@sixb/core 0.1.1 → 0.1.3

package/dist/{chunk-6zrpewy4.js → chunk-z3zp0bj1.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   isJsonValue
-} from "./chunk-be9vm29v.js";
+} from "./chunk-t8t39h7v.js";
 
 // src/logging/types.ts
 var LOG_LEVELS = ["debug", "info", "warn", "error"];

package/dist/chunk-z8j83gzd.js

@@ -0,0 +1,90 @@
+// @bun
+import {
+  createDisabledRuntimeAuthorization,
+  createPrincipalRuntimeAuthorization
+} from "./chunk-4z3n1dzt.js";
+
+// src/execution/scopes.ts
+import { randomUUID } from "crypto";
+function createPrincipalRequestScope(input) {
+  const execution = createRequestExecution({
+    projectId: input.projectId,
+    requestId: input.requestId,
+    correlationId: input.correlationId,
+    requestedBy: asAuthorizablePrincipal(input.context.principal)
+  });
+  return Object.freeze({
+    execution,
+    authorization: createPrincipalRuntimeAuthorization({
+      projectId: input.projectId,
+      context: input.context,
+      ...input.credential === undefined ? {} : { credential: input.credential }
+    })
+  });
+}
+function createDisabledRequestScope(input) {
+  return Object.freeze({
+    execution: createRequestExecution(input),
+    authorization: createDisabledRuntimeAuthorization(input.projectId)
+  });
+}
+function createTestingScope(input) {
+  const context = input.context ? withoutSession(input.context) : undefined;
+  const requestId = input.requestId ?? `test_request_${randomUUID()}`;
+  const execution = createRequestExecution({
+    projectId: input.projectId,
+    requestId,
+    correlationId: input.correlationId ?? `test_correlation_${randomUUID()}`,
+    ...context === undefined ? {} : { requestedBy: asAuthorizablePrincipal(context.principal) },
+    executionId: input.executionId
+  });
+  return Object.freeze({
+    execution,
+    authorization: context ? createPrincipalRuntimeAuthorization({ projectId: input.projectId, context }) : createDisabledRuntimeAuthorization(input.projectId)
+  });
+}
+function withoutSession(context) {
+  return {
+    principal: context.principal,
+    groupIds: context.groupIds,
+    roleIds: context.roleIds,
+    grants: context.grants
+  };
+}
+function createRequestExecution(input) {
+  assertNonEmpty(input.projectId, "Execution project id");
+  assertNonEmpty(input.requestId, "Execution request id");
+  assertNonEmpty(input.correlationId, "Execution correlation id");
+  const id = input.executionId ?? `exec_${randomUUID()}`;
+  assertNonEmpty(id, "Execution id");
+  return freezeExecution({
+    id,
+    projectId: input.projectId,
+    ...input.requestedBy === undefined ? {} : { requestedBy: input.requestedBy },
+    executor: Object.freeze({ type: "request", requestId: input.requestId }),
+    source: Object.freeze({ type: "http", requestId: input.requestId }),
+    correlationId: input.correlationId
+  });
+}
+function freezeExecution(execution) {
+  assertNonEmpty(execution.id, "Execution id");
+  assertNonEmpty(execution.projectId, "Execution project id");
+  assertNonEmpty(execution.correlationId, "Execution correlation id");
+  return Object.freeze(execution);
+}
+function asAuthorizablePrincipal(principal) {
+  if (principal.type !== "user" && principal.type !== "serviceAccount") {
+    throw new Error(`[Sixb] Principal type '${principal.type}' cannot hold runtime authorization.`);
+  }
+  assertNonEmpty(principal.id, "Execution principal id");
+  return Object.freeze({ type: principal.type, id: principal.id });
+}
+function assertNonEmpty(value, label) {
+  if (!value.trim()) {
+    throw new Error(`[Sixb] ${label} must not be empty.`);
+  }
+}
+
+export { createPrincipalRequestScope, createDisabledRequestScope, createTestingScope };
+
+//# debugId=921D959D4D3E5CA264756E2164756E21

