@sixb/core 0.1.11 → 0.1.13

package/dist/{chunk-awbhdqyc.js → chunk-gmt22nxx.js}

@@ -1,8 +1,12 @@
 // @bun
+import {
+  isPrimitiveSchema,
+  primitiveTraits
+} from "./chunk-d8yes9yx.js";
 import {
   ShareDefinitionError2,
   snapshotShareDefinition
-} from "./chunk-g00bfdq6.js";
+} from "./chunk-9pfw47qx.js";
 import {
   snapshotShareAccessPlan
 } from "./chunk-br3k6qbf.js";
@@ -58,31 +62,21 @@ function compileShareAccessPlan(input) {
   }
   return snapshotShareAccessPlan({ grants });
 }
-var SHAREABLE_PRIMITIVE_SCHEMAS = new Set([
-  "string",
-  "integer",
-  "double",
-  "decimal",
-  "boolean",
-  "date",
-  "timestamp",
-  "uuid"
-]);
 function assertShareableActionParams(input) {
   const seenSchemas = new WeakSet;
   const resolvingValueTypes = new Set;
   const reject = (path, kind) => {
-    throw invalid(`Share '${input.shareId}' Action '${input.actionId}' parameter '${path}' uses ${kind}. Shared Action parameters cannot contain objectRef or fileRef in V1.`);
+    throw invalid(`Share '${input.shareId}' Action '${input.actionId}' parameter '${path}' uses ${kind}. Shared Action parameters cannot contain objectRef, fileRef, or userRef in V1.`);
   };
   const malformed = (path) => {
     throw invalid(`Share '${input.shareId}' Action '${input.actionId}' parameter '${path}' has a schema that cannot be inspected safely.`);
   };
   const walk = (schema, path) => {
     if (typeof schema === "string") {
-      if (schema === "fileRef")
-        reject(path, "fileRef");
-      if (!SHAREABLE_PRIMITIVE_SCHEMAS.has(schema))
+      if (!isPrimitiveSchema(schema))
         malformed(path);
+      else if (primitiveTraits(schema)?.shareableParam !== true)
+        reject(path, schema);
       return;
     }
     if (!isRecord(schema))
@@ -249,4 +243,4 @@ function invalid(message) {
 
 export { compileShareAccessPlan };
 
-//# debugId=5F055D742F48F79B64756E2164756E21
+//# debugId=189829503A14E0E464756E2164756E21

