@sixb/core 0.1.10 → 0.1.12

package/dist/agents/streams/index.js

@@ -1,5 +1,6 @@
 // @bun
-import"../../chunk-f4w3yp4f.js";
+import"../../chunk-hzw7yv5g.js";
+import"../../chunk-z3y5kg1x.js";
 import {
   AGENT_RUN_STREAM_SCHEMA_VERSION2,
   AGENT_ACTIVITY_STREAM_SCHEMA_VERSION2,
@@ -7,7 +8,7 @@ import {
   isAgentRunActivityEvent2,
   AGENT_COMPACTION_FAILURE_CODES2,
   isAgentRunStreamEvent2
-} from "../../chunk-92vk7gta.js";
+} from "../../chunk-gzt6v1ja.js";
 export {
   AGENT_ACTIVITY_STREAM_ID2 as AGENT_ACTIVITY_STREAM_ID,
   AGENT_ACTIVITY_STREAM_SCHEMA_VERSION2 as AGENT_ACTIVITY_STREAM_SCHEMA_VERSION,
@@ -17,4 +18,4 @@ export {
   isAgentRunStreamEvent2 as isAgentRunStreamEvent
 };
 
-//# debugId=536F9A653654963D64756E2164756E21
+//# debugId=1E1C52FC0FC5043064756E2164756E21

package/dist/agents/streams/index.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "536F9A653654963D64756E2164756E21",
+  "debugId": "1E1C52FC0FC5043064756E2164756E21",
   "names": []
 }

package/dist/agents/streams/internal.js

@@ -1,5 +1,6 @@
 // @bun
-import"../../chunk-f4w3yp4f.js";
+import"../../chunk-hzw7yv5g.js";
+import"../../chunk-z3y5kg1x.js";
 import {
   DEFAULT_AGENT_RUN_STREAM_RETENTION2,
   DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION2,
@@ -17,7 +18,7 @@ import {
   agentRunStreamEventBase2,
   agentRunStreamIdempotencyKey2,
   publishAgentRunFinished2
-} from "../../chunk-92vk7gta.js";
+} from "../../chunk-gzt6v1ja.js";
 export {
   AGENT_RUN_CANCEL_RECORD2 as AGENT_RUN_CANCEL_RECORD,
   DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION2 as DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION,
@@ -37,4 +38,4 @@ export {
   subscribeAgentRunCancel2 as subscribeAgentRunCancel
 };
 
-//# debugId=F1473D6E4FD78FA064756E2164756E21
+//# debugId=76FB451CEEEFC5B564756E2164756E21

package/dist/agents/streams/internal.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "F1473D6E4FD78FA064756E2164756E21",
+  "debugId": "76FB451CEEEFC5B564756E2164756E21",
   "names": []
 }

package/dist/agents/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/agents/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4C,KAAK,SAAS,EAAE,MAAM,SAAS,CAAA;AAClF,OAAO,EAA8C,KAAK,SAAS,EAAE,MAAM,aAAa,CAAA;AAIxF,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAexE,eAAO,MAAM,yBAAyB,qEAM5B,CAAA;AAEV,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CASlF;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAS9E;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,IAAI,CAIxF;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAa5E;AAED,wBAAgB,iCAAiC,CAAC,MAAM,SAAS,oBAAoB,EACnF,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,MAAM,CASR;AAED,+FAA+F;AAC/F,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,OAAO,EACd,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,GAC7C,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAwB3B;AAkFD,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,SAAS,mBAAmB,EAAE,GACpC,IAAI,CAoBN"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/agents/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4C,KAAK,SAAS,EAAE,MAAM,SAAS,CAAA;AAClF,OAAO,EAA8C,KAAK,SAAS,EAAE,MAAM,aAAa,CAAA;AAKxF,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAGxE,eAAO,MAAM,yBAAyB,qEAM5B,CAAA;AAEV,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CASlF;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAS9E;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,IAAI,CAIxF;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAa5E;AAED,wBAAgB,iCAAiC,CAAC,MAAM,SAAS,oBAAoB,EACnF,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,MAAM,CASR;AAED,+FAA+F;AAC/F,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,OAAO,EACd,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,GAC7C,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAwB3B;AAQD,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,SAAS,mBAAmB,EAAE,GACpC,IAAI,CAoBN"}

package/dist/auth/index.js

@@ -20,12 +20,14 @@ import {
   AuthRuntime2,
   SYSTEM_PRINCIPAL2,
   principalsEqual2
-} from "../chunk-g00bfdq6.js";
-import"../chunk-f0rwz2vh.js";
-import"../chunk-dz5h08xv.js";
+} from "../chunk-2cxv584m.js";
+import"../chunk-y3ev53cq.js";
+import"../chunk-vpxss818.js";
+import"../chunk-bbaa1fet.js";
 import"../chunk-v4jbb3rs.js";
-import"../chunk-ms2tmn1k.js";
-import"../chunk-f4w3yp4f.js";
+import"../chunk-vsg0g7h9.js";
+import"../chunk-hzw7yv5g.js";
+import"../chunk-z3y5kg1x.js";
 import {
   AuthRuntimeError2,
   DEFAULT_AUTH_SESSION_AUDIENCE2,
@@ -99,4 +101,4 @@ export {
   verifyDoubleSubmitCsrf2 as verifyDoubleSubmitCsrf
 };
 
-//# debugId=D078BC72C2BE5DFB64756E2164756E21
+//# debugId=E832D334BC892EFD64756E2164756E21

package/dist/auth/index.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "D078BC72C2BE5DFB64756E2164756E21",
+  "debugId": "E832D334BC892EFD64756E2164756E21",
   "names": []
 }

package/dist/authorization/index.js

@@ -23,10 +23,11 @@ import {
   canViewProjectionRun2,
   canViewProjection2,
   emptyGrantIndex2
-} from "../chunk-dz5h08xv.js";
+} from "../chunk-bbaa1fet.js";
 import"../chunk-v4jbb3rs.js";
-import"../chunk-ms2tmn1k.js";
-import"../chunk-f4w3yp4f.js";
+import"../chunk-vsg0g7h9.js";
+import"../chunk-hzw7yv5g.js";
+import"../chunk-z3y5kg1x.js";
 export {
   AuthorizationError2 as AuthorizationError,
   assertAuthorized2 as assertAuthorized,
@@ -53,4 +54,4 @@ export {
   resolveRoleGrants2 as resolveRoleGrants
 };
 
