succeeded\" | \"failed\" | \"cancelled\"\n\nexport type AgentRunStatus = AgentExecutionStatus\n\n/** Error codes an agent execution can persist and expose through its public contract. */\nexport const AGENT_RUN_FAILURE_CODES = [\n  \"internal.unexpected\",\n  \"runtime.cancelled\",\n  \"agent.execution_failed\",\n] as const satisfies readonly [SixbErrorCode, ...SixbErrorCode[]]\n\nexport type AgentRunFailureCode = (typeof AGENT_RUN_FAILURE_CODES)[number]\n\n/**\n * Why a run ended — our own SDK-independent vocabulary. It includes the AI SDK's unified finish\n * reasons plus platform-level endings such as `timeout`, so reads are typed and exhaustive without\n * core depending on `ai`. `other`/`unknown` are catch-alls: an unrecognised provider value still\n * records *that* the run ended.\n */\nexport const AGENT_RUN_FINISH_REASONS = [\n  \"stop\",\n  \"length\",\n  \"content-filter\",\n  \"tool-calls\",\n  \"timeout\",\n  \"error\",\n  \"other\",\n  \"unknown\",\n] as const\n\nexport type AgentRunFinishReason = (typeof AGENT_RUN_FINISH_REASONS)[number]\n\n/**\n * Coerce an external finish-reason string — a DB column or an SDK value — to {@link\n * AgentRunFinishReason}. An unrecognised value becomes `\"unknown\"` rather than being dropped.\n */\nexport function coerceAgentRunFinishReason(\n  value: string | null | undefined\n): AgentRunFinishReason | undefined {\n  if (value === null || value === undefined) {\n    return undefined\n  }\n  return (AGENT_RUN_FINISH_REASONS as readonly string[]).includes(value)\n    ? (value as AgentRunFinishReason)\n    : \"unknown\"\n}\n\n/** Stable, user-facing diagnostics emitted by the platform while executing a run. */\nexport const AGENT_RUN_DIAGNOSTIC_CODES = [\n  \"output_file_limit_exceeded\",\n  \"output_file_too_large\",\n  \"output_budget_exhausted\",\n  \"output_collection_failed\",\n  \"output_file_changed\",\n  \"output_storage_failed\",\n] as const\n\n/**\n * Closed on purpose, and the wire is closed with it.\n *\n * Sixb writes these codes and the generated client is what reads them, so an open union would only\n * be honest if the HTTP schema were open too — and that costs the OpenAPI enum, the client's\n * autocompletion, and Atlas's exhaustive `switch`. Sixb owns both ends, so a new code is a minor\n * version bump: cheap here, and a broken `switch` is better than a 500 from `z.enum`.\n */\nexport type AgentRunDiagnosticCode = (typeof AGENT_RUN_DIAGNOSTIC_CODES)[number]\nexport type AgentRunDiagnosticSeverity = \"warning\" | \"error\"\n\nexport interface AgentRunDiagnostic {\n  readonly code: AgentRunDiagnosticCode\n  readonly severity: AgentRunDiagnosticSeverity\n  readonly scope: \"output\"\n  /** Relative path inside the run's published output directory, when one file is involved. */\n  readonly path?: string\n  /** Sanitized, stable copy suitable for display to an end user. */\n  readonly message: string\n}\n\n/**\n * Authorization state for the current queue delivery.\n *\n * `queueLeaseExpiresAt` is a persisted projection of `ClaimedQueueJob.leaseExpiresAt`, not an\n * independently managed run lease. It may only be extended from a successful queue lease renewal.\n */\nexport interface AgentRunExecution {\n  readonly token: string\n  readonly queueLeaseExpiresAt: Date\n}\n\nexport interface AgentRunRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly executionId: string\n  readonly threadId: string\n  readonly agentId: string\n  readonly triggerMessageId: string\n  /** Durable group memberships snapshotted when the run was admitted. */\n  readonly requesterGroupIds: readonly string[]\n  readonly status: AgentRunStatus\n  readonly modelId?: string\n  /** Why the run ended (our own SDK-independent enum). */\n  readonly finishReason?: AgentRunFinishReason\n  /** Platform diagnostics are transcript annotations, never agent-authored message content. */\n  readonly diagnostics?: readonly AgentRunDiagnostic[]\n  /** Portable failure snapshot when the run did not succeed. */\n  readonly error?: SixbFailure<AgentRunFailureCode>\n  /** Execution attempts: `0` while queued, `1` on first start, incremented on redelivery. */\n  readonly attempt: number\n  readonly execution?: AgentRunExecution\n  readonly createdAt: Date\n  readonly startedAt?: Date\n  readonly completedAt?: Date\n}\n\nexport interface CreateAgentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly executionId: string\n  readonly threadId: string\n  readonly agentId: string\n  readonly triggerMessageId: string\n  readonly requesterGroupIds: readonly string[]\n  readonly createdAt?: Date\n}\n\nexport interface StartAgentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly modelId?: string\n  readonly execution: AgentRunExecution\n  readonly startedAt?: Date\n}\n\nexport interface FinishQueuedAgentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly status: \"failed\" | \"cancelled\"\n  readonly error?: SixbFailure<AgentRunFailureCode>\n  readonly completedAt?: Date\n}\n\nexport interface ReclaimAgentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly execution: AgentRunExecution\n}\n\nexport interface ConfirmAgentRunExecutionOwnershipInput {\n  readonly id: string\n  readonly projectId: string\n  readonly executionToken: string\n  /** Exact expiration returned by the queue claim or its latest successful renewal. */\n  readonly queueLeaseExpiresAt: Date\n}\n\nexport type FinishAgentRunInput =\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly executionToken: string\n      readonly status: \"succeeded\"\n      readonly modelId?: string\n      readonly finishReason?: AgentRunFinishReason\n      readonly diagnostics?: readonly AgentRunDiagnostic[]\n      readonly completedAt?: Date\n    }\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly executionToken: string\n      readonly status: \"failed\" | \"cancelled\"\n      readonly modelId?: string\n      readonly finishReason?: AgentRunFinishReason\n      readonly diagnostics?: readonly AgentRunDiagnostic[]\n      readonly error?: SixbFailure<AgentRunFailureCode>\n      readonly completedAt?: Date\n    }\n\nexport interface ListAgentRunsInput {\n  readonly projectId: string\n  readonly threadId?: string\n  readonly agentId?: string\n  readonly statuses?: readonly AgentRunStatus[]\n  /** Effective start time; runs that never started use `createdAt`. */\n  readonly startedAfter?: Date\n  /** Effective start time; runs that never started use `createdAt`. */\n  readonly startedBefore?: Date\n  readonly limit?: number\n  readonly offset?: number\n  readonly order?: \"asc\" | \"desc\"\n}\n\nexport interface ListAgentRunsResult {\n  readonly runs: readonly AgentRunRecord[]\n  readonly hasMore: boolean\n  readonly total: number\n}\n\n// ── agent_messages — one message (assistant messages inserted only once finalized) ─────────────\n\nexport type { AgentMessageRole }\n\nexport interface AgentMessageRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly threadId: string\n  /** The run that produced this message; `null` for user-authored messages. */\n  readonly runId: string | null\n  readonly role: AgentMessageRole\n  /** Principal that authored this persisted message: caller for user messages, agent identity later for assistant messages. */\n  readonly authorPrincipal?: Principal\n  /** Monotonic per thread, assigned by the store. */\n  readonly seq: number\n  /** Structured message content — text / reasoning / step boundaries / tool calls. */\n  readonly parts: readonly AgentMessagePart[]\n  /** Message-level metadata (mirrors `UIMessage.metadata`). */\n  readonly metadata?: JsonValue\n  /** Versions the `parts` shape so it can be migrated; stamped from `AGENT_MESSAGE_CONTENT_VERSION`. */\n  readonly contentVersion: number\n  readonly createdAt: Date\n  readonly completedAt?: Date\n}\n\n/** Append a message: a {@link AgentMessage} (role + parts + metadata) plus its storage identity. */\nexport interface AppendAgentMessageInput extends AgentMessage {\n  readonly id: string\n  readonly projectId: string\n  readonly threadId: string\n  readonly runId: string | null\n  readonly authorPrincipal?: Principal\n  readonly createdAt?: Date\n  readonly completedAt?: Date\n}\n\nexport interface DeleteAgentMessagesByRunInput {\n  readonly projectId: string\n  readonly threadId: string\n  readonly runId: string\n}\n\nexport interface ListAgentMessagesInput {\n  readonly projectId: string\n  readonly threadId: string\n  /** Return only messages whose per-thread sequence is greater than this retained boundary. */\n  readonly afterSeq?: number\n  readonly roles?: readonly AgentMessageRole[]\n  readonly limit?: number\n  readonly offset?: number\n  readonly order?: \"asc\" | \"desc\"\n}\n\nexport interface ListAgentMessagesResult {\n  readonly messages: readonly AgentMessageRecord[]\n  readonly hasMore: boolean\n  readonly total: number\n}\n\n// ── agent_context_checkpoints — append-only model-context boundaries ──────────────────────────\n\nexport type AgentContextCheckpointReason = \"threshold\" | \"overflow\"\n\n/**\n * A durable summary boundary used only when projecting a thread into model context.\n *\n * Checkpoints never replace or mutate transcript messages. Normal thread reads remain authoritative\n * and complete; the worker reads the latest checkpoint and only the retained message tail.\n */\nexport interface AgentContextCheckpointRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly threadId: string\n  readonly createdByRunId: string\n  readonly previousCheckpointId?: string\n  readonly reason: AgentContextCheckpointReason\n  readonly summary: string\n  readonly summaryFormatVersion: 1\n  readonly summarizedThroughSeq: number\n  readonly observedHeadSeq: number\n  readonly estimatedInputTokensBefore: number\n  readonly estimatedInputTokensAfter: number\n  readonly summaryModelId: string\n  readonly createdAt: Date\n}\n\nexport interface CreateAgentContextCheckpointInput {\n  readonly id: string\n  readonly projectId: string\n  readonly threadId: string\n  readonly createdByRunId: string\n  /** Compare-and-swap anchor. `null` means the thread must not have a prior checkpoint. */\n  readonly expectedPreviousCheckpointId: string | null\n  /** Compare-and-swap anchor for the complete transcript observed by the summarizer. */\n  readonly expectedHeadSeq: number\n  /** Current delivery token for `createdByRunId`; stale redeliveries must not write. */\n  readonly executionToken: string\n  readonly reason: AgentContextCheckpointReason\n  readonly summary: string\n  readonly summaryFormatVersion: 1\n  readonly summarizedThroughSeq: number\n  readonly observedHeadSeq: number\n  readonly estimatedInputTokensBefore: number\n  readonly estimatedInputTokensAfter: number\n  readonly summaryModelId: string\n  readonly createdAt?: Date\n}\n\n// ── Store ───────────────────────────────────────────────────────────────────────────────────────\n\nexport interface AgentThreadStore {\n  create(input: CreateAgentThreadInput): Promise<AgentThreadRecord>\n  getById(params: { projectId: string; id: string }): Promise<AgentThreadRecord | null>\n  list(input: ListAgentThreadsInput): Promise<ListAgentThreadsResult>\n}\n\nexport interface AgentRunStore {\n  /** Persist a queued run and atomically claim the thread's single-flight slot. */\n  create(input: CreateAgentRunInput): Promise<AgentRunRecord>\n  /** Transition a queued run to running and install the first delivery's execution token. */\n  start(input: StartAgentRunInput): Promise<AgentRunRecord>\n  /** Finish a queued run before execution and release the thread's single-flight slot. */\n  finishQueued(input: FinishQueuedAgentRunInput): Promise<AgentRunRecord>\n  /** Rotate the execution token for a redelivered running job (`attempt++`). */\n  reclaim(input: ReclaimAgentRunInput): Promise<AgentRunRecord>\n  /**\n   * Project the queue's latest confirmed ownership expiration onto the current execution.\n   * Implementations must fence by token and must never move the expiration backwards.\n   */\n  confirmExecutionOwnership(input: ConfirmAgentRunExecutionOwnershipInput): Promise<AgentRunRecord>\n  /** Finalize a run and release the thread's `activeRunId`. */\n  finish(input: FinishAgentRunInput): Promise<AgentRunRecord>\n  getById(params: { projectId: string; id: string }): Promise<AgentRunRecord | null>\n  getByIds(params: {\n    projectId: string\n    ids: readonly string[]\n  }): Promise<readonly AgentRunRecord[]>\n  list(input: ListAgentRunsInput): Promise<ListAgentRunsResult>\n}\n\nexport interface AgentMessageStore {\n  /** Insert a message (its `parts` are the canonical content) and bump thread stats. */\n  append(input: AppendAgentMessageInput): Promise<AgentMessageRecord>\n  /** Delete every message produced by one run and repair the thread's message stats. */\n  deleteByRunId(input: DeleteAgentMessagesByRunInput): Promise<number>\n  getById(params: { projectId: string; id: string }): Promise<AgentMessageRecord | null>\n  list(input: ListAgentMessagesInput): Promise<ListAgentMessagesResult>\n}\n\nexport interface AgentContextCheckpointStore {\n  /**\n   * Append one checkpoint after atomically validating run ownership and both transcript anchors.\n   * Repeating the same payload for the same creating run is idempotent.\n   */\n  create(input: CreateAgentContextCheckpointInput): Promise<AgentContextCheckpointRecord>\n  getLatest(input: {\n    readonly projectId: string\n    readonly threadId: string\n  }): Promise<AgentContextCheckpointRecord | null>\n}\n\nexport interface AgentStorage {\n  readonly threads: AgentThreadStore\n  readonly runs: AgentRunStore\n  readonly messages: AgentMessageStore\n  readonly checkpoints: AgentContextCheckpointStore\n}\n"
+  ],
+  "mappings": ";;AA8DO,IAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AACF;AAUO,IAAM,2BAA2B;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAQO,SAAS,0BAA0B,CACxC,OACkC;AAAA,EAClC,IAAI,UAAU,QAAQ,UAAU,WAAW;AAAA,IACzC;AAAA,EACF;AAAA,EACA,OAAQ,yBAA+C,SAAS,KAAK,IAChE,QACD;AAAA;AAIC,IAAM,6BAA6B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
+  "debugId": "E6142794534A3A5D64756E2164756E21",
+  "names": []
+}