package/dist/chunk-gmt22nxx.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/shares/compiler.ts"],
+  "sourcesContent": [
+    "import type { ActionDefinitionCatalog } from \"../actions\"\nimport type { LinkPathSelection, LinkPathSelectionMode, ObjectRef } from \"../ontology\"\nimport { isPrimitiveSchema, primitiveTraits } from \"../ontology/primitives\"\nimport type { OntologyDefinitionCatalog } from \"../ontology/registry\"\nimport type { ObjectLink, ObjectType, PrimitiveSchema } from \"../ontology/types\"\nimport type {\n  ObjectReadLinkDefinitionSelection,\n  ObjectReadLinkSelection,\n  ObjectReadNode,\n  ObjectReadObjectSelection,\n  ObjectReadRoot,\n} from \"../storage/objects/types\"\nimport { type ShareAccessPlan, snapshotShareAccessPlan } from \"./access-plan\"\nimport { snapshotShareDefinition } from \"./builders\"\nimport { ShareDefinitionError } from \"./errors\"\nimport type { ShareDefinition, ShareViewGrant } from \"./types\"\n\nexport interface CompileShareAccessPlanInput {\n  readonly share: ShareDefinition\n  readonly target: ObjectRef\n  readonly ontology: OntologyDefinitionCatalog\n  readonly actions: ActionDefinitionCatalog\n}\n\n/** Compile one current Share definition and exact target into M01 delegated authority. */\nexport function compileShareAccessPlan(input: CompileShareAccessPlanInput): ShareAccessPlan {\n  const share = snapshotShareDefinition(input.share)\n  const targetObjectTypeId = share.target.objectTypeId\n  if (\n    input.target.objectTypeId !== targetObjectTypeId ||\n    typeof input.target.primaryId !== \"string\" ||\n    !input.target.primaryId.trim()\n  ) {\n    throw invalid(`Share '${share.id}' requires an exact '${targetObjectTypeId}' object reference.`)\n  }\n  if (!input.ontology.getObjectTypeById(targetObjectTypeId)) {\n    throw invalid(\n      `Share '${share.id}' targets unknown object type '${targetObjectTypeId}'. Register it in the ontology before this Share.`\n    )\n  }\n\n  const view = share.grants.find((grant): grant is ShareViewGrant => grant.kind === \"object.view\")\n  if (!view) {\n    throw invalid(`Share '${share.id}' must contain one view grant.`)\n  }\n\n  const root: ObjectReadRoot = {\n    anchor: {\n      objectTypeId: targetObjectTypeId,\n      primaryId: input.target.primaryId,\n    },\n    node: compileNode(input.ontology, [targetObjectTypeId], view.links, share.id),\n  }\n\n  const grants: ShareAccessPlan[\"grants\"][number][] = [\n    {\n      kind: \"object.view\",\n      selection: { kind: \"selected\", roots: [root] },\n    },\n  ]\n\n  for (const grant of share.grants) {\n    if (grant.kind !== \"action.apply\") continue\n    const action = input.actions.getById(grant.actionId)\n    if (!action || action.binding.kind !== \"object\") {\n      throw invalid(`Share '${share.id}' references unknown or global Action '${grant.actionId}'.`)\n    }\n    if (\n      action.binding.objectType.id !== targetObjectTypeId ||\n      grant.subjectObjectTypeId !== targetObjectTypeId\n    ) {\n      throw invalid(\n        `Share '${share.id}' Action '${grant.actionId}' must be defined exactly on '${targetObjectTypeId}'. Shared Actions do not inherit in V1.`\n      )\n    }\n    assertShareableActionParams({\n      ontology: input.ontology,\n      params: action.params,\n      shareId: share.id,\n      actionId: action.id,\n    })\n    grants.push({\n      kind: \"action.apply\",\n      actionId: action.id,\n      subjects: [{ ...input.target }],\n    })\n  }\n\n  return snapshotShareAccessPlan({ grants })\n}\n\n/**\n * V1 deliberately excludes references from shared Action params. A delegated caller cannot yet be\n * authorized to resolve arbitrary object or blob references supplied at invocation time.\n */\nfunction assertShareableActionParams(input: {\n  readonly ontology: OntologyDefinitionCatalog\n  readonly params: Readonly<Record<string, { readonly schema: unknown }>>\n  readonly shareId: string\n  readonly actionId: string\n}): void {\n  const seenSchemas = new WeakSet<object>()\n  const resolvingValueTypes = new Set<string>()\n\n  const reject = (path: string, kind: \"objectRef\" | PrimitiveSchema): never => {\n    throw invalid(\n      `Share '${input.shareId}' Action '${input.actionId}' parameter '${path}' uses ${kind}. Shared Action parameters cannot contain objectRef, fileRef, or userRef in V1.`\n    )\n  }\n\n  const malformed = (path: string): never => {\n    throw invalid(\n      `Share '${input.shareId}' Action '${input.actionId}' parameter '${path}' has a schema that cannot be inspected safely.`\n    )\n  }\n\n  const walk = (schema: unknown, path: string): void => {\n    if (typeof schema === \"string\") {\n      if (!isPrimitiveSchema(schema)) malformed(path)\n      else if (primitiveTraits(schema)?.shareableParam !== true) reject(path, schema)\n      return\n    }\n    if (!isRecord(schema)) throw malformed(path)\n    if (seenSchemas.has(schema)) return\n    seenSchemas.add(schema)\n\n    switch (schema.type) {\n      case \"objectRef\":\n        reject(path, \"objectRef\")\n        break\n      case \"enum\":\n        return\n      case \"object\": {\n        if (!isRecord(schema.properties)) throw malformed(path)\n        for (const [fieldId, field] of Object.entries(schema.properties)) {\n          if (!isRecord(field) || !(\"schema\" in field)) {\n            throw malformed(`${path}.${fieldId}`)\n          }\n          walk(field.schema, `${path}.${fieldId}`)\n        }\n        return\n      }\n      case \"array\":\n        if (!(\"items\" in schema)) throw malformed(path)\n        walk(schema.items, `${path}[]`)\n        return\n      case \"map\":\n        if (!(\"valueSchema\" in schema)) throw malformed(path)\n        walk(schema.valueSchema, `${path}{}`)\n        return\n      case \"valueTypeRef\": {\n        if (typeof schema.valueTypeId !== \"string\" || !schema.valueTypeId.trim()) {\n          throw malformed(path)\n        }\n        const valueTypeId = schema.valueTypeId\n        if (resolvingValueTypes.has(valueTypeId)) {\n          // Recursive inline resolutions are still untrusted. Inspect one when present; the\n          // schema-identity guard terminates honest self-reference while catching a forged second\n          // resolution that hides a reference-bearing payload behind the same id.\n          if (schema._resolved !== undefined) {\n            walk(schema._resolved, `${path}<${valueTypeId}>`)\n          }\n          return\n        }\n        // The registered ValueType is authoritative. `_resolved` supports inference and\n        // auto-registration; it must not override the current ontology under the same id.\n        const resolved =\n          input.ontology.getValueTypesById().get(valueTypeId)?.schema ?? schema._resolved\n        if (resolved === undefined) {\n          throw invalid(\n            `Share '${input.shareId}' Action '${input.actionId}' parameter '${path}' references unknown ValueType '${valueTypeId}', so it cannot be inspected safely.`\n          )\n        }\n        resolvingValueTypes.add(valueTypeId)\n        try {\n          walk(resolved, `${path}<${valueTypeId}>`)\n        } finally {\n          resolvingValueTypes.delete(valueTypeId)\n        }\n        return\n      }\n      default:\n        throw malformed(path)\n    }\n  }\n\n  for (const [paramId, param] of Object.entries(input.params)) {\n    if (!isRecord(param) || !(\"schema\" in param)) throw malformed(paramId)\n    walk(param.schema, paramId)\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nfunction compileNode(\n  ontology: OntologyDefinitionCatalog,\n  authoredObjectTypeIds: readonly string[],\n  links: LinkPathSelectionMode,\n  shareId: string\n): ObjectReadNode {\n  const objectTypeIds = uniqueSorted(authoredObjectTypeIds)\n  const objectTypes = objectTypeIds.map((id) => ontology.resolveObjectType(id))\n  const objects: ObjectReadObjectSelection[] = objectTypes.map((objectType) => ({\n    objectTypeId: objectType.id,\n    propertyIds: uniqueSorted(objectType.properties.map((property) => property.id)),\n  }))\n\n  const selectedLinks =\n    links.kind === \"none\"\n      ? []\n      : links.kind === \"all\"\n        ? allDirectLinks(ontology, objectTypes)\n        : links.links\n\n  const compiledLinks = selectedLinks.map((selection) =>\n    compileLinkSelection({ ontology, parentObjectTypeIds: objectTypeIds, selection, shareId })\n  )\n\n  return { objects, links: compiledLinks }\n}\n\nfunction allDirectLinks(\n  ontology: OntologyDefinitionCatalog,\n  objectTypes: readonly ObjectType[]\n): readonly LinkPathSelection[] {\n  const selections: LinkPathSelection[] = []\n  const sortedObjectTypes = [...objectTypes].sort((a, b) => a.id.localeCompare(b.id))\n  const descendantIdsByType = new Map(\n    sortedObjectTypes.map((objectType) => [\n      objectType.id,\n      new Set(ontology.listSubTypes(objectType.id)),\n    ])\n  )\n\n  for (const objectType of sortedObjectTypes) {\n    for (const link of [...objectType.links].sort((a, b) => a.id.localeCompare(b.id))) {\n      const inheritedSelectionAlreadyCoversLink = sortedObjectTypes.some(\n        (candidate) =>\n          candidate.id !== objectType.id &&\n          descendantIdsByType.get(candidate.id)?.has(objectType.id) === true &&\n          candidate.links.some((candidateLink) => candidateLink.id === link.id)\n      )\n      if (inheritedSelectionAlreadyCoversLink) continue\n      selections.push({\n        kind: \"linkPathSelection\",\n        sourceObjectTypeId: objectType.id,\n        linkId: link.id,\n        targetObjectTypeId: link.targetObjectTypeId,\n        selection: { kind: \"none\" },\n      })\n    }\n  }\n  return selections\n}\n\nfunction compileLinkSelection(input: {\n  readonly ontology: OntologyDefinitionCatalog\n  readonly parentObjectTypeIds: readonly string[]\n  readonly selection: LinkPathSelection\n  readonly shareId: string\n}): ObjectReadLinkSelection {\n  const selectorSource = input.ontology.getObjectTypeById(input.selection.sourceObjectTypeId)\n  if (!selectorSource) {\n    throw invalid(\n      `Share '${input.shareId}' selects link '${input.selection.sourceObjectTypeId}.