@sixb/core 0.1.12 → 0.1.13

package/dist/{chunk-hzw7yv5g.js.map → chunk-rzkr70gr.js.map}

@@ -3,11 +3,11 @@
   "sources": ["../src/objects/action/errors.ts", "../src/errors/catalog.ts", "../src/errors/redaction.ts", "../src/errors/internal.ts"],
   "sourcesContent": [
     "import type { ActionSubject } from \"../../actions\"\nimport type { ActionRunFailure } from \"../../storage\"\n\nexport class ActionValidationError extends Error {\n  readonly name = \"ActionValidationError\"\n  readonly actionId: string\n  readonly subject: ActionSubject\n  readonly primaryId?: string\n\n  constructor(message: string, params: { actionId: string; subject: ActionSubject }) {\n    super(message)\n    this.actionId = params.actionId\n    this.subject = params.subject\n    this.primaryId = params.subject.kind === \"object\" ? params.subject.primaryId : undefined\n  }\n}\n\nexport class ActionRunFailedError extends Error {\n  readonly name = \"ActionRunFailedError\"\n  readonly runId: string\n  readonly actionId: string\n  readonly subject: ActionSubject\n  readonly objectTypeId?: string\n  readonly primaryId?: string\n  readonly error: ActionRunFailure\n  readonly finishedAt: string\n\n  constructor(payload: {\n    runId: string\n    actionId: string\n    subject: ActionSubject\n    error: ActionRunFailure\n    finishedAt: string\n  }) {\n    super(payload.error.message)\n    this.runId = payload.runId\n    this.actionId = payload.actionId\n    this.subject = payload.subject\n    this.objectTypeId = payload.subject.kind === \"object\" ? payload.subject.objectTypeId : undefined\n    this.primaryId = payload.subject.kind === \"object\" ? payload.subject.primaryId : undefined\n    this.error = payload.error\n    this.finishedAt = payload.finishedAt\n  }\n}\n\nexport class ActionRunTimeoutError extends Error {\n  readonly name = \"ActionRunTimeoutError\"\n  readonly runId: string\n  readonly timeoutMs: number\n\n  constructor(params: { runId: string; timeoutMs: number }) {\n    super(`Action run '${params.runId}' did not finish within ${params.timeoutMs}ms.`)\n    this.runId = params.runId\n    this.timeoutMs = params.timeoutMs\n  }\n}\n",
-    "interface SixbErrorDefinition {\n  readonly publicMessage: string\n  readonly retryable: boolean\n}\n\n/**\n * Source of truth for stable Sixb error codes and their framework-level policy.\n *\n * Keep this catalog internal. Consumers receive the `SixbErrorCode` union and persisted\n * `SixbFailure` values, not a mutable registry.\n */\nexport const SIXB_ERROR_DEFINITIONS = {\n  \"action.phase_failed\": {\n    publicMessage: \"Action execution failed.\",\n    retryable: false,\n  },\n  \"agent.execution_failed\": {\n    publicMessage: \"Agent execution failed.\",\n    retryable: false,\n  },\n  \"ai.usage_limit_exceeded\": {\n    publicMessage: \"AI usage limit exceeded.\",\n    retryable: false,\n  },\n  \"ai.usage_limit_unavailable\": {\n    publicMessage: \"AI usage limit could not be evaluated.\",\n    retryable: true,\n  },\n  \"connector.adapter_invalid\": {\n    publicMessage: \"Connector adapter returned an invalid result.\",\n    retryable: false,\n  },\n  \"connector.authorization_invalid\": {\n    publicMessage: \"Connector authorization is invalid.\",\n    retryable: false,\n  },\n  \"connector.authorization_required\": {\n    publicMessage: \"Connector authorization is required.\",\n    retryable: false,\n  },\n  \"connector.configuration_invalid\": {\n    publicMessage: \"Connector configuration is invalid.\",\n    retryable: false,\n  },\n  \"connector.credentials_unavailable\": {\n    publicMessage: \"Connector credentials are unavailable.\",\n    retryable: false,\n  },\n  \"connector.not_found\": {\n    publicMessage: \"Connector resource not found.\",\n    retryable: false,\n  },\n  \"connector.operation_conflict\": {\n    publicMessage: \"Connector operation conflicts with the current state.\",\n    retryable: false,\n  },\n  \"connector.operation_in_progress\": {\n    publicMessage: \"Another connector credential operation is in progress.\",\n    retryable: true,\n  },\n  \"connector.provider_failed\": {\n    publicMessage: \"Connector provider operation failed.\",\n    retryable: false,\n  },\n  \"connector.provider_unavailable\": {\n    publicMessage: \"Connector provider is temporarily unavailable.\",\n    retryable: true,\n  },\n  \"connector.replacement_required\": {\n    publicMessage: \"Connector selection requires explicit replacement.\",\n    retryable: false,\n  },\n  \"connector.revocation_pending\": {\n    publicMessage: \"Connector revocation is pending.\",\n    retryable: true,\n  },\n  \"dataset.not_found\": {\n    publicMessage: \"Dataset not found.\",\n    retryable: false,\n  },\n  \"dataset.version_incompatible\": {\n    publicMessage: \"Dataset version is incompatible.\",\n    retryable: false,\n  },\n  \"dataset.version_not_found\": {\n    publicMessage: \"Dataset version not found.\",\n    retryable: false,\n  },\n  \"dataset.version_read_inconsistent\": {\n    publicMessage: \"Dataset version could not be read consistently.\",\n    retryable: true,\n  },\n  \"event.delivery_failed\": {\n    publicMessage: \"Event delivery failed.\",\n    retryable: true,\n  },\n  \"internal.unexpected\": {\n    publicMessage: \"An unexpected internal error occurred.\",\n    retryable: false,\n  },\n  \"queue.enqueue_failed\": {\n    publicMessage: \"The job could not be enqueued.\",\n    retryable: true,\n  },\n  \"pipeline.step_failed\": {\n    publicMessage: \"Pipeline step execution failed.\",\n    retryable: false,\n  },\n  \"projection.definition_invalid\": {\n    publicMessage: \"Projection definition is invalid.\",\n    retryable: false,\n  },\n  \"projection.execution_failed\": {\n    publicMessage: \"Projection execution failed.\",\n    retryable: false,\n  },\n  \"projection.not_found\": {\n    publicMessage: \"Projection not found.