package/dist/{chunk-be9vm29v.js → chunk-t8t39h7v.js}

@@ -106,4 +106,4 @@ function describeNonJsonValue(value) {
 
 export { isJsonValue, assertJsonValue, cloneJsonValue, stableJsonStringify, compareStrings, getInvalidJsonValueReason, isPlainRecord };
 
-//# debugId=9AE21810DDFB8E9B64756E2164756E21
+//# debugId=E0916AE00DB731CC64756E2164756E21

package/dist/{chunk-be9vm29v.js.map → chunk-t8t39h7v.js.map}

@@ -2,9 +2,9 @@
   "version": 3,
   "sources": ["../src/json.ts"],
   "sourcesContent": [
-    "export type JsonPrimitive = string | number | boolean | null\nexport type JsonObject = { [key: string]: JsonValue }\nexport type JsonArray = JsonValue[]\nexport type JsonValue = JsonPrimitive | JsonObject | JsonArray\n\n/** JSON-compatible input that also accepts readonly containers from typed application code. */\nexport type ReadonlyJsonObject = {\n  readonly [key: string]: ReadonlyJsonValue\n}\nexport type ReadonlyJsonArray = readonly ReadonlyJsonValue[]\nexport type ReadonlyJsonValue = JsonPrimitive | ReadonlyJsonObject | ReadonlyJsonArray\n\nexport function isJsonValue(value: unknown): value is JsonValue {\n  return getInvalidJsonValueReason(value) === undefined\n}\n\nexport function assertJsonValue(value: unknown, label = \"value\"): asserts value is JsonValue {\n  const reason = getInvalidJsonValueReason(value, label)\n  if (reason) {\n    throw new Error(`[Sixb] ${label} must be a JSON value; ${reason}`)\n  }\n}\n\nexport function cloneJsonValue(value: ReadonlyJsonValue, label = \"value\"): JsonValue {\n  assertJsonValue(value, label)\n  return JSON.parse(JSON.stringify(value)) as JsonValue\n}\n\nexport function jsonValuesEqual(left: unknown, right: unknown): boolean {\n  return stableJsonStringify(left) === stableJsonStringify(right)\n}\n\nexport function stableJsonStringify(value: unknown): string {\n  if (value === undefined) return \"undefined\"\n  if (value === null || typeof value !== \"object\") return JSON.stringify(value)\n  if (Array.isArray(value)) return `[${value.map(stableJsonStringify).join(\",\")}]`\n  return `{${Object.entries(value as Record<string, unknown>)\n    .sort(([left], [right]) => compareStrings(left, right))\n    .map(([key, entry]) => `${JSON.stringify(key)}:${stableJsonStringify(entry)}`)\n    .join(\",\")}}`\n}\n\nexport function compareStrings(left: string, right: string): number {\n  if (left < right) return -1\n  if (left > right) return 1\n  return 0\n}\n\nexport function getInvalidJsonValueReason(\n  value: unknown,\n  label = \"value\",\n  seen: Set<object> = new Set()\n): string | undefined {\n  if (value === null || typeof value === \"string\" || typeof value === \"boolean\") {\n    return undefined\n  }\n\n  if (typeof value === \"number\") {\n    return Number.isFinite(value) ? undefined : `${label} is not a finite number`\n  }\n\n  if (Array.isArray(value)) {\n    if (seen.has(value)) {\n      return `${label} contains a circular reference`\n    }\n\n    seen.add(value)\n    for (let index = 0; index < value.length; index += 1) {\n      if (!Object.hasOwn(value, index)) {\n        seen.delete(value)\n        return `${label}[${index}] is a sparse array slot`\n      }\n\n      const reason = getInvalidJsonValueReason(value[index], `${label}[${index}]`, seen)\n      if (reason) {\n        seen.delete(value)\n        return reason\n      }\n    }\n    seen.delete(value)\n    return undefined\n  }\n\n  if (isPlainRecord(value)) {\n    if (seen.has(value)) {\n      return `${label} contains a circular reference`\n    }\n\n    const symbolKeys = Object.getOwnPropertySymbols(value).filter((key) =>\n      Object.prototype.propertyIsEnumerable.call(value, key)\n    )\n    if (symbolKeys.length > 0) {\n      return `${label} has an enumerable symbol key`\n    }\n\n    seen.add(value)\n    for (const [key, entry] of Object.entries(value)) {\n      const reason = getInvalidJsonValueReason(entry, jsonChildPath(label, key), seen)\n      if (reason) {\n        seen.delete(value)\n        return reason\n      }\n    }\n    seen.delete(value)\n    return undefined\n  }\n\n  return `${label} is ${describeNonJsonValue(value)}`\n}\n\nexport function isPlainRecord(value: unknown): value is Record<string, unknown> {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    return false\n  }\n\n  const prototype = Object.getPrototypeOf(value)\n  return prototype === Object.prototype || prototype === null\n}\n\nfunction jsonChildPath(parent: string, key: string): string {\n  return /^[A-Za-z_$][\\w$]*$/.test(key) ? `${parent}.${key}` : `${parent}[${JSON.stringify(key)}]`\n}\n\nfunction describeNonJsonValue(value: unknown): string {\n  if (value === undefined) {\n    return \"undefined\"\n  }\n\n  if (value instanceof Date) {\n    return \"a Date\"\n  }\n\n  const type = typeof value\n  if (type === \"bigint\" || type === \"function\" || type === \"symbol\") {\n    return `a ${type}`\n  }\n\n  if (typeof value === \"object\" && value !== null) {\n    const name = value.constructor?.name\n    return name ? `a ${name}` : \"a non-plain object\"\n  }\n\n  return type\n}\n"
+    "export type JsonPrimitive = string | number | boolean | null\nexport type JsonObject = { [key: string]: JsonValue }\nexport type JsonArray = JsonValue[]\nexport type JsonValue = JsonPrimitive | JsonObject | JsonArray\n\n/** JSON-compatible input that also accepts readonly containers from typed application code. */\nexport type ReadonlyJsonObject = {\n  readonly [key: string]: ReadonlyJsonValue\n}\nexport type ReadonlyJsonArray = readonly ReadonlyJsonValue[]\nexport type ReadonlyJsonValue = JsonPrimitive | ReadonlyJsonObject | ReadonlyJsonArray\n\nexport function isJsonValue(value: unknown): value is JsonValue {\n  return getInvalidJsonValueReason(value) === undefined\n}\n\nexport function assertJsonValue(value: unknown, label = \"value\"): asserts value is JsonValue {\n  const reason = getInvalidJsonValueReason(value, label)\n  if (reason) {\n    throw new Error(`[Sixb] ${label} must be a JSON value; ${reason}`)\n  }\n}\n\nexport function cloneJsonValue(value: ReadonlyJsonValue, label = \"value\"): JsonValue {\n  assertJsonValue(value, label)\n  return JSON.parse(JSON.stringify(value)) as JsonValue\n}\n\nexport function stableJsonStringify(value: unknown): string {\n  if (value === undefined) return \"undefined\"\n  if (value === null || typeof value !== \"object\") return JSON.stringify(value)\n  if (Array.isArray(value)) return `[${value.map(stableJsonStringify).join(\",\")}]`\n  return `{${Object.entries(value as Record<string, unknown>)\n    .sort(([left], [right]) => compareStrings(left, right))\n    .map(([key, entry]) => `${JSON.stringify(key)}:${stableJsonStringify(entry)}`)\n    .join(\",\")}}`\n}\n\nexport function compareStrings(left: string, right: string): number {\n  if (left < right) return -1\n  if (left > right) return 1\n  return 0\n}\n\nexport function getInvalidJsonValueReason(\n  value: unknown,\n  label = \"value\",\n  seen: Set<object> = new Set()\n): string | undefined {\n  if (value === null || typeof value === \"string\" || typeof value === \"boolean\") {\n    return undefined\n  }\n\n  if (typeof value === \"number\") {\n    return Number.isFinite(value) ? undefined : `${label} is not a finite number`\n  }\n\n  if (Array.isArray(value)) {\n    if (seen.has(value)) {\n      return `${label} contains a circular reference`\n    }\n\n    seen.add(value)\n    for (let index = 0; index < value.length; index += 1) {\n      if (!Object.hasOwn(value, index)) {\n        seen.delete(value)\n        return `${label}[${index}] is a sparse array slot`\n      }\n\n      const reason = getInvalidJsonValueReason(value[index], `${label}[${index}]`, seen)\n      if (reason) {\n        seen.delete(value)\n        return reason\n      }\n    }\n    seen.delete(value)\n    return undefined\n  }\n\n  if (isPlainRecord(value)) {\n    if (seen.has(value)) {\n      return `${label} contains a circular reference`\n    }\n\n    const symbolKeys = Object.getOwnPropertySymbols(value).filter((key) =>\n      Object.prototype.propertyIsEnumerable.call(value, key)\n    )\n    if (symbolKeys.length > 0) {\n      return `${label} has an enumerable symbol key`\n    }\n\n    seen.add(value)\n    for (const [key, entry] of Object.entries(value)) {\n      const reason = getInvalidJsonValueReason(entry, jsonChildPath(label, key), seen)\n      if (reason) {\n        seen.delete(value)\n        return reason\n      }\n    }\n    seen.delete(value)\n    return undefined\n  }\n\n  return `${label} is ${describeNonJsonValue(value)}`\n}\n\nexport function isPlainRecord(value: unknown): value is Record<string, unknown> {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    return false\n  }\n\n  const prototype = Object.getPrototypeOf(value)\n  return prototype === Object.prototype || prototype === null\n}\n\nfunction jsonChildPath(parent: string, key: string): string {\n  return /^[A-Za-z_$][\\w$]*$/.test(key) ? `${parent}.${key}` : `${parent}[${JSON.stringify(key)}]`\n}\n\nfunction describeNonJsonValue(value: unknown): string {\n  if (value === undefined) {\n    return \"undefined\"\n  }\n\n  if (value instanceof Date) {\n    return \"a Date\"\n  }\n\n  const type = typeof value\n  if (type === \"bigint\" || type === \"function\" || type === \"symbol\") {\n    return `a ${type}`\n  }\n\n  if (typeof value === \"object\" && value !== null) {\n    const name = value.constructor?.name\n    return name ? `a ${name}` : \"a non-plain object\"\n  }\n\n  return type\n}\n"