${input.selection.linkId}' on an unknown object type.`\n    )\n  }\n  const eligibleSourceIds = new Set([\n    selectorSource.id,\n    ...input.ontology.listSubTypes(selectorSource.id),\n  ])\n  const definitions: ObjectReadLinkDefinitionSelection[] = []\n  const targetObjectTypeIds = new Set<string>()\n\n  for (const sourceObjectTypeId of input.parentObjectTypeIds) {\n    if (!eligibleSourceIds.has(sourceObjectTypeId)) continue\n    const source = input.ontology.resolveObjectType(sourceObjectTypeId)\n    const link = source.links.find((candidate) => candidate.id === input.selection.linkId)\n    if (!link) continue\n    const concreteTargetIds = expandLinkTargets(input.ontology, link, input.shareId, source.id)\n    for (const id of concreteTargetIds) targetObjectTypeIds.add(id)\n    definitions.push({\n      sourceObjectTypeId: source.id,\n      linkId: link.id,\n      targetObjectTypeIds: concreteTargetIds,\n      propertyIds: uniqueSorted((link.properties ?? []).map((property) => property.id)),\n    })\n  }\n\n  if (definitions.length === 0) {\n    throw invalid(\n      `Share '${input.shareId}' link '${input.selection.sourceObjectTypeId}.${input.selection.linkId}' is not available at this path.`\n    )\n  }\n\n  return {\n    definitions: definitions.sort(compareLinkDefinitions),\n    target: compileNode(\n      input.ontology,\n      [...targetObjectTypeIds],\n      input.selection.selection,\n      input.shareId\n    ),\n  }\n}\n\nfunction expandLinkTargets(\n  ontology: OntologyDefinitionCatalog,\n  link: ObjectLink,\n  shareId: string,\n  sourceObjectTypeId: string\n): readonly string[] {\n  if (link.targetObjectTypeId === \"*\") {\n    return uniqueSorted(ontology.listObjectTypes().map((objectType) => objectType.id))\n  }\n  const authoredIds = Array.isArray(link.targetObjectTypeId)\n    ? link.targetObjectTypeId\n    : [link.targetObjectTypeId]\n  const result: string[] = []\n  for (const objectTypeId of authoredIds) {\n    if (!ontology.getObjectTypeById(objectTypeId)) {\n      throw invalid(\n        `Share '${shareId}' link '${sourceObjectTypeId}.${link.id}' targets unknown object type '${objectTypeId}'.`\n      )\n    }\n    result.push(objectTypeId, ...ontology.listSubTypes(objectTypeId))\n  }\n  return uniqueSorted(result)\n}\n\nfunction compareLinkDefinitions(\n  left: ObjectReadLinkDefinitionSelection,\n  right: ObjectReadLinkDefinitionSelection\n): number {\n  return (\n    left.sourceObjectTypeId.localeCompare(right.sourceObjectTypeId) ||\n    left.linkId.localeCompare(right.linkId)\n  )\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n  return [...new Set(values)].sort((a, b) => a.localeCompare(b))\n}\n\nfunction invalid(message: string): ShareDefinitionError {\n  return new ShareDefinitionError(`[Sixb] ${message}`)\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;AAyBO,SAAS,sBAAsB,CAAC,OAAqD;AAAA,EAC1F,MAAM,QAAQ,wBAAwB,MAAM,KAAK;AAAA,EACjD,MAAM,qBAAqB,MAAM,OAAO;AAAA,EACxC,IACE,MAAM,OAAO,iBAAiB,sBAC9B,OAAO,MAAM,OAAO,cAAc,YAClC,CAAC,MAAM,OAAO,UAAU,KAAK,GAC7B;AAAA,IACA,MAAM,QAAQ,UAAU,MAAM,0BAA0B,uCAAuC;AAAA,EACjG;AAAA,EACA,IAAI,CAAC,MAAM,SAAS,kBAAkB,kBAAkB,GAAG;AAAA,IACzD,MAAM,QACJ,UAAU,MAAM,oCAAoC,qEACtD;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,MAAM,OAAO,KAAK,CAAC,UAAmC,MAAM,SAAS,aAAa;AAAA,EAC/F,IAAI,CAAC,MAAM;AAAA,IACT,MAAM,QAAQ,UAAU,MAAM,kCAAkC;AAAA,EAClE;AAAA,EAEA,MAAM,OAAuB;AAAA,IAC3B,QAAQ;AAAA,MACN,cAAc;AAAA,MACd,WAAW,MAAM,OAAO;AAAA,IAC1B;AAAA,IACA,MAAM,YAAY,MAAM,UAAU,CAAC,kBAAkB,GAAG,KAAK,OAAO,MAAM,EAAE;AAAA,EAC9E;AAAA,EAEA,MAAM,SAA8C;AAAA,IAClD;AAAA,MACE,MAAM;AAAA,MACN,WAAW,EAAE,MAAM,YAAY,OAAO,CAAC,IAAI,EAAE;AAAA,IAC/C;AAAA,EACF;AAAA,EAEA,WAAW,SAAS,MAAM,QAAQ;AAAA,IAChC,IAAI,MAAM,SAAS;AAAA,MAAgB;AAAA,IACnC,MAAM,SAAS,MAAM,QAAQ,QAAQ,MAAM,QAAQ;AAAA,IACnD,IAAI,CAAC,UAAU,OAAO,QAAQ,SAAS,UAAU;AAAA,MAC/C,MAAM,QAAQ,UAAU,MAAM,4CAA4C,MAAM,YAAY;AAAA,IAC9F;AAAA,IACA,IACE,OAAO,QAAQ,WAAW,OAAO,sBACjC,MAAM,wBAAwB,oBAC9B;AAAA,MACA,MAAM,QACJ,UAAU,MAAM,eAAe,MAAM,yCAAyC,2DAChF;AAAA,IACF;AAAA,IACA,4BAA4B;AAAA,MAC1B,UAAU,MAAM;AAAA,MAChB,QAAQ,OAAO;AAAA,MACf,SAAS,MAAM;AAAA,MACf,UAAU,OAAO;AAAA,IACnB,CAAC;AAAA,IACD,OAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,UAAU,OAAO;AAAA,MACjB,UAAU,CAAC,KAAK,MAAM,OAAO,CAAC;AAAA,IAChC,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,wBAAwB,EAAE,OAAO,CAAC;AAAA;AAO3C,SAAS,2BAA2B,CAAC,OAK5B;AAAA,EACP,MAAM,cAAc,IAAI;AAAA,EACxB,MAAM,sBAAsB,IAAI;AAAA,EAEhC,MAAM,SAAS,CAAC,MAAc,SAA+C;AAAA,IAC3E,MAAM,QACJ,UAAU,MAAM,oBAAoB,MAAM,wBAAwB,cAAc,qFAClF;AAAA;AAAA,EAGF,MAAM,YAAY,CAAC,SAAwB;AAAA,IACzC,MAAM,QACJ,UAAU,MAAM,oBAAoB,MAAM,wBAAwB,qDACpE;AAAA;AAAA,EAGF,MAAM,OAAO,CAAC,QAAiB,SAAuB;AAAA,IACpD,IAAI,OAAO,WAAW,UAAU;AAAA,MAC9B,IAAI,CAAC,kBAAkB,MAAM;AAAA,QAAG,UAAU,IAAI;AAAA,MACzC,SAAI,gBAAgB,MAAM,GAAG,mBAAmB;AAAA,QAAM,OAAO,MAAM,MAAM;AAAA,MAC9E;AAAA,IACF;AAAA,IACA,IAAI,CAAC,SAAS,MAAM;AAAA,MAAG,MAAM,UAAU,IAAI;AAAA,IAC3C,IAAI,YAAY,IAAI,MAAM;AAAA,MAAG;AAAA,IAC7B,YAAY,IAAI,MAAM;AAAA,IAEtB,QAAQ,OAAO;AAAA,WACR;AAAA,QACH,OAAO,MAAM,WAAW;AAAA,QACxB;AAAA,WACG;AAAA,QACH;AAAA,WACG,UAAU;AAAA,QACb,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,UAAG,MAAM,UAAU,IAAI;AAAA,QACtD,YAAY,SAAS,UAAU,OAAO,QAAQ,OAAO,UAAU,GAAG;AAAA,UAChE,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,YAAY,QAAQ;AAAA,YAC5C,MAAM,UAAU,GAAG,QAAQ,SAAS;AAAA,UACtC;AAAA,UACA,KAAK,MAAM,QAAQ,GAAG,QAAQ,SAAS;AAAA,QACzC;AAAA,QACA;AAAA,MACF;AAAA,WACK;AAAA,QACH,IAAI,EAAE,WAAW;AAAA,UAAS,MAAM,UAAU,IAAI;AAAA,QAC9C,KAAK,OAAO,OAAO,GAAG,QAAQ;AAAA,QAC9B;AAAA,WACG;AAAA,QACH,IAAI,EAAE,iBAAiB;AAAA,UAAS,MAAM,UAAU,IAAI;AAAA,QACpD,KAAK,OAAO,aAAa,GAAG,QAAQ;AAAA,QACpC;AAAA,WACG,gBAAgB;AAAA,QACnB,IAAI,OAAO,OAAO,gBAAgB,YAAY,CAAC,OAAO,YAAY,KAAK,GAAG;AAAA,UACxE,MAAM,UAAU,IAAI;AAAA,QACtB;AAAA,QACA,MAAM,cAAc,OAAO;AAAA,QAC3B,IAAI,oBAAoB,IAAI,WAAW,GAAG;AAAA,UAIxC,IAAI,OAAO,cAAc,WAAW;AAAA,YAClC,KAAK,OAAO,WAAW,GAAG,QAAQ,cAAc;AAAA,UAClD;AAAA,UACA;AAAA,QACF;AAAA,QAGA,MAAM,WACJ,MAAM,SAAS,kBAAkB,EAAE,IAAI,WAAW,GAAG,UAAU,OAAO;AAAA,QACxE,IAAI,aAAa,WAAW;AAAA,UAC1B,MAAM,QACJ,UAAU,MAAM,oBAAoB,MAAM,wBAAwB,uCAAuC,iDAC3G;AAAA,QACF;AAAA,QACA,oBAAoB,IAAI,WAAW;AAAA,QACnC,IAAI;AAAA,UACF,KAAK,UAAU,GAAG,QAAQ,cAAc;AAAA,kBACxC;AAAA,UACA,oBAAoB,OAAO,WAAW;AAAA;AAAA,QAExC;AAAA,MACF;AAAA;AAAA,QAEE,MAAM,UAAU,IAAI;AAAA;AAAA;AAAA,EAI1B,YAAY,SAAS,UAAU,OAAO,QAAQ,MAAM,MAAM,GAAG;AAAA,IAC3D,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,YAAY;AAAA,MAAQ,MAAM,UAAU,OAAO;AAAA,IACrE,KAAK,MAAM,QAAQ,OAAO;AAAA,EAC5B;AAAA;AAGF,SAAS,QAAQ,CAAC,OAAkD;AAAA,EAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAG5E,SAAS,WAAW,CAClB,UACA,uBACA,OACA,SACgB;AAAA,EAChB,MAAM,gBAAgB,aAAa,qBAAqB;AAAA,EACxD,MAAM,cAAc,cAAc,IAAI,CAAC,OAAO,SAAS,kBAAkB,EAAE,CAAC;AAAA,EAC5E,MAAM,UAAuC,YAAY,IAAI,CAAC,gBAAgB;AAAA,IAC5E,cAAc,WAAW;AAAA,IACzB,aAAa,aAAa,WAAW,WAAW,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC;AAAA,EAChF,EAAE;AAAA,EAEF,MAAM,gBACJ,MAAM,SAAS,SACX,CAAC,IACD,MAAM,SAAS,QACb,eAAe,UAAU,WAAW,IACpC,MAAM;AAAA,EAEd,MAAM,gBAAgB,cAAc,IAAI,CAAC,cACvC,qBAAqB,EAAE,UAAU,qBAAqB,eAAe,WAAW,QAAQ,CAAC,CAC3F;AAAA,EAEA,OAAO,EAAE,SAAS,OAAO,cAAc;AAAA;AAGzC,SAAS,cAAc,CACrB,UACA,aAC8B;AAAA,EAC9B,MAAM,aAAkC,CAAC;AAAA,EACzC,MAAM,oBAAoB,CAAC,GAAG,WAAW,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC;AAAA,EAClF,MAAM,sBAAsB,IAAI,IAC9B,kBAAkB,IAAI,CAAC,eAAe;AAAA,IACpC,WAAW;AAAA,IACX,IAAI,IAAI,SAAS,aAAa,WAAW,EAAE,CAAC;AAAA,EAC9C,CAAC,CACH;AAAA,EAEA,WAAW,cAAc,mBAAmB;AAAA,IAC1C,WAAW,QAAQ,CAAC,GAAG,WAAW,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC,GAAG;AAAA,MACjF,MAAM,sCAAsC,kBAAkB,KAC5D,CAAC,cACC,UAAU,OAAO,WAAW,MAC5B,oBAAoB,IAAI,UAAU,EAAE,GAAG,IAAI,WAAW,EAAE,MAAM,QAC9D,UAAU,MAAM,KAAK,CAAC,kBAAkB,cAAc,OAAO,KAAK,EAAE,CACxE;AAAA,MACA,IAAI;AAAA,QAAqC;AAAA,MACzC,WAAW,KAAK;AAAA,QACd,MAAM;AAAA,QACN,oBAAoB,WAAW;AAAA,QAC/B,QAAQ,KAAK;AAAA,QACb,oBAAoB,KAAK;AAAA,QACzB,WAAW,EAAE,MAAM,OAAO;AAAA,MAC5B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,oBAAoB,CAAC,OAKF;AAAA,EAC1B,MAAM,iBAAiB,MAAM,SAAS,kBAAkB,MAAM,UAAU,kBAAkB;AAAA,EAC1F,IAAI,CAAC,gBAAgB;AAAA,IACnB,MAAM,QACJ,UAAU,MAAM,0BAA0B,MAAM,UAAU,sBAAsB,MAAM,UAAU,oCAClG;AAAA,EACF;AAAA,EACA,MAAM,oBAAoB,IAAI,IAAI;AAAA,IAChC,eAAe;AAAA,IACf,GAAG,MAAM,SAAS,aAAa,eAAe,EAAE;AAAA,EAClD,CAAC;AAAA,EACD,MAAM,cAAmD,CAAC;AAAA,EAC1D,MAAM,sBAAsB,IAAI;AAAA,EAEhC,WAAW,sBAAsB,MAAM,qBAAqB;AAAA,IAC1D,IAAI,CAAC,kBAAkB,IAAI,kBAAkB;AAAA,MAAG;AAAA,IAChD,MAAM,SAAS,MAAM,SAAS,kBAAkB,kBAAkB;AAAA,IAClE,MAAM,OAAO,OAAO,MAAM,KAAK,CAAC,cAAc,UAAU,OAAO,MAAM,UAAU,MAAM;AAAA,IACrF,IAAI,CAAC;AAAA,MAAM;AAAA,IACX,MAAM,oBAAoB,kBAAkB,MAAM,UAAU,MAAM,MAAM,SAAS,OAAO,EAAE;AAAA,IAC1F,WAAW,MAAM;AAAA,MAAmB,oBAAoB,IAAI,EAAE;AAAA,IAC9D,YAAY,KAAK;AAAA,MACf,oBAAoB,OAAO;AAAA,MAC3B,QAAQ,KAAK;AAAA,MACb,qBAAqB;AAAA,MACrB,aAAa,cAAc,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC;AAAA,IAClF,CAAC;AAAA,EACH;AAAA,EAEA,IAAI,YAAY,WAAW,GAAG;AAAA,IAC5B,MAAM,QACJ,UAAU,MAAM,kBAAkB,MAAM,UAAU,sBAAsB,MAAM,UAAU,wCAC1F;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACL,aAAa,YAAY,KAAK,sBAAsB;AAAA,IACpD,QAAQ,YACN,MAAM,UACN,CAAC,GAAG,mBAAmB,GACvB,MAAM,UAAU,WAChB,MAAM,OACR;AAAA,EACF;AAAA;AAGF,SAAS,iBAAiB,CACxB,UACA,MACA,SACA,oBACmB;AAAA,EACnB,IAAI,KAAK,uBAAuB,KAAK;AAAA,IACnC,OAAO,aAAa,SAAS,gBAAgB,EAAE,IAAI,CAAC,eAAe,WAAW,EAAE,CAAC;AAAA,EACnF;AAAA,EACA,MAAM,cAAc,MAAM,QAAQ,KAAK,kBAAkB,IACrD,KAAK,qBACL,CAAC,KAAK,kBAAkB;AAAA,EAC5B,MAAM,SAAmB,CAAC;AAAA,EAC1B,WAAW,gBAAgB,aAAa;AAAA,IACtC,IAAI,CAAC,SAAS,kBAAkB,YAAY,GAAG;AAAA,MAC7C,MAAM,QACJ,UAAU,kBAAkB,sBAAsB,KAAK,oCAAoC,gBAC7F;AAAA,IACF;AAAA,IACA,OAAO,KAAK,cAAc,GAAG,SAAS,aAAa,YAAY,CAAC;AAAA,EAClE;AAAA,EACA,OAAO,aAAa,MAAM;AAAA;AAG5B,SAAS,sBAAsB,CAC7B,MACA,OACQ;AAAA,EACR,OACE,KAAK,mBAAmB,cAAc,MAAM,kBAAkB,KAC9D,KAAK,OAAO,cAAc,MAAM,MAAM;AAAA;AAI1C,SAAS,YAAY,CAAC,QAAqC;AAAA,EACzD,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAAA;AAG/D,SAAS,OAAO,CAAC,SAAuC;AAAA,EACtD,OAAO,IAAI,sBAAqB,UAAU,SAAS;AAAA;",
+  "debugId": "189829503A14E0E464756E2164756E21",
+  "names": []
+}

