@sixb/core 0.1.10 → 0.1.11

package/dist/actions/index.js

@@ -9,16 +9,16 @@ import {
   createActionReadFacade2,
   ActionRegistry2,
   runActionValidators2
-} from "../chunk-p5vcsw9c.js";
+} from "../chunk-sepyxgpc.js";
 import {
   requestAction3,
   requestActionAndWait2,
   waitForActionRun2
-} from "../chunk-nmbxcaqx.js";
-import"../chunk-g7knyczr.js";
+} from "../chunk-01kj2pbh.js";
+import"../chunk-a0e6x5hd.js";
 import"../chunk-ftv470j8.js";
 import"../chunk-17kfctj6.js";
-import"../chunk-p6a4npdx.js";
+import"../chunk-gqm76kse.js";
 import"../chunk-qf954wje.js";
 import"../chunk-pr2h4bv4.js";
 import"../chunk-8vj0rjgs.js";
@@ -36,7 +36,7 @@ import"../chunk-s3csryxe.js";
 import"../chunk-jgwb25gc.js";
 import"../chunk-93csa55g.js";
 import"../chunk-b19g04jk.js";
-import"../chunk-e0d1rzef.js";
+import"../chunk-jsy70480.js";
 import"../chunk-pqajwytd.js";
 import"../chunk-ap0g1g74.js";
 import"../chunk-653vwrzr.js";

package/dist/agents/index.js

@@ -39,28 +39,28 @@ import {
   runModelLoop2,
   requestAgentRun2,
   retryAgentRun2
-} from "../chunk-5p1v802y.js";
-import"../chunk-5c7ga8zz.js";
+} from "../chunk-gq8vhakp.js";
+import"../chunk-cfvakeax.js";
 import"../chunk-v2vcg0w6.js";
 import"../chunk-awbhdqyc.js";
-import"../chunk-976rxdpx.js";
+import"../chunk-z0s4axeh.js";
 import"../chunk-85cd7e8c.js";
-import"../chunk-b0ec55a1.js";
-import"../chunk-28ja2cjs.js";
+import"../chunk-g91qxjj0.js";
+import"../chunk-d63nnr5b.js";
 import"../chunk-g6cke204.js";
 import"../chunk-0y39rgsb.js";
 import"../chunk-5a4a52tq.js";
 import"../chunk-mrp7k0pw.js";
 import"../chunk-9qsh3p5y.js";
 import"../chunk-860dwwy0.js";
-import"../chunk-p5vcsw9c.js";
-import"../chunk-nmbxcaqx.js";
-import"../chunk-g7knyczr.js";
+import"../chunk-sepyxgpc.js";
+import"../chunk-01kj2pbh.js";
+import"../chunk-a0e6x5hd.js";
 import"../chunk-ftv470j8.js";
 import"../chunk-17kfctj6.js";
 import {
   AGENT_MESSAGE_CONTENT_VERSION2
-} from "../chunk-p6a4npdx.js";
+} from "../chunk-gqm76kse.js";
 import"../chunk-qf954wje.js";
 import {
   ensureManagedAgentExecutionIdentity2,
@@ -84,7 +84,7 @@ import"../chunk-s3csryxe.js";
 import"../chunk-jgwb25gc.js";
 import"../chunk-93csa55g.js";
 import"../chunk-b19g04jk.js";
-import"../chunk-e0d1rzef.js";
+import"../chunk-jsy70480.js";
 import"../chunk-pqajwytd.js";
 import"../chunk-ap0g1g74.js";
 import"../chunk-653vwrzr.js";

package/dist/blob-storage/types.d.ts

@@ -76,6 +76,8 @@ export interface DirectPutBlobUploadSession {
 }
 export interface MultipartBlobUploadSession {
     readonly strategy: "multipart";
+    /** Required upload-response receipt. Omission defaults to "etag" for compatibility. */
+    readonly partReceipt?: "etag" | "none";
     readonly uploadId: string;
     readonly partSizeBytes: number;
     readonly expiresAt: Date;
@@ -99,7 +101,8 @@ export interface SignedBlobUploadPart {
 }
 export interface BlobUploadPart {
     readonly partNumber: number;
-    readonly etag: string;
+    /** Required when the multipart session's partReceipt is "etag" or omitted. */
+    readonly etag?: string;
 }
 export interface CompleteBlobUploadInput {
     readonly uploadId: string;

package/dist/blob-storage/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/blob-storage/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,UAAU,MAAM,EAAE,CAAA;AAE3C;;;;;;;;GAQG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAA;AAEnF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IAE9C,gFAAgF;IAChF,KAAK,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;CACrF;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAA;IACpC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAClC;AAED,MAAM,MAAM,iBAAiB,GAAG,0BAA0B,GAAG,0BAA0B,CAAA;AAEvF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAA;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;CAC3C;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACtE,cAAc,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC7E,cAAc,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChE,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACxD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/blob-storage/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,UAAU,MAAM,EAAE,CAAA;AAE3C;;;;;;;;GAQG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAA;AAEnF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IAE9C,gFAAgF;IAChF,KAAK,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;CACrF;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAA;IACpC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;IAC9B,uFAAuF;IACvF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAClC;AAED,MAAM,MAAM,iBAAiB,GAAG,0BAA0B,GAAG,0BAA0B,CAAA;AAEvF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAA;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;CAC3C;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACtE,cAAc,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC7E,cAAc,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChE,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACxD"}