\",\n    retryable: false,\n  },\n  \"projection.run_already_terminal\": {\n    publicMessage: \"Projection run is already terminal.\",\n    retryable: false,\n  },\n  \"projection.run_identity_mismatch\": {\n    publicMessage: \"Projection run identity does not match the queued job.\",\n    retryable: false,\n  },\n  \"runtime.cancelled\": {\n    publicMessage: \"Execution was cancelled.\",\n    retryable: false,\n  },\n  \"vector.model_unavailable\": {\n    publicMessage: \"The embedding model configured for this vector profile is unavailable.\",\n    retryable: false,\n  },\n  \"vector.response_invalid\": {\n    publicMessage: \"The embedding response is invalid for this vector profile.\",\n    retryable: false,\n  },\n  \"vector.outcome_unknown\": {\n    publicMessage: \"The embedding call was interrupted; its outcome and charges may be unknown.\",\n    retryable: false,\n  },\n  \"sync.execution_failed\": {\n    publicMessage: \"Sync execution failed.\",\n    retryable: false,\n  },\n  \"webhook.delivery_failed\": {\n    publicMessage: \"Webhook delivery failed.\",\n    retryable: true,\n  },\n  \"webhook.delivery_rejected\": {\n    publicMessage: \"Webhook delivery was rejected.\",\n    retryable: false,\n  },\n  \"workflow.node_failed\": {\n    publicMessage: \"Workflow node execution failed.\",\n    retryable: false,\n  },\n} as const satisfies Readonly<Record<string, SixbErrorDefinition>>\n\ntype CatalogErrorCode = keyof typeof SIXB_ERROR_DEFINITIONS\n\n/** Runtime counterpart of `SixbErrorCode` for internal schema boundaries. */\nexport const SIXB_ERROR_CODES = Object.freeze(Object.keys(SIXB_ERROR_DEFINITIONS)) as readonly [\n  CatalogErrorCode,\n  ...CatalogErrorCode[],\n]\n",
+    "interface SixbErrorDefinition {\n  readonly publicMessage: string\n  readonly retryable: boolean\n}\n\n/**\n * Source of truth for stable Sixb error codes and their framework-level policy.\n *\n * Keep this catalog internal. Consumers receive the `SixbErrorCode` union and persisted\n * `SixbFailure` values, not a mutable registry.\n */\nexport const SIXB_ERROR_DEFINITIONS = {\n  \"action.phase_failed\": {\n    publicMessage: \"Action execution failed.\",\n    retryable: false,\n  },\n  \"action.read_conflict\": {\n    publicMessage: \"Data the Action read changed before its commit.\",\n    retryable: true,\n  },\n  \"agent.execution_failed\": {\n    publicMessage: \"Agent execution failed.\",\n    retryable: false,\n  },\n  \"ai.usage_limit_exceeded\": {\n    publicMessage: \"AI usage limit exceeded.\",\n    retryable: false,\n  },\n  \"ai.usage_limit_unavailable\": {\n    publicMessage: \"AI usage limit could not be evaluated.\",\n    retryable: true,\n  },\n  \"connector.adapter_invalid\": {\n    publicMessage: \"Connector adapter returned an invalid result.\",\n    retryable: false,\n  },\n  \"connector.authorization_invalid\": {\n    publicMessage: \"Connector authorization is invalid.\",\n    retryable: false,\n  },\n  \"connector.authorization_required\": {\n    publicMessage: \"Connector authorization is required.\",\n    retryable: false,\n  },\n  \"connector.configuration_invalid\": {\n    publicMessage: \"Connector configuration is invalid.\",\n    retryable: false,\n  },\n  \"connector.credentials_unavailable\": {\n    publicMessage: \"Connector credentials are unavailable.\",\n    retryable: false,\n  },\n  \"connector.not_found\": {\n    publicMessage: \"Connector resource not found.\",\n    retryable: false,\n  },\n  \"connector.operation_conflict\": {\n    publicMessage: \"Connector operation conflicts with the current state.\",\n    retryable: false,\n  },\n  \"connector.operation_in_progress\": {\n    publicMessage: \"Another connector credential operation is in progress.\",\n    retryable: true,\n  },\n  \"connector.provider_failed\": {\n    publicMessage: \"Connector provider operation failed.\",\n    retryable: false,\n  },\n  \"connector.provider_unavailable\": {\n    publicMessage: \"Connector provider is temporarily unavailable.\",\n    retryable: true,\n  },\n  \"connector.replacement_required\": {\n    publicMessage: \"Connector selection requires explicit replacement.\",\n    retryable: false,\n  },\n  \"connector.revocation_pending\": {\n    publicMessage: \"Connector revocation is pending.\",\n    retryable: true,\n  },\n  \"dataset.not_found\": {\n    publicMessage: \"Dataset not found.\",\n    retryable: false,\n  },\n  \"dataset.version_incompatible\": {\n    publicMessage: \"Dataset version is incompatible.\",\n    retryable: false,\n  },\n  \"dataset.version_not_found\": {\n    publicMessage: \"Dataset version not found.\",\n    retryable: false,\n  },\n  \"dataset.version_read_inconsistent\": {\n    publicMessage: \"Dataset version could not be read consistently.\",\n    retryable: true,\n  },\n  \"event.delivery_failed\": {\n    publicMessage: \"Event delivery failed.\",\n    retryable: true,\n  },\n  \"internal.unexpected\": {\n    publicMessage: \"An unexpected internal error occurred.\",\n    retryable: false,\n  },\n  \"queue.enqueue_failed\": {\n    publicMessage: \"The job could not be enqueued.\",\n    retryable: true,\n  },\n  \"pipeline.step_failed\": {\n    publicMessage: \"Pipeline step execution failed.\",\n    retryable: false,\n  },\n  \"projection.definition_invalid\": {\n    publicMessage: \"Projection definition is invalid.\",\n    retryable: false,\n  },\n  \"projection.execution_failed\": {\n    publicMessage: \"Projection execution failed.\",\n    retryable: false,\n  },\n  \"projection.not_found\": {\n    publicMessage: \"Projection not found.\",\n    retryable: false,\n  },\n  \"projection.run_already_terminal\": {\n    publicMessage: \"Projection run is already terminal.\",\n    retryable: false,\n  },\n  \"projection.run_identity_mismatch\": {\n    publicMessage: \"Projection run identity does not match the queued job.\",\n    retryable: false,\n  },\n  \"runtime.cancelled\": {\n    publicMessage: \"Execution was cancelled.