package/dist/chunk-h89wz928.js

@@ -0,0 +1,42 @@
+// @bun
+// src/storage/file-upload-sessions/utils.ts
+import { randomUUID } from "crypto";
+var DEFAULT_FILE_UPLOAD_SESSION_TTL_MS2 = 60 * 60 * 1000;
+var DEFAULT_FILE_UPLOAD_TERMINAL_SESSION_TTL_MS2 = 15 * 60 * 1000;
+function createUploadExpiresAt2(now = Date.now()) {
+  return new Date(now + DEFAULT_FILE_UPLOAD_SESSION_TTL_MS2);
+}
+function createFileUploadId2() {
+  return `upload_${randomUUID().replaceAll("-", "")}`;
+}
+function isFileUploadSessionExpired(session, nowMs = Date.now()) {
+  return session.status === "pending" && session.expiresAt.getTime() <= nowMs;
+}
+function isAbandonedFileUploadSession(session, nowMs = Date.now()) {
+  return session.providerUpload !== undefined && isFileUploadSessionExpired(session, nowMs);
+}
+function fileUploadSessionReapAt2(session) {
+  if (session.status === "pending") {
+    return session.providerUpload === undefined ? session.expiresAt : null;
+  }
+  const terminalAt = session.completedAt ?? session.abortedAt;
+  return terminalAt ? new Date(terminalAt.getTime() + DEFAULT_FILE_UPLOAD_TERMINAL_SESSION_TTL_MS2) : null;
+}
+function shouldDeleteFileUploadSession(session, nowMs) {
+  const reapAt = fileUploadSessionReapAt2(session);
+  return reapAt !== null && reapAt.getTime() <= nowMs;
+}
+function isTerminalFileUploadSessionExpired(session, nowMs) {
+  if (session.status === "pending") {
+    return false;
+  }
+  const terminalAt = session.completedAt ?? session.abortedAt;
+  if (!terminalAt) {
+    return false;
+  }
+  return terminalAt.getTime() + DEFAULT_FILE_UPLOAD_TERMINAL_SESSION_TTL_MS2 <= nowMs;
+}
+
+export { DEFAULT_FILE_UPLOAD_SESSION_TTL_MS2, DEFAULT_FILE_UPLOAD_TERMINAL_SESSION_TTL_MS2, createUploadExpiresAt2, createFileUploadId2, isFileUploadSessionExpired, isAbandonedFileUploadSession, fileUploadSessionReapAt2, shouldDeleteFileUploadSession, isTerminalFileUploadSessionExpired };
+
+//# debugId=EAECD974E6F80CCB64756E2164756E21