-//# debugId=7FAAAF0B80E883C264756E2164756E21
+//# debugId=F33B4C0554A1E2B064756E2164756E21

package/dist/authorization/index.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "7FAAAF0B80E883C264756E2164756E21",
+  "debugId": "F33B4C0554A1E2B064756E2164756E21",
   "names": []
 }

package/dist/blob-storage/types.d.ts

@@ -76,6 +76,8 @@ export interface DirectPutBlobUploadSession {
 }
 export interface MultipartBlobUploadSession {
     readonly strategy: "multipart";
+    /** Required upload-response receipt. Omission defaults to "etag" for compatibility. */
+    readonly partReceipt?: "etag" | "none";
     readonly uploadId: string;
     readonly partSizeBytes: number;
     readonly expiresAt: Date;
@@ -99,7 +101,8 @@ export interface SignedBlobUploadPart {
 }
 export interface BlobUploadPart {
     readonly partNumber: number;
-    readonly etag: string;
+    /** Required when the multipart session's partReceipt is "etag" or omitted. */
+    readonly etag?: string;
 }
 export interface CompleteBlobUploadInput {
     readonly uploadId: string;

package/dist/blob-storage/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/blob-storage/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,UAAU,MAAM,EAAE,CAAA;AAE3C;;;;;;;;GAQG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAA;AAEnF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IAE9C,gFAAgF;IAChF,KAAK,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;CACrF;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAA;IACpC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAClC;AAED,MAAM,MAAM,iBAAiB,GAAG,0BAA0B,GAAG,0BAA0B,CAAA;AAEvF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAA;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;CAC3C;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACtE,cAAc,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC7E,cAAc,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChE,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACxD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/blob-storage/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,UAAU,MAAM,EAAE,CAAA;AAE3C;;;;;;;;GAQG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAA;AAEnF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IAE9C,gFAAgF;IAChF,KAAK,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;CACrF;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAA;IACpC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;IAC9B,uFAAuF;IACvF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAClC;AAED,MAAM,MAAM,iBAAiB,GAAG,0BAA0B,GAAG,0BAA0B,CAAA;AAEvF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAA;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;CAC3C;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACtE,cAAc,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC7E,cAAc,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChE,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACxD"}

package/dist/bootstrap/index.js

@@ -6,72 +6,76 @@ import {
   discoverProjectDefinitions2,
   discoverOntologyTypeManifest2,
   generateOntologyTypeManifest2
-} from "../chunk-agbbygvh.js";
-import"../chunk-bn138h9w.js";
-import"../chunk-t1f4f1ve.js";
+} from "../chunk-xn686q2e.js";
+import"../chunk-t7dzd1tm.js";
+import"../chunk-sfypc7mk.js";
 import"../chunk-x9v4cx1d.js";
-import"../chunk-rtk71jzp.js";
+import"../chunk-3bnt2wna.js";
 import"../chunk-e1c18xjx.js";
 import"../chunk-fb3feg1e.js";
 import"../chunk-dfm066qg.js";
 import"../chunk-r2y23egw.js";
-import"../chunk-skz0hst3.js";
+import"../chunk-7c2g3sz9.js";
+import"../chunk-p6r1ex7t.js";
 import"../chunk-9vx5e9g1.js";
-import"../chunk-5p1v802y.js";
-import"../chunk-5c7ga8zz.js";
-import"../chunk-v2vcg0w6.js";
-import"../chunk-awbhdqyc.js";
-import"../chunk-976rxdpx.js";
+import"../chunk-nzsy3xrp.js";
+import"../chunk-jjwhy3rs.js";
+import"../chunk-xtfryrfb.js";
+import"../chunk-4ph94nhd.js";
+import"../chunk-3ghw2t5q.js";
+import"../chunk-7qnvhtcd.js";
 import"../chunk-85cd7e8c.js";
-import"../chunk-b0ec55a1.js";
-import"../chunk-28ja2cjs.js";
-import"../chunk-g6cke204.js";
-import"../chunk-0y39rgsb.js";
+import"../chunk-bg2bs62d.js";
+import"../chunk-kept9cdd.js";
+import"../chunk-e1f1sqba.js";
+import"../chunk-f85hpqnm.js";
+import"../chunk-5tetw4hn.js";
 import"../chunk-5a4a52tq.js";
-import"../chunk-mrp7k0pw.js";
-import"../chunk-9qsh3p5y.js";
-import"../chunk-860dwwy0.js";
-import"../chunk-p5vcsw9c.js";
-import"../chunk-nmbxcaqx.js";
-import"../chunk-g7knyczr.js";
-import"../chunk-ftv470j8.js";
-import"../chunk-17kfctj6.js";
-import"../chunk-p6a4npdx.js";
+import"../chunk-91kcnbf0.js";
+import"../chunk-rb143ggb.js";
+import"../chunk-cd234ba4.js";
+import"../chunk-qm535afa.js";
+import"../chunk-g50nxqs5.js";
+import"../chunk-6ma8dvzc.js";
+import"../chunk-m7cx05vp.js";
+import"../chunk-0mza4xb2.js";
+import"../chunk-ybhz3j9g.js";
 import"../chunk-qf954wje.js";
-import"../chunk-pr2h4bv4.js";
-import"../chunk-8vj0rjgs.js";
-import"../chunk-gqh45d2n.js";
-import"../chunk-z30bv4ga.js";
+import"../chunk-tg4g4zh0.js";
+import"../chunk-wjffn5m4.js";
+import"../chunk-hkw8rykk.js";
+import"../chunk-yxb4c62x.js";
 import"../chunk-mmagke4x.js";
-import"../chunk-358caqf5.js";
+import"../chunk-bfjv1adk.js";
 import"../chunk-qma80ych.js";
 import"../chunk-br3k6qbf.js";
 import"../chunk-jmfet9r4.js";
-import"../chunk-vsj3mdfj.js";
-import"../chunk-7bs40fe1.js";
-import"../chunk-g53f0e4j.js";
+import"../chunk-fc5zfxy1.js";
+import"../chunk-69266efg.js";
+import"../chunk-xnx96gfy.js";
 import"../chunk-s3csryxe.js";
 import"../chunk-jgwb25gc.js";
-import"../chunk-93csa55g.js";
-import"../chunk-b19g04jk.js";
-import"../chunk-e0d1rzef.js";
+import"../chunk-axndsymr.js";
+import"../chunk-3h7ctayx.js";
+import"../chunk-2h63nrde.js";
 import"../chunk-pqajwytd.js";
-import"../chunk-ap0g1g74.js";
-import"../chunk-653vwrzr.js";
-import"../chunk-c5rkjrgp.js";
-import"../chunk-7apz6hg4.js";
-import"../chunk-72w2pxk7.js";
+import"../chunk-eyjzgav0.js";
+import"../chunk-7ytf06d3.js";
+import"../chunk-bet1rb9h.js";
+import"../chunk-y1ahv8b7.js";
 import"../chunk-39tqv9hz.js";
 import"../chunk-gfdh9kqa.js";
 import"../chunk-wr8qp979.js";
 import"../chunk-dmn70ztd.js";
-import"../chunk-92vk7gta.js";
-import"../chunk-g00bfdq6.js";
-import"../chunk-f0rwz2vh.js";
-import"../chunk-dz5h08xv.js";
+import"../chunk-gzt6v1ja.js";
+import"../chunk-2cxv584m.js";
+import"../chunk-y3ev53cq.js";
+import"../chunk-vpxss818.js";
+import"../chunk-bbaa1fet.js";
 import"../chunk-v4jbb3rs.js";
-import"../chunk-ms2tmn1k.js";
-import"../chunk-f4w3yp4f.js";
+import"../chunk-vsg0g7h9.js";
+import"../chunk-hzw7yv5g.js";
+import"../chunk-z3y5kg1x.js";
 import"../chunk-q5gz3g2j.js";
 export {
   discoverOntologySources2 as discoverOntologySources,
@@ -82,4 +86,4 @@ export {
   withProjectModules2 as withProjectModules
 };
 