\",\n    retryable: false,\n  },\n  \"vector.model_unavailable\": {\n    publicMessage: \"The embedding model configured for this vector profile is unavailable.\",\n    retryable: false,\n  },\n  \"vector.response_invalid\": {\n    publicMessage: \"The embedding response is invalid for this vector profile.\",\n    retryable: false,\n  },\n  \"vector.outcome_unknown\": {\n    publicMessage: \"The embedding call was interrupted; its outcome and charges may be unknown.\",\n    retryable: false,\n  },\n  \"sync.execution_failed\": {\n    publicMessage: \"Sync execution failed.\",\n    retryable: false,\n  },\n  \"webhook.delivery_failed\": {\n    publicMessage: \"Webhook delivery failed.\",\n    retryable: true,\n  },\n  \"webhook.delivery_rejected\": {\n    publicMessage: \"Webhook delivery was rejected.\",\n    retryable: false,\n  },\n  \"workflow.node_failed\": {\n    publicMessage: \"Workflow node execution failed.\",\n    retryable: false,\n  },\n} as const satisfies Readonly<Record<string, SixbErrorDefinition>>\n\ntype CatalogErrorCode = keyof typeof SIXB_ERROR_DEFINITIONS\n\n/** Runtime counterpart of `SixbErrorCode` for internal schema boundaries. */\nexport const SIXB_ERROR_CODES = Object.freeze(Object.keys(SIXB_ERROR_DEFINITIONS)) as readonly [\n  CatalogErrorCode,\n  ...CatalogErrorCode[],\n]\n",
     "import type { ReadonlyJsonValue } from \"../json\"\n\nconst REDACTED = \"[REDACTED]\"\nconst MAX_CONTEXT_DEPTH = 12\nconst MAX_CONTEXT_ENTRIES = 1024\nconst SENSITIVE_KEY =\n  /password|passwd|passphrase|secret|token|credential|authorization|cookie|privatekey|apikey|accesskey|connectionstring|databaseurl|clientassertion|signature/i\nconst PRIVATE_CONTAINER =\n  /^(?:request|response)(?:body|headers)?$|^(?:headers|body|payload|env|environment)$/i\n\nfunction isSensitiveKey(key: string): boolean {\n  const normalized = key.replace(/[^a-z0-9]/gi, \"\")\n  return SENSITIVE_KEY.test(normalized) || PRIVATE_CONTAINER.test(normalized)\n}\n\n/** Runtime credentials are additional protection for context; never a license to copy errors. */\nfunction environmentSecrets(): string[] {\n  return Object.entries(process.env)\n    .filter(([key, value]) => isSensitiveKey(key) && value !== undefined && value.length >= 4)\n    .map(([, value]) => value as string)\n    .sort((a, b) => b.length - a.length)\n}\n\nexport function createFailureRedactor() {\n  const secrets = environmentSecrets()\n  let redacted = false\n  let truncated = false\n  let entries = 0\n\n  const text = (input: string): string => {\n    let value = input\n    for (const secret of secrets) {\n      value = value\n        .split(REDACTED)\n        .map((part) => part.split(secret).join(REDACTED))\n        .join(REDACTED)\n    }\n    value = value\n      .replace(\n        /-----BEGIN [^-]*PRIVATE KEY-----[\\s\\S]*?(?:-----END [^-]*PRIVATE KEY-----|$)/g,\n        REDACTED\n      )\n      .replace(/\\b(?:Bearer|Basic)\\s+[A-Za-z0-9+/_.~=-]+/gi, REDACTED)\n      .replace(/\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\b/g, REDACTED)\n      .replace(\n        /\\b(?:sk[-_](?:live[-_]|test[-_]|proj[-_])?[A-Za-z0-9_-]{12,}|gh[pousr]_[A-Za-z0-9_]{20,}|github_pat_[A-Za-z0-9_]+|AKIA[A-Z0-9]{16})\\b/g,\n        REDACTED\n      )\n      // URLs may carry userinfo, signed query parameters, or credentials in the path.\n      .replace(/\\b[a-z][a-z0-9+.-]*:\\/\\/[^\\s<>\"']+/gi, REDACTED)\n      .replace(\n        /[\"']?\\b(?:password|passwd|passphrase|[a-z_-]*secret|[a-z_-]*token|api[-_]?key|authorization|cookie|credential|signature)[\"']?\\s*[=:]\\s*(?:\"[^\"\\r\\n]*\"|'[^'\\r\\n]*'|[^\\s,;]+)/gi,\n        REDACTED\n      )\n    if (value !== input) redacted = true\n    return value\n  }\n\n  const context = (value: ReadonlyJsonValue, depth = 0): ReadonlyJsonValue => {\n    if (depth > MAX_CONTEXT_DEPTH || entries++ >= MAX_CONTEXT_ENTRIES) {\n      truncated = true\n      return \"[TRUNCATED]\"\n    }\n    if (typeof value === \"string\") return text(value)\n    if (value === null || typeof value !== \"object\") return value\n    if (Array.isArray(value)) {\n      const available = Math.max(0, MAX_CONTEXT_ENTRIES - entries)\n      if (value.length > available) truncated = true\n      return value.slice(0, available).map((entry) => context(entry, depth + 1))\n    }\n    const result: Record<string, ReadonlyJsonValue> = Object.create(null)\n    for (const [key, entry] of Object.entries(value)) {\n      if (entries >= MAX_CONTEXT_ENTRIES) {\n        truncated = true\n        break\n      }\n      if (isSensitiveKey(key)) {\n        redacted = true\n        entries++\n        result[text(key)] = REDACTED\n      } else {\n        result[text(key)] = context(entry, depth + 1)\n      }\n    }\n    return result\n  }\n\n  return {\n    text,\n    context,\n    get redacted() {\n      return redacted\n    },\n    get truncated() {\n      return truncated\n    },\n  }\n}\n",
     "import { cloneJsonValue, isJsonValue, isPlainRecord, type ReadonlyJsonValue } from \"../json\"\nimport { ActionRunFailedError } from \"../objects/action/errors\"\nimport { SIXB_ERROR_CODES, SIXB_ERROR_DEFINITIONS } from \"./catalog\"\nimport { failureMessage } from \"./failure-message\"\nimport { createFailureRedactor } from \"./redaction\"\nimport type { SixbErrorCode, SixbFailure } from \"./types\"\n\nexport const SIXB_FAILURE_MAX_MESSAGE_BYTES = 4 * 1024\nexport const SIXB_FAILURE_MAX_SERIALIZED_BYTES = 32 * 1024\nconst TRUNCATION_SUFFIX = \"… [truncated]\"\nconst SIXB_ERROR_CODE_SET: ReadonlySet<string> = new Set(SIXB_ERROR_CODES)\n\ntype SixbErrorCodeTuple = readonly [SixbErrorCode, ...SixbErrorCode[]]\n\nexport { SIXB_ERROR_CODES }\n\nexport interface SixbErrorOptions {\n  readonly cause?: unknown\n  readonly details?: ReadonlyJsonValue\n}\n\n/** Internal structural view returned by the factory. The implementing class stays private. */\nexport interface SixbCodedError extends Error {\n  readonly code: SixbErrorCode\n  