package/dist/chunk-z8j83gzd.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/execution/scopes.ts"],
+  "sourcesContent": [
+    "import { randomUUID } from \"node:crypto\"\nimport type { AuthorizationContext } from \"../authorization\"\nimport {\n  createDisabledRuntimeAuthorization,\n  createKernelRuntimeAuthorization,\n  createPrincipalRuntimeAuthorization,\n} from \"./authorization\"\nimport type {\n  AuthorizablePrincipal,\n  AuthorizationRef,\n  ExecutionContext,\n  ExecutionScope,\n  ExecutionSource,\n  KernelOperation,\n} from \"./types\"\n\nexport function createPrincipalRequestScope(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n  readonly context: AuthorizationContext\n  readonly credential?: Extract<AuthorizationRef, { readonly type: \"principal\" }>[\"credential\"]\n}): ExecutionScope {\n  const execution = createRequestExecution({\n    projectId: input.projectId,\n    requestId: input.requestId,\n    correlationId: input.correlationId,\n    requestedBy: asAuthorizablePrincipal(input.context.principal),\n  })\n\n  return Object.freeze({\n    execution,\n    authorization: createPrincipalRuntimeAuthorization({\n      projectId: input.projectId,\n      context: input.context,\n      ...(input.credential === undefined ? {} : { credential: input.credential }),\n    }),\n  })\n}\n\nexport function createDisabledRequestScope(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n}): ExecutionScope {\n  return Object.freeze({\n    execution: createRequestExecution(input),\n    authorization: createDisabledRuntimeAuthorization(input.projectId),\n  })\n}\n\nexport function createKernelScope(input: {\n  readonly projectId: string\n  readonly operation: KernelOperation\n  readonly source: ExecutionSource\n  readonly correlationId?: string\n}): ExecutionScope {\n  const operation = Object.freeze({ ...input.operation })\n  const execution = createKernelExecution({\n    projectId: input.projectId,\n    operation,\n    source: input.source,\n    correlationId: input.correlationId,\n  })\n  return Object.freeze({\n    execution,\n    authorization: createKernelRuntimeAuthorization({ projectId: input.projectId, operation }),\n  })\n}\n\nfunction createKernelExecution(input: {\n  readonly projectId: string\n  readonly operation: KernelOperation\n  readonly source: ExecutionSource\n  readonly correlationId?: string\n}): ExecutionContext {\n  const source = snapshotExecutionSource(input.source)\n  assertNestedProvenance(source, input.correlationId)\n  return freezeExecution({\n    id: `exec_${randomUUID()}`,\n    projectId: input.projectId,\n    executor: Object.freeze({ type: \"kernel\", operation: input.operation }),\n    source,\n    correlationId: input.correlationId ?? `corr_${randomUUID()}`,\n  })\n}\n\nfunction assertNestedProvenance(source: ExecutionSource, correlationId: string | undefined): void {\n  if (source.type === \"execution\" && correlationId === undefined) {\n    throw new Error(\"[Sixb] Nested execution must preserve its parent correlation id.\")\n  }\n}\n\nexport function createTestingScope(input: {\n  readonly projectId: string\n  readonly context?: AuthorizationContext\n  readonly executionId?: string\n  readonly requestId?: string\n  readonly correlationId?: string\n}): ExecutionScope {\n  const context = input.context ? withoutSession(input.context) : undefined\n  const requestId = input.requestId ?? `test_request_${randomUUID()}`\n  const execution = createRequestExecution({\n    projectId: input.projectId,\n    requestId,\n    correlationId: input.correlationId ?? `test_correlation_${randomUUID()}`,\n    ...(context === undefined ? {} : { requestedBy: asAuthorizablePrincipal(context.principal) }),\n    executionId: input.executionId,\n  })\n  return Object.freeze({\n    execution,\n    authorization: context\n      ? createPrincipalRuntimeAuthorization({ projectId: input.projectId, context })\n      : createDisabledRuntimeAuthorization(input.projectId),\n  })\n}\n\nfunction withoutSession(context: AuthorizationContext): AuthorizationContext {\n  return {\n    principal: context.principal,\n    groupIds: context.groupIds,\n    roleIds: context.roleIds,\n    grants: context.grants,\n  }\n}\n\nfunction createRequestExecution(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n  readonly requestedBy?: AuthorizablePrincipal\n  readonly executionId?: string\n}): ExecutionContext {\n  assertNonEmpty(input.projectId, \"Execution project id\")\n  assertNonEmpty(input.requestId, \"Execution request id\")\n  assertNonEmpty(input.correlationId, \"Execution correlation id\")\n  const id = input.executionId ?? `exec_${randomUUID()}`\n  assertNonEmpty(id, \"Execution id\")\n  return freezeExecution({\n    id,\n    projectId: input.projectId,\n    ...(input.requestedBy === undefined ? {} : { requestedBy: input.requestedBy }),\n    executor: Object.freeze({ type: \"request\", requestId: input.requestId }),\n    source: Object.freeze({ type: \"http\", requestId: input.requestId }),\n    correlationId: input.correlationId,\n  })\n}\n\nfunction freezeExecution(execution: ExecutionContext): ExecutionContext {\n  assertNonEmpty(execution.id, \"Execution id\")\n  assertNonEmpty(execution.projectId, \"Execution project id\")\n  assertNonEmpty(execution.correlationId, \"Execution correlation id\")\n  return Object.freeze(execution)\n}\n\nfunction snapshotExecutionSource(source: ExecutionSource): ExecutionSource {\n  const field = sourceIdentifier(source)\n  assertNonEmpty(field.value, field.label)\n  if (source.type === \"datasetVersion\") {\n    assertNonEmpty(source.datasetId, \"Execution source dataset id\")\n  }\n  return Object.freeze({ ...source })\n}\n\nfunction sourceIdentifier(source: ExecutionSource): {\n  readonly label: string\n  readonly value: string\n} {\n  switch (source.type) {\n    case \"http\":\n      return { label: \"Execution source request id\", value: source.requestId }\n    case \"webhook\":\n      return { label: \"Execution source delivery id\", value: source.deliveryId }\n    case \"schedule\":\n    case \"event\":\n      return { label: \"Execution source event id\", value: source.eventId }\n    case \"datasetVersion\":\n      return { label: \"Execution source dataset version id\", value: source.versionId }\n    case \"execution\":\n      return { label: \"Execution source execution id\", value: source.executionId }\n  }\n}\n\nfunction asAuthorizablePrincipal(\n  principal: AuthorizationContext[\"principal\"]\n): AuthorizablePrincipal {\n  if (principal.type !== \"user\" && principal.type !== \"serviceAccount\") {\n    throw new Error(`[Sixb] Principal type '${principal.type}' cannot hold runtime authorization.`)\n  }\n  assertNonEmpty(principal.id, \"Execution principal id\")\n  return Object.freeze({ type: principal.type, id: principal.id })\n}\n\nfunction assertNonEmpty(value: string, label: string): void {\n  if (!value.trim()) {\n    throw new Error(`[Sixb] ${label} must not be empty.`)\n  }\n}\n"
+  ],
+  "mappings": ";;;;;;;AAAA;AAgBO,SAAS,2BAA2B,CAAC,OAMzB;AAAA,EACjB,MAAM,YAAY,uBAAuB;AAAA,IACvC,WAAW,MAAM;AAAA,IACjB,WAAW,MAAM;AAAA,IACjB,eAAe,MAAM;AAAA,IACrB,aAAa,wBAAwB,MAAM,QAAQ,SAAS;AAAA,EAC9D,CAAC;AAAA,EAED,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,oCAAoC;AAAA,MACjD,WAAW,MAAM;AAAA,MACjB,SAAS,MAAM;AAAA,SACX,MAAM,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,MAAM,WAAW;AAAA,IAC3E,CAAC;AAAA,EACH,CAAC;AAAA;AAGI,SAAS,0BAA0B,CAAC,OAIxB;AAAA,EACjB,OAAO,OAAO,OAAO;AAAA,IACnB,WAAW,uBAAuB,KAAK;AAAA,IACvC,eAAe,mCAAmC,MAAM,SAAS;AAAA,EACnE,CAAC;AAAA;AA6CI,SAAS,kBAAkB,CAAC,OAMhB;AAAA,EACjB,MAAM,UAAU,MAAM,UAAU,eAAe,MAAM,OAAO,IAAI;AAAA,EAChE,MAAM,YAAY,MAAM,aAAa,gBAAgB,WAAW;AAAA,EAChE,MAAM,YAAY,uBAAuB;AAAA,IACvC,WAAW,MAAM;AAAA,IACjB;AAAA,IACA,eAAe,MAAM,iBAAiB,oBAAoB,WAAW;AAAA,OACjE,YAAY,YAAY,CAAC,IAAI,EAAE,aAAa,wBAAwB,QAAQ,SAAS,EAAE;AAAA,IAC3F,aAAa,MAAM;AAAA,EACrB,CAAC;AAAA,EACD,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,UACX,oCAAoC,EAAE,WAAW,MAAM,WAAW,QAAQ,CAAC,IAC3E,mCAAmC,MAAM,SAAS;AAAA,EACxD,CAAC;AAAA;AAGH,SAAS,cAAc,CAAC,SAAqD;AAAA,EAC3E,OAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,UAAU,QAAQ;AAAA,IAClB,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,EAClB;AAAA;AAGF,SAAS,sBAAsB,CAAC,OAMX;AAAA,EACnB,eAAe,MAAM,WAAW,sBAAsB;AAAA,EACtD,eAAe,MAAM,WAAW,sBAAsB;AAAA,EACtD,eAAe,MAAM,eAAe,0BAA0B;AAAA,EAC9D,MAAM,KAAK,MAAM,eAAe,QAAQ,WAAW;AAAA,EACnD,eAAe,IAAI,cAAc;AAAA,EACjC,OAAO,gBAAgB;AAAA,IACrB;AAAA,IACA,WAAW,MAAM;AAAA,OACb,MAAM,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,MAAM,YAAY;AAAA,IAC5E,UAAU,OAAO,OAAO,EAAE,MAAM,WAAW,WAAW,MAAM,UAAU,CAAC;AAAA,IACvE,QAAQ,OAAO,OAAO,EAAE,MAAM,QAAQ,WAAW,MAAM,UAAU,CAAC;AAAA,IAClE,eAAe,MAAM;AAAA,EACvB,CAAC;AAAA;AAGH,SAAS,eAAe,CAAC,WAA+C;AAAA,EACtE,eAAe,UAAU,IAAI,cAAc;AAAA,EAC3C,eAAe,UAAU,WAAW,sBAAsB;AAAA,EAC1D,eAAe,UAAU,eAAe,0BAA0B;AAAA,EAClE,OAAO,OAAO,OAAO,SAAS;AAAA;AA+BhC,SAAS,uBAAuB,CAC9B,WACuB;AAAA,EACvB,IAAI,UAAU,SAAS,UAAU,UAAU,SAAS,kBAAkB;AAAA,IACpE,MAAM,IAAI,MAAM,0BAA0B,UAAU,0CAA0C;AAAA,EAChG;AAAA,EACA,eAAe,UAAU,IAAI,wBAAwB;AAAA,EACrD,OAAO,OAAO,OAAO,EAAE,MAAM,UAAU,MAAM,IAAI,UAAU,GAAG,CAAC;AAAA;AAGjE,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,CAAC,MAAM,KAAK,GAAG;AAAA,IACjB,MAAM,IAAI,MAAM,UAAU,0BAA0B;AAAA,EACtD;AAAA;",
+  "debugId": "921D959D4D3E5CA264756E2164756E21",
+  "names": []
+}

package/dist/chunk-zcnhxkvd.js

@@ -0,0 +1,7 @@
+// @bun
+// src/storage/ontology/outbox.ts
+var ONTOLOGY_OUTBOX_FAILURE_CODES = ["event.delivery_failed"];
+
+export { ONTOLOGY_OUTBOX_FAILURE_CODES };
+
+//# debugId=68A4A6A822D3D56964756E2164756E21