-//# debugId=890EEA3B23D91B3664756E2164756E21
+//# debugId=E9301A1804F4CBC964756E2164756E21

package/dist/bootstrap/index.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "890EEA3B23D91B3664756E2164756E21",
+  "debugId": "E9301A1804F4CBC964756E2164756E21",
   "names": []
 }

package/dist/{chunk-17kfctj6.js → chunk-0mza4xb2.js}

@@ -3,10 +3,10 @@ import {
   createTrustedPrimitiveRuntimeAuthorization,
   getAuthorizationRef,
   resolveExecutionScopeAuthorization
-} from "./chunk-dz5h08xv.js";
+} from "./chunk-bbaa1fet.js";
 import {
   ExecutionStorageError2
-} from "./chunk-93csa55g.js";
+} from "./chunk-axndsymr.js";
 
 // src/execution/durable.ts
 import { isDeepStrictEqual } from "util";

package/dist/chunk-2c4j899j.js.map

@@ -3,7 +3,7 @@
   "sources": ["../src/storage/connector-connections/errors.ts", "../src/storage/connector-connections/types.ts"],
   "sourcesContent": [
     "export type ConnectorConnectionStorageErrorCode =\n  | \"attempt_conflict\"\n  | \"attempt_invalid\"\n  | \"run_conflict\"\n  | \"run_invalid\"\n  | \"authorization_conflict\"\n  | \"connection_conflict\"\n  | \"invalid_input\"\n\n/**\n * Storage-provider control signal for atomic conflicts and invalid calls.\n *\n * These codes belong to the provider contract, not `SixbErrorCode`; Core translates errors that\n * cross the connector lifecycle boundary into documented `connector.*` failures.\n */\nexport class ConnectorConnectionStorageError extends Error {\n  readonly code: ConnectorConnectionStorageErrorCode\n\n  constructor(code: ConnectorConnectionStorageErrorCode, message: string) {\n    super(message)\n    this.name = \"ConnectorConnectionStorageError\"\n    this.code = code\n  }\n}\n",
-    "import type { ConnectorAccountCandidate, ConnectorConnectionSelector } from \"../../connectors\"\nimport type { SealedConnectorCredential } from \"../../connectors/credentials\"\nimport type { SixbErrorCode, SixbFailure } from \"../../errors/types\"\nimport type { AuthorizablePrincipal } from \"../../execution\"\n\nexport type {\n  ConnectorConnectionOwner,\n  ConnectorConnectionSelector,\n  ProjectConnectorConnectionOwner,\n} from \"../../connectors\"\n\nexport const CONNECTOR_CONNECTION_RUN_FAILURE_CODES = [\n  \"internal.unexpected\",\n  \"connector.adapter_invalid\",\n  \"connector.authorization_invalid\",\n  \"connector.authorization_required\",\n  \"connector.credentials_unavailable\",\n  \"connector.not_found\",\n  \"connector.operation_conflict\",\n  \"connector.operation_in_progress\",\n  \"connector.provider_failed\",\n  \"connector.provider_unavailable\",\n] as const satisfies readonly [SixbErrorCode, ...SixbErrorCode[]]\n\nexport type ConnectorConnectionRunFailureCode =\n  (typeof CONNECTOR_CONNECTION_RUN_FAILURE_CODES)[number]\nexport type ConnectorConnectionRunFailure = SixbFailure<ConnectorConnectionRunFailureCode>\nexport type ConnectorConnectionRunKind = \"connect\" | \"reauthorize\"\n\ninterface ConnectorConnectionRunBase extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly kind: ConnectorConnectionRunKind\n  /** Durable request execution that initiated and is allowed to manage this run. */\n  readonly initiatedByExecutionId: string\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface ConnectorConnectionRunAwaitingProviderRecord extends ConnectorConnectionRunBase {\n  readonly status: \"waiting\"\n  readonly waitingFor: \"provider_authorization\"\n  readonly expiresAt: Date\n}\n\nexport interface ConnectorConnectionRunProcessingRecord extends ConnectorConnectionRunBase {\n  readonly status: \"running\"\n  /** Fences every callback-side write after the one-shot OAuth attempt was consumed. */\n  readonly processingId: string\n  readonly callbackStartedAt: Date\n  readonly expiresAt: Date\n  /** Internal grant handle, attached as soon as a new authorization is durably persisted. */\n  readonly authorizationId?: string\n}\n\nexport interface ConnectorConnectionRunAwaitingSelectionRecord extends ConnectorConnectionRunBase {\n  readonly status: \"waiting\"\n  readonly waitingFor: \"account_selection\"\n  readonly authorizationId: string\n  readonly expiresAt: Date\n}\n\nexport interface ConnectorConnectionRunSucceededRecord extends ConnectorConnectionRunBase {\n  readonly status: \"succeeded\"\n  readonly authorizationId: string\n  /** Internal handle for a replaced grant whose provider cleanup is still retryable. */\n  readonly cleanupAuthorizationId?: string\n  readonly connections: readonly ConnectorConnectionRecord[]\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunFailedRecord extends ConnectorConnectionRunBase {\n  readonly status: \"failed\"\n  readonly error: ConnectorConnectionRunFailure\n  /** Internal cleanup handle; never serialized by the Headless API. */\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunCancelledRecord extends ConnectorConnectionRunBase {\n  readonly status: \"cancelled\"\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunExpiredRecord extends ConnectorConnectionRunBase {\n  readonly status: \"expired\"\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport type ConnectorConnectionRunRecord =\n  | ConnectorConnectionRunAwaitingProviderRecord\n  | ConnectorConnectionRunProcessingRecord\n  | ConnectorConnectionRunAwaitingSelectionRecord\n  | ConnectorConnectionRunSucceededRecord\n  | ConnectorConnectionRunFailedRecord\n  | ConnectorConnectionRunCancelledRecord\n  | ConnectorConnectionRunExpiredRecord\n\nexport interface CreateConnectorConnectionRunInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly kind: ConnectorConnectionRunKind\n  readonly initiatedByExecutionId: string\n  readonly ttlMs: number\n}\n\nexport interface CreateConnectorConnectionSelectionRunInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly initiatedByExecutionId: string\n  readonly authorizationId: string\n  readonly ttlMs: number\n}\n\nexport interface ClaimConnectorConnectionRunCallbackInput {\n  readonly projectId: string\n  readonly attemptId: string\n  readonly stateHash: string\n  readonly callbackBindingHash: string\n  readonly redirectUri: string\n  readonly processingId: string\n  readonly processingTtlMs: number\n}\n\nexport type ClaimConnectorConnectionRunCallbackResult =\n  | {\n      readonly type: \"claimed\"\n      readonly run: ConnectorConnectionRunProcessingRecord\n      readonly attempt: ConnectorAuthorizationAttemptRecord\n      readonly returnTo: string\n    }\n  | {\n      readonly type: \"expired\"\n      readonly run: ConnectorConnectionRunExpiredRecord\n      readonly returnTo: string\n    }\n\nexport interface WaitForConnectorConnectionRunSelectionInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly processingId: string\n  readonly authorizationId: string\n  readonly expiresAt: Date\n}\n\nexport interface AttachConnectorConnectionRunAuthorizationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly processingId: string\n  readonly authorizationId: string\n}\n\nexport type FinishConnectorConnectionRunInput =\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"succeeded\"\n      readonly authorizationId: string\n      readonly cleanupAuthorizationId?: string\n      readonly connections: readonly ConnectorConnectionRecord[]\n    }\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"failed\"\n      readonly error: ConnectorConnectionRunFailure\n      readonly authorizationId?: string\n    }\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"cancelled\"\n    }\n\nexport interface GetConnectorConnectionRunInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n}\n\nexport interface ConnectorAuthorizationAttemptRecord extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  /** Durable execution that initiated and authorizes completion of this OAuth attempt. */\n  readonly initiatedByExecutionId: string\n  readonly stateHash: string\n  /** Absent when the authorization attempt explicitly disabled PKCE. */\n  readonly codeVerifier?: SealedConnectorCredential\n  readonly redirectUri: string\n  /** Present only for attempts created by the headless connection-run API. */\n  readonly connectionRunId?: string\n  /** Fixed, allowlisted continuation consumed with a headless callback. */\n  readonly returnTo?: string\n  /** Hash of the one-shot browser callback binding secret. */\n  readonly callbackBindingHash?: string\n  readonly reauthorizationId?: string\n  readonly reauthorizationRevision?: number\n  readonly reauthorizationConnectionIds?: readonly string[]\n  readonly createdAt: Date\n  readonly expiresAt: Date\n}\n\nexport interface CreateConnectorAuthorizationAttemptInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly initiatedByExecutionId: string\n  readonly stateHash: string\n  readonly codeVerifier?: SealedConnectorCredential\n  readonly redirectUri: string\n  readonly connectionRunId?: string\n  readonly returnTo?: string\n  readonly callbackBindingHash?: string\n  readonly reauthorizationId?: string\n  readonly reauthorizationRevision?: number\n  readonly reauthorizationConnectionIds?: readonly string[]\n  readonly ttlMs: number\n}\n\n/** Callback proof. The orchestration layer authorizes the returned initiating execution. */\nexport interface ConsumeConnectorAuthorizationAttemptInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly stateHash: string\n  readonly redirectUri: string\n}\n\nexport type ConnectorAuthorizationStatus =\n  | \"pending_selection\"\n  | \"active\"\n  | \"needs_reauthorization\"\n  | \"revocation_pending\"\n  | \"revoked\"\n\nexport type ConnectorCredentialMutationKind = \"refresh\" | \"reauthorization\" | \"revocation\"\nexport type ConnectorCredentialMutationPhase = \"prepared\" | \"executing\" | \"result_staged\"\n\nexport interface ConnectorStagedCredentials {\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n}\n\n/** Durable fencing record for one provider-side OAuth credential mutation. */\nexport interface ConnectorCredentialMutation {\n  readonly id: string\n  readonly kind: ConnectorCredentialMutationKind\n  readonly phase: ConnectorCredentialMutationPhase\n  readonly holderId: string\n  readonly expiresAt: Date\n  readonly deadlineAt: Date\n  readonly expectedConnectionIds?: readonly string[]\n  readonly stagedCredentials?: ConnectorStagedCredentials\n}\n\nexport interface ConnectorAuthorizationRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizedBy: AuthorizablePrincipal\n  /** Removed after provider revocation is confirmed. */\n  readonly credentials?: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n  readonly accounts: readonly ConnectorAccountCandidate[]\n  readonly status: ConnectorAuthorizationStatus\n  /** Storage-authoritative deadline for the first account selection. */\n  readonly selectionExpiresAt?: Date\n  readonly revision: number\n  readonly credentialMutation?: ConnectorCredentialMutation\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface CreateConnectorAuthorizationInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizedBy: AuthorizablePrincipal\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n  readonly accounts: readonly ConnectorAccountCandidate[]\n  readonly selectionTtlMs: number\n}\n\nexport interface InitializeConnectorAuthorizationAccountsInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly accounts: readonly ConnectorAccountCandidate[]\n}\n\nexport interface ClaimConnectorCredentialMutationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly mutation: {\n    readonly id: string\n    readonly kind: ConnectorCredentialMutationKind\n    readonly holderId: string\n  }\n  readonly expectedConnectionIds?: readonly string[]\n  readonly leaseDurationMs: number\n  readonly operationTimeoutMs: number\n}\n\nexport interface ClaimConnectorCredentialMutationResult {\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly disconnected: readonly ConnectorConnectionRecord[]\n}\n\nexport interface ConnectorCredentialMutationFence {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly mutationId: string\n}\n\nexport interface MarkConnectorCredentialMutationExecutingInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface RenewConnectorCredentialMutationInput extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n  readonly leaseDurationMs: number\n}\n\nexport interface StageConnectorCredentialMutationCredentialsInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n}\n\nexport interface StageConnectorCredentialMutationRevocationInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface ReleaseConnectorCredentialMutationInput extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface RecoverExpiredConnectorCredentialMutationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n}\n\nexport interface MarkConnectorAuthorizationNeedsReauthorizationInput\n  extends ConnectorCredentialMutationFence {}\n\nexport interface FinalizeConnectorReauthorizationInput extends ConnectorCredentialMutationFence {\n  readonly accounts: readonly ConnectorAccountCandidate[]\n}\n\nexport type ConnectorConnectionStatus = \"connected\" | \"disconnected\"\n\nexport interface ConnectorConnectionRecord extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly account: ConnectorAccountCandidate\n  readonly status: ConnectorConnectionStatus\n  readonly disconnectedAt?: Date\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface PutConnectorConnectionInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly account: ConnectorAccountCandidate\n  readonly replace: boolean\n}\n\nexport interface PutConnectorConnectionResult {\n  readonly connection: ConnectorConnectionRecord\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly revocationPendingAuthorizationId?: string\n  readonly created: boolean\n  readonly replaced: boolean\n}\n\nexport interface DisconnectConnectorConnectionResult {\n  readonly connection: ConnectorConnectionRecord\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly revocationPendingAuthorizationId?: string\n}\n\nexport interface PutConnectorConnectionFromRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly account: ConnectorAccountCandidate\n  readonly replace: boolean\n}\n\nexport interface PutConnectorConnectionFromRunResult extends PutConnectorConnectionResult {\n  readonly run: ConnectorConnectionRunSucceededRecord\n}\n\nexport interface GetConnectorConnectionInput extends ConnectorConnectionSelector {\n  readonly projectId: string\n  readonly connectorId: string\n}\n\nexport interface ListConnectorConnectionsInput {\n  readonly projectId: string\n  readonly connectorId: string\n}\n\n/** Tenant-scoped identity for one connector authorization. */\nexport interface ConnectorAuthorizationKey {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n}\n\n/** Tenant-scoped identity for one selected connector connection. */\nexport interface ConnectorConnectionKey {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly connectionId: string\n}\n\n/** Persistent contract. Implementations must make every individual mutation atomic. */\nexport interface ConnectorConnectionStorage {\n  readonly durability: \"ephemeral\" | \"durable\"\n\n  createAuthorizationAttempt(\n    input: CreateConnectorAuthorizationAttemptInput\n  ): Promise<ConnectorAuthorizationAttemptRecord>\n  consumeAuthorizationAttempt(\n    input: ConsumeConnectorAuthorizationAttemptInput\n  ): Promise<ConnectorAuthorizationAttemptRecord>\n\n  createConnectionRun(\n    input: CreateConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord>\n  createConnectionSelectionRun(\n    input: CreateConnectorConnectionSelectionRunInput\n  ): Promise<ConnectorConnectionRunAwaitingSelectionRecord>\n  claimConnectionRunCallback(\n    input: ClaimConnectorConnectionRunCallbackInput\n  ): Promise<ClaimConnectorConnectionRunCallbackResult | null>\n  attachConnectionRunAuthorization(\n    input: AttachConnectorConnectionRunAuthorizationInput\n  ): Promise<ConnectorConnectionRunProcessingRecord | null>\n  waitForConnectionRunSelection(\n    input: WaitForConnectorConnectionRunSelectionInput\n  ): Promise<ConnectorConnectionRunAwaitingSelectionRecord | null>\n  finishConnectionRun(\n    input: FinishConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord | null>\n  getConnectionRun(\n    input: GetConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord | null>\n\n  createAuthorization(\n    input: CreateConnectorAuthorizationInput\n  ): Promise<ConnectorAuthorizationRecord>\n  initializeAuthorizationAccounts(\n    input: InitializeConnectorAuthorizationAccountsInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  getAuthorization(input: ConnectorAuthorizationKey): Promise<ConnectorAuthorizationRecord | null>\n  getAuthorizationByConnectionId(\n    input: ConnectorConnectionKey\n  ): Promise<ConnectorAuthorizationRecord | null>\n  claimCredentialMutation(\n    input: ClaimConnectorCredentialMutationInput\n  ): Promise<ClaimConnectorCredentialMutationResult | null>\n  markCredentialMutationExecuting(\n    input: MarkConnectorCredentialMutationExecutingInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  renewCredentialMutation(\n    input: RenewConnectorCredentialMutationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  stageCredentialMutationCredentials(\n    input: StageConnectorCredentialMutationCredentialsInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  stageCredentialMutationRevocation(\n    input: StageConnectorCredentialMutationRevocationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  releaseCredentialMutation(input: ReleaseConnectorCredentialMutationInput): Promise<boolean>\n  /**\n   * Recovers an expired mutation without replaying an unknown provider effect. Prepared work is\n   * released, executing refresh/reauthorization fails closed, revocation stays retryable, and a\n   * staged result remains available for finalization.\n   */\n  recoverExpiredCredentialMutation(\n    input: RecoverExpiredConnectorCredentialMutationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  markNeedsReauthorization(\n    input: MarkConnectorAuthorizationNeedsReauthorizationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeRefresh(\n    input: ConnectorCredentialMutationFence\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeReauthorization(\n    input: FinalizeConnectorReauthorizationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeRevocation(\n    input: ConnectorCredentialMutationFence\n  ): Promise<ConnectorAuthorizationRecord | null>\n\n  putConnection(input: PutConnectorConnectionInput): Promise<PutConnectorConnectionResult>\n  putConnectionFromRun(\n    input: PutConnectorConnectionFromRunInput\n  ): Promise<PutConnectorConnectionFromRunResult>\n  getConnection(input: GetConnectorConnectionInput): Promise<ConnectorConnectionRecord | null>\n  getConnectionById(input: ConnectorConnectionKey): Promise<ConnectorConnectionRecord | null>\n  listConnections(\n    input: ListConnectorConnectionsInput\n  ): Promise<readonly ConnectorConnectionRecord[]>\n  listConnectionsByAuthorization(\n    input: ConnectorAuthorizationKey\n  ): Promise<readonly ConnectorConnectionRecord[]>\n  disconnectConnection(\n    input: ConnectorConnectionKey\n  ): Promise<DisconnectConnectorConnectionResult | null>\n}\n"
+    "import type { ConnectorAccountCandidate, ConnectorConnectionSelector } from \"../../connectors\"\nimport type { SealedConnectorCredential } from \"../../connectors/credentials\"\nimport type { SixbErrorCode, SixbFailure } from \"../../errors/types\"\nimport type { AuthorizablePrincipal } from \"../../execution\"\n\nexport type {\n  ConnectorConnectionOwner,\n  ConnectorConnectionSelector,\n  ProjectConnectorConnectionOwner,\n} from \"../../connectors\"\n\nexport const CONNECTOR_CONNECTION_RUN_FAILURE_CODES = [\n  \"internal.unexpected\",\n  \"connector.adapter_invalid\",\n  \"connector.authorization_invalid\",\n  \"connector.authorization_required\",\n  \"connector.credentials_unavailable\",\n  \"connector.not_found\",\n  \"connector.operation_conflict\",\n  \"connector.operation_in_progress\",\n  \"connector.provider_failed\",\n  \"connector.provider_unavailable\",\n] as const satisfies readonly [SixbErrorCode, ...SixbErrorCode[]]\n\nexport type ConnectorConnectionRunFailureCode =\n  (typeof CONNECTOR_CONNECTION_RUN_FAILURE_CODES)[number]\nexport type ConnectorConnectionRunFailure = SixbFailure<ConnectorConnectionRunFailureCode>\nexport type ConnectorConnectionRunKind = \"connect\" | \"reauthorize\"\n\ninterface ConnectorConnectionRunBase extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly kind: ConnectorConnectionRunKind\n  /** Durable request execution that initiated and is allowed to manage this run. */\n  readonly initiatedByExecutionId: string\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface ConnectorConnectionRunAwaitingProviderRecord extends ConnectorConnectionRunBase {\n  readonly status: \"waiting\"\n  readonly waitingFor: \"provider_authorization\"\n  readonly expiresAt: Date\n}\n\nexport interface ConnectorConnectionRunProcessingRecord extends ConnectorConnectionRunBase {\n  readonly status: \"running\"\n  /** Fences every callback-side write after the one-shot OAuth attempt was consumed. */\n  readonly processingId: string\n  readonly callbackStartedAt: Date\n  readonly expiresAt: Date\n  /** Internal grant handle, attached as soon as a new authorization is durably persisted. */\n  readonly authorizationId?: string\n}\n\nexport interface ConnectorConnectionRunAwaitingSelectionRecord extends ConnectorConnectionRunBase {\n  readonly status: \"waiting\"\n  readonly waitingFor: \"account_selection\"\n  readonly authorizationId: string\n  /** Legacy persistence field; account selection no longer expires. */\n  readonly expiresAt: Date\n}\n\nexport interface ConnectorConnectionRunSucceededRecord extends ConnectorConnectionRunBase {\n  readonly status: \"succeeded\"\n  readonly authorizationId: string\n  /** Internal handle for a replaced grant whose provider cleanup is still retryable. */\n  readonly cleanupAuthorizationId?: string\n  readonly connections: readonly ConnectorConnectionRecord[]\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunFailedRecord extends ConnectorConnectionRunBase {\n  readonly status: \"failed\"\n  readonly error: ConnectorConnectionRunFailure\n  /** Internal cleanup handle; never serialized by the