   ],
-  "mappings": ";;AAYO,SAAS,WAAW,CAAC,OAAoC;AAAA,EAC9D,OAAO,0BAA0B,KAAK,MAAM;AAAA;AAGvC,SAAS,eAAe,CAAC,OAAgB,QAAQ,SAAqC;AAAA,EAC3F,MAAM,SAAS,0BAA0B,OAAO,KAAK;AAAA,EACrD,IAAI,QAAQ;AAAA,IACV,MAAM,IAAI,MAAM,UAAU,+BAA+B,QAAQ;AAAA,EACnE;AAAA;AAGK,SAAS,cAAc,CAAC,OAA0B,QAAQ,SAAoB;AAAA,EACnF,gBAAgB,OAAO,KAAK;AAAA,EAC5B,OAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA;AAOlC,SAAS,mBAAmB,CAAC,OAAwB;AAAA,EAC1D,IAAI,UAAU;AAAA,IAAW,OAAO;AAAA,EAChC,IAAI,UAAU,QAAQ,OAAO,UAAU;AAAA,IAAU,OAAO,KAAK,UAAU,KAAK;AAAA,EAC5E,IAAI,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO,IAAI,MAAM,IAAI,mBAAmB,EAAE,KAAK,GAAG;AAAA,EAC5E,OAAO,IAAI,OAAO,QAAQ,KAAgC,EACvD,KAAK,EAAE,QAAQ,WAAW,eAAe,MAAM,KAAK,CAAC,EACrD,IAAI,EAAE,KAAK,WAAW,GAAG,KAAK,UAAU,GAAG,KAAK,oBAAoB,KAAK,GAAG,EAC5E,KAAK,GAAG;AAAA;AAGN,SAAS,cAAc,CAAC,MAAc,OAAuB;AAAA,EAClE,IAAI,OAAO;AAAA,IAAO,OAAO;AAAA,EACzB,IAAI,OAAO;AAAA,IAAO,OAAO;AAAA,EACzB,OAAO;AAAA;AAGF,SAAS,yBAAyB,CACvC,OACA,QAAQ,SACR,OAAoB,IAAI,KACJ;AAAA,EACpB,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW;AAAA,IAC7E;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,OAAO,OAAO,SAAS,KAAK,IAAI,YAAY,GAAG;AAAA,EACjD;AAAA,EAEA,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,IACxB,IAAI,KAAK,IAAI,KAAK,GAAG;AAAA,MACnB,OAAO,GAAG;AAAA,IACZ;AAAA,IAEA,KAAK,IAAI,KAAK;AAAA,IACd,SAAS,QAAQ,EAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;AAAA,MACpD,IAAI,CAAC,OAAO,OAAO,OAAO,KAAK,GAAG;AAAA,QAChC,KAAK,OAAO,KAAK;AAAA,QACjB,OAAO,GAAG,SAAS;AAAA,MACrB;AAAA,MAEA,MAAM,SAAS,0BAA0B,MAAM,QAAQ,GAAG,SAAS,UAAU,IAAI;AAAA,MACjF,IAAI,QAAQ;AAAA,QACV,KAAK,OAAO,KAAK;AAAA,QACjB,OAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,KAAK,OAAO,KAAK;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,IAAI,cAAc,KAAK,GAAG;AAAA,IACxB,IAAI,KAAK,IAAI,KAAK,GAAG;AAAA,MACnB,OAAO,GAAG;AAAA,IACZ;AAAA,IAEA,MAAM,aAAa,OAAO,sBAAsB,KAAK,EAAE,OAAO,CAAC,QAC7D,OAAO,UAAU,qBAAqB,KAAK,OAAO,GAAG,CACvD;AAAA,IACA,IAAI,WAAW,SAAS,GAAG;AAAA,MACzB,OAAO,GAAG;AAAA,IACZ;AAAA,IAEA,KAAK,IAAI,KAAK;AAAA,IACd,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MAChD,MAAM,SAAS,0BAA0B,OAAO,cAAc,OAAO,GAAG,GAAG,IAAI;AAAA,MAC/E,IAAI,QAAQ;AAAA,QACV,KAAK,OAAO,KAAK;AAAA,QACjB,OAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,KAAK,OAAO,KAAK;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,OAAO,GAAG,YAAY,qBAAqB,KAAK;AAAA;AAG3C,SAAS,aAAa,CAAC,OAAkD;AAAA,EAC9E,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG;AAAA,IACvE,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,YAAY,OAAO,eAAe,KAAK;AAAA,EAC7C,OAAO,cAAc,OAAO,aAAa,cAAc;AAAA;AAGzD,SAAS,aAAa,CAAC,QAAgB,KAAqB;AAAA,EAC1D,OAAO,qBAAqB,KAAK,GAAG,IAAI,GAAG,UAAU,QAAQ,GAAG,UAAU,KAAK,UAAU,GAAG;AAAA;AAG9F,SAAS,oBAAoB,CAAC,OAAwB;AAAA,EACpD,IAAI,UAAU,WAAW;AAAA,IACvB,OAAO;AAAA,EACT;AAAA,EAEA,IAAI,iBAAiB,MAAM;AAAA,IACzB,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,OAAO,OAAO;AAAA,EACpB,IAAI,SAAS,YAAY,SAAS,cAAc,SAAS,UAAU;AAAA,IACjE,OAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAC/C,MAAM,OAAO,MAAM,aAAa;AAAA,IAChC,OAAO,OAAO,KAAK,SAAS;AAAA,EAC9B;AAAA,EAEA,OAAO;AAAA;",
-  "debugId": "9AE21810DDFB8E9B64756E2164756E21",
+  "mappings": ";;AAYO,SAAS,WAAW,CAAC,OAAoC;AAAA,EAC9D,OAAO,0BAA0B,KAAK,MAAM;AAAA;AAGvC,SAAS,eAAe,CAAC,OAAgB,QAAQ,SAAqC;AAAA,EAC3F,MAAM,SAAS,0BAA0B,OAAO,KAAK;AAAA,EACrD,IAAI,QAAQ;AAAA,IACV,MAAM,IAAI,MAAM,UAAU,+BAA+B,QAAQ;AAAA,EACnE;AAAA;AAGK,SAAS,cAAc,CAAC,OAA0B,QAAQ,SAAoB;AAAA,EACnF,gBAAgB,OAAO,KAAK;AAAA,EAC5B,OAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA;AAGlC,SAAS,mBAAmB,CAAC,OAAwB;AAAA,EAC1D,IAAI,UAAU;AAAA,IAAW,OAAO;AAAA,EAChC,IAAI,UAAU,QAAQ,OAAO,UAAU;AAAA,IAAU,OAAO,KAAK,UAAU,KAAK;AAAA,EAC5E,IAAI,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO,IAAI,MAAM,IAAI,mBAAmB,EAAE,KAAK,GAAG;AAAA,EAC5E,OAAO,IAAI,OAAO,QAAQ,KAAgC,EACvD,KAAK,EAAE,QAAQ,WAAW,eAAe,MAAM,KAAK,CAAC,EACrD,IAAI,EAAE,KAAK,WAAW,GAAG,KAAK,UAAU,GAAG,KAAK,oBAAoB,KAAK,GAAG,EAC5E,KAAK,GAAG;AAAA;AAGN,SAAS,cAAc,CAAC,MAAc,OAAuB;AAAA,EAClE,IAAI,OAAO;AAAA,IAAO,OAAO;AAAA,EACzB,IAAI,OAAO;AAAA,IAAO,OAAO;AAAA,EACzB,OAAO;AAAA;AAGF,SAAS,yBAAyB,CACvC,OACA,QAAQ,SACR,OAAoB,IAAI,KACJ;AAAA,EACpB,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW;AAAA,IAC7E;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,OAAO,OAAO,SAAS,KAAK,IAAI,YAAY,GAAG;AAAA,EACjD;AAAA,EAEA,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,IACxB,IAAI,KAAK,IAAI,KAAK,GAAG;AAAA,MACnB,OAAO,GAAG;AAAA,IACZ;AAAA,IAEA,KAAK,IAAI,KAAK;AAAA,IACd,SAAS,QAAQ,EAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;AAAA,MACpD,IAAI,CAAC,OAAO,OAAO,OAAO,KAAK,GAAG;AAAA,QAChC,KAAK,OAAO,KAAK;AAAA,QACjB,OAAO,GAAG,SAAS;AAAA,MACrB;AAAA,MAEA,MAAM,SAAS,0BAA0B,MAAM,QAAQ,GAAG,SAAS,UAAU,IAAI;AAAA,MACjF,IAAI,QAAQ;AAAA,QACV,KAAK,OAAO,KAAK;AAAA,QACjB,OAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,KAAK,OAAO,KAAK;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,IAAI,cAAc,KAAK,GAAG;AAAA,IACxB,IAAI,KAAK,IAAI,KAAK,GAAG;AAAA,MACnB,OAAO,GAAG;AAAA,IACZ;AAAA,IAEA,MAAM,aAAa,OAAO,sBAAsB,KAAK,EAAE,OAAO,CAAC,QAC7D,OAAO,UAAU,qBAAqB,KAAK,OAAO,GAAG,CACvD;AAAA,IACA,IAAI,WAAW,SAAS,GAAG;AAAA,MACzB,OAAO,GAAG;AAAA,IACZ;AAAA,IAEA,KAAK,IAAI,KAAK;AAAA,IACd,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MAChD,MAAM,SAAS,0BAA0B,OAAO,cAAc,OAAO,GAAG,GAAG,IAAI;AAAA,MAC/E,IAAI,QAAQ;AAAA,QACV,KAAK,OAAO,KAAK;AAAA,QACjB,OAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,KAAK,OAAO,KAAK;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,OAAO,GAAG,YAAY,qBAAqB,KAAK;AAAA;AAG3C,SAAS,aAAa,CAAC,OAAkD;AAAA,EAC9E,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG;AAAA,IACvE,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,YAAY,OAAO,eAAe,KAAK;AAAA,EAC7C,OAAO,cAAc,OAAO,aAAa,cAAc;AAAA;AAGzD,SAAS,aAAa,CAAC,QAAgB,KAAqB;AAAA,EAC1D,OAAO,qBAAqB,KAAK,GAAG,IAAI,GAAG,UAAU,QAAQ,GAAG,UAAU,KAAK,UAAU,GAAG;AAAA;AAG9F,SAAS,oBAAoB,CAAC,OAAwB;AAAA,EACpD,IAAI,UAAU,WAAW;AAAA,IACvB,OAAO;AAAA,EACT;AAAA,EAEA,IAAI,iBAAiB,MAAM;AAAA,IACzB,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,OAAO,OAAO;AAAA,EACpB,IAAI,SAAS,YAAY,SAAS,cAAc,SAAS,UAAU;AAAA,IACjE,OAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAC/C,MAAM,OAAO,MAAM,aAAa;AAAA,IAChC,OAAO,OAAO,KAAK,SAAS;AAAA,EAC9B;AAAA,EAEA,OAAO;AAAA;",
+  "debugId": "E0916AE00DB731CC64756E2164756E21",
   "names": []
 }

package/dist/chunk-t9xghkva.js

@@ -0,0 +1,28 @@
+// @bun
+// src/storage/executions/run-link.ts
+async function findPrimitiveRunExecution(input) {
+  const execution = await input.executions.getById({
+    projectId: input.projectId,
+    id: input.executionId
+  });
+  const authority = execution?.authorizationRef;
+  if (!execution || !input.sourceTypes.some((type) => type === execution.source.type) || execution.executor.type !== "primitive" || execution.executor.kind !== input.primitive.kind || execution.executor.runId !== input.primitive.runId || authority?.type !== "trustedPrimitive" || authority.primitive.kind !== input.primitive.kind || authority.primitive.id !== input.primitive.id || authority.primitive.runId !== input.primitive.runId) {
+    return null;
+  }
+  return execution;
+}
+async function findAgentRunExecution(input) {
+  const execution = await input.executions.getById({
+    projectId: input.projectId,
+    id: input.executionId
+  });
+  const authority = execution?.authorizationRef;
+  if (!execution || execution.source.type !== "execution" || execution.executor.type !== "agent" || execution.executor.runId !== input.runId || authority?.type !== "principal" || authority.principal.type !== "serviceAccount" || authority.principal.id !== input.serviceAccountId || authority.credential !== undefined) {
+    return null;
+  }
+  return execution;
+}
+
+export { findPrimitiveRunExecution, findAgentRunExecution };
+
+//# debugId=5E24C6B3FD9A6F0464756E2164756E21