package/dist/chunk-zcnhxkvd.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/storage/ontology/outbox.ts"],
+  "sourcesContent": [
+    "import type { SixbErrorCode, SixbFailure } from \"../../errors/types\"\nimport type { OntologyMaterializationEvent } from \"../../materialization/events\"\n\nexport type {\n  OntologyMaterializationEvent,\n  OntologyMaterializationEventDraft,\n} from \"../../materialization/events\"\n\nexport interface OntologyOutboxWrite {\n  /** Providers may index envelope identity fields, but the envelope remains authoritative. */\n  readonly envelope: OntologyMaterializationEvent\n  readonly availableAt: string\n  readonly createdAt: string\n}\n\n/** Error codes a durable ontology outbox delivery can persist. */\nexport const ONTOLOGY_OUTBOX_FAILURE_CODES = [\"event.delivery_failed\"] as const satisfies readonly [\n  SixbErrorCode,\n  ...SixbErrorCode[],\n]\n\nexport type OntologyOutboxFailureCode = (typeof ONTOLOGY_OUTBOX_FAILURE_CODES)[number]\nexport type OntologyOutboxFailure = SixbFailure<OntologyOutboxFailureCode>\n\nexport interface OntologyOutboxRecord {\n  readonly envelope: OntologyMaterializationEvent\n  readonly availableAt: string\n  readonly attempts: number\n  readonly leaseId: string | null\n  readonly leaseExpiresAt: string | null\n  readonly publishedAt: string | null\n  readonly lastFailure: OntologyOutboxFailure | null\n  readonly createdAt: string\n}\n\nexport interface ClaimOntologyOutboxInput {\n  readonly projectId: string\n  readonly now: string\n  readonly limit: number\n  readonly leaseId: string\n  readonly leaseExpiresAt: string\n}\n\nexport interface ClaimedOntologyOutboxRow extends OntologyOutboxRecord {\n  readonly leaseId: string\n  readonly leaseExpiresAt: string\n}\n\nexport interface CompleteOntologyOutboxLeaseInput {\n  readonly projectId: string\n  readonly ids: readonly string[]\n  readonly leaseId: string\n  readonly publishedAt: string\n}\n\nexport interface RescheduleOntologyOutboxLeaseInput {\n  readonly projectId: string\n  readonly ids: readonly string[]\n  readonly leaseId: string\n  readonly availableAt: string\n  /** The delivery failure that caused this retry. Omitted for lifecycle-only rescheduling. */\n  readonly failure?: OntologyOutboxFailure\n}\n\nexport interface PurgePublishedOntologyOutboxInput {\n  readonly projectId: string\n  readonly publishedBefore: string\n  readonly limit: number\n}\n\nexport interface SummarizeOntologyOutboxInput {\n  readonly projectId: string\n}\n\nexport interface OntologyOutboxSummary {\n  readonly pendingCount: number\n  readonly oldestPendingAt: string | null\n  /** Pending rows that have already been claimed at least once. */\n  readonly retryingCount: number\n  readonly maxAttempts: number\n}\n\nexport interface OntologyOutboxStorage {\n  /** Selects each claimed batch deterministically; concurrent publishers may complete out of order. */\n  claim(input: ClaimOntologyOutboxInput): Promise<readonly ClaimedOntologyOutboxRow[]>\n  markPublished(input: CompleteOntologyOutboxLeaseInput): Promise<void>\n  reschedule(input: RescheduleOntologyOutboxLeaseInput): Promise<void>\n  purgePublished(input: PurgePublishedOntologyOutboxInput): Promise<number>\n  summarize(input: SummarizeOntologyOutboxInput): Promise<OntologyOutboxSummary>\n}\n"
+  ],
+  "mappings": ";;AAgBO,IAAM,gCAAgC,CAAC,uBAAuB;",
+  "debugId": "68A4A6A822D3D56964756E2164756E21",
+  "names": []
+}