Headless API. */\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunCancelledRecord extends ConnectorConnectionRunBase {\n  readonly status: \"cancelled\"\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunExpiredRecord extends ConnectorConnectionRunBase {\n  readonly status: \"expired\"\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport type ConnectorConnectionRunRecord =\n  | ConnectorConnectionRunAwaitingProviderRecord\n  | ConnectorConnectionRunProcessingRecord\n  | ConnectorConnectionRunAwaitingSelectionRecord\n  | ConnectorConnectionRunSucceededRecord\n  | ConnectorConnectionRunFailedRecord\n  | ConnectorConnectionRunCancelledRecord\n  | ConnectorConnectionRunExpiredRecord\n\nexport interface CreateConnectorConnectionRunInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly kind: ConnectorConnectionRunKind\n  readonly initiatedByExecutionId: string\n  readonly ttlMs: number\n}\n\nexport interface CreateConnectorConnectionSelectionRunInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly initiatedByExecutionId: string\n  readonly authorizationId: string\n  readonly ttlMs: number\n}\n\nexport interface ClaimConnectorConnectionRunCallbackInput {\n  readonly projectId: string\n  readonly attemptId: string\n  readonly stateHash: string\n  readonly callbackBindingHash: string\n  readonly redirectUri: string\n  readonly processingId: string\n  readonly processingTtlMs: number\n}\n\nexport type ClaimConnectorConnectionRunCallbackResult =\n  | {\n      readonly type: \"claimed\"\n      readonly run: ConnectorConnectionRunProcessingRecord\n      readonly attempt: ConnectorAuthorizationAttemptRecord\n      readonly returnTo: string\n    }\n  | {\n      readonly type: \"expired\"\n      readonly run: ConnectorConnectionRunExpiredRecord\n      readonly returnTo: string\n    }\n\nexport interface WaitForConnectorConnectionRunSelectionInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly processingId: string\n  readonly authorizationId: string\n  readonly expiresAt: Date\n}\n\nexport interface AttachConnectorConnectionRunAuthorizationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly processingId: string\n  readonly authorizationId: string\n}\n\nexport type FinishConnectorConnectionRunInput =\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"succeeded\"\n      readonly authorizationId: string\n      readonly cleanupAuthorizationId?: string\n      readonly connections: readonly ConnectorConnectionRecord[]\n    }\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"failed\"\n      readonly error: ConnectorConnectionRunFailure\n      readonly authorizationId?: string\n    }\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"cancelled\"\n    }\n\nexport interface GetConnectorConnectionRunInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n}\n\nexport interface ConnectorAuthorizationAttemptRecord extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  /** Durable execution that initiated and authorizes completion of this OAuth attempt. */\n  readonly initiatedByExecutionId: string\n  readonly stateHash: string\n  /** Absent when the authorization attempt explicitly disabled PKCE. */\n  readonly codeVerifier?: SealedConnectorCredential\n  readonly redirectUri: string\n  /** Present only for attempts created by the headless connection-run API. */\n  readonly connectionRunId?: string\n  /** Fixed, allowlisted continuation consumed with a headless callback. */\n  readonly returnTo?: string\n  /** Hash of the one-shot browser callback binding secret. */\n  readonly callbackBindingHash?: string\n  readonly reauthorizationId?: string\n  readonly reauthorizationRevision?: number\n  readonly reauthorizationConnectionIds?: readonly string[]\n  readonly createdAt: Date\n  readonly expiresAt: Date\n}\n\nexport interface CreateConnectorAuthorizationAttemptInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly initiatedByExecutionId: string\n  readonly stateHash: string\n  readonly codeVerifier?: SealedConnectorCredential\n  readonly redirectUri: string\n  readonly connectionRunId?: string\n  readonly returnTo?: string\n  readonly callbackBindingHash?: string\n  readonly reauthorizationId?: string\n  readonly reauthorizationRevision?: number\n  readonly reauthorizationConnectionIds?: readonly string[]\n  readonly ttlMs: number\n}\n\n/** Callback proof. The orchestration layer authorizes the returned initiating execution. */\nexport interface ConsumeConnectorAuthorizationAttemptInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly stateHash: string\n  readonly redirectUri: string\n}\n\nexport type ConnectorAuthorizationStatus =\n  | \"pending_selection\"\n  | \"active\"\n  | \"needs_reauthorization\"\n  | \"revocation_pending\"\n  | \"revoked\"\n\nexport type ConnectorCredentialMutationKind = \"refresh\" | \"reauthorization\" | \"revocation\"\nexport type ConnectorCredentialMutationPhase = \"prepared\" | \"executing\" | \"result_staged\"\n\nexport interface ConnectorStagedCredentials {\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n}\n\n/** Durable fencing record for one provider-side OAuth credential mutation. */\nexport interface ConnectorCredentialMutation {\n  readonly id: string\n  readonly kind: ConnectorCredentialMutationKind\n  readonly phase: ConnectorCredentialMutationPhase\n  readonly holderId: string\n  readonly expiresAt: Date\n  readonly deadlineAt: Date\n  readonly expectedConnectionIds?: readonly string[]\n  readonly stagedCredentials?: ConnectorStagedCredentials\n}\n\nexport interface ConnectorAuthorizationRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizedBy: AuthorizablePrincipal\n  /** Removed after provider revocation is confirmed. */\n  readonly credentials?: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n  readonly accounts: readonly ConnectorAccountCandidate[]\n  readonly status: ConnectorAuthorizationStatus\n  /** Legacy persistence field; no longer enforced as a selection deadline. */\n  readonly selectionExpiresAt?: Date\n  readonly revision: number\n  readonly credentialMutation?: ConnectorCredentialMutation\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface CreateConnectorAuthorizationInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizedBy: AuthorizablePrincipal\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n  readonly accounts: readonly ConnectorAccountCandidate[]\n  readonly selectionTtlMs: number\n}\n\nexport interface InitializeConnectorAuthorizationAccountsInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly accounts: readonly ConnectorAccountCandidate[]\n}\n\nexport interface ClaimConnectorCredentialMutationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly mutation: {\n    readonly id: string\n    readonly kind: ConnectorCredentialMutationKind\n    readonly holderId: string\n  }\n  readonly expectedConnectionIds?: readonly string[]\n  readonly leaseDurationMs: number\n  readonly operationTimeoutMs: number\n}\n\nexport interface ClaimConnectorCredentialMutationResult {\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly disconnected: readonly ConnectorConnectionRecord[]\n}\n\nexport interface ConnectorCredentialMutationFence {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly mutationId: string\n}\n\nexport interface MarkConnectorCredentialMutationExecutingInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface RenewConnectorCredentialMutationInput extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n  