readonly retryable: boolean\n  readonly details?: ReadonlyJsonValue\n  readonly cause?: unknown\n}\n\nexport interface ToSixbFailureOptions {\n  /** Timestamp for deterministic persistence. Defaults to the current time. */\n  readonly at?: Date\n}\n\nexport interface ToScopedSixbFailureOptions<TCodes extends SixbErrorCodeTuple>\n  extends ToSixbFailureOptions {\n  /** Codes this boundary is allowed to expose. */\n  readonly allowedCodes: TCodes\n}\n\nexport interface CaptureSixbFailureOptions<TCodes extends SixbErrorCodeTuple>\n  extends ToScopedSixbFailureOptions<TCodes> {\n  /** Code assigned when the captured value is uncoded or outside this boundary's contract. */\n  readonly defaultCode: TCodes[number]\n  /** Context attached only to the boundary error created for such a captured value. */\n  readonly details?: ReadonlyJsonValue\n}\n\n/**\n * The canonical exception used inside Sixb.\n *\n * The class is deliberately not exported: repo-internal callers use the factory and consumers only\n * ever observe serializable `SixbFailure` values.\n */\nclass SixbError extends Error implements SixbCodedError {\n  override readonly name = \"SixbError\"\n  readonly retryable: boolean\n  readonly details?: ReadonlyJsonValue\n\n  constructor(\n    readonly code: SixbErrorCode,\n    message: string,\n    options: SixbErrorOptions = {}\n  ) {\n    super(message, options.cause === undefined ? undefined : { cause: options.cause })\n    this.retryable = SIXB_ERROR_DEFINITIONS[code].retryable\n    if (options.details !== undefined) {\n      this.details = cloneJsonValue(options.details, \"Sixb error details\")\n    }\n  }\n}\n\n/** Creates a coded internal error without exposing its runtime class. */\nexport function createSixbError(\n  code: SixbErrorCode,\n  message: string,\n  options: SixbErrorOptions = {}\n): SixbCodedError {\n  return new SixbError(code, message, options)\n}\n\n/**\n * Captures an unknown terminal error as a scoped durable failure.\n *\n * An already-coded error is preserved only when its code belongs to this boundary. Every other\n * value is wrapped once with the boundary's default code and context before serialization.\n */\nexport function captureSixbFailure<const TCodes extends SixbErrorCodeTuple>(\n  error: unknown,\n  options: CaptureSixbFailureOptions<TCodes>\n): SixbFailure<TCodes[number]> {\n  const allowedCodes = new Set<SixbErrorCode>(options.allowedCodes)\n  const codedError =\n    isSixbError(error) && allowedCodes.has(error.code)\n      ? error\n      : createSixbError(options.defaultCode, summarizeErrorMessage(error), {\n          cause: error,\n          ...(options.details === undefined ? {} : { details: options.details }),\n        })\n\n  return toSixbFailure(codedError, {\n    allowedCodes: options.allowedCodes,\n    ...(options.at === undefined ? {} : { at: options.at }),\n  })\n}\n\n/** Identifies errors created by Sixb without making their class part of the contract. */\nexport function isSixbError(error: unknown): error is SixbCodedError {\n  try {\n    return error instanceof SixbError\n  } catch {\n    return false\n  }\n}\n\n/**\n * Takes a detached, serializable snapshot of a coded internal error.\n *\n * Use `captureSixbFailure()` instead when a terminal boundary receives an unknown thrown value.\n */\nexport function toSixbFailure<const TCodes extends SixbErrorCodeTuple>(\n  error: SixbCodedError,\n  options: ToScopedSixbFailureOptions<TCodes>\n): SixbFailure<TCodes[number]>\nexport function toSixbFailure(error: SixbCodedError, options?: ToSixbFailureOptions): SixbFailure\nexport function toSixbFailure(\n  error: SixbCodedError,\n  options: ToSixbFailureOptions | ToScopedSixbFailureOptions<SixbErrorCodeTuple> = {}\n): SixbFailure {\n  if (!isSixbError(error)) {\n    throw new Error(\"[Sixb] A durable failure can only be created from a coded Sixb error.\")\n  }\n  const allowedCodes = \"allowedCodes\" in options ? new Set(options.allowedCodes) : undefined\n  if (allowedCodes && !allowedCodes.has(error.code)) {\n    throw new Error(`[Sixb] Error code '${error.code}' is not allowed by this failure contract.`)\n  }\n  const code = error.code\n  const redactor = createFailureRedactor()\n  const details = error.details === undefined ? undefined : redactor.context(error.details)\n  const { detail, truncated, redacted } = findFailureDetail(error, code)\n  const summary = SIXB_ERROR_DEFINITIONS[code].publicMessage\n  const explanation = detail?.message ?? summary\n  const message = truncateUtf8(\n    redactor.text(\n      explanation === summary || explanation.startsWith(`${summary} `)\n        ? explanation\n        : `${summary} ${explanation}`\n    ),\n    SIXB_FAILURE_MAX_MESSAGE_BYTES\n  )\n  const failure: SixbFailure = {\n    code,\n    message: message.value,\n    retryable: SIXB_ERROR_DEFINITIONS[code].retryable,\n    at: failureTimestamp(options.at),\n    ...(details === undefined ? {} : { details: cloneJsonValue(details, \"Sixb failure details\") }),\n    ...(detail?.httpStatus === undefined ? {} : { httpStatus: detail.httpStatus }),\n    ...(redactor.redacted || redacted ? { redacted: true } : {}),\n    ...(message.truncated || truncated || redactor.truncated ? { truncated: true } : {}),\n  }\n\n  if (serializedByteLength(failure) <= SIXB_FAILURE_MAX_SERIALIZED_BYTES) return failure\n\n  return {\n    code: failure.code,\n    message: failure.message,\n    retryable: failure.retryable,\n    at: failure.at,\n    ...(failure.httpStatus === undefined ? {} : { httpStatus: failure.httpStatus }),\n    ...(failure.redacted ? { redacted: true } : {}),\n    truncated: true,\n  }\n}\n\nconst NETWORK_MESSAGES: Readonly<Record<string, string>> = {\n  ECONNREFUSED: \"The remote service refused the connection.\",\n  ECONNRESET: \"The remote service reset the connection.\",\n  ENOTFOUND: \"The remote host could not be resolved.\",\n  EAI_AGAIN: \"DNS resolution temporarily failed.\",\n  ETIMEDOUT: \"The connection timed out.