package/dist/chunk-zpw39qhj.js

@@ -0,0 +1,194 @@
+// @bun
+import {
+  AGENT_RUN_FAILURE_CODES
+} from "./chunk-t0jjkep3.js";
+import {
+  parseSixbFailure
+} from "./chunk-0172wgm9.js";
+import {
+  isJsonValue,
+  isPlainRecord
+} from "./chunk-t8t39h7v.js";
+
+// src/agents/streams.ts
+var AGENT_RUN_STREAM_SCHEMA_VERSION = 1;
+var DEFAULT_AGENT_RUN_STREAM_RETENTION = {
+  maxAgeMs: 2 * 60 * 60 * 1000,
+  maxRecords: 5000
+};
+var AGENT_ACTIVITY_STREAM_SCHEMA_VERSION = 1;
+var AGENT_ACTIVITY_STREAM_ID = "agents.activity";
+var DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION = {
+  maxAgeMs: 24 * 60 * 60 * 1000,
+  maxRecords: 1e4
+};
+function agentActivityStreamDefinition() {
+  return {
+    id: AGENT_ACTIVITY_STREAM_ID,
+    retention: DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION
+  };
+}
+function agentRunActivityEvent(run, occurredAt = new Date) {
+  return {
+    schemaVersion: AGENT_ACTIVITY_STREAM_SCHEMA_VERSION,
+    type: "agent.run.activity",
+    projectId: run.projectId,
+    runId: run.id,
+    threadId: run.threadId,
+    agentId: run.agentId,
+    status: run.status,
+    attempt: run.attempt,
+    occurredAt: occurredAt.toISOString()
+  };
+}
+function isAgentRunActivityEvent(value) {
+  return isPlainRecord(value) && value.schemaVersion === AGENT_ACTIVITY_STREAM_SCHEMA_VERSION && value.type === "agent.run.activity" && typeof value.projectId === "string" && typeof value.runId === "string" && typeof value.threadId === "string" && typeof value.agentId === "string" && isAgentRunStatus(value.status) && typeof value.attempt === "number" && Number.isFinite(value.attempt) && typeof value.occurredAt === "string";
+}
+async function publishAgentRunActivity(broker, run) {
+  const event = agentRunActivityEvent(run);
+  await broker.ensureStream({
+    projectId: run.projectId,
+    stream: agentActivityStreamDefinition()
+  });
+  await broker.append({
+    projectId: run.projectId,
+    streamId: AGENT_ACTIVITY_STREAM_ID,
+    records: [
+      {
+        name: event.type,
+        key: event.threadId,
+        payload: event,
+        idempotencyKey: `${event.runId}:${event.attempt}:${event.status}`
+      }
+    ]
+  });
+}
+function agentRunStreamId(runId) {
+  return `agents.runs.${runId}`;
+}
+function agentRunStreamDefinition(runId) {
+  return {
+    id: agentRunStreamId(runId),
+    retention: DEFAULT_AGENT_RUN_STREAM_RETENTION
+  };
+}
+function agentRunControlStreamId(runId) {
+  return `agents.runs.${runId}.control`;
+}
+var AGENT_RUN_CANCEL_RECORD = "agent.run.cancel";
+var AGENT_RUN_CONTROL_RETENTION = { maxAgeMs: 30 * 60 * 1000, maxRecords: 16 };
+function agentRunControlStreamDefinition(runId) {
+  return { id: agentRunControlStreamId(runId), retention: AGENT_RUN_CONTROL_RETENTION };
+}
+async function publishAgentRunCancel(broker, params) {
+  await broker.ensureStream({
+    projectId: params.projectId,
+    stream: agentRunControlStreamDefinition(params.runId)
+  });
+  await broker.append({
+    projectId: params.projectId,
+    streamId: agentRunControlStreamId(params.runId),
+    records: [
+      { name: AGENT_RUN_CANCEL_RECORD, key: params.runId, payload: { runId: params.runId } }
+    ]
+  });
+}
+async function subscribeAgentRunCancel(broker, params, onCancel) {
+  await broker.ensureStream({
+    projectId: params.projectId,
+    stream: agentRunControlStreamDefinition(params.runId)
+  });
+  return broker.subscribe({
+    projectId: params.projectId,
+    streamId: agentRunControlStreamId(params.runId),
+    from: "earliest",
+    names: [AGENT_RUN_CANCEL_RECORD]
+  }, () => onCancel());
+}
+function agentRunFinishedEvent(run, occurredAt = new Date) {
+  if (run.status === "queued" || run.status === "running") {
+    throw new Error(`[Sixb] Agent run '${run.id}' is not terminal (status '${run.status}'), so it has no finished event.`);
+  }
+  return {
+    schemaVersion: AGENT_RUN_STREAM_SCHEMA_VERSION,
+    type: "agent.run.finished",
+    projectId: run.projectId,
+    runId: run.id,
+    threadId: run.threadId,
+    agentId: run.agentId,
+    attempt: run.attempt,
+    status: run.status,
+    ...run.finishReason === undefined ? {} : { finishReason: run.finishReason },
+    ...run.error === undefined ? {} : { error: run.error },
+    occurredAt: occurredAt.toISOString()
+  };
+}
+function isAgentRunStreamEvent(value) {
+  if (!isPlainRecord(value) || value.schemaVersion !== AGENT_RUN_STREAM_SCHEMA_VERSION || typeof value.projectId !== "string" || typeof value.runId !== "string" || typeof value.threadId !== "string" || typeof value.agentId !== "string" || typeof value.attempt !== "number" || !Number.isFinite(value.attempt) || typeof value.occurredAt !== "string" || typeof value.type !== "string") {
+    return false;
+  }
+  switch (value.type) {
+    case "agent.run.started":
+      return value.modelId === undefined || typeof value.modelId === "string";
+    case "agent.ui.chunk":
+      return Number.isInteger(value.chunkIndex) && Object.hasOwn(value, "chunk") && isJsonValue(value.chunk);
+    case "agent.message.finalized":
+      return typeof value.messageId === "string";
+    case "agent.run.finished":
+      return isTerminalAgentRunStatus(value.status) && (value.finishReason === undefined || typeof value.finishReason === "string") && (value.error === undefined || isAgentRunFailure(value.error));
+    default:
+      return false;
+  }
+}
+function isTerminalAgentRunStatus(value) {
+  return value === "succeeded" || value === "failed" || value === "cancelled";
+}
+function isAgentRunStatus(value) {
+  return value === "queued" || value === "running" || isTerminalAgentRunStatus(value);
+}
+function isAgentRunFailure(value) {
+  if (!isPlainRecord(value))
+    return false;
+  try {
+    parseSixbFailure(value, AGENT_RUN_FAILURE_CODES);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function agentRunStreamIdempotencyKey(event) {
+  switch (event.type) {
+    case "agent.run.started":
+      return `${event.runId}:${event.attempt}:started`;
+    case "agent.ui.chunk":
+      return `${event.runId}:${event.attempt}:chunk:${event.chunkIndex}`;
+    case "agent.message.finalized":
+      return `${event.runId}:${event.attempt}:message:${event.messageId}:finalized`;
+    case "agent.run.finished":
+      return `${event.runId}:${event.attempt}:finished:${event.status}`;
+  }
+}
+async function publishAgentRunFinished(broker, run) {
+  const event = agentRunFinishedEvent(run);
+  await broker.ensureStream({
+    projectId: run.projectId,
+    stream: agentRunStreamDefinition(run.id)
+  });
+  await broker.append({
+    projectId: run.projectId,
+    streamId: agentRunStreamId(run.id),
+    records: [
+      {
+        name: event.type,
+        key: event.runId,
+        payload: JSON.parse(JSON.stringify(event)),
+        idempotencyKey: agentRunStreamIdempotencyKey(event)
+      }
+    ]
+  });
+  await publishAgentRunActivity(broker, run);
+}
+
+export { AGENT_RUN_STREAM_SCHEMA_VERSION, DEFAULT_AGENT_RUN_STREAM_RETENTION, AGENT_ACTIVITY_STREAM_SCHEMA_VERSION, AGENT_ACTIVITY_STREAM_ID, DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION, agentActivityStreamDefinition, agentRunActivityEvent, isAgentRunActivityEvent, publishAgentRunActivity, agentRunStreamId, agentRunStreamDefinition, agentRunControlStreamId, AGENT_RUN_CANCEL_RECORD, agentRunControlStreamDefinition, publishAgentRunCancel, subscribeAgentRunCancel, agentRunFinishedEvent, isAgentRunStreamEvent, agentRunStreamIdempotencyKey, publishAgentRunFinished };
+
+//# debugId=4F8D3EDFA7A2B1D064756E2164756E21