package/dist/chunk-h89wz928.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/storage/file-upload-sessions/utils.ts"],
+  "sourcesContent": [
+    "import { randomUUID } from \"node:crypto\"\nimport type { FileUploadSession } from \"./types\"\n\nexport const DEFAULT_FILE_UPLOAD_SESSION_TTL_MS = 60 * 60 * 1000\nexport const DEFAULT_FILE_UPLOAD_TERMINAL_SESSION_TTL_MS = 15 * 60 * 1000\n\nexport function createUploadExpiresAt(now = Date.now()): Date {\n  return new Date(now + DEFAULT_FILE_UPLOAD_SESSION_TTL_MS)\n}\n\nexport function createFileUploadId(): string {\n  return `upload_${randomUUID().replaceAll(\"-\", \"\")}`\n}\n\nexport function isFileUploadSessionExpired(\n  session: FileUploadSession,\n  nowMs = Date.now()\n): boolean {\n  return session.status === \"pending\" && session.expiresAt.getTime() <= nowMs\n}\n\n/** Expired, still `pending`, and holding a provider upload only `abortUpload` can release. */\nexport function isAbandonedFileUploadSession(\n  session: FileUploadSession,\n  nowMs = Date.now()\n): boolean {\n  return session.providerUpload !== undefined && isFileUploadSessionExpired(session, nowMs)\n}\n\n/**\n * When a session may be deleted, or null when only a state change can make it deletable.\n * This is the single retention rule: durable providers persist it as `reap_at` and delete\n * `reap_at <= now`, so SQL never restates it.\n */\nexport function fileUploadSessionReapAt(session: FileUploadSession): Date | null {\n  if (session.status === \"pending\") {\n    return session.providerUpload === undefined ? session.expiresAt : null\n  }\n\n  const terminalAt = session.completedAt ?? session.abortedAt\n  return terminalAt\n    ? new Date(terminalAt.getTime() + DEFAULT_FILE_UPLOAD_TERMINAL_SESSION_TTL_MS)\n    : null\n}\n\nexport function shouldDeleteFileUploadSession(session: FileUploadSession, nowMs: number): boolean {\n  const reapAt = fileUploadSessionReapAt(session)\n  return reapAt !== null && reapAt.getTime() <= nowMs\n}\n\nexport function isTerminalFileUploadSessionExpired(\n  session: FileUploadSession,\n  nowMs: number\n): boolean {\n  if (session.status === \"pending\") {\n    return false\n  }\n\n  const terminalAt = session.completedAt ?? session.abortedAt\n  if (!terminalAt) {\n    return false\n  }\n\n  return terminalAt.getTime() + DEFAULT_FILE_UPLOAD_TERMINAL_SESSION_TTL_MS <= nowMs\n}\n"
+  ],
+  "mappings": ";;AAAA;AAGO,IAAM,sCAAqC,KAAK,KAAK;AACrD,IAAM,+CAA8C,KAAK,KAAK;AAE9D,SAAS,sBAAqB,CAAC,MAAM,KAAK,IAAI,GAAS;AAAA,EAC5D,OAAO,IAAI,KAAK,MAAM,mCAAkC;AAAA;AAGnD,SAAS,mBAAkB,GAAW;AAAA,EAC3C,OAAO,UAAU,WAAW,EAAE,WAAW,KAAK,EAAE;AAAA;AAG3C,SAAS,0BAA0B,CACxC,SACA,QAAQ,KAAK,IAAI,GACR;AAAA,EACT,OAAO,QAAQ,WAAW,aAAa,QAAQ,UAAU,QAAQ,KAAK;AAAA;AAIjE,SAAS,4BAA4B,CAC1C,SACA,QAAQ,KAAK,IAAI,GACR;AAAA,EACT,OAAO,QAAQ,mBAAmB,aAAa,2BAA2B,SAAS,KAAK;AAAA;AAQnF,SAAS,wBAAuB,CAAC,SAAyC;AAAA,EAC/E,IAAI,QAAQ,WAAW,WAAW;AAAA,IAChC,OAAO,QAAQ,mBAAmB,YAAY,QAAQ,YAAY;AAAA,EACpE;AAAA,EAEA,MAAM,aAAa,QAAQ,eAAe,QAAQ;AAAA,EAClD,OAAO,aACH,IAAI,KAAK,WAAW,QAAQ,IAAI,4CAA2C,IAC3E;AAAA;AAGC,SAAS,6BAA6B,CAAC,SAA4B,OAAwB;AAAA,EAChG,MAAM,SAAS,yBAAwB,OAAO;AAAA,EAC9C,OAAO,WAAW,QAAQ,OAAO,QAAQ,KAAK;AAAA;AAGzC,SAAS,kCAAkC,CAChD,SACA,OACS;AAAA,EACT,IAAI,QAAQ,WAAW,WAAW;AAAA,IAChC,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,aAAa,QAAQ,eAAe,QAAQ;AAAA,EAClD,IAAI,CAAC,YAAY;AAAA,IACf,OAAO;AAAA,EACT;AAAA,EAEA,OAAO,WAAW,QAAQ,IAAI,gDAA+C;AAAA;",
+  "debugId": "EAECD974E6F80CCB64756E2164756E21",
+  "names": []
+}

package/dist/{chunk-aa6z4a19.js → chunk-hgqpcmyr.js}

@@ -342,6 +342,7 @@ class InMemoryQueue {
 class InMemoryQueues2 {
   scope = "process";
   store = new InMemoryQueueStore;
+  vectorIndexing = new InMemoryQueue(this.store, "vector.indexing");
   syncRuns = new InMemoryQueue(this.store, "sync.runs");
   pipelines = new InMemoryQueue(this.store, "pipeline.runs");
   projections = new InMemoryQueue(this.store, "projection.runs");
@@ -355,4 +356,4 @@ class InMemoryQueues2 {
 }
 export { QueueError2, InMemoryQueues2 };
 
-//# debugId=40F6801A008F592764756E2164756E21
+//# debugId=50CDF8905DC39EBB64756E2164756E21