package/dist/chunk-t9xghkva.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/storage/executions/run-link.ts"],
+  "sourcesContent": [
+    "import type { TrustedPrimitiveRef } from \"../../execution/types\"\nimport type { ExecutionRecord, ExecutionStorage } from \"./types\"\n\n/**\n * Find the immutable execution that is the authority owned by a primitive run.\n *\n * ExecutionStorage owns generic provenance invariants. Primitive providers remain responsible for\n * deciding which sources they accept and translating a mismatch to their domain-specific error.\n */\nexport async function findPrimitiveRunExecution(input: {\n  readonly executions: ExecutionStorage\n  readonly projectId: string\n  readonly executionId: string\n  readonly primitive: TrustedPrimitiveRef\n  readonly sourceTypes: readonly (\n    | \"datasetVersion\"\n    | \"event\"\n    | \"execution\"\n    | \"schedule\"\n    | \"webhook\"\n  )[]\n}): Promise<ExecutionRecord | null> {\n  const execution = await input.executions.getById({\n    projectId: input.projectId,\n    id: input.executionId,\n  })\n  const authority = execution?.authorizationRef\n  if (\n    !execution ||\n    !input.sourceTypes.some((type) => type === execution.source.type) ||\n    execution.executor.type !== \"primitive\" ||\n    execution.executor.kind !== input.primitive.kind ||\n    execution.executor.runId !== input.primitive.runId ||\n    authority?.type !== \"trustedPrimitive\" ||\n    authority.primitive.kind !== input.primitive.kind ||\n    authority.primitive.id !== input.primitive.id ||\n    authority.primitive.runId !== input.primitive.runId\n  ) {\n    return null\n  }\n  return execution\n}\n\n/** Find the immutable execution and service-account authority owned by one Agent run. */\nexport async function findAgentRunExecution(input: {\n  readonly executions: ExecutionStorage\n  readonly projectId: string\n  readonly executionId: string\n  readonly runId: string\n  readonly serviceAccountId: string\n}): Promise<ExecutionRecord | null> {\n  const execution = await input.executions.getById({\n    projectId: input.projectId,\n    id: input.executionId,\n  })\n  const authority = execution?.authorizationRef\n  if (\n    !execution ||\n    execution.source.type !== \"execution\" ||\n    execution.executor.type !== \"agent\" ||\n    execution.executor.runId !== input.runId ||\n    authority?.type !== \"principal\" ||\n    authority.principal.type !== \"serviceAccount\" ||\n    authority.principal.id !== input.serviceAccountId ||\n    authority.credential !== undefined\n  ) {\n    return null\n  }\n  return execution\n}\n"
+  ],
+  "mappings": ";;AASA,eAAsB,yBAAyB,CAAC,OAYZ;AAAA,EAClC,MAAM,YAAY,MAAM,MAAM,WAAW,QAAQ;AAAA,IAC/C,WAAW,MAAM;AAAA,IACjB,IAAI,MAAM;AAAA,EACZ,CAAC;AAAA,EACD,MAAM,YAAY,WAAW;AAAA,EAC7B,IACE,CAAC,aACD,CAAC,MAAM,YAAY,KAAK,CAAC,SAAS,SAAS,UAAU,OAAO,IAAI,KAChE,UAAU,SAAS,SAAS,eAC5B,UAAU,SAAS,SAAS,MAAM,UAAU,QAC5C,UAAU,SAAS,UAAU,MAAM,UAAU,SAC7C,WAAW,SAAS,sBACpB,UAAU,UAAU,SAAS,MAAM,UAAU,QAC7C,UAAU,UAAU,OAAO,MAAM,UAAU,MAC3C,UAAU,UAAU,UAAU,MAAM,UAAU,OAC9C;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,OAAO;AAAA;AAIT,eAAsB,qBAAqB,CAAC,OAMR;AAAA,EAClC,MAAM,YAAY,MAAM,MAAM,WAAW,QAAQ;AAAA,IAC/C,WAAW,MAAM;AAAA,IACjB,IAAI,MAAM;AAAA,EACZ,CAAC;AAAA,EACD,MAAM,YAAY,WAAW;AAAA,EAC7B,IACE,CAAC,aACD,UAAU,OAAO,SAAS,eAC1B,UAAU,SAAS,SAAS,WAC5B,UAAU,SAAS,UAAU,MAAM,SACnC,WAAW,SAAS,eACpB,UAAU,UAAU,SAAS,oBAC7B,UAAU,UAAU,OAAO,MAAM,oBACjC,UAAU,eAAe,WACzB;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,OAAO;AAAA;",
+  "debugId": "5E24C6B3FD9A6F0464756E2164756E21",
+  "names": []
+}

package/dist/{chunk-nbywkytr.js → chunk-ttba8x6z.js}

@@ -6,19 +6,16 @@ import {
   assertNonEmpty,
   effectsWithoutEditsMessage,
   isObjectActionDefinition,
-  missingActionMutationMessage,
-  requestAction,
-  requestActionAndWait,
-  waitForActionRun
-} from "./chunk-avppcgt6.js";
+  missingActionMutationMessage
+} from "./chunk-d6y2wsfg.js";
 import {
   createLinkScopeFingerprint
-} from "./chunk-rjqm6ksg.js";
+} from "./chunk-ettb0cy4.js";
 import {
   linkRefKey,
   linkScopeKey,
   objectRefKey
-} from "./chunk-8kv2sez0.js";
+} from "./chunk-vybf6pkp.js";
 import {
   lowerEditBatch
 } from "./chunk-1evzqhks.js";
@@ -199,8 +196,7 @@ async function commitActionEdits(input) {
     operations: lowerEditBatch(input.batch),
     expectedObjects: dependencies.objects,
     expectedLinks: dependencies.links,
-    expectedLinkScopes: dependencies.linkScopes,
-    ...input.actor !== undefined ? { actor: input.actor } : {}
+    expectedLinkScopes: dependencies.linkScopes
   });
   return toActionEditCommitResult(commit);
 }
@@ -350,13 +346,13 @@ function toLinkSnapshot(row) {
 }
 // src/actions/registry.ts
 class ActionRegistry {
-  ontology;
   byId = new Map;
   globalActions = [];
   byTargetId = new Map;
-  constructor(actions, ontology) {
-    this.ontology = ontology;
-    for (const action of actions) {
+  ontology;
+  constructor(options) {
+    this.ontology = options.ontology;
+    for (const action of options.actions) {
       const previous = this.byId.get(action.id);
       if (previous) {
         const chainDuplicate = this.getInheritanceDuplicate(action, previous);
@@ -398,10 +394,10 @@ class ActionRegistry {
   getById(id) {
     return this.byId.get(id) ?? null;
   }
-  getGlobalActions() {
+  listGlobal() {
     return [...this.globalActions];
   }
-  getActionsForType(type) {
+  listForType(type) {
     this.ontology.resolveObjectType(type.id);
     const seen = new Set;
     const result = [];
@@ -443,22 +439,6 @@ class ActionRegistry {
     return null;
   }
 }
-// src/actions/runtime.ts
-class ActionsRuntime {
-  runtime;
-  constructor(runtime) {
-    this.runtime = runtime;
-  }
-  request(input) {
-    return requestAction(this.runtime, input);
-  }
-  waitFor(input) {
-    return waitForActionRun(this.runtime, input);
-  }
-  requestAndWait(input) {
-    return requestActionAndWait(this.runtime, input);
-  }
-}
 // src/actions/validators.ts
 async function runActionValidators(input) {
   const validators = input.action.phases.validate;
@@ -496,6 +476,6 @@ async function runActionValidators(input) {
 function isValidatorErrorResult(value) {
   return typeof value === "object" && value !== null && "error" in value && typeof value.error === "string";
 }
-export { defineAction, param, optional, commitActionEdits, findActionEditCommit, ActionReadRecorder, createActionReadFacade, ActionRegistry, ActionsRuntime, runActionValidators };
+export { defineAction, param, optional, commitActionEdits, findActionEditCommit, ActionReadRecorder, createActionReadFacade, ActionRegistry, runActionValidators };
 
-//# debugId=88C3FA04C356D50864756E2164756E21
+//# debugId=F2505FFF52F07A6564756E2164756E21