package/dist/chunk-zpw39qhj.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/agents/streams.ts"],
+  "sourcesContent": [
+    "import type { Broker, BrokerStreamDefinition } from \"../broker\"\nimport { parseSixbFailure } from \"../errors/internal\"\nimport type { SixbFailure } from \"../errors/types\"\nimport { isJsonValue, isPlainRecord, type JsonValue } from \"../json\"\nimport {\n  AGENT_RUN_FAILURE_CODES,\n  type AgentRunFailureCode,\n  type AgentRunRecord,\n} from \"../storage/agents/types\"\n\nexport const AGENT_RUN_STREAM_SCHEMA_VERSION = 1 as const\nexport const DEFAULT_AGENT_RUN_STREAM_RETENTION = {\n  maxAgeMs: 2 * 60 * 60 * 1000, // 2 hours\n  maxRecords: 5_000,\n} as const\n\nexport const AGENT_ACTIVITY_STREAM_SCHEMA_VERSION = 1 as const\nexport const AGENT_ACTIVITY_STREAM_ID = \"agents.activity\" as const\nexport const DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION = {\n  maxAgeMs: 24 * 60 * 60 * 1000, // 24 hours\n  maxRecords: 10_000,\n} as const\n\nexport interface AgentRunActivityEvent {\n  readonly schemaVersion: typeof AGENT_ACTIVITY_STREAM_SCHEMA_VERSION\n  readonly type: \"agent.run.activity\"\n  readonly projectId: string\n  readonly runId: string\n  readonly threadId: string\n  readonly agentId: string\n  readonly status: AgentRunRecord[\"status\"]\n  readonly attempt: number\n  readonly occurredAt: string\n}\n\nexport function agentActivityStreamDefinition(): BrokerStreamDefinition {\n  return {\n    id: AGENT_ACTIVITY_STREAM_ID,\n    retention: DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION,\n  }\n}\n\nexport function agentRunActivityEvent(\n  run: AgentRunRecord,\n  occurredAt: Date = new Date()\n): AgentRunActivityEvent {\n  return {\n    schemaVersion: AGENT_ACTIVITY_STREAM_SCHEMA_VERSION,\n    type: \"agent.run.activity\",\n    projectId: run.projectId,\n    runId: run.id,\n    threadId: run.threadId,\n    agentId: run.agentId,\n    status: run.status,\n    attempt: run.attempt,\n    occurredAt: occurredAt.toISOString(),\n  }\n}\n\nexport function isAgentRunActivityEvent(value: unknown): value is AgentRunActivityEvent {\n  return (\n    isPlainRecord(value) &&\n    value.schemaVersion === AGENT_ACTIVITY_STREAM_SCHEMA_VERSION &&\n    value.type === \"agent.run.activity\" &&\n    typeof value.projectId === \"string\" &&\n    typeof value.runId === \"string\" &&\n    typeof value.threadId === \"string\" &&\n    typeof value.agentId === \"string\" &&\n    isAgentRunStatus(value.status) &&\n    typeof value.attempt === \"number\" &&\n    Number.isFinite(value.attempt) &&\n    typeof value.occurredAt === \"string\"\n  )\n}\n\nexport async function publishAgentRunActivity(broker: Broker, run: AgentRunRecord): Promise<void> {\n  const event = agentRunActivityEvent(run)\n  await broker.ensureStream({\n    projectId: run.projectId,\n    stream: agentActivityStreamDefinition(),\n  })\n  await broker.append({\n    projectId: run.projectId,\n    streamId: AGENT_ACTIVITY_STREAM_ID,\n    records: [\n      {\n        name: event.type,\n        key: event.threadId,\n        // The event is composed only of validated JSON primitives.\n        payload: event as unknown as JsonValue,\n        idempotencyKey: `${event.runId}:${event.attempt}:${event.status}`,\n      },\n    ],\n  })\n}\n\nexport type AgentRunStreamId = `agents.runs.${string}`\n\nexport function agentRunStreamId(runId: string): AgentRunStreamId {\n  return `agents.runs.${runId}`\n}\n\nexport function agentRunStreamDefinition(runId: string): BrokerStreamDefinition {\n  return {\n    id: agentRunStreamId(runId),\n    retention: DEFAULT_AGENT_RUN_STREAM_RETENTION,\n  }\n}\n\ninterface AgentRunStreamEventBase {\n  readonly schemaVersion: typeof AGENT_RUN_STREAM_SCHEMA_VERSION\n  readonly projectId: string\n  readonly runId: string\n  readonly threadId: string\n  readonly agentId: string\n  readonly attempt: number\n  readonly occurredAt: string\n}\n\n// ── Control stream (worker-inbound) ─────────────────────────────────────────────────────────────\n//\n// A per-run channel the API layer publishes to and the worker subscribes to — the reverse direction\n// of the event stream above. It carries only a cancel signal, and is addressed by `runId` (not a run\n// record), so a cancel works even before the worker has reserved the run. Kept separate from the\n// event stream so control records never reach the browser client.\n\nexport type AgentRunControlStreamId = `agents.runs.${string}.control`\n\nexport function agentRunControlStreamId(runId: string): AgentRunControlStreamId {\n  return `agents.runs.${runId}.control`\n}\n\n/** The only control record: a request to stop the run. */\nexport const AGENT_RUN_CANCEL_RECORD = \"agent.run.cancel\"\n\n// A cancel only needs to outlive the queue wait plus one turn, so retention is short and tiny.\nconst AGENT_RUN_CONTROL_RETENTION = { maxAgeMs: 30 * 60 * 1000, maxRecords: 16 } as const\n\nexport function agentRunControlStreamDefinition(runId: string): BrokerStreamDefinition {\n  return { id: agentRunControlStreamId(runId), retention: AGENT_RUN_CONTROL_RETENTION }\n}\n\n/**\n * Signal a run to stop. Publishing is addressed by `runId`, so it works whether the run is queued,\n * reserved, or being drained — the worker picks the record up when it subscribes.\n */\nexport async function publishAgentRunCancel(\n  broker: Broker,\n  params: { readonly projectId: string; readonly runId: string }\n): Promise<void> {\n  await broker.ensureStream({\n    projectId: params.projectId,\n    stream: agentRunControlStreamDefinition(params.runId),\n  })\n  await broker.append({\n    projectId: params.projectId,\n    streamId: agentRunControlStreamId(params.runId),\n    records: [\n      { name: AGENT_RUN_CANCEL_RECORD, key: params.runId, payload: { runId: params.runId } },\n    ],\n  })\n}\n\n/**\n * Watch a run's control stream and invoke `onCancel` when a cancel arrives. Reads from `earliest` so\n * a cancel published before the worker subscribed (a run stopped while still queued) is still seen.\n * Returns the unsubscribe handle.\n */\nexport async function subscribeAgentRunCancel(\n  broker: Broker,\n  params: { readonly projectId: string; readonly runId: string },\n  onCancel: () => void\n): Promise<() => void> {\n  await broker.ensureStream({\n    projectId: params.projectId,\n    stream: agentRunControlStreamDefinition(params.runId),\n  })\n  return broker.subscribe(\n    {\n      projectId: params.projectId,\n      streamId: agentRunControlStreamId(params.runId),\n      from: \"earliest\",\n      names: [AGENT_RUN_CANCEL_RECORD],\n    },\n    () => onCancel()\n  )\n}\n\n/** Exact portable failure exposed by a terminal Agent run stream event. */\nexport type AgentRunFailure = SixbFailure<AgentRunFailureCode>\n\nexport type AgentRunStreamEvent =\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.run.started\"\n      readonly modelId?: string\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.ui.chunk\"\n      readonly chunkIndex: number\n      readonly chunk: JsonValue\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.message.finalized\"\n      readonly messageId: string\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.run.finished\"\n      readonly status: \"succeeded\" | \"failed\" | \"cancelled\"\n      readonly finishReason?: string\n      readonly error?: AgentRunFailure\n    })\n\nexport type AgentRunFinishedEvent = Extract<AgentRunStreamEvent, { type: \"agent.run.finished\" }>\n\n// ── Record construction ──────────────────────────────────────────────────────────────────────────\n//\n// The wire format of run stream records — event shape, record name/key, and the idempotency-key\n// vocabulary — is owned here so every producer (the worker's stream sink, the server's queued\n// cancellation) shares one definition and cannot drift.\n\n/** Build the terminal stream event for a finished run. Throws if the run is not terminal. */\nexport function agentRunFinishedEvent(\n  run: AgentRunRecord,\n  occurredAt: Date = new Date()\n): AgentRunFinishedEvent {\n  if (run.status === \"queued\" || run.status === \"running\") {\n    throw new Error(\n      `[Sixb] Agent run '${run.id}' is not terminal (status '${run.status}'), so it has no finished event.`\n    )\n  }\n  return {\n    schemaVersion: AGENT_RUN_STREAM_SCHEMA_VERSION,\n    type: \"agent.run.finished\",\n    projectId: run.projectId,\n    runId: run.id,\n    threadId: run.threadId,\n    agentId: run.agentId,\n    attempt: run.attempt,\n    status: run.status,\n    ...