package/dist/chunk-hgqpcmyr.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../src/queues/errors.ts", "../src/queues/in-memory.ts", "../src/queues/indexed-heap.ts"],
+  "sourcesContent": [
+    "/**\n * Error for queue invariants and invalid queue operations.\n */\nexport class QueueError extends Error {\n  readonly name = \"QueueError\"\n}\n",
+    "import { randomUUID } from \"node:crypto\"\nimport type { SixbErrorCode } from \"../errors/types\"\nimport { QueueError } from \"./errors\"\nimport { IndexedHeap } from \"./indexed-heap\"\nimport type {\n  ActionQueueJobFailureCode,\n  ActionRunRequestedQueueJob,\n  AgentQueueJob,\n  AgentQueueJobFailureCode,\n  ClaimedQueueJob,\n  NewQueueJob,\n  PipelineQueueJobFailureCode,\n  PipelineRunRequestedQueueJob,\n  ProjectionQueueJobFailureCode,\n  ProjectionRunRequestedQueueJob,\n  Queue,\n  QueueJob,\n  QueueJobFailure,\n  Queues,\n  SubagentQueueJob,\n  SyncQueueJobFailureCode,\n  SyncRunRequestedQueueJob,\n  VectorIndexingQueueJob,\n  WorkflowQueueJob,\n  WorkflowQueueJobFailureCode,\n} from \"./types\"\n\ntype QueueRecordState = \"queued\" | \"completed\" | \"failed\"\n\ninterface QueueRecord<TQueueJob extends QueueJob = QueueJob> {\n  readonly sequence: number\n  readonly queueId: string\n  job: TQueueJob\n  availableAtMs: number\n  readonly createdAtMs: number\n  leaseExpiryMs: number | null\n  // A leased job stays \"queued\" until a worker completes or fails it.\n  state: QueueRecordState\n  failure: QueueJobFailure | null\n  leaseId: string | null\n  claimedAt: string | null\n  leaseExpiresAt: string | null\n}\n\nfunction assertNonEmpty(value: string, fieldName: string): void {\n  if (value.trim().length === 0) {\n    throw new QueueError(`[Sixb] Queue ${fieldName} must not be empty`)\n  }\n}\n\nfunction parseTimestamp(value: string, fieldName: string): number {\n  const timestamp = Date.parse(value)\n\n  if (Number.isNaN(timestamp)) {\n    throw new QueueError(`[Sixb] Queue ${fieldName} must be a valid timestamp`)\n  }\n\n  return timestamp\n}\n\nfunction assertPositiveNumber(value: number, fieldName: string): void {\n  if (!Number.isFinite(value) || value <= 0) {\n    throw new QueueError(`[Sixb] Queue ${fieldName} must be greater than 0`)\n  }\n}\n\nfunction clearLease(record: QueueRecord): void {\n  record.leaseId = null\n  record.claimedAt = null\n  record.leaseExpiresAt = null\n  record.leaseExpiryMs = null\n}\n\n// Best-effort ordering is part of the contract; this keeps the in-memory provider deterministic.\nfunction compareQueueRecords(left: QueueRecord, right: QueueRecord): number {\n  const availableDifference = left.availableAtMs - right.availableAtMs\n  if (availableDifference !== 0) return availableDifference\n  const createdDifference = left.createdAtMs - right.createdAtMs\n  if (createdDifference !== 0) return createdDifference\n\n  return left.sequence - right.sequence\n}\n\nfunction createQueueJob<TQueueJob extends QueueJob>(\n  projectId: string,\n  newJob: NewQueueJob<TQueueJob>\n): TQueueJob {\n  const createdAt = new Date().toISOString()\n  const availableAt = newJob.availableAt ?? createdAt\n  parseTimestamp(availableAt, \"availableAt\")\n\n  return {\n    id: newJob.id ?? randomUUID(),\n    projectId,\n    createdAt,\n    availableAt,\n    attempt: 0,\n    metadata: newJob.metadata ? structuredClone(newJob.metadata) : undefined,\n    type: newJob.type,\n    payload: structuredClone(newJob.payload),\n  } as TQueueJob\n}\n\nfunction leaseExpiresAtMs(record: QueueRecord): number | null {\n  return record.leaseExpiryMs\n}\n\nfunction eligibleAt(record: QueueRecord): number {\n  return Math.max(record.availableAtMs, record.leaseExpiryMs ?? -Infinity)\n}\n\ninterface QueueLane {\n  // Terminal records remain here for caller-id deduplication, never in the delivery indexes.\n  readonly records: Map<string, QueueRecord>\n  readonly ready: IndexedHeap<QueueRecord>\n  readonly waiting: IndexedHeap<QueueRecord>\n}\n\nfunction toClaimedQueueJob<TQueueJob extends QueueJob>(\n  record: QueueRecord<TQueueJob>\n): ClaimedQueueJob<TQueueJob> {\n  if (!record.leaseId || !record.claimedAt || !record.leaseExpiresAt) {\n    throw new QueueError(`[Sixb] Queue job '${record.job.id}' is not currently leased`)\n  }\n\n  return {\n    leaseId: record.leaseId,\n    claimedAt: record.claimedAt,\n    leaseExpiresAt: record.leaseExpiresAt,\n    job: structuredClone(record.job),\n  }\n}\n\nclass InMemoryQueueStore {\n  private readonly projects = new Map<string, Map<string, QueueLane>>()\n  private nextSequence = 1\n\n  add<TQueueJob extends QueueJob>(projectId: string, queueId: string, job: TQueueJob): void {\n    const lane = this.lane(projectId, queueId)\n    const record: QueueRecord = {\n      sequence: this.nextSequence++,\n      queueId,\n      job,\n      availableAtMs: parseTimestamp(job.availableAt, \"job.availableAt\"),\n      createdAtMs: parseTimestamp(job.createdAt, \"job.createdAt\"),\n      leaseExpiryMs: null,\n      state: \"queued\",\n      failure: null,\n      leaseId: null,\n      claimedAt: null,\n      leaseExpiresAt: null,\n    }\n    lane.records.set(job.id, record)\n    this.schedule(projectId, record, Date.now())\n  }\n\n  find<TQueueJob extends QueueJob>(\n    projectId: string,\n    queueId: string,\n    jobId: string\n  ): QueueRecord<TQueueJob> | null {\n    return (this.projects.get(projectId)?.get(queueId)?.records.get(jobId) ??\n      null) as QueueRecord<TQueueJob> | null\n  }\n\n  schedule(projectId: string, record: QueueRecord, now: number): void {\n    const lane = this.lane(projectId, record.queueId)\n    if (record.state !== \"queued\") {\n      lane.ready.delete(record)\n      lane.waiting.delete(record)\n    } else if (eligibleAt(record) <= now) {\n      lane.waiting.delete(record)\n      lane.ready.set(record)\n    } else {\n      lane.ready.delete(record)\n      lane.waiting.set(record)\n    }\n  }\n\n  takeReady<TQueueJob extends QueueJob>(\n    projectId: string,\n    queueId: string,\n    now: number,\n    limit: number\n  ): QueueRecord<TQueueJob>[] {\n    const lane = this.projects.get(projectId)?.get(queueId)\n    if (!lane) return []\n    // Wake delayed jobs and expired leases, then order all ready jobs by the original contract.\n    // A lease expiry controls eligibility, not the priority of a redelivered job.\n    while (lane.waiting.peek() && eligibleAt(lane.waiting.peek()!) <= now) {\n      lane.ready.set(lane.waiting.pop()!)\n    }\n    const selected: QueueRecord[] = []\n    while (selected.length < limit) {\n      const record = lane.ready.peek()\n      if (!record || record.availableAtMs > now) break\n      lane.ready.pop()\n      // A backwards wall-clock adjustment can make a previously expired lease live again.\n      if (eligibleAt(record) > now) lane.waiting.set(record)\n      else selected.push(record)\n    }\n    return selected as QueueRecord<TQueueJob>[]\n  }\n\n  private lane(projectId: string, queueId: string): QueueLane {\n    let queues = this.projects.get(projectId)\n    if (!queues) {\n      queues = new Map()\n      this.projects.set(projectId, queues)\n    }\n    let lane = queues.get(queueId)\n    if (!lane) {\n      lane = {\n        records: new Map(),\n        ready: new IndexedHeap(compareQueueRecords),\n        waiting: new IndexedHeap(\n          (left, right) => eligibleAt(left) - eligibleAt(right) || left.sequence - right.sequence\n        ),\n      }\n      queues.set(queueId, lane)\n    }\n    return lane\n  }\n}\n\nclass InMemoryQueue<TQueueJob extends QueueJob, TFailureCode extends SixbErrorCode>\n  implements Queue<TQueueJob, TFailureCode>\n{\n  constructor(\n    private readonly store: InMemoryQueueStore,\n    private readonly queueId: string\n  ) {\n    assertNonEmpty(queueId, \"queueId\")\n  }\n\n  async enqueue(params: {\n    projectId: string\n    jobs: readonly NewQueueJob<TQueueJob>[]\n  }): Promise<readonly TQueueJob[]> {\n    assertNonEmpty(params.projectId, \"projectId\")\n\n    if (params.jobs.length === 0) {\n      return []\n    }\n\n    const createdJobs = params.jobs.map((job) => {\n      if (job.id !== undefined) assertNonEmpty(job.id, \"job.id\")\n      const existing = job.id\n        ? this.store.find<TQueueJob>(params.projectId, this.queueId, job.id)\n        : null\n      if (existing) return existing.job\n\n      const created = createQueueJob(params.projectId, job)\n      this.store.add(params.projectId, this.queueId, created)\n      return created\n    })\n\n    return createdJobs.map((job) => structuredClone(job))\n  }\n\n  async claim(params: {\n    projectId: string\n    workerId: string\n    limit?: number\n    leaseMs?: number\n  }): Promise<readonly ClaimedQueueJob<TQueueJob>[]> {\n    assertNonEmpty(params.projectId, \"projectId\")\n    assertNonEmpty(params.workerId, \"workerId\")\n\n    const limit = Math.trunc(params.limit ?? 1)\n    if (!(limit > 0)) {\n      return []\n    }\n\n    const leaseMs = params.leaseMs ?? 30_000\n    assertPositiveNumber(leaseMs, \"leaseMs\")\n\n    const now = Date.now()\n    const claimedAt = new Date(now).toISOString()\n    // Validate before removing candidates, and cache the same millisecond precision we return.\n    const leaseExpiry = new Date(now + leaseMs)\n    const leaseExpiresAt = leaseExpiry.toISOString()\n    const claimable = this.store.takeReady<TQueueJob>(params.projectId, this.queueId, now, limit)\n\n    return claimable.map((record) => {\n      // Attempts count claims so redelivery after lease expiry or retry is visible to workers.\n      record.job = {\n        ...record.job,\n        attempt: record.job.attempt + 1,\n      }\n      record.leaseId = randomUUID()\n      record.claimedAt = claimedAt\n      record.leaseExpiresAt = leaseExpiresAt\n      record.leaseExpiryMs = leaseExpiry.getTime()\n      this.store.schedule(params.projectId, record, now)\n\n      return toClaimedQueueJob(record)\n    })\n  }\n\n  async complete(params: { projectId: string; jobId: string; leaseId: string }): Promise<void> {\n    const record = this.requireActiveLease(params)\n    record.state = \"completed\"\n    clearLease(record)\n    this.store.schedule(params.projectId, record, Date.now())\n  }\n\n  async retry(params: {\n    projectId: string\n    jobId: string\n    leaseId: string\n    availableAt?: string\n  }): Promise<void> {\n    const record = this.requireActiveLease(params)\n    const availableAt = params.availableAt ?? new Date().toISOString()\n    const availableAtMs = parseTimestamp(availableAt, \"availableAt\")\n\n    record.availableAtMs = availableAtMs\n    record.job = {\n      ...record.job,\n      availableAt,\n    }\n    clearLease(record)\n    this.store.schedule(params.projectId, record, Date.now())\n  }\n\n  async fail(params: {\n    projectId: string\n    jobId: string\n    leaseId: string\n    failure: QueueJobFailure<TFailureCode>\n  }): Promise<void> {\n    const record = this.requireActiveLease(params)\n    record.state = \"failed\"\n    record.failure = structuredClone(params.failure)\n    clearLease(record)\n    this.store.schedule(params.projectId, record, Date.now())\n  }\n\n  async renewLease(params: {\n    projectId: string\n    jobId: string\n    leaseId: string\n    leaseMs: number\n  }): Promise<ClaimedQueueJob<TQueueJob> | null> {\n    assertPositiveNumber(params.leaseMs, \"leaseMs\")\n\n    const record = this.store.find<TQueueJob>(params.projectId, this.queueId, params.jobId)\n    if (!record || record.state !== \"queued\") {\n      return null\n    }\n\n    const now = Date.now()\n    const expiresAt = leaseExpiresAtMs(record)\n    if (record.leaseId !== params.leaseId || expiresAt === null) {\n      return null\n    }\n\n    if (expiresAt <= now) {\n      return null\n    }\n\n    const leaseExpiry = new Date(now + params.leaseMs)\n    record.leaseExpiresAt = leaseExpiry.toISOString()\n    record.leaseExpiryMs = leaseExpiry.getTime()\n    this.store.schedule(params.projectId, record, now)\n    return toClaimedQueueJob(record)\n  }\n\n  private requireActiveLease(params: {\n    projectId: string\n    jobId: string\n    leaseId: string\n  }): QueueRecord<TQueueJob> {\n    assertNonEmpty(params.projectId, \"projectId\")\n    assertNonEmpty(params.jobId, \"jobId\")\n    assertNonEmpty(params.leaseId, \"leaseId\")\n\n    const record = this.store.find<TQueueJob>(params.projectId, this.queueId, params.jobId)\n\n    if (!record) {\n      throw new QueueError(`[Sixb] Unknown queue job '${params.jobId}'`)\n    }\n\n    if (record.state !== \"queued\") {\n      throw new QueueError(`[Sixb] Queue job '${params.jobId}' is no longer active`)\n    }\n\n    if (record.leaseId !== params.leaseId || !record.leaseExpiresAt) {\n      throw new QueueError(`[Sixb] Lease mismatch for queue job '${params.jobId}'`)\n    }\n\n    const expiresAt = leaseExpiresAtMs(record)\n    if (expiresAt === null || expiresAt <= Date.now()) {\n      throw new QueueError(`[Sixb] Lease for queue job '${params.jobId}' has expired`)\n    }\n\n    return record\n  }\n}\n\nexport class InMemoryQueues implements Queues {\n  readonly scope = \"process\" as const\n  private readonly store = new InMemoryQueueStore()\n\n  readonly vectorIndexing = new InMemoryQueue<\n    VectorIndexingQueueJob,\n    \"internal.unexpected\" | \"runtime.cancelled\"\n  >(this.store, \"vector.indexing\")\n  readonly syncRuns = new InMemoryQueue<SyncRunRequestedQueueJob, SyncQueueJobFailureCode>(\n    this.store,\n    \"sync.runs\"\n  )\n  readonly pipelines = new InMemoryQueue<PipelineRunRequestedQueueJob, PipelineQueueJobFailureCode>(\n    this.store,\n    \"pipeline.runs\"\n  )\n  readonly projections = new InMemoryQueue<\n    ProjectionRunRequestedQueueJob,\n    ProjectionQueueJobFailureCode\n  >(this.store, \"projection.runs\")\n  readonly workflows = new InMemoryQueue<WorkflowQueueJob, WorkflowQueueJobFailureCode>(\n    this.store,\n    \"workflow.runs\"\n  )\n  readonly actions = new InMemoryQueue<ActionRunRequestedQueueJob, ActionQueueJobFailureCode>(\n    this.store,\n    \"action.runs\"\n  )\n  readonly agents = new InMemoryQueue<AgentQueueJob, AgentQueueJobFailureCode>(\n    this.store,\n    \"agent.runs\"\n  )\n  readonly agentChildren = new InMemoryQueue<SubagentQueueJob, AgentQueueJobFailureCode>(\n    this.store,\n    \"agent.children\"\n  )\n\n  /** Nothing to reach: the store is a field of this object. */\n  health(): Promise<void> {\n    return Promise.resolve()\n  }\n}\n",