\",\n}\n\nfunction isHttpStatus(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isInteger(value) && value >= 100 && value <= 599\n}\n\n/** Follow the causal chain without exposing arbitrary messages or discarding deeper statuses. */\nfunction findFailureDetail(\n  error: SixbCodedError,\n  boundaryCode: SixbErrorCode\n): {\n  detail?: { message: string; httpStatus?: number }\n  truncated: boolean\n  redacted: boolean\n} {\n  const seen = new Set<object>()\n  const messages = new Set<string>()\n  let catalogMessage: string | undefined\n  let httpStatus: number | undefined\n  let truncated = false\n  let redacted = false\n  let current: unknown = error\n  while (typeof current === \"object\" && current !== null && !seen.has(current)) {\n    if (seen.size === 8) {\n      truncated = true\n      break\n    }\n    seen.add(current)\n    const explanation = failureMessage(current)\n    if (explanation) messages.add(explanation)\n    try {\n      if (current instanceof ActionRunFailedError) {\n        // This is an already durable child failure, not arbitrary provider prose. Revalidate it\n        // before propagation; do not copy its context over the parent's identity or retry policy.\n        const child = parseSixbFailure(Object.getOwnPropertyDescriptor(current, \"error\")?.value)\n        messages.add(child.message)\n        httpStatus ??= child.httpStatus\n        redacted ||= child.redacted === true\n        truncated ||= child.truncated === true\n      }\n      if (\n        isSixbError(current) &&\n        current.code !== boundaryCode &&\n        current.code !== \"internal.unexpected\"\n      ) {\n        catalogMessage = SIXB_ERROR_DEFINITIONS[current.code].publicMessage\n      }\n      // Read data properties only: provider accessors, messages and payloads remain private.\n      const status =\n        Object.getOwnPropertyDescriptor(current, \"status\")?.value ??\n        Object.getOwnPropertyDescriptor(current, \"statusCode\")?.value\n      if (httpStatus === undefined && isHttpStatus(status)) httpStatus = status\n      const code = Object.getOwnPropertyDescriptor(current, \"code\")?.value\n      if (typeof code === \"string\" && Object.hasOwn(NETWORK_MESSAGES, code)) {\n        messages.add(NETWORK_MESSAGES[code])\n      }\n      current = Object.getOwnPropertyDescriptor(current, \"cause\")?.value\n    } catch {\n      break\n    }\n  }\n  if (messages.size === 0 && catalogMessage) messages.add(catalogMessage)\n  if (httpStatus !== undefined) {\n    const statusMessage = `Upstream request returned HTTP ${httpStatus}.`\n    if (![...messages].some((message) => message.includes(statusMessage)))\n      messages.add(statusMessage)\n  }\n  return {\n    ...(messages.size === 0 ? {} : { detail: { message: [...messages].join(\" \"), httpStatus } }),\n    truncated,\n    redacted,\n  }\n}\n\n/** Serializes a validated failure for durable storage. */\nexport function serializeSixbFailure<const TCodes extends SixbErrorCodeTuple>(\n  failure: SixbFailure<TCodes[number]>,\n  allowedCodes: TCodes\n): string\nexport function serializeSixbFailure(failure: SixbFailure): string\nexport function serializeSixbFailure(\n  failure: SixbFailure,\n  allowedCodes?: SixbErrorCodeTuple\n): string {\n  const parsed = allowedCodes ? parseSixbFailure(failure, allowedCodes) : parseSixbFailure(failure)\n  return JSON.stringify(parsed)\n}\n\n/**\n * Validates and detaches a failure read from a storage boundary.\n *\n * Strings are accepted for SQLite; PostgreSQL adapters can pass their decoded JSON value directly.\n */\nexport function parseSixbFailure<const TCodes extends SixbErrorCodeTuple>(\n  value: unknown,\n  allowedCodes: TCodes\n): SixbFailure<TCodes[number]>\nexport function parseSixbFailure(value: unknown): SixbFailure\nexport function parseSixbFailure(\n  value: unknown,\n  allowedCodes: SixbErrorCodeTuple = SIXB_ERROR_CODES\n): SixbFailure {\n  const candidate = parseStoredFailureValue(value)\n  if (!isPlainRecord(candidate)) {\n    throw invalidStoredFailure(\"expected a JSON object\")\n  }\n\n  const { code, message, retryable, at, details, httpStatus, redacted, truncated } = candidate\n  if (typeof code !== \"string\" || !SIXB_ERROR_CODE_SET.has(code)) {\n    throw invalidStoredFailure(\"code is not a known Sixb error code\")\n  }\n  if (!(allowedCodes as readonly string[]).includes(code)) {\n    throw invalidStoredFailure(\"code is not allowed by this failure contract\")\n  }\n  if (typeof message !== \"string\") {\n    throw invalidStoredFailure(\"message is not a string\")\n  }\n  if (utf8ByteLength(message) > SIXB_FAILURE_MAX_MESSAGE_BYTES) {\n    throw invalidStoredFailure(`message exceeds ${SIXB_FAILURE_MAX_MESSAGE_BYTES} UTF-8 bytes`)\n  }\n  if (typeof retryable !== \"boolean\") {\n    throw invalidStoredFailure(\"retryable is not a boolean\")\n  }\n  if (retryable !== SIXB_ERROR_DEFINITIONS[code as SixbErrorCode].retryable) {\n    throw invalidStoredFailure(\"retryable does not match the error code policy\")\n  }\n  if (typeof at !== \"string\" || !isCanonicalIsoTimestamp(at)) {\n    throw invalidStoredFailure(\"at is not a canonical ISO-8601 timestamp\")\n  }\n  if (details !== undefined && !isJsonValue(details)) {\n    throw invalidStoredFailure(\"details is not a JSON value\")\n  }\n  if (truncated !== undefined && truncated !== true) {\n    throw invalidStoredFailure(\"truncated must be true when present\")\n  }\n\n  if (redacted !== undefined && redacted !== true) {\n    throw invalidStoredFailure(\"redacted must be true when present\")\n  }\n  if (httpStatus !== undefined && !isHttpStatus(httpStatus)) {\n    throw invalidStoredFailure(\"httpStatus must be an integer HTTP status\")\n  }\n  const redactor = createFailureRedactor()\n  const safeMessage = truncateUtf8(redactor.text(message), SIXB_FAILURE_MAX_MESSAGE_BYTES)\n  const safeDetails =\n    details === undefined ? undefined : redactor.context(details as ReadonlyJsonValue)\n\n  const failure: SixbFailure = {\n    code: code as SixbErrorCode,\n    message: safeMessage.value,\n    retryable,\n    at,\n    ...