package/dist/bootstrap/index.js

@@ -6,37 +6,37 @@ import {
   discoverProjectDefinitions2,
   discoverOntologyTypeManifest2,
   generateOntologyTypeManifest2
-} from "../chunk-agbbygvh.js";
-import"../chunk-bn138h9w.js";
-import"../chunk-t1f4f1ve.js";
+} from "../chunk-fh8kgex1.js";
+import"../chunk-x9m9x2eq.js";
+import"../chunk-3ckk0xfj.js";
 import"../chunk-x9v4cx1d.js";
-import"../chunk-rtk71jzp.js";
+import"../chunk-1yefycb1.js";
 import"../chunk-e1c18xjx.js";
 import"../chunk-fb3feg1e.js";
 import"../chunk-dfm066qg.js";
 import"../chunk-r2y23egw.js";
 import"../chunk-skz0hst3.js";
 import"../chunk-9vx5e9g1.js";
-import"../chunk-5p1v802y.js";
-import"../chunk-5c7ga8zz.js";
+import"../chunk-gq8vhakp.js";
+import"../chunk-cfvakeax.js";
 import"../chunk-v2vcg0w6.js";
 import"../chunk-awbhdqyc.js";
-import"../chunk-976rxdpx.js";
+import"../chunk-z0s4axeh.js";
 import"../chunk-85cd7e8c.js";
-import"../chunk-b0ec55a1.js";
-import"../chunk-28ja2cjs.js";
+import"../chunk-g91qxjj0.js";
+import"../chunk-d63nnr5b.js";
 import"../chunk-g6cke204.js";
 import"../chunk-0y39rgsb.js";
 import"../chunk-5a4a52tq.js";
 import"../chunk-mrp7k0pw.js";
 import"../chunk-9qsh3p5y.js";
 import"../chunk-860dwwy0.js";
-import"../chunk-p5vcsw9c.js";
-import"../chunk-nmbxcaqx.js";
-import"../chunk-g7knyczr.js";
+import"../chunk-sepyxgpc.js";
+import"../chunk-01kj2pbh.js";
+import"../chunk-a0e6x5hd.js";
 import"../chunk-ftv470j8.js";
 import"../chunk-17kfctj6.js";
-import"../chunk-p6a4npdx.js";
+import"../chunk-gqm76kse.js";
 import"../chunk-qf954wje.js";
 import"../chunk-pr2h4bv4.js";
 import"../chunk-8vj0rjgs.js";
@@ -54,7 +54,7 @@ import"../chunk-s3csryxe.js";
 import"../chunk-jgwb25gc.js";
 import"../chunk-93csa55g.js";
 import"../chunk-b19g04jk.js";
-import"../chunk-e0d1rzef.js";
+import"../chunk-jsy70480.js";
 import"../chunk-pqajwytd.js";
 import"../chunk-ap0g1g74.js";
 import"../chunk-653vwrzr.js";

package/dist/{chunk-nmbxcaqx.js → chunk-01kj2pbh.js}

@@ -43,7 +43,7 @@ import {
   validateObjectFacetRequests,
   preflightObjectQueryLinks,
   executeObjectQueryLinks2
-} from "./chunk-g7knyczr.js";
+} from "./chunk-a0e6x5hd.js";
 import {
   reportRunFailure2
 } from "./chunk-7apz6hg4.js";

package/dist/{chunk-rtk71jzp.js → chunk-1yefycb1.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-860dwwy0.js";
 import {
   PipelineError2
-} from "./chunk-b0ec55a1.js";
+} from "./chunk-g91qxjj0.js";
 