package/dist/chunk-ttba8x6z.js.map

@@ -0,0 +1,15 @@
+{
+  "version": 3,
+  "sources": ["../src/actions/builders/define-action.ts", "../src/actions/builders/params.ts", "../src/actions/commit-edits.ts", "../src/actions/read-facade.ts", "../src/actions/registry.ts", "../src/actions/validators.ts"],
+  "sourcesContent": [
+    "import type { ObjectTypeWithPropertyTokens } from \"../../ontology/tokens\"\nimport { ActionDefinitionError, effectsWithoutEditsMessage } from \"../errors\"\nimport type {\n  ActionBuilder,\n  ActionEditsHandler,\n  ActionEffectsHandler,\n  ActionParamsConfig,\n  ActionValidator,\n  ActionWritebackHandler,\n  GlobalActionDefinition,\n  GlobalActionEditsHandler,\n  GlobalActionEffectsHandler,\n  GlobalActionPhaseBuilder,\n  GlobalActionValidator,\n  GlobalActionWritebackHandler,\n  ObjectActionDefinition,\n  ObjectActionPhaseBuilder,\n} from \"../types\"\nimport { assertNonEmpty } from \"../validation\"\n\ntype ActionOptions = {\n  description?: string\n}\n\nexport function defineAction<const TId extends string>(\n  id: TId,\n  options?: ActionOptions\n): ActionBuilder<TId> {\n  assertNonEmpty(id, \"id\")\n\n  return asPublicActionType<ActionBuilder<TId>>(createActionBuilder(id, options))\n}\n\nfunction createActionBuilder(id: string, options?: ActionOptions) {\n  const builder = {\n    params(params: ActionParamsConfig) {\n      return createGlobalActionPhaseBuilder(id, params, options)\n    },\n    on(objectType: ObjectTypeWithPropertyTokens) {\n      assertNonEmpty(objectType.id, \"target id\")\n      return createObjectActionParamsBuilder(id, objectType, options)\n    },\n  }\n\n  return builder\n}\n\nfunction createGlobalActionPhaseBuilder(\n  id: string,\n  params: ActionParamsConfig,\n  options?: ActionOptions\n): GlobalActionPhaseBuilder<string, ActionParamsConfig> {\n  const validators: GlobalActionValidator<Record<string, unknown>>[] = []\n\n  const builder = {\n    validate(validator: GlobalActionValidator<Record<string, unknown>>) {\n      validators.push(validator)\n      return builder\n    },\n    writeback(handler: GlobalActionWritebackHandler<Record<string, unknown>, unknown>) {\n      return createGlobalDefinition({\n        id,\n        params,\n        description: options?.description,\n        validators,\n        writeback: handler,\n      })\n    },\n    edits(handler: GlobalActionEditsHandler<Record<string, unknown>, undefined>) {\n      return createGlobalDefinition({\n        id,\n        params,\n        description: options?.description,\n        validators,\n        edits: handler,\n      })\n    },\n  }\n\n  return asPublicActionType<GlobalActionPhaseBuilder<string, ActionParamsConfig>>(builder)\n}\n\nfunction createObjectActionParamsBuilder(\n  id: string,\n  objectType: ObjectTypeWithPropertyTokens,\n  options?: ActionOptions\n) {\n  return {\n    params(params: ActionParamsConfig) {\n      return createObjectActionPhaseBuilder(id, objectType, params, options)\n    },\n  }\n}\n\nfunction createObjectActionPhaseBuilder(\n  id: string,\n  objectType: ObjectTypeWithPropertyTokens,\n  params: ActionParamsConfig,\n  options?: ActionOptions\n): ObjectActionPhaseBuilder<string, ObjectTypeWithPropertyTokens, ActionParamsConfig> {\n  const validators: ActionValidator<ObjectTypeWithPropertyTokens, Record<string, unknown>>[] = []\n\n  const builder = {\n    validate(validator: ActionValidator<ObjectTypeWithPropertyTokens, Record<string, unknown>>) {\n      validators.push(validator)\n      return builder\n    },\n    writeback(\n      handler: ActionWritebackHandler<\n        ObjectTypeWithPropertyTokens,\n        Record<string, unknown>,\n        unknown\n      >\n    ) {\n      return createObjectDefinition({\n        id,\n        objectType,\n        params,\n        description: options?.description,\n        validators,\n        writeback: handler,\n      })\n    },\n    edits(\n      handler: ActionEditsHandler<ObjectTypeWithPropertyTokens, Record<string, unknown>, undefined>\n    ) {\n      return createObjectDefinition({\n        id,\n        objectType,\n        params,\n        description: options?.description,\n        validators,\n        edits: handler,\n      })\n    },\n  }\n\n  return asPublicActionType<\n    ObjectActionPhaseBuilder<string, ObjectTypeWithPropertyTokens, ActionParamsConfig>\n  >(builder)\n}\n\nfunction createGlobalDefinition(input: {\n  readonly id: string\n  readonly params: ActionParamsConfig\n  readonly description?: string\n  readonly validators: readonly unknown[]\n  readonly writeback?: unknown\n  readonly edits?: unknown\n  readonly effects?: unknown\n}): GlobalActionDefinition {\n  const definition = {\n    kind: \"action\",\n    id: input.id,\n    binding: { kind: \"global\" },\n    params: input.params,\n    phases: {\n      validate: [...input.validators],\n      ...(input.writeback ? { writeback: input.writeback } : {}),\n      ...(input.edits ? { edits: input.edits } : {}),\n      ...(input.effects ? { effects: input.effects } : {}),\n    },\n    ...(input.description !== undefined ? { description: input.description } : {}),\n  }\n\n  return asPublicActionType<GlobalActionDefinition>(\n    Object.assign(definition, {\n      edits(handler: GlobalActionEditsHandler<Record<string, unknown>, unknown>) {\n        return createGlobalDefinition({\n          ...input,\n          edits: handler,\n        })\n      },\n      effects(handler: GlobalActionEffectsHandler<Record<string, unknown>, unknown>) {\n        if (!input.edits) {\n          throw new ActionDefinitionError(effectsWithoutEditsMessage(input.id))\n        }\n        return createGlobalDefinition({\n          ...input,\n          effects: handler,\n        })\n      },\n    })\n  )\n}\n\nfunction createObjectDefinition(input: {\n  readonly id: string\n  readonly objectType: ObjectTypeWithPropertyTokens\n  readonly params: ActionParamsConfig\n  readonly description?: string\n  readonly validators: readonly unknown[]\n  readonly writeback?: unknown\n  readonly edits?: unknown\n  readonly effects?: unknown\n}): ObjectActionDefinition {\n  const definition = {\n    kind: \"action\",\n    id: input.id,\n    binding: { kind: \"object\", objectType: input.objectType },\n    params: input.params,\n    phases: {\n      validate: [...input.validators],\n      ...(input.writeback ? { writeback: input.writeback } : {}),\n      ...(input.edits ? { edits: input.edits } : {}),\n      ...(input.effects ? { effects: input.effects } : {}),\n    },\n    ...(input.description !== undefined ? { description: input.description } : {}),\n  }\n\n  return asPublicActionType<ObjectActionDefinition>(\n    Object.assign(definition, {\n      edits(\n        handler: ActionEditsHandler<ObjectTypeWithPropertyTokens, Record<string, unknown>, unknown>\n      ) {\n        return createObjectDefinition({\n          ...input,\n          edits: handler,\n        })\n      },\n      effects(\n        handler: ActionEffectsHandler<\n          ObjectTypeWithPropertyTokens,\n          Record<string, unknown>,\n          unknown\n        >\n      ) {\n        if (!input.edits) {\n          throw new ActionDefinitionError(effectsWithoutEditsMessage(input.id))\n        }\n        return createObjectDefinition({\n          ...input,\n          effects: handler,\n        })\n      },\n    })\n  )\n}\n\n// Runtime builders are plain objects; public builder types carry phase-order inference.\nfunction asPublicActionType<TPublic>(value: unknown): TPublic {\n  return value as TPublic\n}\n",
+    "import type { SchemaOrRef } from \"../../ontology\"\nimport type { QuantitativeTypeId } from \"../../ontology/units\"\nimport type { ActionParamConfig } from \"../types\"\n\ntype ActionParamOptions = {\n  description?: string\n  semanticType?: QuantitativeTypeId\n  nullable?: boolean\n}\n\ntype FieldFromOptions<TOptions, TKey extends string, TFallback> =\n  TOptions extends Record<TKey, infer TValue>\n    ? { [K in TKey]: TValue }\n    : { [K in TKey]?: TFallback }\n\ntype ActionParamResult<\n  TSchema extends SchemaOrRef,\n  TRequired extends boolean,\n  TOptions extends ActionParamOptions | undefined,\n> = {\n  schema: TSchema\n  required: TRequired\n} & FieldFromOptions<TOptions, \"description\", string> &\n  FieldFromOptions<TOptions, \"semanticType\", QuantitativeTypeId> &\n  FieldFromOptions<TOptions, \"nullable\", boolean>\n\nexport function param<\n  const TSchema extends SchemaOrRef,\n  const TOptions extends ActionParamOptions | undefined = undefined,\n>(schema: TSchema, options?: TOptions): ActionParamResult<TSchema, true, TOptions> {\n  const result: ActionParamConfig & { required: true } = {\n    schema,\n    required: true,\n    ...(options?.description !== undefined ? { description: options.description } : {}),\n    ...(options?.semanticType !== undefined ? { semanticType: options.semanticType } : {}),\n    ...(options?.nullable !== undefined ? { nullable: options.nullable } : {}),\n  }\n  return result as ActionParamResult<TSchema, true, TOptions>\n}\n\nexport function optional<const TParam extends ActionParamConfig>(\n  paramConfig: TParam\n): Omit<TParam, \"required\"> & { readonly required: false } {\n  return {\n    ...paramConfig,\n    required: false,\n  }\n}\n",