+    "/** Internal mutable priority index. Updating or removing an entry never leaves stale copies. */\nexport class IndexedHeap<T> {\n  private readonly items: T[] = []\n  private readonly positions = new Map<T, number>()\n\n  constructor(private readonly compare: (left: T, right: T) => number) {}\n\n  peek(): T | undefined {\n    return this.items[0]\n  }\n\n  pop(): T | undefined {\n    const first = this.peek()\n    if (first !== undefined) this.delete(first)\n    return first\n  }\n\n  set(item: T): void {\n    const index = this.positions.get(item)\n    if (index === undefined) {\n      this.positions.set(item, this.items.length)\n      this.items.push(item)\n      this.up(this.items.length - 1)\n    } else {\n      this.down(this.up(index))\n    }\n  }\n\n  delete(item: T): void {\n    const index = this.positions.get(item)\n    if (index === undefined) return\n    const last = this.items.pop()!\n    this.positions.delete(item)\n    if (index === this.items.length) return\n    this.items[index] = last\n    this.positions.set(last, index)\n    this.down(this.up(index))\n  }\n\n  private up(start: number): number {\n    let index = start\n    while (index > 0) {\n      const parent = Math.floor((index - 1) / 2)\n      if (this.compare(this.items[parent]!, this.items[index]!) <= 0) break\n      this.swap(parent, index)\n      index = parent\n    }\n    return index\n  }\n\n  private down(start: number): void {\n    let index = start\n    while (index * 2 + 1 < this.items.length) {\n      const left = index * 2 + 1\n      const right = left + 1\n      const child =\n        right < this.items.length && this.compare(this.items[right]!, this.items[left]!) < 0\n          ? right\n          : left\n      if (this.compare(this.items[index]!, this.items[child]!) <= 0) break\n      this.swap(index, child)\n      index = child\n    }\n  }\n\n  private swap(left: number, right: number): void {\n    const a = this.items[left]!\n    const b = this.items[right]!\n    this.items[left] = b\n    this.items[right] = a\n    this.positions.set(a, right)\n    this.positions.set(b, left)\n  }\n}\n"
+  ],
+  "mappings": ";;AAGO,MAAM,oBAAmB,MAAM;AAAA,EAC3B,OAAO;AAClB;;ACLA;;;ACCO,MAAM,YAAe;AAAA,EAIG;AAAA,EAHZ,QAAa,CAAC;AAAA,EACd,YAAY,IAAI;AAAA,EAEjC,WAAW,CAAkB,SAAwC;AAAA,IAAxC;AAAA;AAAA,EAE7B,IAAI,GAAkB;AAAA,IACpB,OAAO,KAAK,MAAM;AAAA;AAAA,EAGpB,GAAG,GAAkB;AAAA,IACnB,MAAM,QAAQ,KAAK,KAAK;AAAA,IACxB,IAAI,UAAU;AAAA,MAAW,KAAK,OAAO,KAAK;AAAA,IAC1C,OAAO;AAAA;AAAA,EAGT,GAAG,CAAC,MAAe;AAAA,IACjB,MAAM,QAAQ,KAAK,UAAU,IAAI,IAAI;AAAA,IACrC,IAAI,UAAU,WAAW;AAAA,MACvB,KAAK,UAAU,IAAI,MAAM,KAAK,MAAM,MAAM;AAAA,MAC1C,KAAK,MAAM,KAAK,IAAI;AAAA,MACpB,KAAK,GAAG,KAAK,MAAM,SAAS,CAAC;AAAA,IAC/B,EAAO;AAAA,MACL,KAAK,KAAK,KAAK,GAAG,KAAK,CAAC;AAAA;AAAA;AAAA,EAI5B,MAAM,CAAC,MAAe;AAAA,IACpB,MAAM,QAAQ,KAAK,UAAU,IAAI,IAAI;AAAA,IACrC,IAAI,UAAU;AAAA,MAAW;AAAA,IACzB,MAAM,OAAO,KAAK,MAAM,IAAI;AAAA,IAC5B,KAAK,UAAU,OAAO,IAAI;AAAA,IAC1B,IAAI,UAAU,KAAK,MAAM;AAAA,MAAQ;AAAA,IACjC,KAAK,MAAM,SAAS;AAAA,IACpB,KAAK,UAAU,IAAI,MAAM,KAAK;AAAA,IAC9B,KAAK,KAAK,KAAK,GAAG,KAAK,CAAC;AAAA;AAAA,EAGlB,EAAE,CAAC,OAAuB;AAAA,IAChC,IAAI,QAAQ;AAAA,IACZ,OAAO,QAAQ,GAAG;AAAA,MAChB,MAAM,SAAS,KAAK,OAAO,QAAQ,KAAK,CAAC;AAAA,MACzC,IAAI,KAAK,QAAQ,KAAK,MAAM,SAAU,KAAK,MAAM,MAAO,KAAK;AAAA,QAAG;AAAA,MAChE,KAAK,KAAK,QAAQ,KAAK;AAAA,MACvB,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA;AAAA,EAGD,IAAI,CAAC,OAAqB;AAAA,IAChC,IAAI,QAAQ;AAAA,IACZ,OAAO,QAAQ,IAAI,IAAI,KAAK,MAAM,QAAQ;AAAA,MACxC,MAAM,OAAO,QAAQ,IAAI;AAAA,MACzB,MAAM,QAAQ,OAAO;AAAA,MACrB,MAAM,QACJ,QAAQ,KAAK,MAAM,UAAU,KAAK,QAAQ,KAAK,MAAM,QAAS,KAAK,MAAM,KAAM,IAAI,IAC/E,QACA;AAAA,MACN,IAAI,KAAK,QAAQ,KAAK,MAAM,QAAS,KAAK,MAAM,MAAO,KAAK;AAAA,QAAG;AAAA,MAC/D,KAAK,KAAK,OAAO,KAAK;AAAA,MACtB,QAAQ;AAAA,IACV;AAAA;AAAA,EAGM,IAAI,CAAC,MAAc,OAAqB;AAAA,IAC9C,MAAM,IAAI,KAAK,MAAM;AAAA,IACrB,MAAM,IAAI,KAAK,MAAM;AAAA,IACrB,KAAK,MAAM,QAAQ;AAAA,IACnB,KAAK,MAAM,SAAS;AAAA,IACpB,KAAK,UAAU,IAAI,GAAG,KAAK;AAAA,IAC3B,KAAK,UAAU,IAAI,GAAG,IAAI;AAAA;AAE9B;;;AD7BA,SAAS,cAAc,CAAC,OAAe,WAAyB;AAAA,EAC9D,IAAI,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,IAC7B,MAAM,IAAI,YAAW,gBAAgB,6BAA6B;AAAA,EACpE;AAAA;AAGF,SAAS,cAAc,CAAC,OAAe,WAA2B;AAAA,EAChE,MAAM,YAAY,KAAK,MAAM,KAAK;AAAA,EAElC,IAAI,OAAO,MAAM,SAAS,GAAG;AAAA,IAC3B,MAAM,IAAI,YAAW,gBAAgB,qCAAqC;AAAA,EAC5E;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,oBAAoB,CAAC,OAAe,WAAyB;AAAA,EACpE,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG;AAAA,IACzC,MAAM,IAAI,YAAW,gBAAgB,kCAAkC;AAAA,EACzE;AAAA;AAGF,SAAS,UAAU,CAAC,QAA2B;AAAA,EAC7C,OAAO,UAAU;AAAA,EACjB,OAAO,YAAY;AAAA,EACnB,OAAO,iBAAiB;AAAA,EACxB,OAAO,gBAAgB;AAAA;AAIzB,SAAS,mBAAmB,CAAC,MAAmB,OAA4B;AAAA,EAC1E,MAAM,sBAAsB,KAAK,gBAAgB,MAAM;AAAA,EACvD,IAAI,wBAAwB;AAAA,IAAG,OAAO;AAAA,EACtC,MAAM,oBAAoB,KAAK,cAAc,MAAM;AAAA,EACnD,IAAI,sBAAsB;AAAA,IAAG,OAAO;AAAA,EAEpC,OAAO,KAAK,WAAW,MAAM;AAAA;AAG/B,SAAS,cAA0C,CACjD,WACA,QACW;AAAA,EACX,MAAM,YAAY,IAAI,KAAK,EAAE,YAAY;AAAA,EACzC,MAAM,cAAc,OAAO,eAAe;AAAA,EAC1C,eAAe,aAAa,aAAa;AAAA,EAEzC,OAAO;AAAA,IACL,IAAI,OAAO,MAAM,WAAW;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,UAAU,OAAO,WAAW,gBAAgB,OAAO,QAAQ,IAAI;AAAA,IAC/D,MAAM,OAAO;AAAA,IACb,SAAS,gBAAgB,OAAO,OAAO;AAAA,EACzC;AAAA;AAGF,SAAS,gBAAgB,CAAC,QAAoC;AAAA,EAC5D,OAAO,OAAO;AAAA;AAGhB,SAAS,UAAU,CAAC,QAA6B;AAAA,EAC/C,OAAO,KAAK,IAAI,OAAO,eAAe,OAAO,iBAAiB,SAAS;AAAA;AAUzE,SAAS,iBAA6C,CACpD,QAC4B;AAAA,EAC5B,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,aAAa,CAAC,OAAO,gBAAgB;AAAA,IAClE,MAAM,IAAI,YAAW,qBAAqB,OAAO,IAAI,6BAA6B;AAAA,EACpF;AAAA,EAEA,OAAO;AAAA,IACL,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,gBAAgB,OAAO;AAAA,IACvB,KAAK,gBAAgB,OAAO,GAAG;AAAA,EACjC;AAAA;AAAA;AAGF,MAAM,mBAAmB;AAAA,EACN,WAAW,IAAI;AAAA,EACxB,eAAe;AAAA,EAEvB,GAA+B,CAAC,WAAmB,SAAiB,KAAsB;AAAA,IACxF,MAAM,OAAO,KAAK,KAAK,WAAW,OAAO;AAAA,IACzC,MAAM,SAAsB;AAAA,MAC1B,UAAU,KAAK;AAAA,MACf;AAAA,MACA;AAAA,MACA,eAAe,eAAe,IAAI,aAAa,iBAAiB;AAAA,MAChE,aAAa,eAAe,IAAI,WAAW,eAAe;AAAA,MAC1D,eAAe;AAAA,MACf,OAAO;AAAA,MACP,SAAS;AAAA,MACT,SAAS;AAAA,MACT,WAAW;AAAA,MACX,gBAAgB;AAAA,IAClB;AAAA,IACA,KAAK,QAAQ,IAAI,IAAI,IAAI,MAAM;AAAA,IAC/B,KAAK,SAAS,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA;AAAA,EAG7C,IAAgC,CAC9B,WACA,SACA,OAC+B;AAAA,IAC/B,OAAQ,KAAK,SAAS,IAAI,SAAS,GAAG,IAAI,OAAO,GAAG,QAAQ,IAAI,KAAK,KACnE;AAAA;AAAA,EAGJ,QAAQ,CAAC,WAAmB,QAAqB,KAAmB;AAAA,IAClE,MAAM,OAAO,KAAK,KAAK,WAAW,OAAO,OAAO;AAAA,IAChD,IAAI,OAAO,UAAU,UAAU;AAAA,MAC7B,KAAK,MAAM,OAAO,MAAM;AAAA,MACxB,KAAK,QAAQ,OAAO,MAAM;AAAA,IAC5B,EAAO,SAAI,WAAW,MAAM,KAAK,KAAK;AAAA,MACpC,KAAK,QAAQ,OAAO,MAAM;AAAA,MAC1B,KAAK,MAAM,IAAI,MAAM;AAAA,IACvB,EAAO;AAAA,MACL,KAAK,MAAM,OAAO,MAAM;AAAA,MACxB,KAAK,QAAQ,IAAI,MAAM;AAAA;AAAA;AAAA,EAI3B,SAAqC,CACnC,WACA,SACA,KACA,OAC0B;AAAA,IAC1B,MAAM,OAAO,KAAK,SAAS,IAAI,SAAS,GAAG,IAAI,OAAO;AAAA,IACtD,IAAI,CAAC;AAAA,MAAM,OAAO,CAAC;AAAA,IAGnB,OAAO,KAAK,QAAQ,KAAK,KAAK,WAAW,KAAK,QAAQ,KAAK,CAAE,KAAK,KAAK;AAAA,MACrE,KAAK,MAAM,IAAI,KAAK,QAAQ,IAAI,CAAE;AAAA,IACpC;AAAA,IACA,MAAM,WAA0B,CAAC;AAAA,IACjC,OAAO,SAAS,SAAS,OAAO;AAAA,MAC9B,MAAM,SAAS,KAAK,MAAM,KAAK;AAAA,MAC/B,IAAI,CAAC,UAAU,OAAO,gBAAgB;AAAA,QAAK;AAAA,MAC3C,KAAK,MAAM,IAAI;AAAA,MAEf,IAAI,WAAW,MAAM,IAAI;AAAA,QAAK,KAAK,QAAQ,IAAI,MAAM;AAAA,MAChD;AAAA,iBAAS,KAAK,MAAM;AAAA,IAC3B;AAAA,IACA,OAAO;AAAA;AAAA,EAGD,IAAI,CAAC,WAAmB,SAA4B;AAAA,IAC1D,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS;AAAA,IACxC,IAAI,CAAC,QAAQ;AAAA,MACX,SAAS,IAAI;AAAA,MACb,KAAK,SAAS,IAAI,WAAW,MAAM;AAAA,IACrC;AAAA,IACA,IAAI,OAAO,OAAO,IAAI,OAAO;AAAA,IAC7B,IAAI,CAAC,MAAM;AAAA,MACT,OAAO;AAAA,QACL,SAAS,IAAI;AAAA,QACb,OAAO,IAAI,YAAY,mBAAmB;AAAA,QAC1C,SAAS,IAAI,YACX,CAAC,MAAM,UAAU,WAAW,IAAI,IAAI,WAAW,KAAK,KAAK,KAAK,WAAW,MAAM,QACjF;AAAA,MACF;AAAA,MACA,OAAO,IAAI,SAAS,IAAI;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA;AAEX;AAAA;AAEA,MAAM,cAEN;AAAA,EAEqB;AAAA,EACA;AAAA,EAFnB,WAAW,CACQ,OACA,SACjB;AAAA,IAFiB;AAAA,IACA;AAAA,IAEjB,eAAe,SAAS,SAAS;AAAA;AAAA,OAG7B,QAAO,CAAC,QAGoB;AAAA,IAChC,eAAe,OAAO,WAAW,WAAW;AAAA,IAE5C,IAAI,OAAO,KAAK,WAAW,GAAG;AAAA,MAC5B,OAAO,CAAC;AAAA,IACV;AAAA,IAEA,MAAM,cAAc,OAAO,KAAK,IAAI,CAAC,QAAQ;AAAA,MAC3C,IAAI,IAAI,OAAO;AAAA,QAAW,eAAe,IAAI,IAAI,QAAQ;AAAA,MACzD,MAAM,WAAW,IAAI,KACjB,KAAK,MAAM,KAAgB,OAAO,WAAW,KAAK,SAAS,IAAI,EAAE,IACjE;AAAA,MACJ,IAAI;AAAA,QAAU,OAAO,SAAS;AAAA,MAE9B,MAAM,UAAU,eAAe,OAAO,WAAW,GAAG;AAAA,MACpD,KAAK,MAAM,IAAI,OAAO,WAAW,KAAK,SAAS,OAAO;AAAA,MACtD,OAAO;AAAA,KACR;AAAA,IAED,OAAO,YAAY,IAAI,CAAC,QAAQ,gBAAgB,GAAG,CAAC;AAAA;AAAA,OAGhD,MAAK,CAAC,QAKuC;AAAA,IACjD,eAAe,OAAO,WAAW,WAAW;AAAA,IAC5C,eAAe,OAAO,UAAU,UAAU;AAAA,IAE1C,MAAM,QAAQ,KAAK,MAAM,OAAO,SAAS,CAAC;AAAA,IAC1C,IAAI,EAAE,QAAQ,IAAI;AAAA,MAChB,OAAO,CAAC;AAAA,IACV;AAAA,IAEA,MAAM,UAAU,OAAO,WAAW;AAAA,IAClC,qBAAqB,SAAS,SAAS;AAAA,IAEvC,MAAM,MAAM,KAAK,IAAI;AAAA,IACrB,MAAM,YAAY,IAAI,KAAK,GAAG,EAAE,YAAY;AAAA,IAE5C,MAAM,cAAc,IAAI,KAAK,MAAM,OAAO;AAAA,IAC1C,MAAM,iBAAiB,YAAY,YAAY;AAAA,IAC/C,MAAM,YAAY,KAAK,MAAM,UAAqB,OAAO,WAAW,KAAK,SAAS,KAAK,KAAK;AAAA,IAE5F,OAAO,UAAU,IAAI,CAAC,WAAW;AAAA,MAE/B,OAAO,MAAM;AAAA,WACR,OAAO;AAAA,QACV,SAAS,OAAO,IAAI,UAAU;AAAA,MAChC;AAAA,MACA,OAAO,UAAU,WAAW;AAAA,MAC5B,OAAO,YAAY;AAAA,MACnB,OAAO,iBAAiB;AAAA,MACxB,OAAO,gBAAgB,YAAY,QAAQ;AAAA,MAC3C,KAAK,MAAM,SAAS,OAAO,WAAW,QAAQ,GAAG;AAAA,MAEjD,OAAO,kBAAkB,MAAM;AAAA,KAChC;AAAA;AAAA,OAGG,SAAQ,CAAC,QAA8E;AAAA,IAC3F,MAAM,SAAS,KAAK,mBAAmB,MAAM;AAAA,IAC7C,OAAO,QAAQ;AAAA,IACf,WAAW,MAAM;AAAA,IACjB,KAAK,MAAM,SAAS,OAAO,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA;AAAA,OAGpD,MAAK,CAAC,QAKM;AAAA,IAChB,MAAM,SAAS,KAAK,mBAAmB,MAAM;AAAA,IAC7C,MAAM,cAAc,OAAO,eAAe,IAAI,KAAK,EAAE,YAAY;AAAA,IACjE,MAAM,gBAAgB,eAAe,aAAa,aAAa;AAAA,IAE/D,OAAO,gBAAgB;AAAA,IACvB,OAAO,MAAM;AAAA,SACR,OAAO;AAAA,MACV;AAAA,IACF;AAAA,IACA,WAAW,MAAM;AAAA,IACjB,KAAK,MAAM,SAAS,OAAO,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA;AAAA,OAGpD,KAAI,CAAC,QAKO;AAAA,IAChB,MAAM,SAAS,KAAK,mBAAmB,MAAM;AAAA,IAC7C,OAAO,QAAQ;AAAA,IACf,OAAO,UAAU,gBAAgB,OAAO,OAAO;AAAA,IAC/C,WAAW,MAAM;AAAA,IACjB,KAAK,MAAM,SAAS,OAAO,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA;AAAA,OAGpD,WAAU,CAAC,QAK8B;AAAA,IAC7C,qBAAqB,OAAO,SAAS,SAAS;AAAA,IAE9C,MAAM,SAAS,KAAK,MAAM,KAAgB,OAAO,WAAW,KAAK,SAAS,OAAO,KAAK;AAAA,IACtF,IAAI,CAAC,UAAU,OAAO,UAAU,UAAU;AAAA,MACxC,OAAO;AAAA,IACT;AAAA,IAEA,MAAM,MAAM,KAAK,IAAI;AAAA,IACrB,MAAM,YAAY,iBAAiB,MAAM;AAAA,IACzC,IAAI,OAAO,YAAY,OAAO,WAAW,cAAc,MAAM;AAAA,MAC3D,OAAO;AAAA,IACT;AAAA,IAEA,IAAI,aAAa,KAAK;AAAA,MACpB,OAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,IAAI,KAAK,MAAM,OAAO,OAAO;AAAA,IACjD,OAAO,iBAAiB,YAAY,YAAY;AAAA,IAChD,OAAO,gBAAgB,YAAY,QAAQ;AAAA,IAC3C,KAAK,MAAM,SAAS,OAAO,WAAW,QAAQ,GAAG;AAAA,IACjD,OAAO,kBAAkB,MAAM;AAAA;AAAA,EAGzB,kBAAkB,CAAC,QAIA;AAAA,IACzB,eAAe,OAAO,WAAW,WAAW;AAAA,IAC5C,eAAe,OAAO,OAAO,OAAO;AAAA,IACpC,eAAe,OAAO,SAAS,SAAS;AAAA,IAExC,MAAM,SAAS,KAAK,MAAM,KAAgB,OAAO,WAAW,KAAK,SAAS,OAAO,KAAK;AAAA,IAEtF,IAAI,CAAC,QAAQ;AAAA,MACX,MAAM,IAAI,YAAW,6BAA6B,OAAO,QAAQ;AAAA,IACnE;AAAA,IAEA,IAAI,OAAO,UAAU,UAAU;AAAA,MAC7B,MAAM,IAAI,YAAW,qBAAqB,OAAO,4BAA4B;AAAA,IAC/E;AAAA,IAEA,IAAI,OAAO,YAAY,OAAO,WAAW,CAAC,OAAO,gBAAgB;AAAA,MAC/D,MAAM,IAAI,YAAW,wCAAwC,OAAO,QAAQ;AAAA,IAC9E;AAAA,IAEA,MAAM,YAAY,iBAAiB,MAAM;AAAA,IACzC,IAAI,cAAc,QAAQ,aAAa,KAAK,IAAI,GAAG;AAAA,MACjD,MAAM,IAAI,YAAW,+BAA+B,OAAO,oBAAoB;AAAA,IACjF;AAAA,IAEA,OAAO;AAAA;AAEX;AAAA;AAEO,MAAM,gBAAiC;AAAA,EACnC,QAAQ;AAAA,EACA,QAAQ,IAAI;AAAA,EAEpB,iBAAiB,IAAI,cAG5B,KAAK,OAAO,iBAAiB;AAAA,EACtB,WAAW,IAAI,cACtB,KAAK,OACL,WACF;AAAA,EACS,YAAY,IAAI,cACvB,KAAK,OACL,eACF;AAAA,EACS,cAAc,IAAI,cAGzB,KAAK,OAAO,iBAAiB;AAAA,EACtB,YAAY,IAAI,cACvB,KAAK,OACL,eACF;AAAA,EACS,UAAU,IAAI,cACrB,KAAK,OACL,aACF;AAAA,EACS,SAAS,IAAI,cACpB,KAAK,OACL,YACF;AAAA,EACS,gBAAgB,IAAI,cAC3B,KAAK,OACL,gBACF;AAAA,EAGA,MAAM,GAAkB;AAAA,IACtB,OAAO,QAAQ,QAAQ;AAAA;AAE3B;",
+  "debugId": "50CDF8905DC39EBB64756E2164756E21",
+  "names": []
+}