 // src/lake-storage/sql-transforms.ts
 var SQL_DIALECT = {

package/dist/chunk-2c4j899j.js.map

@@ -3,7 +3,7 @@
   "sources": ["../src/storage/connector-connections/errors.ts", "../src/storage/connector-connections/types.ts"],
   "sourcesContent": [
     "export type ConnectorConnectionStorageErrorCode =\n  | \"attempt_conflict\"\n  | \"attempt_invalid\"\n  | \"run_conflict\"\n  | \"run_invalid\"\n  | \"authorization_conflict\"\n  | \"connection_conflict\"\n  | \"invalid_input\"\n\n/**\n * Storage-provider control signal for atomic conflicts and invalid calls.\n *\n * These codes belong to the provider contract, not `SixbErrorCode`; Core translates errors that\n * cross the connector lifecycle boundary into documented `connector.*` failures.\n */\nexport class ConnectorConnectionStorageError extends Error {\n  readonly code: ConnectorConnectionStorageErrorCode\n\n  constructor(code: ConnectorConnectionStorageErrorCode, message: string) {\n    super(message)\n    this.name = \"ConnectorConnectionStorageError\"\n    this.code = code\n  }\n}\n",
-    "import type { ConnectorAccountCandidate, ConnectorConnectionSelector } from \"../../connectors\"\nimport type { SealedConnectorCredential } from \"../../connectors/credentials\"\nimport type { SixbErrorCode, SixbFailure } from \"../../errors/types\"\nimport type { AuthorizablePrincipal } from \"../../execution\"\n\nexport type {\n  ConnectorConnectionOwner,\n  ConnectorConnectionSelector,\n  ProjectConnectorConnectionOwner,\n} from \"../../connectors\"\n\nexport const CONNECTOR_CONNECTION_RUN_FAILURE_CODES = [\n  \"internal.unexpected\",\n  \"connector.adapter_invalid\",\n  \"connector.authorization_invalid\",\n  \"connector.authorization_required\",\n  \"connector.credentials_unavailable\",\n  \"connector.not_found\",\n  \"connector.operation_conflict\",\n  \"connector.operation_in_progress\",\n  \"connector.provider_failed\",\n  \"connector.provider_unavailable\",\n] as const satisfies readonly [SixbErrorCode, ...SixbErrorCode[]]\n\nexport type ConnectorConnectionRunFailureCode =\n  (typeof CONNECTOR_CONNECTION_RUN_FAILURE_CODES)[number]\nexport type ConnectorConnectionRunFailure = SixbFailure<ConnectorConnectionRunFailureCode>\nexport type ConnectorConnectionRunKind = \"connect\" | \"reauthorize\"\n\ninterface ConnectorConnectionRunBase extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly kind: ConnectorConnectionRunKind\n  /** Durable request execution that initiated and is allowed to manage this run. */\n  readonly initiatedByExecutionId: string\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface ConnectorConnectionRunAwaitingProviderRecord extends ConnectorConnectionRunBase {\n  readonly status: \"waiting\"\n  readonly waitingFor: \"provider_authorization\"\n  readonly expiresAt: Date\n}\n\nexport interface ConnectorConnectionRunProcessingRecord extends ConnectorConnectionRunBase {\n  readonly status: \"running\"\n  /** Fences every callback-side write after the one-shot OAuth attempt was consumed. */\n  readonly processingId: string\n  readonly callbackStartedAt: Date\n  readonly expiresAt: Date\n  /** Internal grant handle, attached as soon as a new authorization is durably persisted. */\n  readonly authorizationId?: string\n}\n\nexport interface ConnectorConnectionRunAwaitingSelectionRecord extends ConnectorConnectionRunBase {\n  readonly status: \"waiting\"\n  readonly waitingFor: \"account_selection\"\n  readonly authorizationId: string\n  readonly expiresAt: Date\n}\n\nexport interface ConnectorConnectionRunSucceededRecord extends ConnectorConnectionRunBase {\n  readonly status: \"succeeded\"\n  readonly authorizationId: string\n  /** Internal handle for a replaced grant whose provider cleanup is still retryable. */\n  readonly cleanupAuthorizationId?: string\n  readonly connections: readonly ConnectorConnectionRecord[]\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunFailedRecord extends ConnectorConnectionRunBase {\n  readonly status: \"failed\"\n  readonly error: ConnectorConnectionRunFailure\n  /** Internal cleanup handle; never serialized by the Headless API. */\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunCancelledRecord extends ConnectorConnectionRunBase {\n  readonly status: \"cancelled\"\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunExpiredRecord extends ConnectorConnectionRunBase {\n  readonly status: \"expired\"\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport type ConnectorConnectionRunRecord =\n  | ConnectorConnectionRunAwaitingProviderRecord\n  | ConnectorConnectionRunProcessingRecord\n  | ConnectorConnectionRunAwaitingSelectionRecord\n  | ConnectorConnectionRunSucceededRecord\n  | ConnectorConnectionRunFailedRecord\n  | ConnectorConnectionRunCancelledRecord\n  | ConnectorConnectionRunExpiredRecord\n\nexport interface CreateConnectorConnectionRunInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly kind: ConnectorConnectionRunKind\n  readonly initiatedByExecutionId: string\n  readonly ttlMs: number\n}\n\nexport interface CreateConnectorConnectionSelectionRunInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly initiatedByExecutionId: string\n  readonly authorizationId: string\n  readonly ttlMs: number\n}\n\nexport interface ClaimConnectorConnectionRunCallbackInput {\n  readonly projectId: string\n  readonly attemptId: string\n  readonly stateHash: string\n  readonly callbackBindingHash: string\n  readonly redirectUri: string\n  readonly processingId: string\n  readonly processingTtlMs: number\n}\n\nexport type ClaimConnectorConnectionRunCallbackResult =\n  | {\n      readonly type: \"claimed\"\n      readonly run: ConnectorConnectionRunProcessingRecord\n      readonly attempt: ConnectorAuthorizationAttemptRecord\n      readonly returnTo: string\n    }\n  | {\n      readonly type: \"expired\"\n      readonly run: ConnectorConnectionRunExpiredRecord\n      readonly returnTo: string\n    }\n\nexport interface WaitForConnectorConnectionRunSelectionInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly processingId: string\n  readonly authorizationId: string\n  readonly expiresAt: Date\n}\n\nexport interface AttachConnectorConnectionRunAuthorizationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly processingId: string\n  readonly authorizationId: string\n}\n\nexport type FinishConnectorConnectionRunInput =\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"succeeded\"\n      readonly authorizationId: string\n      readonly cleanupAuthorizationId?: string\n      readonly connections: readonly ConnectorConnectionRecord[]\n    }\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"failed\"\n      readonly error: ConnectorConnectionRunFailure\n      readonly authorizationId?: string\n    }\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"cancelled\"\n    }\n\nexport interface GetConnectorConnectionRunInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n}\n\nexport interface ConnectorAuthorizationAttemptRecord extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  /** Durable execution that initiated and authorizes completion of this OAuth attempt. */\n  readonly initiatedByExecutionId: string\n  readonly stateHash: string\n  /** Absent when the authorization attempt explicitly disabled PKCE. */\n  readonly codeVerifier?: SealedConnectorCredential\n  readonly redirectUri: string\n  /** Present only for attempts created by the headless connection-run API. */\n  readonly connectionRunId?: string\n  /** Fixed, allowlisted continuation consumed with a headless callback. */\n  readonly returnTo?: string\n  /** Hash of the one-shot browser callback binding secret. */\n  readonly callbackBindingHash?: string\n  readonly reauthorizationId?: string\n  readonly reauthorizationRevision?: number\n  readonly reauthorizationConnectionIds?: readonly string[]\n  readonly createdAt: Date\n  readonly expiresAt: Date\n}\n\nexport interface CreateConnectorAuthorizationAttemptInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly initiatedByExecutionId: string\n  readonly stateHash: string\n  readonly codeVerifier?: SealedConnectorCredential\n  readonly redirectUri: string\n  readonly connectionRunId?: string\n  readonly returnTo?: string\n  readonly callbackBindingHash?: string\n  readonly reauthorizationId?: string\n  readonly reauthorizationRevision?: number\n  readonly reauthorizationConnectionIds?: readonly string[]\n  readonly ttlMs: number\n}\n\n/** Callback proof. The orchestration layer authorizes the returned initiating execution. */\nexport interface ConsumeConnectorAuthorizationAttemptInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly stateHash: string\n  readonly redirectUri: string\n}\n\nexport type ConnectorAuthorizationStatus =\n  | \"pending_selection\"\n  | \"active\"\n  | \"needs_reauthorization\"\n  | \"revocation_pending\"\n  | \"revoked\"\n\nexport type ConnectorCredentialMutationKind = \"refresh\" | \"reauthorization\" | \"revocation\"\nexport type ConnectorCredentialMutationPhase = \"prepared\" | \"executing\" | \"result_staged\"\n\nexport interface ConnectorStagedCredentials {\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n}\n\n/** Durable fencing record for one provider-side OAuth credential mutation. */\nexport interface ConnectorCredentialMutation {\n  readonly id: string\n  readonly kind: ConnectorCredentialMutationKind\n  readonly phase: ConnectorCredentialMutationPhase\n  readonly holderId: string\n  readonly expiresAt: Date\n  readonly deadlineAt: Date\n  readonly expectedConnectionIds?: readonly string[]\n  readonly stagedCredentials?: ConnectorStagedCredentials\n}\n\nexport interface ConnectorAuthorizationRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizedBy: AuthorizablePrincipal\n  /** Removed after provider revocation is confirmed. */\n  readonly credentials?: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n  readonly accounts: readonly ConnectorAccountCandidate[]\n  readonly status: ConnectorAuthorizationStatus\n  /** Storage-authoritative deadline for the first account selection. */\n  readonly selectionExpiresAt?: Date\n  readonly revision: number\n  readonly credentialMutation?: ConnectorCredentialMutation\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface CreateConnectorAuthorizationInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizedBy: AuthorizablePrincipal\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n  readonly accounts: readonly ConnectorAccountCandidate[]\n  readonly selectionTtlMs: number\n}\n\nexport interface InitializeConnectorAuthorizationAccountsInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly accounts: readonly ConnectorAccountCandidate[]\n}\n\nexport interface ClaimConnectorCredentialMutationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly mutation: {\n    readonly id: string\n    readonly kind: ConnectorCredentialMutationKind\n    readonly holderId: string\n  }\n  readonly expectedConnectionIds?: readonly string[]\n  readonly leaseDurationMs: number\n  readonly operationTimeoutMs: number\n}\n\nexport interface ClaimConnectorCredentialMutationResult {\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly disconnected: readonly ConnectorConnectionRecord[]\n}\n\nexport interface ConnectorCredentialMutationFence {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly mutationId: string\n}\n\nexport interface MarkConnectorCredentialMutationExecutingInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface RenewConnectorCredentialMutationInput extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n  readonly leaseDurationMs: number\n}\n\nexport interface StageConnectorCredentialMutationCredentialsInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n}\n\nexport interface StageConnectorCredentialMutationRevocationInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface ReleaseConnectorCredentialMutationInput extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface RecoverExpiredConnectorCredentialMutationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n}\n\nexport interface MarkConnectorAuthorizationNeedsReauthorizationInput\n  extends ConnectorCredentialMutationFence {}\n\nexport interface FinalizeConnectorReauthorizationInput extends ConnectorCredentialMutationFence {\n  readonly accounts: readonly ConnectorAccountCandidate[]\n}\n\nexport type ConnectorConnectionStatus = \"connected\" | \"disconnected\"\n\nexport interface ConnectorConnectionRecord extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly account: ConnectorAccountCandidate\n  readonly status: ConnectorConnectionStatus\n  readonly disconnectedAt?: Date\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface PutConnectorConnectionInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly account: ConnectorAccountCandidate\n  readonly replace: boolean\n}\n\nexport interface PutConnectorConnectionResult {\n  readonly connection: ConnectorConnectionRecord\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly revocationPendingAuthorizationId?: string\n  readonly created: boolean\n  readonly replaced: boolean\n}\n\nexport interface DisconnectConnectorConnectionResult {\n  readonly connection: ConnectorConnectionRecord\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly revocationPendingAuthorizationId?: string\n}\n\nexport interface PutConnectorConnectionFromRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly account: ConnectorAccountCandidate\n  readonly replace: boolean\n}\n\nexport interface PutConnectorConnectionFromRunResult extends PutConnectorConnectionResult {\n  readonly run: ConnectorConnectionRunSucceededRecord\n}\n\nexport interface GetConnectorConnectionInput extends ConnectorConnectionSelector {\n  readonly projectId: string\n  readonly connectorId: string\n}\n\nexport interface ListConnectorConnectionsInput {\n  readonly projectId: string\n  readonly connectorId: string\n}\n\n/** Tenant-scoped identity for one connector authorization. */\nexport interface ConnectorAuthorizationKey {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n}\n\n/** Tenant-scoped identity for one selected connector connection. */\nexport interface ConnectorConnectionKey {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly connectionId: string\n}\n\n/** Persistent contract. Implementations must make every individual mutation atomic. */\nexport interface ConnectorConnectionStorage {\n  readonly durability: \"ephemeral\" | \"durable\"\n\n  createAuthorizationAttempt(\n    input: CreateConnectorAuthorizationAttemptInput\n  ): Promise<ConnectorAuthorizationAttemptRecord>\n  consumeAuthorizationAttempt(\n    input: ConsumeConnectorAuthorizationAttemptInput\n  ): Promise<ConnectorAuthorizationAttemptRecord>\n\n  createConnectionRun(\n    input: CreateConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord>\n  createConnectionSelectionRun(\n    input: CreateConnectorConnectionSelectionRunInput\n  ): Promise<ConnectorConnectionRunAwaitingSelectionRecord>\n  claimConnectionRunCallback(\n    input: ClaimConnectorConnectionRunCallbackInput\n  ): Promise<ClaimConnectorConnectionRunCallbackResult | null>\n  attachConnectionRunAuthorization(\n    input: AttachConnectorConnectionRunAuthorizationInput\n  ): Promise<ConnectorConnectionRunProcessingRecord | null>\n  waitForConnectionRunSelection(\n    input: WaitForConnectorConnectionRunSelectionInput\n  ): Promise<ConnectorConnectionRunAwaitingSelectionRecord | null>\n  finishConnectionRun(\n    input: FinishConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord | null>\n  getConnectionRun(\n    input: GetConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord | null>\n\n  createAuthorization(\n    input: CreateConnectorAuthorizationInput\n  ): Promise<ConnectorAuthorizationRecord>\n  initializeAuthorizationAccounts(\n    input: InitializeConnectorAuthorizationAccountsInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  getAuthorization(input: ConnectorAuthorizationKey): Promise<ConnectorAuthorizationRecord | null>\n  getAuthorizationByConnectionId(\n    input: ConnectorConnectionKey\n  ): Promise<ConnectorAuthorizationRecord | null>\n  claimCredentialMutation(\n    input: ClaimConnectorCredentialMutationInput\n  ): Promise<ClaimConnectorCredentialMutationResult | null>\n  markCredentialMutationExecuting(\n    input: MarkConnectorCredentialMutationExecutingInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  renewCredentialMutation(\n    input: RenewConnectorCredentialMutationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  stageCredentialMutationCredentials(\n    input: StageConnectorCredentialMutationCredentialsInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  stageCredentialMutationRevocation(\n    input: StageConnectorCredentialMutationRevocationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  releaseCredentialMutation(input: ReleaseConnectorCredentialMutationInput): Promise<boolean>\n  /**\n   * Recovers an expired mutation without replaying an unknown provider effect. Prepared work is\n   * released, executing refresh/reauthorization fails closed, revocation stays retryable, and a\n   * staged result remains available for finalization.\n   */\n  recoverExpiredCredentialMutation(\n    input: RecoverExpiredConnectorCredentialMutationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  markNeedsReauthorization(\n    input: MarkConnectorAuthorizationNeedsReauthorizationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeRefresh(\n    input: ConnectorCredentialMutationFence\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeReauthorization(\n    input: FinalizeConnectorReauthorizationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeRevocation(\n    input: ConnectorCredentialMutationFence\n  ): Promise<ConnectorAuthorizationRecord | null>\n\n  putConnection(input: PutConnectorConnectionInput): Promise<PutConnectorConnectionResult>\n  putConnectionFromRun(\n    input: PutConnectorConnectionFromRunInput\n  ): Promise<PutConnectorConnectionFromRunResult>\n  getConnection(input: GetConnectorConnectionInput): Promise<ConnectorConnectionRecord | null>\n  getConnectionById(input: ConnectorConnectionKey): Promise<ConnectorConnectionRecord | null>\n  listConnections(\n    input: ListConnectorConnectionsInput\n  ): Promise<readonly ConnectorConnectionRecord[]>\n  listConnectionsByAuthorization(\n    input: ConnectorAuthorizationKey\n  ): Promise<readonly ConnectorConnectionRecord[]>\n  disconnectConnection(\n    input: ConnectorConnectionKey\n  ): Promise<DisconnectConnectorConnectionResult | null>\n}\n"
+    "import type { ConnectorAccountCandidate, ConnectorConnectionSelector } from \"../../connectors\"\nimport type { SealedConnectorCredential } from \"../../connectors/credentials\"\nimport type { SixbErrorCode, SixbFailure } from \"../../errors/types\"\nimport type { AuthorizablePrincipal } from \"../../execution\"\n\nexport type {\n  ConnectorConnectionOwner,\n  ConnectorConnectionSelector,\n  ProjectConnectorConnectionOwner,\n} from \"../../connectors\"\n\nexport const CONNECTOR_CONNECTION_RUN_FAILURE_CODES = [\n  \"internal.unexpected\",\n  \"connector.adapter_invalid\",\n  \"connector.authorization_invalid\",\n  \"connector.authorization_required\",\n  \"connector.credentials_unavailable\",\n  \"connector.not_found\",\n  \"connector.operation_conflict\",\n  \"connector.operation_in_progress\",\n  \"connector.provider_failed\",\n  \"connector.provider_unavailable\",\n] as const satisfies readonly [SixbErrorCode, ...SixbErrorCode[]]\n\nexport type ConnectorConnectionRunFailureCode =\n  (typeof CONNECTOR_CONNECTION_RUN_FAILURE_CODES)[number]\nexport type ConnectorConnectionRunFailure = SixbFailure<ConnectorConnectionRunFailureCode>\nexport type ConnectorConnectionRunKind = \"connect\" | \"reauthorize\"\n\ninterface ConnectorConnectionRunBase extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly kind: ConnectorConnectionRunKind\n  /** Durable request execution that initiated and is allowed to manage this run. */\n  readonly initiatedByExecutionId: string\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface ConnectorConnectionRunAwaitingProviderRecord extends ConnectorConnectionRunBase {\n  readonly status: \"waiting\"\n  readonly waitingFor: \"provider_authorization\"\n  readonly expiresAt: Date\n}\n\nexport interface ConnectorConnectionRunProcessingRecord extends ConnectorConnectionRunBase {\n  readonly status: \"running\"\n  /** Fences every callback-side write after the one-shot OAuth attempt was consumed. */\n  readonly processingId: string\n  readonly callbackStartedAt: Date\n  readonly expiresAt: Date\n  /** Internal grant handle, attached as soon as a new authorization is durably persisted. */\n  readonly authorizationId?: string\n}\n\nexport interface ConnectorConnectionRunAwaitingSelectionRecord extends ConnectorConnectionRunBase {\n  readonly status: \"waiting\"\n  readonly waitingFor: \"account_selection\"\n  readonly authorizationId: string\n  /** Legacy persistence field; account selection no longer expires. */\n  readonly expiresAt: Date\n}\n\nexport interface ConnectorConnectionRunSucceededRecord extends ConnectorConnectionRunBase {\n  readonly status: \"succeeded\"\n  readonly authorizationId: string\n  /** Internal handle for a replaced grant whose provider cleanup is still retryable. */\n  readonly cleanupAuthorizationId?: string\n  readonly connections: readonly ConnectorConnectionRecord[]\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunFailedRecord extends ConnectorConnectionRunBase {\n  readonly status: \"failed\"\n  readonly error: ConnectorConnectionRunFailure\n  /** Internal cleanup handle; never serialized by the Headless API. */\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunCancelledRecord extends ConnectorConnectionRunBase {\n  readonly status: \"cancelled\"\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunExpiredRecord extends ConnectorConnectionRunBase {\n  readonly status: \"expired\"\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport type ConnectorConnectionRunRecord =\n  | ConnectorConnectionRunAwaitingProviderRecord\n  | ConnectorConnectionRunProcessingRecord\n  | ConnectorConnectionRunAwaitingSelectionRecord\n  | ConnectorConnectionRunSucceededRecord\n  | ConnectorConnectionRunFailedRecord\n  | ConnectorConnectionRunCancelledRecord\n  | ConnectorConnectionRunExpiredRecord\n\nexport interface CreateConnectorConnectionRunInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly kind: ConnectorConnectionRunKind\n  readonly initiatedByExecutionId: string\n  readonly ttlMs: number\n}\n\nexport interface CreateConnectorConnectionSelectionRunInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly initiatedByExecutionId: string\n  readonly authorizationId: string\n  readonly ttlMs: number\n}\n\nexport interface ClaimConnectorConnectionRunCallbackInput {\n  readonly projectId: string\n  readonly attemptId: string\n  readonly stateHash: string\n  readonly callbackBindingHash: string\n  readonly redirectUri: string\n  readonly processingId: string\n  readonly processingTtlMs: number\n}\n\nexport type ClaimConnectorConnectionRunCallbackResult =\n  | {\n      readonly type: \"claimed\"\n      readonly run: ConnectorConnectionRunProcessingRecord\n      readonly attempt: ConnectorAuthorizationAttemptRecord\n      readonly returnTo: string\n    }\n  | {\n      readonly type: \"expired\"\n      readonly run: ConnectorConnectionRunExpiredRecord\n      readonly returnTo: string\n    }\n\nexport interface WaitForConnectorConnectionRunSelectionInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly processingId: string\n  readonly authorizationId: string\n  readonly expiresAt: Date\n}\n\nexport interface AttachConnectorConnectionRunAuthorizationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly processingId: string\n  readonly authorizationId: string\n}\n\nexport type FinishConnectorConnectionRunInput =\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"succeeded\"\n      readonly authorizationId: string\n      readonly cleanupAuthorizationId?: string\n      readonly connections: readonly ConnectorConnectionRecord[]\n    }\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"failed\"\n      readonly error: ConnectorConnectionRunFailure\n      readonly authorizationId?: string\n    }\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"cancelled\"\n    }\n\nexport interface GetConnectorConnectionRunInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n}\n\nexport interface ConnectorAuthorizationAttemptRecord extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  /** Durable execution that initiated and authorizes completion of this OAuth attempt. */\n  readonly initiatedByExecutionId: string\n  readonly stateHash: string\n  /** Absent when the authorization attempt explicitly disabled PKCE. */\n  readonly codeVerifier?: SealedConnectorCredential\n  readonly redirectUri: string\n  /** Present only for attempts created by the headless connection-run API. */\n  readonly connectionRunId?: string\n  /** Fixed, allowlisted continuation consumed with a headless callback. */\n  readonly returnTo?: string\n  /** Hash of the one-shot browser callback binding secret. */\n  readonly callbackBindingHash?: string\n  readonly reauthorizationId?: string\n  readonly reauthorizationRevision?: number\n  readonly reauthorizationConnectionIds?: readonly string[]\n  readonly createdAt: Date\n  readonly expiresAt: Date\n}\n\nexport interface CreateConnectorAuthorizationAttemptInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly initiatedByExecutionId: string\n  readonly stateHash: string\n  readonly codeVerifier?: SealedConnectorCredential\n  readonly redirectUri: string\n  readonly connectionRunId?: string\n  readonly returnTo?: string\n  readonly callbackBindingHash?: string\n  readonly reauthorizationId?: string\n  readonly reauthorizationRevision?: number\n  readonly reauthorizationConnectionIds?: readonly string[]\n  readonly ttlMs: number\n}\n\n/** Callback proof. The orchestration layer authorizes the returned initiating execution. */\nexport interface ConsumeConnectorAuthorizationAttemptInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly stateHash: string\n  readonly redirectUri: string\n}\n\nexport type ConnectorAuthorizationStatus =\n  | \"pending_selection\"\n  | \"active\"\n  | \"needs_reauthorization\"\n  | \"revocation_pending\"\n  | \"revoked\"\n\nexport type ConnectorCredentialMutationKind = \"refresh\" | \"reauthorization\" | \"revocation\"\nexport type ConnectorCredentialMutationPhase = \"prepared\" | \"executing\" | \"result_staged\"\n\nexport interface ConnectorStagedCredentials {\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n}\n\n/** Durable fencing record for one provider-side OAuth credential mutation. */\nexport interface ConnectorCredentialMutation {\n  readonly id: string\n  readonly kind: ConnectorCredentialMutationKind\n  readonly phase: ConnectorCredentialMutationPhase\n  readonly holderId: string\n  readonly expiresAt: Date\n  readonly deadlineAt: Date\n  readonly expectedConnectionIds?: readonly string[]\n  readonly stagedCredentials?: ConnectorStagedCredentials\n}\n\nexport interface ConnectorAuthorizationRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizedBy: AuthorizablePrincipal\n  /** Removed after provider revocation is confirmed. */\n  readonly credentials?: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n  readonly accounts: readonly ConnectorAccountCandidate[]\n  readonly status: ConnectorAuthorizationStatus\n  /** Legacy persistence field; no longer enforced as a selection deadline. */\n  readonly selectionExpiresAt?: Date\n  readonly revision: number\n  readonly credentialMutation?: ConnectorCredentialMutation\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface CreateConnectorAuthorizationInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizedBy: AuthorizablePrincipal\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n  readonly accounts: readonly ConnectorAccountCandidate[]\n  readonly selectionTtlMs: number\n}\n\nexport interface InitializeConnectorAuthorizationAccountsInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly accounts: readonly ConnectorAccountCandidate[]\n}\n\nexport interface ClaimConnectorCredentialMutationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly mutation: {\n    readonly id: string\n    readonly kind: ConnectorCredentialMutationKind\n    readonly holderId: string\n  }\n  readonly expectedConnectionIds?: readonly string[]\n  readonly leaseDurationMs: number\n  readonly operationTimeoutMs: number\n}\n\nexport interface ClaimConnectorCredentialMutationResult {\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly disconnected: readonly ConnectorConnectionRecord[]\n}\n\nexport interface ConnectorCredentialMutationFence {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly mutationId: string\n}\n\nexport interface MarkConnectorCredentialMutationExecutingInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface RenewConnectorCredentialMutationInput extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n  readonly leaseDurationMs: number\n}\n\nexport interface StageConnectorCredentialMutationCredentialsInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n}\n\nexport interface StageConnectorCredentialMutationRevocationInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface ReleaseConnectorCredentialMutationInput extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface RecoverExpiredConnectorCredentialMutationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n}\n\nexport interface MarkConnectorAuthorizationNeedsReauthorizationInput\n  extends ConnectorCredentialMutationFence {}\n\nexport interface FinalizeConnectorReauthorizationInput extends ConnectorCredentialMutationFence {\n  readonly accounts: readonly ConnectorAccountCandidate[]\n}\n\nexport type ConnectorConnectionStatus = \"connected\" | \"disconnected\"\n\nexport interface ConnectorConnectionRecord extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly account: ConnectorAccountCandidate\n  readonly status: ConnectorConnectionStatus\n  readonly disconnectedAt?: Date\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface PutConnectorConnectionInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly account: ConnectorAccountCandidate\n  readonly replace: boolean\n}\n\nexport interface PutConnectorConnectionResult {\n  readonly connection: ConnectorConnectionRecord\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly revocationPendingAuthorizationId?: string\n  readonly created: boolean\n  readonly replaced: boolean\n}\n\nexport interface DisconnectConnectorConnectionResult {\n  readonly connection: ConnectorConnectionRecord\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly revocationPendingAuthorizationId?: string\n}\n\nexport interface PutConnectorConnectionFromRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly account: ConnectorAccountCandidate\n  readonly replace: boolean\n}\n\nexport interface PutConnectorConnectionFromRunResult extends PutConnectorConnectionResult {\n  readonly run: ConnectorConnectionRunSucceededRecord\n}\n\nexport interface GetConnectorConnectionInput extends ConnectorConnectionSelector {\n  readonly projectId: string\n  readonly connectorId: string\n}\n\nexport interface ListConnectorConnectionsInput {\n  readonly projectId: string\n  readonly connectorId: string\n}\n\n/** Tenant-scoped identity for one connector authorization. */\nexport interface ConnectorAuthorizationKey {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n}\n\n/** Tenant-scoped identity for one selected connector connection. */\nexport interface ConnectorConnectionKey {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly connectionId: string\n}\n\n/** Persistent contract. Implementations must make every individual mutation atomic. */\nexport interface ConnectorConnectionStorage {\n  readonly durability: \"ephemeral\" | \"durable\"\n\n  createAuthorizationAttempt(\n    input: CreateConnectorAuthorizationAttemptInput\n  ): Promise<ConnectorAuthorizationAttemptRecord>\n  consumeAuthorizationAttempt(\n    input: ConsumeConnectorAuthorizationAttemptInput\n  ): Promise<ConnectorAuthorizationAttemptRecord>\n\n  createConnectionRun(\n    input: CreateConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord>\n  createConnectionSelectionRun(\n    input: CreateConnectorConnectionSelectionRunInput\n  ): Promise<ConnectorConnectionRunAwaitingSelectionRecord>\n  claimConnectionRunCallback(\n    input: ClaimConnectorConnectionRunCallbackInput\n  ): Promise<ClaimConnectorConnectionRunCallbackResult | null>\n  attachConnectionRunAuthorization(\n    input: AttachConnectorConnectionRunAuthorizationInput\n  ): Promise<ConnectorConnectionRunProcessingRecord | null>\n  waitForConnectionRunSelection(\n    input: WaitForConnectorConnectionRunSelectionInput\n  ): Promise<ConnectorConnectionRunAwaitingSelectionRecord | null>\n  finishConnectionRun(\n    input: FinishConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord | null>\n  listPendingConnectionRuns(\n    input: ListConnectorConnectionsInput\n  ): Promise<readonly ConnectorConnectionRunRecord[]>\n  getConnectionRun(\n    input: GetConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord | null>\n\n  createAuthorization(\n    input: CreateConnectorAuthorizationInput\n  ): Promise<ConnectorAuthorizationRecord>\n  initializeAuthorizationAccounts(\n    input: InitializeConnectorAuthorizationAccountsInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  getAuthorization(input: ConnectorAuthorizationKey): Promise<ConnectorAuthorizationRecord | null>\n  getAuthorizationByConnectionId(\n    input: ConnectorConnectionKey\n  ): Promise<ConnectorAuthorizationRecord | null>\n  claimCredentialMutation(\n    input: ClaimConnectorCredentialMutationInput\n  ): Promise<ClaimConnectorCredentialMutationResult | null>\n  markCredentialMutationExecuting(\n    input: MarkConnectorCredentialMutationExecutingInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  renewCredentialMutation(\n    input: RenewConnectorCredentialMutationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  stageCredentialMutationCredentials(\n    input: StageConnectorCredentialMutationCredentialsInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  stageCredentialMutationRevocation(\n    input: StageConnectorCredentialMutationRevocationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  releaseCredentialMutation(input: ReleaseConnectorCredentialMutationInput): Promise<boolean>\n  /**\n   * Recovers an expired mutation without replaying an unknown provider effect. Prepared work is\n   * released, executing refresh/reauthorization fails closed, revocation stays retryable, and a\n   * staged result remains available for finalization.\n   */\n  recoverExpiredCredentialMutation(\n    input: RecoverExpiredConnectorCredentialMutationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  markNeedsReauthorization(\n    input: MarkConnectorAuthorizationNeedsReauthorizationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeRefresh(\n    input: ConnectorCredentialMutationFence\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeReauthorization(\n    input: FinalizeConnectorReauthorizationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeRevocation(\n    input: ConnectorCredentialMutationFence\n  ): Promise<ConnectorAuthorizationRecord | null>\n\n  putConnection(input: PutConnectorConnectionInput): Promise<PutConnectorConnectionResult>\n  putConnectionFromRun(\n    input: PutConnectorConnectionFromRunInput\n  ): Promise<PutConnectorConnectionFromRunResult>\n  getConnection(input: GetConnectorConnectionInput): Promise<ConnectorConnectionRecord | null>\n  getConnectionById(input: ConnectorConnectionKey): Promise<ConnectorConnectionRecord | null>\n  listConnections(\n    input: ListConnectorConnectionsInput\n  ): Promise<readonly ConnectorConnectionRecord[]>\n  listConnectionsByAuthorization(\n    input: ConnectorAuthorizationKey\n  ): Promise<readonly ConnectorConnectionRecord[]>\n  disconnectConnection(\n    input: ConnectorConnectionKey\n  ): Promise<DisconnectConnectorConnectionResult | null>\n}\n"
   ],
   "mappings": ";;AAeO,MAAM,yCAAwC,MAAM;AAAA,EAChD;AAAA,EAET,WAAW,CAAC,MAA2C,SAAiB;AAAA,IACtE,MAAM,OAAO;AAAA,IACb,KAAK,OAAO;AAAA,IACZ,KAAK,OAAO;AAAA;AAEhB;;;ACZO,IAAM,0CAAyC;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
   "debugId": "B4781D37D7AB95BB64756E2164756E21",