+    "import type { EditBatch } from \"../edits\"\nimport { lowerEditBatch } from \"../edits\"\nimport type {\n  EditCommitResult,\n  EffectiveLinkChange,\n  EffectiveObjectChange,\n  ExpectedLinkRevision,\n  ExpectedLinkScopeRevision,\n  ExpectedObjectRevision,\n  OntologyOperationOutcome,\n} from \"../materializer\"\nimport type { OntologyMutationRuntime } from \"../runtime/ontology-mutations\"\nimport type { Storage } from \"../storage/types\"\nimport { ActionEditCommitError } from \"./errors\"\n\n/** Exact reads an Action handler depended on, protected by row-level CAS at commit time. */\nexport interface ActionReadDependencies {\n  readonly objects: readonly ExpectedObjectRevision[]\n  readonly links: readonly ExpectedLinkRevision[]\n  readonly linkScopes: readonly ExpectedLinkScopeRevision[]\n}\n\nconst NO_READ_DEPENDENCIES: ActionReadDependencies = { objects: [], links: [], linkScopes: [] }\n\nexport interface CommitActionEditsInput {\n  readonly mutations: Pick<OntologyMutationRuntime, \"commitEdits\">\n  readonly projectId: string\n  readonly runId: string\n  readonly actionId: string\n  readonly batch: EditBatch\n  readonly dependencies?: ActionReadDependencies\n}\n\n/** The authoritative ontology commit an Action run produced. */\nexport interface ActionEditCommitResult {\n  readonly commitId: string\n  readonly created: boolean\n  readonly eventCount: number\n  readonly outcomes: readonly OntologyOperationOutcome[]\n  readonly changes: {\n    readonly objects: readonly EffectiveObjectChange[]\n    readonly links: readonly EffectiveLinkChange[]\n  }\n  readonly committedAt: Date\n}\n\nexport interface FindActionEditCommitInput {\n  readonly storage: Pick<Storage, \"ontology\">\n  readonly projectId: string\n  readonly runId: string\n}\n\n/**\n * Commits one Action run's recorded edits as a single atomic ontology commit.\n *\n * The batch lowers to canonical Materializer operations and the Materializer validates the Action run\n * identity, applies managed authority, resolves effective state, writes the authoritative commit, and\n * inserts outbox facts in one transaction. Repeating the call for the same run replays that commit;\n * a divergent request for the same run is a typed idempotency conflict.\n */\nexport async function commitActionEdits(\n  input: CommitActionEditsInput\n): Promise<ActionEditCommitResult> {\n  const dependencies = input.dependencies ?? NO_READ_DEPENDENCIES\n  const commit = await input.mutations.commitEdits({\n    mode: \"atomic\",\n    source: { kind: \"action\", actionId: input.actionId, runId: input.runId },\n    operations: lowerEditBatch(input.batch),\n    expectedObjects: dependencies.objects,\n    expectedLinks: dependencies.links,\n    expectedLinkScopes: dependencies.linkScopes,\n  })\n  return toActionEditCommitResult(commit)\n}\n\n/**\n * Resolves the authoritative commit an Action run already produced, if any.\n *\n * Resume uses the exact `{ actionRunId }` origin instead of rerunning handlers, so a redelivered run\n * returns the persisted result without recomputing an idempotency hash.\n */\nexport async function findActionEditCommit(\n  input: FindActionEditCommitInput\n): Promise<ActionEditCommitResult | null> {\n  const record = await input.storage.ontology.commits.getByOrigin({\n    projectId: input.projectId,\n    origin: { kind: \"action\", actionRunId: input.runId },\n  })\n  if (!record) return null\n  if (record.result.kind !== \"edit\") {\n    throw new ActionEditCommitError(\n      `[Sixb] Action run '${input.runId}' resolved a '${record.result.kind}' commit instead of an edit commit.`\n    )\n  }\n  return toActionEditCommitResult({ ...record.result, created: false })\n}\n\nfunction toActionEditCommitResult(commit: EditCommitResult): ActionEditCommitResult {\n  return {\n    commitId: commit.commitId,\n    created: commit.created,\n    eventCount: commit.eventCount,\n    outcomes: commit.outcomes,\n    changes: commit.changes,\n    committedAt: new Date(commit.committedAt),\n  }\n}\n",
+    "import { linkRefKey, linkScopeKey, objectRefKey } from \"../materialization/refs\"\nimport type {\n  EffectiveLinkSnapshot,\n  ExpectedLinkRevision,\n  ExpectedLinkScopeRevision,\n  ExpectedObjectRevision,\n  OntologyLinkRef,\n  OntologyObjectRef,\n} from \"../materializer\"\nimport { createLinkScopeFingerprint } from \"../materializer\"\nimport type { ObjectTypeWithPropertyTokens } from \"../ontology/tokens\"\nimport type { ValueType } from \"../ontology/types\"\nimport type { ObjectSetListInput } from \"../runtime/types\"\nimport type { ObjectLinkRow, ObjectRow } from \"../storage\"\nimport type { ActionReadDependencies } from \"./commit-edits\"\nimport type { ActionReadFacade, ActionReadObjectSet } from \"./types\"\n\nexport type ActionReadObjectSetSource = {\n  get(id: string): Promise<unknown>\n  query(): unknown\n  list(input?: ObjectSetListInput): Promise<unknown>\n  byId(id: string): {\n    get(): Promise<unknown>\n    listLinks(link?: { readonly id: string }): Promise<unknown>\n  }\n}\n\n/**\n * Records the exact state an Action handler observed while reading.\n *\n * A handler that reads one dependency twice keeps the first observation: the commit must fail when\n * current state no longer matches what the decision was made against, and the later read may already\n * reflect the handler's own intent. Arbitrary query phantoms stay out of this release — `query()` and\n * `list()` results are not turned into dependencies.\n */\nexport class ActionReadRecorder {\n  private readonly objects = new Map<string, ExpectedObjectRevision>()\n  private readonly links = new Map<string, ExpectedLinkRevision>()\n  private readonly linkScopes = new Map<string, ExpectedLinkScopeRevision>()\n\n  /** Records a concrete object read, including exact absence. */\n  observeObject(ref: OntologyObjectRef, row: ObjectRow | null): void {\n    const key = objectRefKey(ref)\n    if (this.objects.has(key)) return\n    if (!row) {\n      this.objects.set(key, { ref, exists: false })\n      return\n    }\n    // Rows without materializer provenance predate the commit ledger and cannot be fenced.\n    if (row.lastCommitId === undefined) return\n    this.objects.set(key, {\n      ref,\n      exists: true,\n      version: row.version,\n      lastCommitId: row.lastCommitId,\n    })\n  }\n\n  /**\n   * Records the complete `(source, linkId)` scopes a link listing observed.\n   *\n   * `linkIds` names every scope the read covered so an empty scope is recorded as an empty\n   * fingerprint rather than being silently omitted.\n   */\n  observeLinkScopes(\n    source: OntologyObjectRef,\n    linkIds: readonly string[],\n    rows: readonly ObjectLinkRow[]\n  ): void {\n    const snapshotsByLinkId = new Map<string, EffectiveLinkSnapshot[]>()\n    for (const linkId of linkIds) snapshotsByLinkId.set(linkId, [])\n    /** Scopes holding a row that cannot be fenced, so no expectation may be recorded for them. */\n    const unfenceable = new Set<string>()\n\n    for (const row of rows) {\n      if (row.sourceTypeId !== source.objectTypeId || row.sourceId !== source.primaryId) continue\n      const snapshots = snapshotsByLinkId.get(row.linkId)\n      if (!snapshots) continue\n      const snapshot = toLinkSnapshot(row)\n      if (!snapshot) {\n        // Same rule `observeObject` applies to rows without materializer provenance: record no\n        // expectation at all. A fingerprint computed over the remaining rows would describe a scope\n        // the store can never reproduce, turning every such read into a guaranteed conflict.\n        unfenceable.add(row.linkId)\n        continue\n      }\n      snapshots.push(snapshot)\n      this.observeLink(snapshot.ref, snapshot)\n    }\n\n    for (const [linkId, snapshots] of snapshotsByLinkId) {\n      if (unfenceable.has(linkId)) continue\n      const key = linkScopeKey(source, linkId)\n      if (this.linkScopes.has(key)) continue\n      this.linkScopes.set(key, {\n        source,\n        linkId,\n        fingerprint: createLinkScopeFingerprint(snapshots),\n      })\n    }\n  }\n\n  /** Records a concrete link read, including exact absence. */\n  observeLink(ref: OntologyLinkRef, snapshot: EffectiveLinkSnapshot | null): void {\n    const key = linkRefKey(ref)\n    if (this.links.has(key)) return\n    this.links.set(\n      key,\n      snapshot ? { ref, exists: true, lastCommitId: snapshot.lastCommitId } : { ref, exists: false }\n    )\n  }\n\n  dependencies(): ActionReadDependencies {\n    return {\n      objects: [...this.objects.values()],\n      links: [...this.links.values()],\n      linkScopes: [...this.linkScopes.values()],\n    }\n  }\n}\n\nexport interface ActionReadFacadeOptions {\n  /** Records what the handler observed, so the commit can be fenced against it. */\n  readonly recorder: ActionReadRecorder\n  /**\n   * Every link the object type carries, inherited links included.\n   *\n   * Inheritance is resolved by the Ontology registry, not by the imported definition, so an\n   * `extends` type would otherwise report only its own links and drop inherited ones from the\n   * recorded scopes.\n   */\n  readonly resolveLinkIds: (objectTypeId: string) => readonly string[]\n}\n\nexport function createActionReadFacade(\n  createObjectSet: <const TObjectType extends ObjectTypeWithPropertyTokens>(\n    objectType: TObjectType\n  ) => ActionReadObjectSetSource,\n  options?: ActionReadFacadeOptions\n): ActionReadFacade {\n  const facade = {\n    objects<const TObjectType extends ObjectTypeWithPropertyTokens>(objectType: TObjectType) {\n      return createActionReadObjectSetAdapter<TObjectType>(\n        objectType,\n        createObjectSet(objectType),\n        options\n      )\n    },\n  }\n\n  return facade as ActionReadFacade\n}\n\nfunction createActionReadObjectSetAdapter<TObjectType extends ObjectTypeWithPropertyTokens>(\n  objectType: TObjectType,\n  objectSet: ActionReadObjectSetSource,\n  options: ActionReadFacadeOptions | undefined\n): ActionReadObjectSet<TObjectType, readonly ValueType[], ObjectTypeWithPropertyTokens> {\n  type TypedReadObjectSet = ActionReadObjectSet<\n    TObjectType,\n    readonly ValueType[],\n    ObjectTypeWithPropertyTokens\n  >\n\n  async function readObject(id: string, read: () => Promise<unknown>): Promise<unknown> {\n    const row = await read()\n    options?.recorder.observeObject(\n      { objectTypeId: objectType.id, primaryId: id },\n      (row ?? null) as ObjectRow | null\n    )\n    return row\n  }\n\n  return {\n    get(id) {\n      return readObject(id, () => objectSet.get(id)) as ReturnType<TypedReadObjectSet[\"get\"]>\n    },\n    query() {\n      return objectSet.query() as ReturnType<TypedReadObjectSet[\"query\"]>\n    },\n    list(input) {\n      return objectSet.list(input) as ReturnType<TypedReadObjectSet[\"list\"]>\n    },\n    byId(id) {\n      const handle = objectSet.byId(id)\n      return {\n        get() {\n          return readObject(id, () => handle.get()) as ReturnType<\n            ReturnType<TypedReadObjectSet[\"byId\"]>[\"get\"]\n          >\n        },\n        async listLinks(link) {\n          const rows = (await handle.listLinks(link)) as readonly ObjectLinkRow[]\n          options?.recorder.observeLinkScopes(\n            { objectTypeId: objectType.id, primaryId: id },\n            link ? [link.id] : options.resolveLinkIds(objectType.id),\n            rows\n          )\n          return rows as unknown as Awaited<\n            ReturnType<ReturnType<TypedReadObjectSet[\"byId\"]>[\"listLinks\"]>\n          >\n        },\n      }\n    },\n  }\n}\n\nfunction toLinkSnapshot(row: ObjectLinkRow): EffectiveLinkSnapshot | null {\n  // Rows without materializer provenance predate the commit ledger and cannot be fenced.