(safeDetails === undefined\n      ? {}\n      : { details: cloneJsonValue(safeDetails, \"Stored Sixb failure details\") }),\n    ...(httpStatus === undefined ? {} : { httpStatus: httpStatus as number }),\n    ...(redacted || redactor.redacted ? { redacted: true } : {}),\n    ...(truncated || redactor.truncated || safeMessage.truncated ? { truncated: true } : {}),\n  }\n  if (serializedByteLength(failure) > SIXB_FAILURE_MAX_SERIALIZED_BYTES) {\n    throw invalidStoredFailure(\n      `record exceeds ${SIXB_FAILURE_MAX_SERIALIZED_BYTES} serialized UTF-8 bytes`\n    )\n  }\n  return failure\n}\n\nfunction parseStoredFailureValue(value: unknown): unknown {\n  if (typeof value !== \"string\") return value\n  try {\n    return JSON.parse(value) as unknown\n  } catch {\n    throw invalidStoredFailure(\"value is not valid JSON\")\n  }\n}\n\nfunction isCanonicalIsoTimestamp(value: string): boolean {\n  const timestamp = new Date(value)\n  return Number.isFinite(timestamp.getTime()) && timestamp.toISOString() === value\n}\n\nfunction invalidStoredFailure(reason: string): Error {\n  return new Error(`[Sixb] Stored failure is invalid: ${reason}.`)\n}\n\n/**\n * Extracts a diagnostic message for an internal error or log entry.\n *\n * The result can contain provider data and must not be persisted or returned by an API.\n * `toSixbFailure()` constructs a message from recognized HTTP, network, or Sixb information instead.\n */\nexport function summarizeErrorMessage(value: unknown, fallback?: string): string {\n  const message = readStringProperty(value, \"message\")\n  if (message !== undefined) return message\n  if (typeof value === \"string\") return value\n  return fallback ?? safeString(value)\n}\n\nfunction readStringProperty(value: unknown, property: \"message\"): string | undefined {\n  if (!isObjectLike(value)) return undefined\n  try {\n    const result = Reflect.get(value, property)\n    return typeof result === \"string\" ? result : undefined\n  } catch {\n    return undefined\n  }\n}\n\nfunction isObjectLike(value: unknown): value is object {\n  return (typeof value === \"object\" && value !== null) || typeof value === \"function\"\n}\n\nfunction safeString(value: unknown): string {\n  try {\n    return String(value)\n  } catch {\n    return \"Unknown thrown value\"\n  }\n}\n\nfunction failureTimestamp(at: Date | undefined): string {\n  const timestamp = at ?? new Date()\n  if (!Number.isFinite(timestamp.getTime())) {\n    throw new Error(\"[Sixb] Failure timestamp must be a valid Date.\")\n  }\n  return timestamp.toISOString()\n}\n\nfunction serializedByteLength(value: SixbFailure): number {\n  return utf8ByteLength(JSON.stringify(value))\n}\n\nfunction utf8ByteLength(value: string): number {\n  return new TextEncoder().encode(value).byteLength\n}\n\nfunction truncateUtf8(value: string, maxBytes: number): { value: string; truncated: boolean } {\n  if (utf8ByteLength(value) <= maxBytes) return { value, truncated: false }\n\n  const suffixBytes = utf8ByteLength(TRUNCATION_SUFFIX)\n  const characters = Array.from(value)\n  let low = 0\n  let high = characters.length\n  while (low < high) {\n    const middle = Math.ceil((low + high) / 2)\n    if (utf8ByteLength(characters.slice(0, middle).join(\"\")) + suffixBytes <= maxBytes) {\n      low = middle\n    } else {\n      high = middle - 1\n    }\n  }\n\n  return { value: `${characters.slice(0, low).join(\"\")}${TRUNCATION_SUFFIX}`, truncated: true }\n}\n"
   ],
-  "mappings": ";;;;;;;;;;;AAGO,MAAM,+BAA8B,MAAM;AAAA,EACtC,OAAO;AAAA,EACP;AAAA,EACA;AAAA,EACA;AAAA,EAET,WAAW,CAAC,SAAiB,QAAsD;AAAA,IACjF,MAAM,OAAO;AAAA,IACb,KAAK,WAAW,OAAO;AAAA,IACvB,KAAK,UAAU,OAAO;AAAA,IACtB,KAAK,YAAY,OAAO,QAAQ,SAAS,WAAW,OAAO,QAAQ,YAAY;AAAA;AAEnF;AAAA;AAEO,MAAM,8BAA6B,MAAM;AAAA,EACrC,OAAO;AAAA,EACP;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,WAAW,CAAC,SAMT;AAAA,IACD,MAAM,QAAQ,MAAM,OAAO;AAAA,IAC3B,KAAK,QAAQ,QAAQ;AAAA,IACrB,KAAK,WAAW,QAAQ;AAAA,IACxB,KAAK,UAAU,QAAQ;AAAA,IACvB,KAAK,eAAe,QAAQ,QAAQ,SAAS,WAAW,QAAQ,QAAQ,eAAe;AAAA,IACvF,KAAK,YAAY,QAAQ,QAAQ,SAAS,WAAW,QAAQ,QAAQ,YAAY;AAAA,IACjF,KAAK,QAAQ,QAAQ;AAAA,IACrB,KAAK,aAAa,QAAQ;AAAA;AAE9B;AAAA;AAEO,MAAM,+BAA8B,MAAM;AAAA,EACtC,OAAO;AAAA,EACP;AAAA,EACA;AAAA,EAET,WAAW,CAAC,QAA8C;AAAA,IACxD,MAAM,eAAe,OAAO,gCAAgC,OAAO,cAAc;AAAA,IACjF,KAAK,QAAQ,OAAO;AAAA,IACpB,KAAK,YAAY,OAAO;AAAA;AAE5B;;;AC5CO,IAAM,yBAAyB;AAAA,EACpC,uBAAuB;AAAA,IACrB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,0BAA0B;AAAA,IACxB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,2BAA2B;AAAA,IACzB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,8BAA8B;AAAA,IAC5B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,6BAA6B;AAAA,IAC3B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,mCAAmC;AAAA,IACjC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,oCAAoC;AAAA,IAClC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,mCAAmC;AAAA,IACjC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,qCAAqC;AAAA,IACnC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,uBAAuB;AAAA,IACrB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,gCAAgC;AAAA,IAC9B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,mCAAmC;AAAA,IACjC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,6BAA6B;AAAA,IAC3B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,kCAAkC;AAAA,IAChC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,kCAAkC;AAAA,IAChC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,gCAAgC;AAAA,IAC9B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,qBAAqB;AAAA,IACnB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,gCAAgC;AAAA,IAC9B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,6BAA6B;AAAA,IAC3B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,qCAAqC;AAAA,IACnC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,yBAAyB