(run.finishReason === undefined ? {} : { finishReason: run.finishReason }),\n    ...(run.error === undefined ? {} : { error: run.error }),\n    occurredAt: occurredAt.toISOString(),\n  }\n}\n\n/** Validate an Agent stream payload using the same contract its producers use. */\nexport function isAgentRunStreamEvent(value: unknown): value is AgentRunStreamEvent {\n  if (\n    !isPlainRecord(value) ||\n    value.schemaVersion !== AGENT_RUN_STREAM_SCHEMA_VERSION ||\n    typeof value.projectId !== \"string\" ||\n    typeof value.runId !== \"string\" ||\n    typeof value.threadId !== \"string\" ||\n    typeof value.agentId !== \"string\" ||\n    typeof value.attempt !== \"number\" ||\n    !Number.isFinite(value.attempt) ||\n    typeof value.occurredAt !== \"string\" ||\n    typeof value.type !== \"string\"\n  ) {\n    return false\n  }\n\n  switch (value.type) {\n    case \"agent.run.started\":\n      return value.modelId === undefined || typeof value.modelId === \"string\"\n    case \"agent.ui.chunk\":\n      return (\n        Number.isInteger(value.chunkIndex) &&\n        Object.hasOwn(value, \"chunk\") &&\n        isJsonValue(value.chunk)\n      )\n    case \"agent.message.finalized\":\n      return typeof value.messageId === \"string\"\n    case \"agent.run.finished\":\n      return (\n        isTerminalAgentRunStatus(value.status) &&\n        (value.finishReason === undefined || typeof value.finishReason === \"string\") &&\n        (value.error === undefined || isAgentRunFailure(value.error))\n      )\n    default:\n      return false\n  }\n}\n\nfunction isTerminalAgentRunStatus(value: unknown): value is \"succeeded\" | \"failed\" | \"cancelled\" {\n  return value === \"succeeded\" || value === \"failed\" || value === \"cancelled\"\n}\n\nfunction isAgentRunStatus(value: unknown): value is AgentRunRecord[\"status\"] {\n  return value === \"queued\" || value === \"running\" || isTerminalAgentRunStatus(value)\n}\n\nfunction isAgentRunFailure(value: unknown): value is AgentRunFailure {\n  if (!isPlainRecord(value)) return false\n  try {\n    parseSixbFailure(value, AGENT_RUN_FAILURE_CODES)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/** Single owner of the idempotency-key vocabulary for agent run stream records. */\nexport function agentRunStreamIdempotencyKey(event: AgentRunStreamEvent): string {\n  switch (event.type) {\n    case \"agent.run.started\":\n      return `${event.runId}:${event.attempt}:started`\n    case \"agent.ui.chunk\":\n      return `${event.runId}:${event.attempt}:chunk:${event.chunkIndex}`\n    case \"agent.message.finalized\":\n      return `${event.runId}:${event.attempt}:message:${event.messageId}:finalized`\n    case \"agent.run.finished\":\n      return `${event.runId}:${event.attempt}:finished:${event.status}`\n  }\n}\n\n/**\n * Ensure the run's stream and append its terminal record — mirrors {@link publishAgentRunCancel}.\n * Used where a terminal transition happens outside the worker (e.g. cancelling a queued run).\n */\nexport async function publishAgentRunFinished(broker: Broker, run: AgentRunRecord): Promise<void> {\n  const event = agentRunFinishedEvent(run)\n  await broker.ensureStream({\n    projectId: run.projectId,\n    stream: agentRunStreamDefinition(run.id),\n  })\n  await broker.append({\n    projectId: run.projectId,\n    streamId: agentRunStreamId(run.id),\n    records: [\n      {\n        name: event.type,\n        key: event.runId,\n        // The event is built from JSON primitives only, so the round-trip is a safe narrowing.\n        payload: JSON.parse(JSON.stringify(event)) as JsonValue,\n        idempotencyKey: agentRunStreamIdempotencyKey(event),\n      },\n    ],\n  })\n  await publishAgentRunActivity(broker, run)\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;AAUO,IAAM,kCAAkC;AACxC,IAAM,qCAAqC;AAAA,EAChD,UAAU,IAAI,KAAK,KAAK;AAAA,EACxB,YAAY;AACd;AAEO,IAAM,uCAAuC;AAC7C,IAAM,2BAA2B;AACjC,IAAM,0CAA0C;AAAA,EACrD,UAAU,KAAK,KAAK,KAAK;AAAA,EACzB,YAAY;AACd;AAcO,SAAS,6BAA6B,GAA2B;AAAA,EACtE,OAAO;AAAA,IACL,IAAI;AAAA,IACJ,WAAW;AAAA,EACb;AAAA;AAGK,SAAS,qBAAqB,CACnC,KACA,aAAmB,IAAI,MACA;AAAA,EACvB,OAAO;AAAA,IACL,eAAe;AAAA,IACf,MAAM;AAAA,IACN,WAAW,IAAI;AAAA,IACf,OAAO,IAAI;AAAA,IACX,UAAU,IAAI;AAAA,IACd,SAAS,IAAI;AAAA,IACb,QAAQ,IAAI;AAAA,IACZ,SAAS,IAAI;AAAA,IACb,YAAY,WAAW,YAAY;AAAA,EACrC;AAAA;AAGK,SAAS,uBAAuB,CAAC,OAAgD;AAAA,EACtF,OACE,cAAc,KAAK,KACnB,MAAM,kBAAkB,wCACxB,MAAM,SAAS,wBACf,OAAO,MAAM,cAAc,YAC3B,OAAO,MAAM,UAAU,YACvB,OAAO,MAAM,aAAa,YAC1B,OAAO,MAAM,YAAY,YACzB,iBAAiB,MAAM,MAAM,KAC7B,OAAO,MAAM,YAAY,YACzB,OAAO,SAAS,MAAM,OAAO,KAC7B,OAAO,MAAM,eAAe;AAAA;AAIhC,eAAsB,uBAAuB,CAAC,QAAgB,KAAoC;AAAA,EAChG,MAAM,QAAQ,sBAAsB,GAAG;AAAA,EACvC,MAAM,OAAO,aAAa;AAAA,IACxB,WAAW,IAAI;AAAA,IACf,QAAQ,8BAA8B;AAAA,EACxC,CAAC;AAAA,EACD,MAAM,OAAO,OAAO;AAAA,IAClB,WAAW,IAAI;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,MAAM,MAAM;AAAA,QACZ,KAAK,MAAM;AAAA,QAEX,SAAS;AAAA,QACT,gBAAgB,GAAG,MAAM,SAAS,MAAM,WAAW,MAAM;AAAA,MAC3D;AAAA,IACF;AAAA,EACF,CAAC;AAAA;AAKI,SAAS,gBAAgB,CAAC,OAAiC;AAAA,EAChE,OAAO,eAAe;AAAA;AAGjB,SAAS,wBAAwB,CAAC,OAAuC;AAAA,EAC9E,OAAO;AAAA,IACL,IAAI,iBAAiB,KAAK;AAAA,IAC1B,WAAW;AAAA,EACb;AAAA;AAsBK,SAAS,uBAAuB,CAAC,OAAwC;AAAA,EAC9E,OAAO,eAAe;AAAA;AAIjB,IAAM,0BAA0B;AAGvC,IAAM,8BAA8B,EAAE,UAAU,KAAK,KAAK,MAAM,YAAY,GAAG;AAExE,SAAS,+BAA+B,CAAC,OAAuC;AAAA,EACrF,OAAO,EAAE,IAAI,wBAAwB,KAAK,GAAG,WAAW,4BAA4B;AAAA;AAOtF,eAAsB,qBAAqB,CACzC,QACA,QACe;AAAA,EACf,MAAM,OAAO,aAAa;AAAA,IACxB,WAAW,OAAO;AAAA,IAClB,QAAQ,gCAAgC,OAAO,KAAK;AAAA,EACtD,CAAC;AAAA,EACD,MAAM,OAAO,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,IAClB,UAAU,wBAAwB,OAAO,KAAK;AAAA,IAC9C,SAAS;AAAA,MACP,EAAE,MAAM,yBAAyB,KAAK,OAAO,OAAO,SAAS,EAAE,OAAO,OAAO,MAAM,EAAE;AAAA,IACvF;AAAA,EACF,CAAC;AAAA;AAQH,eAAsB,uBAAuB,CAC3C,QACA,QACA,UACqB;AAAA,EACrB,MAAM,OAAO,aAAa;AAAA,IACxB,WAAW,OAAO;AAAA,IAClB,QAAQ,gCAAgC,OAAO,KAAK;AAAA,EACtD,CAAC;AAAA,EACD,OAAO,OAAO,UACZ;AAAA,IACE,WAAW,OAAO;AAAA,IAClB,UAAU,wBAAwB,OAAO,KAAK;AAAA,IAC9C,MAAM;AAAA,IACN,OAAO,CAAC,uBAAuB;AAAA,EACjC,GACA,MAAM,SAAS,CACjB;AAAA;AAoCK,SAAS,qBAAqB,CACnC,KACA,aAAmB,IAAI,MACA;AAAA,EACvB,IAAI,IAAI,WAAW,YAAY,IAAI,WAAW,WAAW;AAAA,IACvD,MAAM,IAAI,MACR,qBAAqB,IAAI,gCAAgC,IAAI,wCAC/D;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,eAAe;AAAA,IACf,MAAM;AAAA,IACN,WAAW,IAAI;AAAA,IACf,OAAO,IAAI;AAAA,IACX,UAAU,IAAI;AAAA,IACd,SAAS,IAAI;AAAA,IACb,SAAS,IAAI;AAAA,IACb,QAAQ,IAAI;AAAA,OACR,IAAI,iBAAiB,YAAY,CAAC,IAAI,EAAE,cAAc,IAAI,aAAa;AAAA,OACvE,IAAI,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM;AAAA,IACtD,YAAY,WAAW,YAAY;AAAA,EACrC;AAAA;AAIK,SAAS,qBAAqB,CAAC,OAA8C;AAAA,EAClF,IACE,CAAC,cAAc,KAAK,KACpB,MAAM,kBAAkB,mCACxB,OAAO,MAAM,cAAc,YAC3B,OAAO,MAAM,UAAU,YACvB,OAAO,MAAM,aAAa,YAC1B,OAAO,MAAM,YAAY,YACzB,OAAO,MAAM,YAAY,YACzB,CAAC,OAAO,SAAS,MAAM,OAAO,KAC9B,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,SAAS,UACtB;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EAEA,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,MAAM,YAAY,aAAa,OAAO,MAAM,YAAY;AAAA,SAC5D;AAAA,MACH,OACE,OAAO,UAAU,MAAM,UAAU,KACjC,OAAO,OAAO,OAAO,OAAO,KAC5B,YAAY,MAAM,KAAK;AAAA,SAEtB;AAAA,MACH,OAAO,OAAO,MAAM,cAAc;AAAA,SAC/B;AAAA,MACH,OACE,yBAAyB,MAAM,MAAM,MACpC,MAAM,iBAAiB,aAAa,OAAO,MAAM,iBAAiB,cAClE,MAAM,UAAU,aAAa,kBAAkB,MAAM,KAAK;AAAA;AAAA,MAG7D,OAAO;AAAA;AAAA;AAIb,SAAS,wBAAwB,CAAC,OAA+D;AAAA,EAC/F,OAAO,UAAU,eAAe,UAAU,YAAY,UAAU;AAAA;AAGlE,SAAS,gBAAgB,CAAC,OAAmD;AAAA,EAC3E,OAAO,UAAU,YAAY,UAAU,aAAa,yBAAyB,KAAK;AAAA;AAGpF,SAAS,iBAAiB,CAAC,OAA0C;AAAA,EACnE,IAAI,CAAC,cAAc,KAAK;AAAA,IAAG,OAAO;AAAA,EAClC,IAAI;AAAA,IACF,iBAAiB,OAAO,uBAAuB;AAAA,IAC/C,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAKJ,SAAS,4BAA4B,CAAC,OAAoC;AAAA,EAC/E,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM;AAAA,SAC5B;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,iBAAiB,MAAM;AAAA,SACnD;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,mBAAmB,MAAM;AAAA,SACrD;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,oBAAoB,MAAM;AAAA;AAAA;AAQ/D,eAAsB,uBAAuB,CAAC,QAAgB,KAAoC;AAAA,EAChG,MAAM,QAAQ,sBAAsB,GAAG;AAAA,EACvC,MAAM,OAAO,aAAa;AAAA,IACxB,WAAW,IAAI;AAAA,IACf,QAAQ,yBAAyB,IAAI,EAAE;AAAA,EACzC,CAAC;AAAA,EACD,MAAM,OAAO,OAAO;AAAA,IAClB,WAAW,IAAI;AAAA,IACf,UAAU,iBAAiB,IAAI,EAAE;AAAA,IACjC,SAAS;AAAA,MACP;AAAA,QACE,MAAM,MAAM;AAAA,QACZ,KAAK,MAAM;AAAA,QAEX,SAAS,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,QACzC,gBAAgB,6BAA6B,KAAK;AAAA,MACpD;AAAA,IACF;AAAA,EACF,CAAC;AAAA,EACD,MAAM,wBAAwB,QAAQ,GAAG;AAAA;",
+  "debugId": "4F8D3EDFA7A2B1D064756E2164756E21",
+  "names": []
+}