\n  if (row.lastCommitId === undefined) return null\n  return {\n    ref: {\n      source: { objectTypeId: row.sourceTypeId, primaryId: row.sourceId },\n      linkId: row.linkId,\n      target: { objectTypeId: row.targetTypeId, primaryId: row.targetId },\n    },\n    ...(row.properties !== undefined\n      ? { properties: row.properties as EffectiveLinkSnapshot[\"properties\"] }\n      : {}),\n    createdAt: row.createdAt.toISOString(),\n    updatedAt: row.updatedAt.toISOString(),\n    lastCommitId: row.lastCommitId,\n  }\n}\n",
+    "import type { ObjectType, OntologyDefinitionCatalog } from \"../ontology\"\nimport {\n  ActionDefinitionError,\n  effectsWithoutEditsMessage,\n  missingActionMutationMessage,\n} from \"./errors\"\nimport type { ActionDefinition, ObjectActionDefinition } from \"./types\"\nimport { isObjectActionDefinition } from \"./validation\"\n\nexport interface ActionDefinitionCatalog {\n  list(): readonly ActionDefinition[]\n  getById(id: string): ActionDefinition | null\n  listGlobal(): readonly ActionDefinition[]\n  listForType(type: ObjectType): readonly ObjectActionDefinition[]\n}\n\nexport interface ActionRegistryOptions {\n  readonly actions: readonly ActionDefinition[]\n  readonly ontology: OntologyDefinitionCatalog\n}\n\nexport class ActionRegistry implements ActionDefinitionCatalog {\n  private readonly byId = new Map<string, ActionDefinition>()\n  private readonly globalActions: ActionDefinition[] = []\n  private readonly byTargetId = new Map<string, ObjectActionDefinition[]>()\n\n  private readonly ontology: OntologyDefinitionCatalog\n\n  constructor(options: ActionRegistryOptions) {\n    this.ontology = options.ontology\n\n    for (const action of options.actions) {\n      const previous = this.byId.get(action.id)\n      if (previous) {\n        const chainDuplicate = this.getInheritanceDuplicate(action, previous)\n        if (chainDuplicate) {\n          throw new ActionDefinitionError(\n            `Duplicate action id \"${action.id}\" in inheritance chain of \"${chainDuplicate.objectTypeId}\": defined on both \"${chainDuplicate.firstTargetId}\" and \"${chainDuplicate.secondTargetId}\".`\n          )\n        }\n\n        throw new ActionDefinitionError(\n          `Duplicate action id \"${action.id}\" declared in multiple files.`\n        )\n      }\n\n      this.validatePhases(action)\n      this.byId.set(action.id, action)\n\n      if (!isObjectActionDefinition(action)) {\n        this.globalActions.push(action)\n        continue\n      }\n\n      const objectType = action.binding.objectType\n      const target = this.ontology.getObjectTypeById(objectType.id)\n      if (!target) {\n        throw new ActionDefinitionError(\n          `Action \"${action.id}\" targets unknown object type \"${objectType.id}\". Add the object type to ontology before registering the action.`\n        )\n      }\n\n      const bucket = this.byTargetId.get(objectType.id) ?? []\n      bucket.push(action)\n      this.byTargetId.set(objectType.id, bucket)\n    }\n  }\n\n  private validatePhases(action: ActionDefinition): void {\n    const hasWriteback = action.phases.writeback !== undefined\n    const hasEdits = action.phases.edits !== undefined\n    const hasEffects = action.phases.effects !== undefined\n\n    if (!hasWriteback && !hasEdits) {\n      throw new ActionDefinitionError(missingActionMutationMessage(action.id))\n    }\n\n    if (hasEffects && !hasEdits) {\n      throw new ActionDefinitionError(effectsWithoutEditsMessage(action.id))\n    }\n  }\n\n  list(): readonly ActionDefinition[] {\n    return [...this.byId.values()]\n  }\n\n  getById(id: string): ActionDefinition | null {\n    return this.byId.get(id) ?? null\n  }\n\n  listGlobal(): readonly ActionDefinition[] {\n    return [...this.globalActions]\n  }\n\n  listForType(type: ObjectType): readonly ObjectActionDefinition[] {\n    this.ontology.resolveObjectType(type.id)\n\n    const seen = new Set<string>()\n    const result: ObjectActionDefinition[] = []\n\n    for (const ancestor of this.ontology.listAncestorChain(type)) {\n      for (const action of this.byTargetId.get(ancestor.id) ?? []) {\n        if (seen.has(action.id)) continue\n        seen.add(action.id)\n        result.push(action)\n      }\n    }\n\n    return result\n  }\n\n  private getInheritanceDuplicate(\n    action: ActionDefinition,\n    previous: ActionDefinition\n  ): { objectTypeId: string; firstTargetId: string; secondTargetId: string } | null {\n    if (!isObjectActionDefinition(action) || !isObjectActionDefinition(previous)) {\n      return null\n    }\n\n    const actionObjectType = action.binding.objectType\n    const previousObjectType = previous.binding.objectType\n\n    if (actionObjectType.id === previousObjectType.id) {\n      return null\n    }\n\n    const actionChain = this.ontology.listAncestorChain(actionObjectType)\n    if (actionChain.some((ancestor) => ancestor.id === previousObjectType.id)) {\n      return {\n        objectTypeId: actionObjectType.id,\n        firstTargetId: previousObjectType.id,\n        secondTargetId: actionObjectType.id,\n      }\n    }\n\n    const previousChain = this.ontology.listAncestorChain(previousObjectType)\n    if (previousChain.some((ancestor) => ancestor.id === actionObjectType.id)) {\n      return {\n        objectTypeId: previousObjectType.id,\n        firstTargetId: actionObjectType.id,\n        secondTargetId: previousObjectType.id,\n      }\n    }\n\n    return null\n  }\n}\n",
+    "import { ActionValidationError } from \"../objects/action/errors\"\nimport type { ActionDefinition, ActionSubject, ActionTargetObject } from \"./types\"\nimport { isObjectActionDefinition } from \"./validation\"\n\ntype RuntimePhaseHandler = (ctx: unknown) => unknown | Promise<unknown>\n\nexport async function runActionValidators<TBaseContext extends object>(input: {\n  readonly action: ActionDefinition\n  readonly subject: ActionSubject\n  readonly baseContext: TBaseContext\n  readonly target?: ActionTargetObject | null\n}): Promise<void> {\n  const validators = input.action.phases.validate as readonly RuntimePhaseHandler[]\n  if (validators.length === 0) {\n    return\n  }\n\n  if (!isObjectActionDefinition(input.action)) {\n    for (const validator of validators) {\n      const result = await validator(input.baseContext)\n      if (isValidatorErrorResult(result)) {\n        throw new ActionValidationError(result.error, {\n          actionId: input.action.id,\n          subject: input.subject,\n        })\n      }\n    }\n    return\n  }\n\n  if (!input.target) {\n    throw new Error(`[Sixb] Action '${input.action.id}' requires an object target.`)\n  }\n\n  for (const validator of validators) {\n    const result = await validator({\n      ...input.baseContext,\n      target: input.target,\n    })\n    if (isValidatorErrorResult(result)) {\n      throw new ActionValidationError(result.error, {\n        actionId: input.action.id,\n        subject: input.subject,\n      })\n    }\n  }\n}\n\nfunction isValidatorErrorResult(value: unknown): value is { readonly error: string } {\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    \"error\" in value &&\n    typeof value.error === \"string\"\n  )\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;AAwBO,SAAS,YAAsC,CACpD,IACA,SACoB;AAAA,EACpB,eAAe,IAAI,IAAI;AAAA,EAEvB,OAAO,mBAAuC,oBAAoB,IAAI,OAAO,CAAC;AAAA;AAGhF,SAAS,mBAAmB,CAAC,IAAY,SAAyB;AAAA,EAChE,MAAM,UAAU;AAAA,IACd,MAAM,CAAC,QAA4B;AAAA,MACjC,OAAO,+BAA+B,IAAI,QAAQ,OAAO;AAAA;AAAA,IAE3D,EAAE,CAAC,YAA0C;AAAA,MAC3C,eAAe,WAAW,IAAI,WAAW;AAAA,MACzC,OAAO,gCAAgC,IAAI,YAAY,OAAO;AAAA;AAAA,EAElE;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,8BAA8B,CACrC,IACA,QACA,SACsD;AAAA,EACtD,MAAM,aAA+D,CAAC;AAAA,EAEtE,MAAM,UAAU;AAAA,IACd,QAAQ,CAAC,WAA2D;AAAA,MAClE,WAAW,KAAK,SAAS;AAAA,MACzB,OAAO;AAAA;AAAA,IAET,SAAS,CAAC,SAAyE;AAAA,MACjF,OAAO,uBAAuB;AAAA,QAC5B;AAAA,QACA;AAAA,QACA,aAAa,SAAS;AAAA,QACtB;AAAA,QACA,WAAW;AAAA,MACb,CAAC;AAAA;AAAA,IAEH,KAAK,CAAC,SAAuE;AAAA,MAC3E,OAAO,uBAAuB;AAAA,QAC5B;AAAA,QACA;AAAA,QACA,aAAa,SAAS;AAAA,QACtB;AAAA,QACA,OAAO;AAAA,MACT,CAAC;AAAA;AAAA,EAEL;AAAA,EAEA,OAAO,mBAAyE,OAAO;AAAA;AAGzF,SAAS,+BAA+B,CACtC,IACA,YACA,SACA;AAAA,EACA,OAAO;AAAA,IACL,MAAM,CAAC,QAA4B;AAAA,MACjC,OAAO,+BAA+B,IAAI,YAAY,QAAQ,OAAO;AAAA;AAAA,EAEzE;AAAA;AAGF,SAAS,8BAA8B,CACrC,IACA,YACA,QACA,SACoF;AAAA,EACpF,MAAM,aAAuF,CAAC;AAAA,EAE9F,MAAM,UAAU;AAAA,IACd,QAAQ,CAAC,WAAmF;AAAA,MAC1F,WAAW,KAAK,SAAS;AAAA,MACzB,OAAO;AAAA;AAAA,IAET,SAAS,CACP,SAKA;AAAA,MACA,OAAO,uBAAuB;AAAA,QAC5B;AAAA,QACA;AAAA,QACA;AAAA,QACA,aAAa,SAAS;AAAA,QACtB;AAAA,QACA,WAAW;AAAA,MACb,CAAC;AAAA;AAAA,IAEH,KAAK,CACH,SACA;AAAA,MACA,OAAO,uBAAuB;AAAA,QAC5B;AAAA,QACA;AAAA,QACA;AAAA,QACA,aAAa,SAAS;AAAA,QACtB;AAAA,QACA,OAAO;AAAA,MACT,CAAC;AAAA;AAAA,EAEL;AAAA