package/dist/{chunk-t1f4f1ve.js → chunk-3ckk0xfj.js}

@@ -15,7 +15,7 @@ import {
   ModelProviderError2,
   UnsupportedModelFeatureError2,
   StructuredOutputError2
-} from "./chunk-e0d1rzef.js";
+} from "./chunk-jsy70480.js";
 import {
   AGENT_REASONING_LEVELS2
 } from "./chunk-7bs40fe1.js";
@@ -28,7 +28,7 @@ import {
   isStepDefinition2,
   isAgentStepDefinition2,
   isInterventionDefinition2
-} from "./chunk-5p1v802y.js";
+} from "./chunk-gq8vhakp.js";
 import {
   isScheduleDefinition2
 } from "./chunk-e1c18xjx.js";

package/dist/{chunk-r7fj830t.js → chunk-4zhmdsx6.js}

@@ -27,28 +27,28 @@ import {
 import {
   RuntimeError2,
   createModelCatalog2
-} from "./chunk-e0d1rzef.js";
+} from "./chunk-jsy70480.js";
 import {
   isMigrationCapableStorage2,
   checkStorageSchema2
-} from "./chunk-p6a4npdx.js";
+} from "./chunk-gqm76kse.js";
 import {
   createAuthorizedObjectReader
-} from "./chunk-nmbxcaqx.js";
+} from "./chunk-01kj2pbh.js";
 import {
   attachSixbErrorReporter2,
   shareSixbErrorReporter2
 } from "./chunk-7apz6hg4.js";
 import {
   ActionRegistry2
-} from "./chunk-p5vcsw9c.js";
+} from "./chunk-sepyxgpc.js";
 import {
   assertDatasetDefinition2
 } from "./chunk-860dwwy0.js";
 import {
   OntologyOutboxDispatcher2,
   createDomainEventService2
-} from "./chunk-nt99sxd6.js";
+} from "./chunk-wf88w4kp.js";
 import {
   validateSchedulesAtStartup2
 } from "./chunk-e1c18xjx.js";
@@ -72,7 +72,7 @@ import {
   validateWorkflowsAtStartup2,
   validateWorkflowAgentStepGroupReferences2,
   createBoundSixb
-} from "./chunk-5p1v802y.js";
+} from "./chunk-gq8vhakp.js";
 import {
   registerConnectorConnectionCallbackProcess
 } from "./chunk-5a4a52tq.js";
@@ -88,7 +88,7 @@ import {
   validateSharesAtStartup,
   discoverOntologySources2,
   discoverProjectDefinitions2
-} from "./chunk-agbbygvh.js";
+} from "./chunk-fh8kgex1.js";
 import {
   LoggingService2
 } from "./chunk-3qms4nax.js";
@@ -97,7 +97,7 @@ import {
 } from "./chunk-1824gssz.js";
 import {
   SyncValidationError2
-} from "./chunk-5c7ga8zz.js";
+} from "./chunk-cfvakeax.js";
 import {
   isOAuthConnectorDefinition2
 } from "./chunk-9x8dybsb.js";
@@ -1486,11 +1486,19 @@ function assertConnectorAuthorizationAttemptInitiator(execution, current) {
   }
 }
 function assertConnectorConnectionRunInitiator(execution, current, connectorId) {
-  const initiating = execution ? connectorConnectionActorFromExecution(execution, execution.projectId) : null;
-  if (!initiating || !sameConnectorConnectionCommandActor(initiating, current)) {
+  if (!isConnectorConnectionRunInitiator(execution, current)) {
     throw new AuthorizationError2(`connection-run:connector:${connectorId}`, "[Sixb] This connector connection run can only be accessed by its initiating actor.");
   }
 }
+function isConnectorConnectionRunInitiator(execution, current) {
+  const initiating = execution ? connectorConnectionActorFromExecution(execution, execution.projectId) : null;
+  if (!initiating)
+    return false;
+  if (initiating.principal.type === "user" && current.principal.type === "user" && initiating.credential.type === "session" && current.credential.type === "session") {
+    return initiating.principal.id === current.principal.id;
+  }
+  return sameConnectorConnectionCommandActor(initiating, current);
+}
 function connectorConnectionActorFromExecution(execution, projectId) {
   const authorization = execution.authorizationRef;
   if (execution.projectId !== projectId || execution.executor.type !== "request" || execution.source.type !== "http" || execution.executor.requestId !== execution.source.requestId || authorization.type !== "principal" || authorization.credential === undefined || execution.requestedBy?.type !== authorization.principal.type || execution.requestedBy.id !== authorization.principal.id) {
@@ -1893,6 +1901,23 @@ class ConnectorConnectionRunService {
       return { runId: failed.id, connectorId: failed.connectorId, returnTo };
     }
   }
+  async listPending(command, connectorId) {
+    const actor = requireConnectorConnectionCommandActor(command.execution, this.projectId);
+    const candidates = await withConnectorStorageBoundary("Pending connector connection runs could not be read.", () => this.connectionStorage.listPendingConnectionRuns({ projectId: this.projectId, connectorId }));
+    const runs = [];
+    for (const candidate of candidates) {
+      const initiating = await withConnectorStorageBoundary("Connector connection run initiating execution could not be read.", () => this.storage.executions.getById({
+        projectId: this.projectId,
+        id: candidate.initiatedByExecutionId
+      }));
+      if (!isConnectorConnectionRunInitiator(initiating, actor))
+        continue;
+      const run = await this.get(command, connectorId, candidate.id);
+      if (run && (run.status === "running" || run.status === "waiting" && run.waitingFor === "account_selection"))
+        runs.push(run);
+    }
+    return runs.sort((left, right) => right.createdAt.getTime() - left.createdAt.getTime() || left.id.localeCompare(right.id));
+  }
   async get(command, connectorId, runId) {
     const id = nonblank(runId, "connection run id");
     const run = await this.readRun(connectorId, id);
@@ -2115,8 +2140,7 @@ class ConnectorConnectionRunService {
         ...base,
         status: "waiting",
         waitingFor: "account_selection",
-        accounts: authorization.accounts,
-        expiresAt: run.expiresAt
+        accounts: authorization.accounts
       };
     }
     if (run.status === "succeeded") {
@@ -2160,6 +2184,8 @@ class ConnectorConnectionRunService {
   }
   scheduleRunMaintenance(run, delayMs = run.status === "waiting" || run.status === "running" ? Math.max(1000, run.expiresAt.getTime() - this.now().getTime()) : CLEANUP_RETRY_DELAY_MS) {
     this.cancelRunMaintenance(run.id);
+    if (run.status === "waiting" && run.waitingFor === "account_selection")
+      return;
     const timer = setTimeout(() => void this.maintainRun(run.connectorId, run.id), Math.min(delayMs, MAX_TIMER_DELAY_MS));
     timer.unref?.();
     this.maintenanceTimers.set(run.id, timer);
@@ -2366,6 +2392,10 @@ class ConnectorConnectionService {
       authorizationId: authorization.id
     });
   }
+  listPendingConnectionRuns(command, connectorId) {
+    this.requireOAuthDefinition(connectorId);
+    return this.runs.listPending(command, connectorId);
+  }
   getConnectionRun(command, connectorId, runId) {
     this.requireOAuthDefinition(connectorId);
     return this.runs.get(command, connectorId, runId);
@@ -2699,6 +2729,8 @@ class OntologyMaintenance {
     };
   }
   runNow() {
+    if (this.stopping)
+      return this.stopping;
     this.pass ??= this.runPass().finally(() => {
       this.pass = null;
     });
@@ -2792,10 +2824,11 @@ class OntologyMaintenance {
       this.timer = null;
     }
     const activePass = this.pass ?? Promise.resolve();
-    const stopping = settlesWithin(activePass, this.shutdownTimeoutMs).then((settled) => {
+    const stopping = settlesWithin(activePass, this.shutdownTimeoutMs).then(async (settled) => {
       if (!settled) {
-        this.reportError(new Error(`[Sixb] Ontology maintenance did not stop within ${this.shutdownTimeoutMs}ms.`));
+        this.reportError(new Error(`[Sixb] Ontology maintenance is still stopping after ${this.shutdownTimeoutMs}ms; waiting for active storage operations.`));
       }
+      await activePass;
     });
     this.stopping = stopping.finally(() => {
       this.stopping = null;
@@ -3383,4 +3416,4 @@ async function createSixb2(options) {
 }
 export { WebhookValidationError2, defineWebhook2, webhookConnector2, UnverifiedWebhookError2, resolveWebhookVerification2, warnUnverifiedWebhook2, SixbHost2, createSixb2 };
 
-//# debugId=4CB6C5C3405BADC164756E2164756E21
+//# debugId=D39CD002806200FC64756E2164756E21