package/dist/chunk-zqqz8052.js

@@ -0,0 +1,3 @@
+// @bun
+
+//# debugId=92619866D6E6BE9764756E2164756E21

package/dist/{storage/projection-runs/lifecycle.js.map → chunk-zqqz8052.js.map}

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "4D890EEDF4DFAB0264756E2164756E21",
+  "debugId": "92619866D6E6BE9764756E2164756E21",
   "names": []
 }

package/dist/{chunk-hz8m927w.js → chunk-zqysyfjt.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   isPlainRecord
-} from "./chunk-be9vm29v.js";
+} from "./chunk-t8t39h7v.js";
 
 // src/blob-storage/derive.ts
 function blobDigestHex(digest) {

package/dist/connectors/builders.d.ts

@@ -1,4 +1,4 @@
-import type { ConnectorAdapter, ConnectorDefinition } from "./types";
+import type { ConnectorAdapter, ConnectorDefinition, OAuthConnectorAdapter } from "./types";
 /**
  * Define a connector instance for an external system.
  *
@@ -6,5 +6,6 @@ import type { ConnectorAdapter, ConnectorDefinition } from "./types";
  * `connectors/` module. Use `await sixb.connector(definition)` at runtime to
  * resolve it to a connected client.
  */
+export declare function defineConnector<TId extends string, TAdapter extends OAuthConnectorAdapter>(id: TId, adapter: TAdapter): ConnectorDefinition<TId, TAdapter>;
 export declare function defineConnector<TId extends string, TAdapter extends ConnectorAdapter>(id: TId, adapter: TAdapter): ConnectorDefinition<TId, TAdapter>;
 //# sourceMappingURL=builders.d.ts.map

package/dist/connectors/builders.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../src/connectors/builders.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAQpE;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,SAAS,MAAM,EAAE,QAAQ,SAAS,gBAAgB,EACnF,EAAE,EAAE,GAAG,EACP,OAAO,EAAE,QAAQ,GAChB,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAapC"}
+{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../src/connectors/builders.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,SAAS,CAAA;AAShB;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,SAAS,MAAM,EAAE,QAAQ,SAAS,qBAAqB,EACxF,EAAE,EAAE,GAAG,EACP,OAAO,EAAE,QAAQ,GAChB,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AACrC,wBAAgB,eAAe,CAAC,GAAG,SAAS,MAAM,EAAE,QAAQ,SAAS,gBAAgB,EACnF,EAAE,EAAE,GAAG,EACP,OAAO,EAAE,QAAQ,GAChB,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA"}

package/dist/connectors/connections/authorizations.d.ts

@@ -0,0 +1,64 @@
+import type { AuthorizablePrincipal } from "../../execution";
+import type { ConnectorAuthorizationRecord, ConnectorConnectionRecord, ConnectorConnectionStorage } from "../../storage";
+import type { ConnectorCredentialProtector } from "../credentials";
+import type { ConnectorDefinition, ConnectorTokenSource, OAuthConnectorAdapter } from "../types";
+import type { CompleteConnectorReauthorizationInput, CompleteNewConnectorAuthorizationInput, ConnectorAuthorizationLifecycle, PrepareConnectorReauthorizationInput, PreparedConnectorReauthorization } from "./request";
+export type OAuthConnectorDefinition = ConnectorDefinition<string, OAuthConnectorAdapter>;
+export interface ConnectorAuthorizationLifecycleOptions {
+    readonly projectId: string;
+    readonly storage: ConnectorConnectionStorage;
+    readonly credentialProtector: ConnectorCredentialProtector;
+    readonly resolveDefinition: (connectorId: string) => OAuthConnectorDefinition;
+    readonly hostSignal: () => AbortSignal;
+    readonly accountSelectionTtlMs: number;
+    readonly credentialMutationLeaseMs: number;
+    readonly providerOperationTimeoutMs: number;
+    readonly refreshSkewMs: number;
+    readonly now: () => Date;
+}
+export interface RevokeConnectorAuthorizationInput {
+    readonly definition: OAuthConnectorDefinition;
+    readonly authorizationId: string;
+    readonly principal: AuthorizablePrincipal;
+}
+export interface ConnectorAuthorizationRevocation {
+    readonly disconnected: readonly ConnectorConnectionRecord[];
+}
+/**
+ * Owns OAuth grants and their encrypted credentials.
+ *
+ * Request authorization and attempt persistence stay in `request.ts`; provider-side mutations are
+ * fenced here through one shared coordinator. The host owns cancellation and exposes its current
+ * signal through a callback, so closing and restarting a host never leaves this lifecycle attached
+ * to a stale controller.
+ */
+export declare class DefaultConnectorAuthorizationLifecycle implements ConnectorAuthorizationLifecycle {
+    private readonly projectId;
+    private readonly storage;
+    private readonly resolveDefinition;
+    private readonly accountSelectionTtlMs;
+    private readonly mutations;
+    private readonly credentials;
+    private readonly tokens;
+    constructor(options: ConnectorAuthorizationLifecycleOptions);
+    prepareReauthorization(input: PrepareConnectorReauthorizationInput): Promise<PreparedConnectorReauthorization>;
+    completeNewAuthorization(input: CompleteNewConnectorAuthorizationInput): Promise<ConnectorAuthorizationRecord>;
+    completeReauthorization(input: CompleteConnectorReauthorizationInput): Promise<ConnectorAuthorizationRecord>;
+    revokeAuthorization(input: RevokeConnectorAuthorizationInput): Promise<ConnectorAuthorizationRevocation>;
+    /** Continues cleanup only after storage has already fenced the authorization from new usage. */
+    continuePendingRevocation(definition: OAuthConnectorDefinition, authorizationId: string): Promise<ConnectorAuthorizationRevocation>;
+    requireStableActiveAuthorization(definition: OAuthConnectorDefinition, authorizationId: string): Promise<ConnectorAuthorizationRecord>;
+    createTokenSource(definition: OAuthConnectorDefinition, authorizationId: string): ConnectorTokenSource;
+    requireAuthorization(connectorId: string, authorizationId: string): Promise<ConnectorAuthorizationRecord>;
+    private revokeAuthorizationRecord;
+    private revokeAbandonedAuthorization;
+    private completeReauthorizationMutation;
+    private exchangeAuthorizationCode;
+    private discoverAccounts;
+    private adapterContext;
+    private authorizationAdapterContext;
+    private definitionFor;
+    private assertRegistered;
+}
+export declare function assertConnectorAuthorizationActor(authorization: ConnectorAuthorizationRecord, principal: AuthorizablePrincipal): void;
+//# sourceMappingURL=authorizations.d.ts.map