;AAAA,IACvB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,uBAAuB;AAAA,IACrB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,wBAAwB;AAAA,IACtB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,wBAAwB;AAAA,IACtB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,iCAAiC;AAAA,IAC/B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,+BAA+B;AAAA,IAC7B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,wBAAwB;AAAA,IACtB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,mCAAmC;AAAA,IACjC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,oCAAoC;AAAA,IAClC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,qBAAqB;AAAA,IACnB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,4BAA4B;AAAA,IAC1B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,2BAA2B;AAAA,IACzB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,0BAA0B;AAAA,IACxB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,yBAAyB;AAAA,IACvB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,2BAA2B;AAAA,IACzB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,6BAA6B;AAAA,IAC3B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,wBAAwB;AAAA,IACtB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AACF;AAKO,IAAM,oBAAmB,OAAO,OAAO,OAAO,KAAK,sBAAsB,CAAC;;;ACnKjF,IAAM,WAAW;AACjB,IAAM,oBAAoB;AAC1B,IAAM,sBAAsB;AAC5B,IAAM,gBACJ;AACF,IAAM,oBACJ;AAEF,SAAS,cAAc,CAAC,KAAsB;AAAA,EAC5C,MAAM,aAAa,IAAI,QAAQ,eAAe,EAAE;AAAA,EAChD,OAAO,cAAc,KAAK,UAAU,KAAK,kBAAkB,KAAK,UAAU;AAAA;AAI5E,SAAS,kBAAkB,GAAa;AAAA,EACtC,OAAO,OAAO,QAAQ,QAAQ,GAAG,EAC9B,OAAO,EAAE,KAAK,WAAW,eAAe,GAAG,KAAK,UAAU,aAAa,MAAM,UAAU,CAAC,EACxF,IAAI,IAAI,WAAW,KAAe,EAClC,KAAK,CAAC,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM;AAAA;AAGhC,SAAS,qBAAqB,GAAG;AAAA,EACtC,MAAM,UAAU,mBAAmB;AAAA,EACnC,IAAI,WAAW;AAAA,EACf,IAAI,YAAY;AAAA,EAChB,IAAI,UAAU;AAAA,EAEd,MAAM,OAAO,CAAC,UAA0B;AAAA,IACtC,IAAI,QAAQ;AAAA,IACZ,WAAW,UAAU,SAAS;AAAA,MAC5B,QAAQ,MACL,MAAM,QAAQ,EACd,IAAI,CAAC,SAAS,KAAK,MAAM,MAAM,EAAE,KAAK,QAAQ,CAAC,EAC/C,KAAK,QAAQ;AAAA,IAClB;AAAA,IACA,QAAQ,MACL,QACC,iFACA,QACF,EACC,QAAQ,8CAA8C,QAAQ,EAC9D,QAAQ,0DAA0D,QAAQ,EAC1E,QACC,0IACA,QACF,EAEC,QAAQ,wCAAwC,QAAQ,EACxD,QACC,iLACA,QACF;AAAA,IACF,IAAI,UAAU;AAAA,MAAO,WAAW;AAAA,IAChC,OAAO;AAAA;AAAA,EAGT,MAAM,UAAU,CAAC,OAA0B,QAAQ,MAAyB;AAAA,IAC1E,IAAI,QAAQ,qBAAqB,aAAa,qBAAqB;AAAA,MACjE,YAAY;AAAA,MACZ,OAAO;AAAA,IACT;AAAA,IACA,IAAI,OAAO,UAAU;AAAA,MAAU,OAAO,KAAK,KAAK;AAAA,IAChD,IAAI,UAAU,QAAQ,OAAO,UAAU;AAAA,MAAU,OAAO;AAAA,IACxD,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,MACxB,MAAM,YAAY,KAAK,IAAI,GAAG,sBAAsB,OAAO;AAAA,MAC3D,IAAI,MAAM,SAAS;AAAA,QAAW,YAAY;AAAA,MAC1C,OAAO,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,CAAC,UAAU,QAAQ,OAAO,QAAQ,CAAC,CAAC;AAAA,IAC3E;AAAA,IACA,MAAM,SAA4C,OAAO,OAAO,IAAI;AAAA,IACpE,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MAChD,IAAI,WAAW,qBAAqB;AAAA,QAClC,YAAY;AAAA,QACZ;AAAA,MACF;AAAA,MACA,IAAI,eAAe,GAAG,GAAG;AAAA,QACvB,WAAW;AAAA,QACX;AAAA,QACA,OAAO,KAAK,GAAG,KAAK;AAAA,MACtB,EAAO;AAAA,QACL,OAAO,KAAK,GAAG,KAAK,QAAQ,OAAO,QAAQ,CAAC;AAAA;AAAA,IAEhD;AAAA,IACA,OAAO;AAAA;AAAA,EAGT,OAAO;AAAA,IACL;AAAA,IACA;AAAA,QACI,QAAQ,GAAG;AAAA,MACb,OAAO;AAAA;AAAA,QAEL,SAAS,GAAG;AAAA,MACd,OAAO;AAAA;AAAA,EAEX;AAAA;;;ACzFK,IAAM,kCAAiC,IAAI;AAC3C,IAAM,qCAAoC,KAAK;AACtD,IAAM,oBAAoB;AAC1B,IAAM,sBAA2C,IAAI,IAAI,iBAAgB;AA4CzE,MAAM,kBAAkB,MAAgC;AAAA,EAM3C;AAAA,EALO,OAAO;AAAA,EAChB;AAAA,EACA;AAAA,EAET,WAAW,CACA,MACT,SACA,UAA4B,CAAC,GAC7B;AAAA,IACA,MAAM,SAAS,QAAQ,UAAU,YAAY,YAAY,EAAE,OAAO,QAAQ,MAAM,CAAC;AAAA,IAJxE;AAAA,IAKT,KAAK,YAAY,uBAAuB,MAAM;AAAA,IAC9C,IAAI,QAAQ,YAAY,WAAW;AAAA,MACjC,KAAK,UAAU,gBAAe,QAAQ,SAAS,oBAAoB;AAAA,IACrE;AAAA;AAEJ;AAGO,SAAS,gBAAe,CAC7B,MACA,SACA,UAA4B,CAAC,GACb;AAAA,EAChB,OAAO,IAAI,UAAU,MAAM,SAAS,OAAO;AAAA;AAStC,SAAS,mBAA2D,CACzE,OACA,SAC6B;AAAA,EAC7B,MAAM,eAAe,IAAI,IAAmB,QAAQ,YAAY;AAAA,EAChE,MAAM,aACJ,aAAY,KAAK,KAAK,aAAa,IAAI,MAAM,IAAI,IAC7C,QACA,iBAAgB,QAAQ,aAAa,uBAAsB,KAAK,GAAG;AAAA,IACjE,OAAO;AAAA,OACH,QAAQ,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,QAAQ,QAAQ;AAAA,EACtE,CAAC;AAAA,EAEP,OAAO,eAAc,YAAY;AAAA,IAC/B,cAAc,QAAQ;AAAA,OAClB,QAAQ,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,QAAQ,GAAG;AAAA,EACvD,CAAC;AAAA;AAII,SAAS,YAAW,CAAC,OAAyC;AAAA,EACnE,IAAI;AAAA,IACF,OAAO,iBAAiB;AAAA,IACxB,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAcJ,SAAS,cAAa,CAC3B,OACA,UAAiF,CAAC,GACrE;AAAA,EACb,IAAI,CAAC,aAAY,KAAK,GAAG;AAAA,IACvB,MAAM,IAAI,MAAM,uEAAuE;AAAA,EACzF;AAAA,EACA,MAAM,eAAe,kBAAkB,UAAU,IAAI,IAAI,QAAQ,YAAY,IAAI;AAAA,EACjF,IAAI,gBAAgB,CAAC,aAAa,IAAI,MAAM,IAAI,GAAG;AAAA,IACjD,MAAM,IAAI,MAAM,sBAAsB,MAAM,gDAAgD;AAAA,EAC9F;AAAA,EACA,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,WAAW,sBAAsB;AAAA,EACvC,MAAM,UAAU,MAAM,YAAY,YAAY,YAAY,SAAS,QAAQ,MAAM,OAAO;AAAA,EACxF,QAAQ,QAAQ,WAAW,aAAa,kBAAkB,OAAO,IAAI;AAAA,EACrE,MAAM,UAAU,uBAAuB,MAAM;AAAA,EAC7C,MAAM,cAAc,QAAQ,WAAW;AAAA,EACvC,MAAM,UAAU,aACd,SAAS,KACP,gBAAgB,WAAW,YAAY,WAAW,GAAG,UAAU,IAC3D,cACA,GAAG,WAAW,aACpB,GACA,+BACF;AAAA,EACA,MAAM,UAAuB;AAAA,IAC3B;AAAA,IACA,SAAS,QAAQ;AAAA,IACjB,WAAW,uBAAuB,MAAM;AAAA,IACxC,IAAI,iBAAiB,QAAQ,EAAE;AAAA,OAC3B,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,gBAAe,SAAS,sBAAsB,EAAE;AAAA,OACxF,QAAQ,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,OAAO,WAAW;AAAA,OACxE,SAAS,YAAY,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,OACtD,QAAQ,aAAa,aAAa,SAAS,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;AAAA,EACpF;AAAA,EAEA,IAAI,qBAAqB,OAAO,KAAK;AAAA,IAAmC,OAAO;AAAA,EAE/E,OAAO;AAAA,IACL,MAAM,QAAQ;AAAA,IACd,SAAS,QAAQ;AAAA,IACjB,WAAW,QAAQ;AAAA,IACnB,IAAI,QAAQ;AAAA,OACR,QAAQ,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;AAAA,OACzE,QAAQ,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,IAC7C,WAAW;AAAA,EACb;AAAA;AAGF,IAAM,mBAAqD;AAAA,EACzD,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,WAAW;AAAA,EACX,WAAW;AACb;AAEA,SAAS,YAAY,CAAC,OAAiC;AAAA,EACrD,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,SAAS,OAAO,SAAS;AAAA;AAI1F,SAAS,iBAAiB,CACxB,OACA,cAKA;AAAA,EACA,MAAM,OAAO,IAAI;AAAA,EACjB,MAAM,WAAW,