package/dist/{chunk-gqh45d2n.js → chunk-ht4a7mjg.js}

@@ -6,11 +6,11 @@ import {
   telemetryPointKey2,
   linkRefSortKey2,
   linkScopeSortKey2
-} from "./chunk-c5rkjrgp.js";
+} from "./chunk-7ytf06d3.js";
 import {
   MaterializationValidationError2,
   MaterializationConflictError2
-} from "./chunk-yv79ncbv.js";
+} from "./chunk-96yw3pwd.js";
 import {
   assertJsonValue2,
   stableJsonStringify2
@@ -150,7 +150,7 @@ function assertWorkRecord2(record, header) {
     return;
   }
   if (record.kind === "event") {
-    if (!/^[0-9a-f]+$/.test(record.sortKey) || !Number.isSafeInteger(record.eventKindRank) || record.eventKindRank < 0 || record.eventKindRank !== materializationEventKindOrdinal2(record.draft.type) || record.draft.projectId !== header.commit.projectId || record.draft.commitId !== header.commit.id || record.draft.occurredAt !== header.commit.committedAt || stableJsonStringify2(record.draft.origin) !== stableJsonStringify2(header.commit.origin) || stableJsonStringify2(record.draft.actor ?? null) !== stableJsonStringify2(header.commit.actor ?? null)) {
+    if (!/^[0-9a-f]+$/.test(record.sortKey) || !Number.isSafeInteger(record.eventKindRank) || record.eventKindRank < 0 || record.eventKindRank !== materializationEventKindOrdinal2(record.draft.type) || record.draft.projectId !== header.commit.projectId || record.draft.commitId !== header.commit.id || record.draft.occurredAt !== header.commit.committedAt || stableJsonStringify2(record.draft.origin) !== stableJsonStringify2(header.commit.origin) || !sameAttribution(record.draft, header.commit)) {
       throw new MaterializationValidationError2("Materialization event work is invalid.");
     }
     return;
@@ -270,7 +270,7 @@ function assertPointWriteCorrelation(value, commit) {
 }
 function assertOutboxCorrelation(value, commit) {
   const { envelope } = value;
-  if (envelope.projectId !== commit.projectId || envelope.commitId !== commit.id || envelope.occurredAt !== commit.committedAt || value.availableAt !== commit.committedAt || value.createdAt !== commit.committedAt || stableJsonStringify2(envelope.origin) !== stableJsonStringify2(commit.origin) || stableJsonStringify2(envelope.actor ?? null) !== stableJsonStringify2(commit.actor ?? null) || !Number.isSafeInteger(envelope.commitOrdinal) || envelope.commitOrdinal < 0 || envelope.id !== createEventId2(commit.projectId, commit.id, envelope.commitOrdinal)) {
+  if (envelope.projectId !== commit.projectId || envelope.commitId !== commit.id || envelope.occurredAt !== commit.committedAt || value.availableAt !== commit.committedAt || value.createdAt !== commit.committedAt || stableJsonStringify2(envelope.origin) !== stableJsonStringify2(commit.origin) || !sameAttribution(envelope, commit) || !Number.isSafeInteger(envelope.commitOrdinal) || envelope.commitOrdinal < 0 || envelope.id !== createEventId2(commit.projectId, commit.id, envelope.commitOrdinal)) {
     invalidCorrelation2("Outbox event does not correlate with its materialization commit.");
   }
 }
@@ -289,6 +289,9 @@ function assertLinkRefEqual(left, right, label) {
     invalidCorrelation2(`${label} row and expected references differ.`);
   }
 }
+function sameAttribution(event, commit) {
+  return stableJsonStringify2(event.requestedBy ?? null) === stableJsonStringify2(commit.requestedBy ?? null) && stableJsonStringify2(event.executor) === stableJsonStringify2(commit.executor);
+}
 
 // src/storage/ontology/provider-header-validation.ts
 function assertMaterializationHeader2({ commit }) {
@@ -313,6 +316,40 @@ function assertCommitEnvelope(commit) {
   assertNonblank2(commit.executionId, "Materialization execution id");
   assertNonblank2(commit.ontologyRevision, "Materialization ontology revision");
   assertTimestamp2(commit.committedAt, "Materialization commit time");
+  assertCommitAttribution(commit);
+}
+function assertCommitAttribution(commit) {
+  const { requestedBy, executor } = commit;
+  if (requestedBy !== undefined) {
+    if (requestedBy.type !== "user" && requestedBy.type !== "serviceAccount") {
+      invalidCorrelation2("Materialization requester must be a user or service account.");
+    }
+    assertNonblank2(requestedBy.id, "Materialization requester id");
+  }
+  switch (executor?.type) {
+    case "request":
+      assertNonblank2(executor.requestId, "Materialization executor request id");
+      return;
+    case "primitive":
+      assertNonblank2(executor.kind, "Materialization executor primitive kind");
+      assertNonblank2(executor.id, "Materialization executor primitive id");
+      assertNonblank2(executor.runId, "Materialization executor run id");
+      return;
+    case "agent":
+      assertNonblank2(executor.runId, "Materialization executor Agent run id");
+      return;
+    case "kernel":
+      assertNonblank2(executor.operation?.type, "Materialization executor kernel operation");
+      return;
+    default:
+      invalidCorrelation2("Materialization executor is invalid.");
+  }
+}
+function assertPrimitiveExecutor(commit, kind, id, runId) {
+  const { executor } = commit;
+  if (executor.type !== "primitive" || executor.kind !== kind || executor.id !== id || executor.runId !== runId) {
+    invalidCorrelation2(`Commit ${kind} origin does not match its executor.`);
+  }
 }
 function assertEditCommit(commit, intent) {
   assertNonnegativeInteger2(intent.operationCount, "Edit commit operation count");
@@ -320,6 +357,7 @@ function assertEditCommit(commit, intent) {
     case "action":
       assertNonblank2(commit.origin.actionId, "Action origin action id");
       assertNonblank2(commit.origin.runId, "Action origin run id");
+      assertPrimitiveExecutor(commit, "action", commit.origin.actionId, commit.origin.runId);
       return;
     case "runtime":
       assertNonblank2(commit.origin.requestId, "Runtime origin request id");
@@ -341,6 +379,7 @@ function assertProjectionCommit(commit, intent) {
   if (commit.origin.datasetId !== intent.datasetVersion.datasetId || commit.origin.datasetVersionId !== intent.datasetVersion.versionId) {
     invalidCorrelation2("Projection commit origin does not match its dataset version.");
   }
+  assertPrimitiveExecutor(commit, "projection", commit.origin.projectionId, commit.origin.projectionRunId);
 }
 function assertTelemetryCommit(commit, intent) {
   if (commit.origin.kind !== "telemetry") {
@@ -387,6 +426,7 @@ function assertProjectionTelemetryCommit(commit, source, inputPointCount) {
   if (origin.batchOrdinal !== source.batchOrdinal) {
     invalidCorrelation2("Projection telemetry origin does not match its batch ordinal.");
   }
+  assertPrimitiveExecutor(commit, "projection", origin.projectionId, origin.projectionRunId);
 }
 function assertProjectionTelemetryBatch(source, inputPointCount) {
   assertNonnegativeInteger2(source.batchOrdinal, "Projection telemetry batch ordinal");
@@ -636,6 +676,36 @@ function sameNonnegativeCounts2(actual, expected) {
 function effectiveConflict2(message) {
   return new MaterializationConflictError2("effective-state", message);
 }
+function assertExpectedObjectRevision2(current, expected) {
+  if (!expected.exists) {
+    if (current) {
+      throw expectationConflict(`Expected object ${objectRefKey2(expected.ref)} to be absent.`);
+    }
+    return;
+  }
+  if (!current || current.version !== expected.version || current.lastCommitId !== expected.lastCommitId) {
+    throw expectationConflict(`Expected object ${objectRefKey2(expected.ref)} changed.`);
+  }
+}
+function assertExpectedLinkRevision2(currentLastCommitId, expected) {
+  if (!expected.exists) {
+    if (currentLastCommitId !== undefined) {
+      throw expectationConflict(`Expected link ${linkRefKey2(expected.ref)} to be absent.`);
+    }
+    return;
+  }
+  if (currentLastCommitId === undefined || currentLastCommitId !== expected.lastCommitId) {
+    throw expectationConflict(`Expected link ${linkRefKey2(expected.ref)} changed.`);
+  }
+}
+function assertExpectedLinkScopeRevision2(currentFingerprint, expected) {
+  if (currentFingerprint === expected.fingerprint)
+    return;
+  throw expectationConflict(`Expected link scope changed for ${expected.source.objectTypeId}:${expected.source.primaryId}.${expected.linkId}.`);
+}
+function expectationConflict(message) {
+  return new MaterializationConflictError2("expectation", message);
+}
 function materializationWorkColumns2(record) {
   if (record.kind === "plan") {
     return {
@@ -927,6 +997,6 @@ function sourceConflict2(message) {
   return new MaterializationConflictError2("source-materialization", message);
 }
 
-export { ONTOLOGY_MATERIALIZATION_EVENT_KIND_ORDER2, materializationEventKindOrdinal2, sha256Canonical2, createRequestHash2, createCommitId2, createEventId2, assertNonblank2, assertPositiveInteger2, assertNonnegativeInteger2, assertTimestamp2, invalidCorrelation2, materializationApplyPhase, assertPageRows2, materializationChunkRows2, materializationPlanItems2, assertWorkRecord2, workUniquenessKey2, comparePlanWork2, compareCardinalityWork2, compareEventWork2, assertPlanChunkCorrelations2, assertMaterializationHeader2, startScopeAccumulator2, appendScopeSnapshot2, finishScopeAccumulator2, linkSlotOverrideValue2, ProviderMaterializationSessionState2, ProviderMaterializationTransactionLifecycle2, prepareMaterializationWork2, correlateMaterializationChunk2, assertMaterializationFinalizationCorrelation2, assertMaterializationLaneCompletion2, assertSourceActivationCorrelation2, uniqueSorted2, sameNonnegativeCounts2, effectiveConflict2, materializationWorkColumns2, duplicateMaterializationWork2, canonicalJson2, originColumns2, originWhere2, objectRefFromColumns2, linkRefFromColumns2, sourceEntityKey2, sourceStageRows2, sourceStageRow2, sourceStageRoots2, reconcileSourceStageRows2, sourceMaterializationIdentity2, assertSourceBeginInput2, assertSourceWriteIdentity2, assertSourceProject2, assertSourceExecutionIdentity2, assertSourceCandidateOwner2, assertSourceStagedRow2, sourceEntityColumns2, utf8SortKey2, isExactStagingManifest2, sourceConflict2 };
+export { ONTOLOGY_MATERIALIZATION_EVENT_KIND_ORDER2, materializationEventKindOrdinal2, sha256Canonical2, createRequestHash2, createCommitId2, createEventId2, assertNonblank2, assertPositiveInteger2, assertNonnegativeInteger2, assertTimestamp2, invalidCorrelation2, materializationApplyPhase, assertPageRows2, materializationChunkRows2, materializationPlanItems2, assertWorkRecord2, workUniquenessKey2, comparePlanWork2, compareCardinalityWork2, compareEventWork2, assertPlanChunkCorrelations2, assertMaterializationHeader2, startScopeAccumulator2, appendScopeSnapshot2, finishScopeAccumulator2, linkSlotOverrideValue2, ProviderMaterializationSessionState2, ProviderMaterializationTransactionLifecycle2, prepareMaterializationWork2, correlateMaterializationChunk2, assertMaterializationFinalizationCorrelation2, assertMaterializationLaneCompletion2, assertSourceActivationCorrelation2, uniqueSorted2, sameNonnegativeCounts2, effectiveConflict2, assertExpectedObjectRevision2, assertExpectedLinkRevision2, assertExpectedLinkScopeRevision2, materializationWorkColumns2, duplicateMaterializationWork2, canonicalJson2, originColumns2, originWhere2, objectRefFromColumns2, linkRefFromColumns2, sourceEntityKey2, sourceStageRows2, sourceStageRow2, sourceStageRoots2, reconcileSourceStageRows2, sourceMaterializationIdentity2, assertSourceBeginInput2, assertSourceWriteIdentity2, assertSourceProject2, assertSourceExecutionIdentity2, assertSourceCandidateOwner2, assertSourceStagedRow2, sourceEntityColumns2, utf8SortKey2, isExactStagingManifest2, sourceConflict2 };
 
-//# debugId=77BCC37F910FF7FD64756E2164756E21
+//# debugId=DAD98CF2C202937C64756E2164756E21