package/dist/connectors/connections/authorizations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizations.d.ts","sourceRoot":"","sources":["../../../src/connectors/connections/authorizations.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,KAAK,EACV,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,EAC3B,MAAM,eAAe,CAAA;AACtB,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAA;AAQlE,OAAO,KAAK,EAEV,mBAAmB,EAEnB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,UAAU,CAAA;AAMjB,OAAO,KAAK,EACV,qCAAqC,EACrC,sCAAsC,EACtC,+BAA+B,EAC/B,oCAAoC,EACpC,gCAAgC,EACjC,MAAM,WAAW,CAAA;AAKlB,MAAM,MAAM,wBAAwB,GAAG,mBAAmB,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;AAEzF,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAA;IAC5C,QAAQ,CAAC,mBAAmB,EAAE,4BAA4B,CAAA;IAC1D,QAAQ,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,wBAAwB,CAAA;IAC7E,QAAQ,CAAC,UAAU,EAAE,MAAM,WAAW,CAAA;IACtC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAA;IACtC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAA;IAC1C,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAA;IAC3C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAA;IAC7C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAA;CAC1C;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,YAAY,EAAE,SAAS,yBAAyB,EAAE,CAAA;CAC5D;AAED;;;;;;;GAOG;AACH,qBAAa,sCAAuC,YAAW,+BAA+B;IAC5F,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IACpD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAmD;IACrF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAQ;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwC;IAClE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;gBAEjC,OAAO,EAAE,sCAAsC;IAsCrD,sBAAsB,CAC1B,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,gCAAgC,CAAC;IA+BtC,wBAAwB,CAC5B,KAAK,EAAE,sCAAsC,GAC5C,OAAO,CAAC,4BAA4B,CAAC;IAqFlC,uBAAuB,CAC3B,KAAK,EAAE,qCAAqC,GAC3C,OAAO,CAAC,4BAA4B,CAAC;IAOlC,mBAAmB,CACvB,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,gCAAgC,CAAC;IAY5C,gGAAgG;IAC1F,yBAAyB,CAC7B,UAAU,EAAE,wBAAwB,EACpC,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,gCAAgC,CAAC;IActC,gCAAgC,CACpC,UAAU,EAAE,wBAAwB,EACpC,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,4BAA4B,CAAC;IAKxC,iBAAiB,CACf,UAAU,EAAE,wBAAwB,EACpC,eAAe,EAAE,MAAM,GACtB,oBAAoB;IAKjB,oBAAoB,CACxB,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,4BAA4B,CAAC;YAmB1B,yBAAyB;YA6FzB,4BAA4B;YAuB5B,+BAA+B;YA4G/B,yBAAyB;YAwBzB,gBAAgB;IAoB9B,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,2BAA2B;IAQnC,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,gBAAgB;CAQzB;AAED,wBAAgB,iCAAiC,CAC/C,aAAa,EAAE,4BAA4B,EAC3C,SAAS,EAAE,qBAAqB,GAC/B,IAAI,CAUN"}

package/dist/connectors/connections/capability.d.ts

@@ -0,0 +1,7 @@
+import type { ConnectorConnectionCallbackProcess } from "./contracts";
+import type { ConnectorConnectionsRuntime } from "./execution";
+export declare function registerConnectorConnectionsRuntime(owner: object, runtime: ConnectorConnectionsRuntime): void;
+export declare function getConnectorConnectionsRuntime(owner: object): ConnectorConnectionsRuntime;
+export declare function registerConnectorConnectionCallbackProcess(owner: object, process: ConnectorConnectionCallbackProcess): void;
+export declare function getConnectorConnectionCallbackProcess(owner: object): ConnectorConnectionCallbackProcess;
+//# sourceMappingURL=capability.d.ts.map

package/dist/connectors/connections/capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../../src/connectors/connections/capability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,aAAa,CAAA;AACrE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AAa9D,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,2BAA2B,GACnC,IAAI,CAWN;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,MAAM,GAAG,2BAA2B,CAIzF;AAED,wBAAgB,0CAA0C,CACxD,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,kCAAkC,GAC1C,IAAI,CAWN;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,MAAM,GACZ,kCAAkC,CAIpC"}

package/dist/connectors/connections/command-context.d.ts

@@ -0,0 +1,23 @@
+import type { AuthorizablePrincipal } from "../../execution";
+import type { CreateExecutionInput, ExecutionRecord } from "../../storage/executions";
+export interface ConnectorConnectionCommandActor {
+    readonly principal: AuthorizablePrincipal;
+    readonly credential: {
+        readonly type: "session";
+        readonly id: string;
+    } | {
+        readonly type: "accessToken";
+        readonly id: string;
+    };
+}
+/** Validate and recover the authenticated actor carried by one durable request execution. */
+export declare function requireConnectorConnectionCommandActor(execution: CreateExecutionInput, projectId: string): ConnectorConnectionCommandActor;
+/**
+ * Bind an OAuth callback to the same principal and credential that initiated its attempt.
+ *
+ * The storage error intentionally shares the regular invalid-attempt path: callers must not learn
+ * whether a valid state belongs to another authenticated actor.
+ */
+export declare function assertConnectorAuthorizationAttemptInitiator(execution: ExecutionRecord | null, current: ConnectorConnectionCommandActor): asserts execution is ExecutionRecord;
+export declare function assertConnectorConnectionRunInitiator(execution: ExecutionRecord | null, current: ConnectorConnectionCommandActor, connectorId: string): asserts execution is ExecutionRecord;
+//# sourceMappingURL=command-context.d.ts.map

package/dist/connectors/connections/command-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-context.d.ts","sourceRoot":"","sources":["../../../src/connectors/connections/command-context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAE5D,OAAO,KAAK,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAErF,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAA;IACzC,QAAQ,CAAC,UAAU,EACf;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GACjD;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAC1D;AAED,6FAA6F;AAC7F,wBAAgB,sCAAsC,CACpD,SAAS,EAAE,oBAAoB,EAC/B,SAAS,EAAE,MAAM,GAChB,+BAA+B,CAQjC;AAED;;;;;GAKG;AACH,wBAAgB,4CAA4C,CAC1D,SAAS,EAAE,eAAe,GAAG,IAAI,EACjC,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,SAAS,IAAI,eAAe,CAUtC;AAED,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,eAAe,GAAG,IAAI,EACjC,OAAO,EAAE,+BAA+B,EACxC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,IAAI,eAAe,CAUtC"}