readonly leaseDurationMs: number\n}\n\nexport interface StageConnectorCredentialMutationCredentialsInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n}\n\nexport interface StageConnectorCredentialMutationRevocationInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface ReleaseConnectorCredentialMutationInput extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface RecoverExpiredConnectorCredentialMutationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n}\n\nexport interface MarkConnectorAuthorizationNeedsReauthorizationInput\n  extends ConnectorCredentialMutationFence {}\n\nexport interface FinalizeConnectorReauthorizationInput extends ConnectorCredentialMutationFence {\n  readonly accounts: readonly ConnectorAccountCandidate[]\n}\n\nexport type ConnectorConnectionStatus = \"connected\" | \"disconnected\"\n\nexport interface ConnectorConnectionRecord extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly account: ConnectorAccountCandidate\n  readonly status: ConnectorConnectionStatus\n  readonly disconnectedAt?: Date\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface PutConnectorConnectionInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly account: ConnectorAccountCandidate\n  readonly replace: boolean\n}\n\nexport interface PutConnectorConnectionResult {\n  readonly connection: ConnectorConnectionRecord\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly revocationPendingAuthorizationId?: string\n  readonly created: boolean\n  readonly replaced: boolean\n}\n\nexport interface DisconnectConnectorConnectionResult {\n  readonly connection: ConnectorConnectionRecord\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly revocationPendingAuthorizationId?: string\n}\n\nexport interface PutConnectorConnectionFromRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly account: ConnectorAccountCandidate\n  readonly replace: boolean\n}\n\nexport interface PutConnectorConnectionFromRunResult extends PutConnectorConnectionResult {\n  readonly run: ConnectorConnectionRunSucceededRecord\n}\n\nexport interface GetConnectorConnectionInput extends ConnectorConnectionSelector {\n  readonly projectId: string\n  readonly connectorId: string\n}\n\nexport interface ListConnectorConnectionsInput {\n  readonly projectId: string\n  readonly connectorId: string\n}\n\n/** Tenant-scoped identity for one connector authorization. */\nexport interface ConnectorAuthorizationKey {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n}\n\n/** Tenant-scoped identity for one selected connector connection. */\nexport interface ConnectorConnectionKey {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly connectionId: string\n}\n\n/** Persistent contract. Implementations must make every individual mutation atomic. */\nexport interface ConnectorConnectionStorage {\n  readonly durability: \"ephemeral\" | \"durable\"\n\n  createAuthorizationAttempt(\n    input: CreateConnectorAuthorizationAttemptInput\n  ): Promise<ConnectorAuthorizationAttemptRecord>\n  consumeAuthorizationAttempt(\n    input: ConsumeConnectorAuthorizationAttemptInput\n  ): Promise<ConnectorAuthorizationAttemptRecord>\n\n  createConnectionRun(\n    input: CreateConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord>\n  createConnectionSelectionRun(\n    input: CreateConnectorConnectionSelectionRunInput\n  ): Promise<ConnectorConnectionRunAwaitingSelectionRecord>\n  claimConnectionRunCallback(\n    input: ClaimConnectorConnectionRunCallbackInput\n  ): Promise<ClaimConnectorConnectionRunCallbackResult | null>\n  attachConnectionRunAuthorization(\n    input: AttachConnectorConnectionRunAuthorizationInput\n  ): Promise<ConnectorConnectionRunProcessingRecord | null>\n  waitForConnectionRunSelection(\n    input: WaitForConnectorConnectionRunSelectionInput\n  ): Promise<ConnectorConnectionRunAwaitingSelectionRecord | null>\n  finishConnectionRun(\n    input: FinishConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord | null>\n  listPendingConnectionRuns(\n    input: ListConnectorConnectionsInput\n  ): Promise<readonly ConnectorConnectionRunRecord[]>\n  getConnectionRun(\n    input: GetConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord | null>\n\n  createAuthorization(\n    input: CreateConnectorAuthorizationInput\n  ): Promise<ConnectorAuthorizationRecord>\n  initializeAuthorizationAccounts(\n    input: InitializeConnectorAuthorizationAccountsInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  getAuthorization(input: ConnectorAuthorizationKey): Promise<ConnectorAuthorizationRecord | null>\n  getAuthorizationByConnectionId(\n    input: ConnectorConnectionKey\n  ): Promise<ConnectorAuthorizationRecord | null>\n  claimCredentialMutation(\n    input: ClaimConnectorCredentialMutationInput\n  ): Promise<ClaimConnectorCredentialMutationResult | null>\n  markCredentialMutationExecuting(\n    input: MarkConnectorCredentialMutationExecutingInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  renewCredentialMutation(\n    input: RenewConnectorCredentialMutationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  stageCredentialMutationCredentials(\n    input: StageConnectorCredentialMutationCredentialsInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  stageCredentialMutationRevocation(\n    input: StageConnectorCredentialMutationRevocationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  releaseCredentialMutation(input: ReleaseConnectorCredentialMutationInput): Promise<boolean>\n  /**\n   * Recovers an expired mutation without replaying an unknown provider effect. Prepared work is\n   * released, executing refresh/reauthorization fails closed, revocation stays retryable, and a\n   * staged result remains available for finalization.\n   */\n  recoverExpiredCredentialMutation(\n    input: RecoverExpiredConnectorCredentialMutationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  markNeedsReauthorization(\n    input: MarkConnectorAuthorizationNeedsReauthorizationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeRefresh(\n    input: ConnectorCredentialMutationFence\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeReauthorization(\n    input: FinalizeConnectorReauthorizationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeRevocation(\n    input: ConnectorCredentialMutationFence\n  ): Promise<ConnectorAuthorizationRecord | null>\n\n  putConnection(input: PutConnectorConnectionInput): Promise<PutConnectorConnectionResult>\n  putConnectionFromRun(\n    input: PutConnectorConnectionFromRunInput\n  ): Promise<PutConnectorConnectionFromRunResult>\n  getConnection(input: GetConnectorConnectionInput): Promise<ConnectorConnectionRecord | null>\n  getConnectionById(input: ConnectorConnectionKey): Promise<ConnectorConnectionRecord | null>\n  listConnections(\n    input: ListConnectorConnectionsInput\n  ): Promise<readonly ConnectorConnectionRecord[]>\n  listConnectionsByAuthorization(\n    input: ConnectorAuthorizationKey\n  ): Promise<readonly ConnectorConnectionRecord[]>\n  disconnectConnection(\n    input: ConnectorConnectionKey\n  ): Promise<DisconnectConnectorConnectionResult | null>\n}\n"
   ],
   "mappings": ";;AAeO,MAAM,yCAAwC,MAAM;AAAA,EAChD;AAAA,EAET,WAAW,CAAC,MAA2C,SAAiB;AAAA,IACtE,MAAM,OAAO;AAAA,IACb,KAAK,OAAO;AAAA,IACZ,KAAK,OAAO;AAAA;AAEhB;;;ACZO,IAAM,0CAAyC;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
   "debugId": "B4781D37D7AB95BB64756E2164756E21",