,EAEA,OAAO,mBAEL,OAAO;AAAA;AAGX,SAAS,sBAAsB,CAAC,OAQL;AAAA,EACzB,MAAM,aAAa;AAAA,IACjB,MAAM;AAAA,IACN,IAAI,MAAM;AAAA,IACV,SAAS,EAAE,MAAM,SAAS;AAAA,IAC1B,QAAQ,MAAM;AAAA,IACd,QAAQ;AAAA,MACN,UAAU,CAAC,GAAG,MAAM,UAAU;AAAA,SAC1B,MAAM,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,SACpD,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,SACxC,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,IACpD;AAAA,OACI,MAAM,gBAAgB,YAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,EAC9E;AAAA,EAEA,OAAO,mBACL,OAAO,OAAO,YAAY;AAAA,IACxB,KAAK,CAAC,SAAqE;AAAA,MACzE,OAAO,uBAAuB;AAAA,WACzB;AAAA,QACH,OAAO;AAAA,MACT,CAAC;AAAA;AAAA,IAEH,OAAO,CAAC,SAAuE;AAAA,MAC7E,IAAI,CAAC,MAAM,OAAO;AAAA,QAChB,MAAM,IAAI,sBAAsB,2BAA2B,MAAM,EAAE,CAAC;AAAA,MACtE;AAAA,MACA,OAAO,uBAAuB;AAAA,WACzB;AAAA,QACH,SAAS;AAAA,MACX,CAAC;AAAA;AAAA,EAEL,CAAC,CACH;AAAA;AAGF,SAAS,sBAAsB,CAAC,OASL;AAAA,EACzB,MAAM,aAAa;AAAA,IACjB,MAAM;AAAA,IACN,IAAI,MAAM;AAAA,IACV,SAAS,EAAE,MAAM,UAAU,YAAY,MAAM,WAAW;AAAA,IACxD,QAAQ,MAAM;AAAA,IACd,QAAQ;AAAA,MACN,UAAU,CAAC,GAAG,MAAM,UAAU;AAAA,SAC1B,MAAM,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,SACpD,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,SACxC,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,IACpD;AAAA,OACI,MAAM,gBAAgB,YAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,EAC9E;AAAA,EAEA,OAAO,mBACL,OAAO,OAAO,YAAY;AAAA,IACxB,KAAK,CACH,SACA;AAAA,MACA,OAAO,uBAAuB;AAAA,WACzB;AAAA,QACH,OAAO;AAAA,MACT,CAAC;AAAA;AAAA,IAEH,OAAO,CACL,SAKA;AAAA,MACA,IAAI,CAAC,MAAM,OAAO;AAAA,QAChB,MAAM,IAAI,sBAAsB,2BAA2B,MAAM,EAAE,CAAC;AAAA,MACtE;AAAA,MACA,OAAO,uBAAuB;AAAA,WACzB;AAAA,QACH,SAAS;AAAA,MACX,CAAC;AAAA;AAAA,EAEL,CAAC,CACH;AAAA;AAIF,SAAS,kBAA2B,CAAC,OAAyB;AAAA,EAC5D,OAAO;AAAA;;ACvNF,SAAS,KAGf,CAAC,QAAiB,SAAgE;AAAA,EACjF,MAAM,SAAiD;AAAA,IACrD;AAAA,IACA,UAAU;AAAA,OACN,SAAS,gBAAgB,YAAY,EAAE,aAAa,QAAQ,YAAY,IAAI,CAAC;AAAA,OAC7E,SAAS,iBAAiB,YAAY,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;AAAA,OAChF,SAAS,aAAa,YAAY,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC1E;AAAA,EACA,OAAO;AAAA;AAGF,SAAS,QAAgD,CAC9D,aACyD;AAAA,EACzD,OAAO;AAAA,OACF;AAAA,IACH,UAAU;AAAA,EACZ;AAAA;;ACxBF,IAAM,uBAA+C,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,GAAG,YAAY,CAAC,EAAE;AAsC9F,eAAsB,iBAAiB,CACrC,OACiC;AAAA,EACjC,MAAM,eAAe,MAAM,gBAAgB;AAAA,EAC3C,MAAM,SAAS,MAAM,MAAM,UAAU,YAAY;AAAA,IAC/C,MAAM;AAAA,IACN,QAAQ,EAAE,MAAM,UAAU,UAAU,MAAM,UAAU,OAAO,MAAM,MAAM;AAAA,IACvE,YAAY,eAAe,MAAM,KAAK;AAAA,IACtC,iBAAiB,aAAa;AAAA,IAC9B,eAAe,aAAa;AAAA,IAC5B,oBAAoB,aAAa;AAAA,EACnC,CAAC;AAAA,EACD,OAAO,yBAAyB,MAAM;AAAA;AASxC,eAAsB,oBAAoB,CACxC,OACwC;AAAA,EACxC,MAAM,SAAS,MAAM,MAAM,QAAQ,SAAS,QAAQ,YAAY;AAAA,IAC9D,WAAW,MAAM;AAAA,IACjB,QAAQ,EAAE,MAAM,UAAU,aAAa,MAAM,MAAM;AAAA,EACrD,CAAC;AAAA,EACD,IAAI,CAAC;AAAA,IAAQ,OAAO;AAAA,EACpB,IAAI,OAAO,OAAO,SAAS,QAAQ;AAAA,IACjC,MAAM,IAAI,sBACR,sBAAsB,MAAM,sBAAsB,OAAO,OAAO,yCAClE;AAAA,EACF;AAAA,EACA,OAAO,yBAAyB,KAAK,OAAO,QAAQ,SAAS,MAAM,CAAC;AAAA;AAGtE,SAAS,wBAAwB,CAAC,QAAkD;AAAA,EAClF,OAAO;AAAA,IACL,UAAU,OAAO;AAAA,IACjB,SAAS,OAAO;AAAA,IAChB,YAAY,OAAO;AAAA,IACnB,UAAU,OAAO;AAAA,IACjB,SAAS,OAAO;AAAA,IAChB,aAAa,IAAI,KAAK,OAAO,WAAW;AAAA,EAC1C;AAAA;;ACtEK,MAAM,mBAAmB;AAAA,EACb,UAAU,IAAI;AAAA,EACd,QAAQ,IAAI;AAAA,EACZ,aAAa,IAAI;AAAA,EAGlC,aAAa,CAAC,KAAwB,KAA6B;AAAA,IACjE,MAAM,MAAM,aAAa,GAAG;AAAA,IAC5B,IAAI,KAAK,QAAQ,IAAI,GAAG;AAAA,MAAG;AAAA,IAC3B,IAAI,CAAC,KAAK;AAAA,MACR,KAAK,QAAQ,IAAI,KAAK,EAAE,KAAK,QAAQ,MAAM,CAAC;AAAA,MAC5C;AAAA,IACF;AAAA,IAEA,IAAI,IAAI,iBAAiB;AAAA,MAAW;AAAA,IACpC,KAAK,QAAQ,IAAI,KAAK;AAAA,MACpB;AAAA,MACA,QAAQ;AAAA,MACR,SAAS,IAAI;AAAA,MACb,cAAc,IAAI;AAAA,IACpB,CAAC;AAAA;AAAA,EASH,iBAAiB,CACf,QACA,SACA,MACM;AAAA,IACN,MAAM,oBAAoB,IAAI;AAAA,IAC9B,WAAW,UAAU;AAAA,MAAS,kBAAkB,IAAI,QAAQ,CAAC,CAAC;AAAA,IAE9D,MAAM,cAAc,IAAI;AAAA,IAExB,WAAW,OAAO,MAAM;AAAA,MACtB,IAAI,IAAI,iBAAiB,OAAO,gBAAgB,IAAI,aAAa,OAAO;AAAA,QAAW;AAAA,MACnF,MAAM,YAAY,kBAAkB,IAAI,IAAI,MAAM;AAAA,MAClD,IAAI,CAAC;AAAA,QAAW;AAAA,MAChB,MAAM,WAAW,eAAe,GAAG;AAAA,MACnC,IAAI,CAAC,UAAU;AAAA,QAIb,YAAY,IAAI,IAAI,MAAM;AAAA,QAC1B;AAAA,MACF;AAAA,MACA,UAAU,KAAK,QAAQ;AAAA,MACvB,KAAK,YAAY,SAAS,KAAK,QAAQ;AAAA,IACzC;AAAA,IAEA,YAAY,QAAQ,cAAc,mBAAmB;AAAA,MACnD,IAAI,YAAY,IAAI,MAAM;AAAA,QAAG;AAAA,MAC7B,MAAM,MAAM,aAAa,QAAQ,MAAM;AAAA,MACvC,IAAI,KAAK,WAAW,IAAI,GAAG;AAAA,QAAG;AAAA,MAC9B,KAAK,WAAW,IAAI,KAAK;AAAA,QACvB;AAAA,QACA;AAAA,QACA,aAAa,2BAA2B,SAAS;AAAA,MACnD,CAAC;AAAA,IACH;AAAA;AAAA,EAIF,WAAW,CAAC,KAAsB,UAA8C;AAAA,IAC9E,MAAM,MAAM,WAAW,GAAG;AAAA,IAC1B,IAAI,KAAK,MAAM,IAAI,GAAG;AAAA,MAAG;AAAA,IACzB,KAAK,MAAM,IACT,KACA,WAAW,EAAE,KAAK,QAAQ,MAAM,cAAc,SAAS,aAAa,IAAI,EAAE,KAAK,QAAQ,MAAM,CAC/F;AAAA;AAAA,EAGF,YAAY,GAA2B;AAAA,IACrC,OAAO;AAAA,MACL,SAAS,CAAC,GAAG,KAAK,QAAQ,OAAO,CAAC;AAAA,MAClC,OAAO,CAAC,GAAG,KAAK,MAAM,OAAO,CAAC;AAAA,MAC9B,YAAY,CAAC,GAAG,KAAK,WAAW,OAAO,CAAC;AAAA,IAC1C;AAAA;AAEJ;AAeO,SAAS,sBAAsB,CACpC,iBAGA,SACkB;AAAA,EAClB,MAAM,SAAS;AAAA,IACb,OAA+D,CAAC,YAAyB;AAAA,MACvF,OAAO,iCACL,YACA,gBAAgB,UAAU,GAC1B,OACF;AAAA;AAAA,EAEJ;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,gCAAkF,CACzF,YACA,WACA,SACsF;AAAA,EAOtF,eAAe,UAAU,CAAC,IAAY,MAAgD;AAAA,IACpF,MAAM,MAAM,MAAM,KAAK;AAAA,IACvB,SAAS,SAAS,cAChB,EAAE,cAAc,WAAW,IAAI,WAAW,GAAG,GAC5C,OAAO,IACV;AAAA,IACA,OAAO;AAAA;AAAA,EAGT,OAAO;AAAA,IACL,GAAG,CAAC,IAAI;AAAA,MACN,OAAO,WAAW,IAAI,MAAM,UAAU,IAAI,EAAE,CAAC;AAAA;AAAA,IAE/C,KAAK,GAAG;AAAA,MACN,OAAO,UAAU,MAAM;AAAA;AAAA,IAEzB,IAAI,CAAC,OAAO;AAAA,MACV,OAAO,UAAU,KAAK,KAAK;AAAA;AAAA,IAE7B,IAAI,CAAC,IAAI;AAAA,MACP,MAAM,SAAS,UAAU,KAAK,EAAE;AAAA,MAChC,OAAO;AAAA,QACL,GAAG,GAAG;AAAA,UACJ,OAAO,WAAW,IAAI,MAAM,OAAO,IAAI,CAAC;AAAA;AAAA,aAIpC,UAAS,CAAC,MAAM;AAAA,UACpB,MAAM,OAAQ,MAAM,OAAO,UAAU,IAAI;AAAA,UACzC,SAAS,SAAS,kBAChB,EAAE,cAAc,WAAW,IAAI,WAAW,GAAG,GAC7C,OAAO,CAAC,KAAK,EAAE,IAAI,QAAQ,eAAe,WAAW,EAAE,GACvD,IACF;AAAA,UACA,OAAO;AAAA;AAAA,MAIX;AAAA;AAAA,EAEJ;AAAA;AAGF,SAAS,cAAc,CAAC,KAAkD;AAAA,EAExE,IAAI,IAAI,iBAAiB;AAAA,IAAW,OAAO;AAAA,EAC3C,OAAO;AAAA,IACL,KAAK;AAAA,MACH,QAAQ,EAAE,cAAc,IAAI,cAAc,WAAW,IAAI,SAAS;AAAA,MAClE,QAAQ,IAAI;AAAA,MACZ,QAAQ,EAAE,cAAc,IAAI,cAAc,WAAW,IAAI,SAAS;AAAA,IACpE;AAAA,OACI,IAAI,eAAe,YACnB,EAAE,YAAY,IAAI,WAAkD,IACpE,CAAC;AAAA,IACL,WAAW,IAAI,UAAU,YAAY;AAAA,IACrC,WAAW,IAAI,UAAU,YAAY;AAAA,IACrC,cAAc,IAAI;AAAA,EACpB;AAAA;;ACzMK,MAAM,eAAkD;AAAA,EAC5C,OAAO,IAAI;AAAA,EACX,gBAAoC,CAAC;AAAA,EACrC,aAAa,IAAI;AAAA,EAEjB;AAAA,EAEjB,WAAW,CAAC,SAAgC;AAAA,IAC1C,KAAK,WAAW,QAAQ;AAAA,IAExB,WAAW,UAAU,QAAQ,SAAS;AAAA,MACpC,MAAM,WAAW,KAAK,KAAK,IAAI,OAAO,EAAE;AAAA,MACxC,IAAI,UAAU;AAAA,QACZ,MAAM,iBAAiB,KAAK,wBAAwB,QAAQ,QAAQ;AAAA,QACpE,IAAI,gBAAgB;AAAA,UAClB,MAAM,IAAI,sBACR,wBAAwB,OAAO,gCAAgC,eAAe,mCAAmC,eAAe,uBAAuB,eAAe,kBACxK;AAAA,QACF;AAAA,QAEA,MAAM,IAAI,sBACR,wBAAwB,OAAO,iCACjC;AAAA,MACF;AAAA,MAEA,KAAK,eAAe,MAAM;AAAA,MAC1B,KAAK,KAAK,IAAI,OAAO,IAAI,MAAM;AAAA,MAE/B,IAAI,CAAC,yBAAyB,MAAM,GAAG;AAAA,QACrC,KAAK,cAAc,KAAK,MAAM;AAAA,QAC9B;AAAA,MACF;AAAA,MAEA,MAAM,aAAa,OAAO,QAAQ;AAAA,MAClC,MAAM,SAAS,KAAK,SAAS,kBAAkB,WAAW,EAAE;AAAA,MAC5D,IAAI,CAAC,QAAQ;AAAA,QACX,MAAM,IAAI,sBACR,WAAW,OAAO,oCAAoC,WAAW,qEACnE;AAAA,MACF;AAAA,MAEA,MAAM,SAAS,KAAK,WAAW,IAAI,WAAW,EAAE,KAAK,CAAC;AAAA,MACtD,OAAO,KAAK,MAAM;AAAA,MAClB,KAAK,WAAW,IAAI,WAAW,IAAI,MAAM;AAAA,IAC3C;AAAA;AAAA,EAGM,cAAc,CAAC,QAAgC;AAAA,IACrD,MAAM,eAAe,OAAO,OAAO,cAAc;AAAA,IACjD,MAAM,WAAW,OAAO,OAAO,UAAU;AAAA,IACzC,MAAM,aAAa,OAAO,OAAO,YAAY;AAAA,IAE7C,IAAI,CAAC,gBAAgB,CAAC,UAAU;AAAA,MAC9B,MAAM,IAAI,sBAAsB,6BAA6B,OAAO,EAAE,CAAC;AAAA,IACzE;AAAA,IAEA,IAAI,cAAc,CAAC,UAAU;AAAA,MAC3B,MAAM,IAAI,sBAAsB,2BAA2B,OAAO,EAAE,CAAC;AAAA,IACvE;AAAA;AAAA,EAGF,IAAI,GAAgC;AAAA,IAClC,OAAO,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC;AAAA;AAAA,EAG/B,OAAO,CAAC,IAAqC;AAAA,IAC3C,OAAO,KAAK,KAAK,IAAI,EAAE,KAAK;AAAA;AAAA,EAG9B,UAAU,GAAgC;AAAA,IACxC,OAAO,CAAC,GAAG,KAAK,aAAa;AAAA;AAAA,EAG/B,WAAW,CAAC,MAAqD;AAAA,IAC/D,KAAK,SAAS,kBAAkB,KAAK,EAAE;AAAA,IAEvC,MAAM,OAAO,IAAI;AAAA,IACjB,MAAM,SAAmC,CAAC;AAAA,IAE1C,WAAW,YAAY,KAAK,SAAS,kBAAkB,IAAI,GAAG;AAAA,MAC5D,WAAW,UAAU,KAAK,WAAW,IAAI,SAAS,EAAE,KAAK,CAAC,GAAG;AAAA,QAC3D,IAAI,KAAK,IAAI,OAAO,EAAE;AAAA,UAAG;AAAA,QACzB,KAAK,IAAI,OAAO,EAAE;AAAA,QAClB,OAAO,KAAK,MAAM;AAAA,MACpB;AAAA,IACF;AAAA,IAEA,OAAO;AAAA;AAAA,EAGD,uBAAuB,CAC7B,QACA,UACgF;AAAA,IAChF,IAAI,CAAC,yBAAyB,MAAM,KAAK,CAAC,yBAAyB,QAAQ,GAAG;AAAA,MAC5E,OAAO;AAAA,IACT;AAAA,IAEA,MAAM,mBAAmB,OAAO,QAAQ;AAAA,IACxC,MAAM,qBAAqB,SAAS,QAAQ;AAAA,IAE5C,IAAI,iBAAiB,OAAO,mBAAmB,IAAI;AAAA,MACjD,OAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,KAAK,SAAS,kBAAkB,gBAAgB;AAAA,IACpE,IAAI,YAAY,KAAK,CAAC,aAAa,SAAS,OAAO,mBAAmB,EAAE,GAAG;AAAA,MACzE,OAAO;AAAA,QACL,cAAc,iBAAiB;AAAA,QAC/B,eAAe,mBAAmB;AAAA,QAClC,gBAAgB,iBAAiB;AAAA,MACnC;AAAA,IACF;AAAA,IAEA,MAAM,gBAAgB,KAAK,SAAS,kBAAkB,kBAAkB;AAAA,IACxE,IAAI,cAAc,KAAK,CAAC,aAAa,SAAS,OAAO,iBAAiB,EAAE,GAAG;AAAA,MACzE,OAAO;AAAA,QACL,cAAc,mBAAmB;AAAA,QACjC,eAAe,iBAAiB;AAAA,QAChC,gBAAgB,mBAAmB;AAAA,MACrC;AAAA,IACF;AAAA,IAEA,OAAO;AAAA;AAEX;;AC5IA,eAAsB,mBAAgD,CAAC,OAKrD;AAAA,EAChB,MAAM,aAAa,MAAM,OAAO,OAAO;AAAA,EACvC,IAAI,WAAW,WAAW,GAAG;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,IAAI,CAAC,yBAAyB,MAAM,MAAM,GAAG;AAAA,IAC3C,WAAW,aAAa,YAAY;AAAA,MAClC,MAAM,SAAS,MAAM,UAAU,MAAM,WAAW;AAAA,MAChD,IAAI,uBAAuB,MAAM,GAAG;AAAA,QAClC,MAAM,IAAI,sBAAsB,OAAO,OAAO;AAAA,UAC5C,UAAU,MAAM,OAAO;AAAA,UACvB,SAAS,MAAM;AAAA,QACjB,CAAC;AAAA,MACH;AAAA,IACF;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,CAAC,MAAM,QAAQ;AAAA,IACjB,MAAM,IAAI,MAAM,kBAAkB,MAAM,OAAO,gCAAgC;AAAA,EACjF;AAAA,EAEA,WAAW,aAAa,YAAY;AAAA,IAClC,MAAM,SAAS,MAAM,UAAU;AAAA,SAC1B,MAAM;AAAA,MACT,QAAQ,MAAM;AAAA,IAChB,CAAC;AAAA,IACD,IAAI,uBAAuB,MAAM,GAAG;AAAA,MAClC,MAAM,IAAI,sBAAsB,OAAO,OAAO;AAAA,QAC5C,UAAU,MAAM,OAAO;AAAA,QACvB,SAAS,MAAM;AAAA,MACjB,CAAC;AAAA,IACH;AAAA,EACF;AAAA;AAGF,SAAS,sBAAsB,CAAC,OAAqD;AAAA,EACnF,OACE,OAAO,UAAU,YACjB,UAAU,QACV,WAAW,SACX,OAAO,MAAM,UAAU;AAAA;",
+  "debugId": "F2505FFF52F07A6564756E2164756E21",
+  "names": []
+}

package/dist/{chunk-8kv2sez0.js → chunk-vybf6pkp.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-ry24jbr1.js";
 import {
   compareStrings
-} from "./chunk-be9vm29v.js";
+} from "./chunk-t8t39h7v.js";
 
 // src/materialization/refs.ts
 var textEncoder = new TextEncoder;