package/dist/{chunk-g00bfdq6.js → chunk-2cxv584m.js}

@@ -5,11 +5,7 @@ import {
   canAccessApplication2,
   resolveRoleGrants2,
   resolveAuthorizationContext2
-} from "./chunk-dz5h08xv.js";
-import {
-  normalizeSchemaValue2,
-  coerceSchemaValueToTyped2
-} from "./chunk-ms2tmn1k.js";
+} from "./chunk-bbaa1fet.js";
 import {
   AuthRuntimeError2,
   resolveAuthSessionAudience2,
@@ -23,9 +19,12 @@ import {
   isInvitationDeliveryAuthStrategy2
 } from "./chunk-q5gz3g2j.js";
 import {
-  validateSchemaOrRefValue2,
+  normalizeParams,
+  coerceParamsToTyped
+} from "./chunk-y3ev53cq.js";
+import {
   snapshotLinkPathSelection
-} from "./chunk-f0rwz2vh.js";
+} from "./chunk-t6f3tdnr.js";
 import {
   OntologyValidationError2
 } from "./chunk-cqr3acm1.js";
@@ -626,46 +625,13 @@ function isObjectActionDefinition2(value) {
   return value.binding.kind === "object";
 }
 function normalizeActionParams(runtime, paramsConfig, params, pathPrefix) {
-  const knownParamIds = new Set(Object.keys(paramsConfig));
-  const normalized = {};
-  for (const paramId of Object.keys(params)) {
-    if (!knownParamIds.has(paramId)) {
-      throw new OntologyValidationError2(`Unknown param '${paramId}' for action '${pathPrefix}'`);
-    }
-  }
-  for (const [paramId, paramDef] of Object.entries(paramsConfig)) {
-    const value = params[paramId];
-    if (value === undefined) {
-      if (paramDef.required) {
-        throw new OntologyValidationError2(`Missing required param '${paramId}' for action '${pathPrefix}'`);
-      }
-      continue;
-    }
-    if (value === null) {
-      if (!paramDef.nullable) {
-        throw new OntologyValidationError2(`[Sixb] Action param ${pathPrefix}.${paramId} cannot be null`);
-      }
-      normalized[paramId] = null;
-      continue;
-    }
-    validateSchemaOrRefValue2(paramDef.schema, value, `${pathPrefix}.${paramId}`, runtime.ontology.getValueTypesById());
-    normalized[paramId] = normalizeSchemaOrRefValue(paramDef.schema, value, `${pathPrefix}.${paramId}`, runtime.ontology.getValueTypesById());
-  }
-  return normalized;
+  return normalizeParams(runtime.ontology.getValueTypesById(), paramsConfig, params, {
+    kind: "action",
+    id: pathPrefix
+  });
 }
 function coerceActionParamsToTyped2(paramsConfig, params, valueTypesById) {
-  const coerced = { ...params };
-  for (const [paramId, paramDef] of Object.entries(paramsConfig)) {
-    const value = params[paramId];
-    if (value === undefined)
-      continue;
-    const schema = paramDef.schema;
-    if (typeof schema === "object" && schema !== null && schema.type === "objectRef") {
-      continue;
-    }
-    coerced[paramId] = coerceSchemaValueToTyped2(schema, value, valueTypesById);
-  }
-  return coerced;
+  return coerceParamsToTyped(paramsConfig, params, valueTypesById);
 }
 function validateActionSubject(action, subject) {
   if (isGlobalActionDefinition2(action) && subject.kind !== "none") {
@@ -686,16 +652,6 @@ function resolveObjectActionSubject(params) {
 function actionAppliesToObjectType(runtime, action, objectType) {
   return runtime.actionRegistry.listForType(objectType).some((candidate) => candidate.id === action.id);
 }
-function normalizeSchemaOrRefValue(schema, value, path, valueTypesById) {
-  if (typeof schema === "object" && schema !== null && schema.type === "objectRef") {
-    const refValue = value;
-    return {
-      objectTypeId: refValue.objectTypeId,
-      primaryId: refValue.primaryId
-    };
-  }
-  return normalizeSchemaValue2(schema, value, path, valueTypesById);
-}
 
 // src/shares/errors.ts
 class ShareDefinitionError2 extends Error {
@@ -3635,4 +3591,4 @@ function principalsEqual2(left, right) {
 }
 export { ActionDefinitionError2, ActionEditCommitError2, missingActionMutationMessage, effectsWithoutEditsMessage, assertNonEmpty2, isActionDefinition2, isGlobalActionDefinition2, isObjectActionDefinition2, normalizeActionParams, coerceActionParamsToTyped2, validateActionSubject, resolveObjectActionSubject, PERSONAL_ACCESS_TOKEN_PREFIX2, SERVICE_ACCOUNT_ACCESS_TOKEN_PREFIX2, generateAccessTokenSecret2, hashAccessTokenSecret2, formatAccessTokenValue2, parseAccessTokenValue2, getBearerAccessTokenValue2, createAccessTokenCredential2, CSRF_HEADER_NAME2, generateCsrfToken2, isCsrfExemptMethod2, verifyDoubleSubmitCsrf2, applications2, SecurityValidationError2, isGroupDefinition, isMembershipPolicyDefinition, isRoleDefinition, defineGroup2, defineRole2, defineMembershipPolicy2, every2, ShareDefinitionError2, defineShare2, isShareDefinition, snapshotShareDefinition, can2, SecurityRegistry, AuthStorageError2, MAX_PENDING_DEVICE_AUTHORIZATIONS2, paginate, InMemoryAuthStorage2, generateSessionSecret2, hashSessionSecret2, formatSessionCookieValue2, parseSessionCookieValue2, createSessionCredential2, AuthRuntime2, SYSTEM_PRINCIPAL2, principalsEqual2 };
 
-//# debugId=4470AA67E3AEAE5264756E2164756E21
+//# debugId=103AE23BF90D263E64756E2164756E21