IAAI;AAAA,EACrB,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI,YAAY;AAAA,EAChB,IAAI,WAAW;AAAA,EACf,IAAI,UAAmB;AAAA,EACvB,OAAO,OAAO,YAAY,YAAY,YAAY,QAAQ,CAAC,KAAK,IAAI,OAAO,GAAG;AAAA,IAC5E,IAAI,KAAK,SAAS,GAAG;AAAA,MACnB,YAAY;AAAA,MACZ;AAAA,IACF;AAAA,IACA,KAAK,IAAI,OAAO;AAAA,IAChB,MAAM,cAAc,eAAe,OAAO;AAAA,IAC1C,IAAI;AAAA,MAAa,SAAS,IAAI,WAAW;AAAA,IACzC,IAAI;AAAA,MACF,IAAI,mBAAmB,uBAAsB;AAAA,QAG3C,MAAM,QAAQ,kBAAiB,OAAO,yBAAyB,SAAS,OAAO,GAAG,KAAK;AAAA,QACvF,SAAS,IAAI,MAAM,OAAO;AAAA,QAC1B,eAAe,MAAM;AAAA,QACrB,aAAa,MAAM,aAAa;AAAA,QAChC,cAAc,MAAM,cAAc;AAAA,MACpC;AAAA,MACA,IACE,aAAY,OAAO,KACnB,QAAQ,SAAS,gBACjB,QAAQ,SAAS,uBACjB;AAAA,QACA,iBAAiB,uBAAuB,QAAQ,MAAM;AAAA,MACxD;AAAA,MAEA,MAAM,SACJ,OAAO,yBAAyB,SAAS,QAAQ,GAAG,SACpD,OAAO,yBAAyB,SAAS,YAAY,GAAG;AAAA,MAC1D,IAAI,eAAe,aAAa,aAAa,MAAM;AAAA,QAAG,aAAa;AAAA,MACnE,MAAM,OAAO,OAAO,yBAAyB,SAAS,MAAM,GAAG;AAAA,MAC/D,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO,kBAAkB,IAAI,GAAG;AAAA,QACrE,SAAS,IAAI,iBAAiB,KAAK;AAAA,MACrC;AAAA,MACA,UAAU,OAAO,yBAAyB,SAAS,OAAO,GAAG;AAAA,MAC7D,MAAM;AAAA,MACN;AAAA;AAAA,EAEJ;AAAA,EACA,IAAI,SAAS,SAAS,KAAK;AAAA,IAAgB,SAAS,IAAI,cAAc;AAAA,EACtE,IAAI,eAAe,WAAW;AAAA,IAC5B,MAAM,gBAAgB,kCAAkC;AAAA,IACxD,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,YAAY,QAAQ,SAAS,aAAa,CAAC;AAAA,MAClE,SAAS,IAAI,aAAa;AAAA,EAC9B;AAAA,EACA,OAAO;AAAA,OACD,SAAS,SAAS,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,QAAQ,EAAE,KAAK,GAAG,GAAG,WAAW,EAAE;AAAA,IAC1F;AAAA,IACA;AAAA,EACF;AAAA;AASK,SAAS,qBAAoB,CAClC,SACA,cACQ;AAAA,EACR,MAAM,SAAS,eAAe,kBAAiB,SAAS,YAAY,IAAI,kBAAiB,OAAO;AAAA,EAChG,OAAO,KAAK,UAAU,MAAM;AAAA;AAavB,SAAS,iBAAgB,CAC9B,OACA,eAAmC,mBACtB;AAAA,EACb,MAAM,YAAY,wBAAwB,KAAK;AAAA,EAC/C,IAAI,CAAC,cAAc,SAAS,GAAG;AAAA,IAC7B,MAAM,qBAAqB,wBAAwB;AAAA,EACrD;AAAA,EAEA,QAAQ,MAAM,SAAS,WAAW,IAAI,SAAS,YAAY,UAAU,cAAc;AAAA,EACnF,IAAI,OAAO,SAAS,YAAY,CAAC,oBAAoB,IAAI,IAAI,GAAG;AAAA,IAC9D,MAAM,qBAAqB,qCAAqC;AAAA,EAClE;AAAA,EACA,IAAI,CAAE,aAAmC,SAAS,IAAI,GAAG;AAAA,IACvD,MAAM,qBAAqB,8CAA8C;AAAA,EAC3E;AAAA,EACA,IAAI,OAAO,YAAY,UAAU;AAAA,IAC/B,MAAM,qBAAqB,yBAAyB;AAAA,EACtD;AAAA,EACA,IAAI,eAAe,OAAO,IAAI,iCAAgC;AAAA,IAC5D,MAAM,qBAAqB,mBAAmB,6CAA4C;AAAA,EAC5F;AAAA,EACA,IAAI,OAAO,cAAc,WAAW;AAAA,IAClC,MAAM,qBAAqB,4BAA4B;AAAA,EACzD;AAAA,EACA,IAAI,cAAc,uBAAuB,MAAuB,WAAW;AAAA,IACzE,MAAM,qBAAqB,gDAAgD;AAAA,EAC7E;AAAA,EACA,IAAI,OAAO,OAAO,YAAY,CAAC,wBAAwB,EAAE,GAAG;AAAA,IAC1D,MAAM,qBAAqB,0CAA0C;AAAA,EACvE;AAAA,EACA,IAAI,YAAY,aAAa,CAAC,aAAY,OAAO,GAAG;AAAA,IAClD,MAAM,qBAAqB,6BAA6B;AAAA,EAC1D;AAAA,EACA,IAAI,cAAc,aAAa,cAAc,MAAM;AAAA,IACjD,MAAM,qBAAqB,qCAAqC;AAAA,EAClE;AAAA,EAEA,IAAI,aAAa,aAAa,aAAa,MAAM;AAAA,IAC/C,MAAM,qBAAqB,oCAAoC;AAAA,EACjE;AAAA,EACA,IAAI,eAAe,aAAa,CAAC,aAAa,UAAU,GAAG;AAAA,IACzD,MAAM,qBAAqB,2CAA2C;AAAA,EACxE;AAAA,EACA,MAAM,WAAW,sBAAsB;AAAA,EACvC,MAAM,cAAc,aAAa,SAAS,KAAK,OAAO,GAAG,+BAA8B;AAAA,EACvF,MAAM,cACJ,YAAY,YAAY,YAAY,SAAS,QAAQ,OAA4B;AAAA,EAEnF,MAAM,UAAuB;AAAA,IAC3B;AAAA,IACA,SAAS,YAAY;AAAA,IACrB;AAAA,IACA;AAAA,OACI,gBAAgB,YAChB,CAAC,IACD,EAAE,SAAS,gBAAe,aAAa,6BAA6B,EAAE;AAAA,OACtE,eAAe,YAAY,CAAC,IAAI,EAAE,WAAiC;AAAA,OACnE,YAAY,SAAS,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,OACtD,aAAa,SAAS,aAAa,YAAY,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;AAAA,EACxF;AAAA,EACA,IAAI,qBAAqB,OAAO,IAAI,oCAAmC;AAAA,IACrE,MAAM,qBACJ,kBAAkB,2DACpB;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,uBAAuB,CAAC,OAAyB;AAAA,EACxD,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EACtC,IAAI;AAAA,IACF,OAAO,KAAK,MAAM,KAAK;AAAA,IACvB,MAAM;AAAA,IACN,MAAM,qBAAqB,yBAAyB;AAAA;AAAA;AAIxD,SAAS,uBAAuB,CAAC,OAAwB;AAAA,EACvD,MAAM,YAAY,IAAI,KAAK,KAAK;AAAA,EAChC,OAAO,OAAO,SAAS,UAAU,QAAQ,CAAC,KAAK,UAAU,YAAY,MAAM;AAAA;AAG7E,SAAS,oBAAoB,CAAC,QAAuB;AAAA,EACnD,OAAO,IAAI,MAAM,qCAAqC,SAAS;AAAA;AAS1D,SAAS,sBAAqB,CAAC,OAAgB,UAA2B;AAAA,EAC/E,MAAM,UAAU,mBAAmB,OAAO,SAAS;AAAA,EACnD,IAAI,YAAY;AAAA,IAAW,OAAO;AAAA,EAClC,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EACtC,OAAO,YAAY,WAAW,KAAK;AAAA;AAGrC,SAAS,kBAAkB,CAAC,OAAgB,UAAyC;AAAA,EACnF,IAAI,CAAC,aAAa,KAAK;AAAA,IAAG;AAAA,EAC1B,IAAI;AAAA,IACF,MAAM,SAAS,QAAQ,IAAI,OAAO,QAAQ;AAAA,IAC1C,OAAO,OAAO,WAAW,WAAW,SAAS;AAAA,IAC7C,MAAM;AAAA,IACN;AAAA;AAAA;AAIJ,SAAS,YAAY,CAAC,OAAiC;AAAA,EACrD,OAAQ,OAAO,UAAU,YAAY,UAAU,QAAS,OAAO,UAAU;AAAA;AAG3E,SAAS,UAAU,CAAC,OAAwB;AAAA,EAC1C,IAAI;AAAA,IACF,OAAO,OAAO,KAAK;AAAA,IACnB,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIX,SAAS,gBAAgB,CAAC,IAA8B;AAAA,EACtD,MAAM,YAAY,MAAM,IAAI;AAAA,EAC5B,IAAI,CAAC,OAAO,SAAS,UAAU,QAAQ,CAAC,GAAG;AAAA,IACzC,MAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AAAA,EACA,OAAO,UAAU,YAAY;AAAA;AAG/B,SAAS,oBAAoB,CAAC,OAA4B;AAAA,EACxD,OAAO,eAAe,KAAK,UAAU,KAAK,CAAC;AAAA;AAG7C,SAAS,cAAc,CAAC,OAAuB;AAAA,EAC7C,OAAO,IAAI,YAAY,EAAE,OAAO,KAAK,EAAE;AAAA;AAGzC,SAAS,YAAY,CAAC,OAAe,UAAyD;AAAA,EAC5F,IAAI,eAAe,KAAK,KAAK;AAAA,IAAU,OAAO,EAAE,OAAO,WAAW,MAAM;AAAA,EAExE,MAAM,cAAc,eAAe,iBAAiB;AAAA,EACpD,MAAM,aAAa,MAAM,KAAK,KAAK;AAAA,EACnC,IAAI,MAAM;AAAA,EACV,IAAI,OAAO,WAAW;AAAA,EACtB,OAAO,MAAM,MAAM;AAAA,IACjB,MAAM,SAAS,KAAK,MAAM,MAAM,QAAQ,CAAC;AAAA,IACzC,IAAI,eAAe,WAAW,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,IAAI,eAAe,UAAU;AAAA,MAClF,MAAM;AAAA,IACR,EAAO;AAAA,MACL,OAAO,SAAS;AAAA;AAAA,EAEpB;AAAA,EAEA,OAAO,EAAE,OAAO,GAAG,WAAW,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,qBAAqB,WAAW,KAAK;AAAA;",
-  "debugId": "CF7E046E16EC3BA064756E2164756E21",
+  "mappings": ";;;;;;;;;;;AAGO,MAAM,+BAA8B,MAAM;AAAA,EACtC,OAAO;AAAA,EACP;AAAA,EACA;AAAA,EACA;AAAA,EAET,WAAW,CAAC,SAAiB,QAAsD;AAAA,IACjF,MAAM,OAAO;AAAA,IACb,KAAK,WAAW,OAAO;AAAA,IACvB,KAAK,UAAU,OAAO;AAAA,IACtB,KAAK,YAAY,OAAO,QAAQ,SAAS,WAAW,OAAO,QAAQ,YAAY;AAAA;AAEnF;AAAA;AAEO,MAAM,8BAA6B,MAAM;AAAA,EACrC,OAAO;AAAA,EACP;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,WAAW,CAAC,SAMT;AAAA,IACD,MAAM,QAAQ,MAAM,OAAO;AAAA,IAC3B,KAAK,QAAQ,QAAQ;AAAA,IACrB,KAAK,WAAW,QAAQ;AAAA,IACxB,KAAK,UAAU,QAAQ;AAAA,IACvB,KAAK,eAAe,QAAQ,QAAQ,SAAS,WAAW,QAAQ,QAAQ,eAAe;AAAA,IACvF,KAAK,YAAY,QAAQ,QAAQ,SAAS,WAAW,QAAQ,QAAQ,YAAY;AAAA,IACjF,KAAK,QAAQ,QAAQ;AAAA,IACrB,KAAK,aAAa,QAAQ;AAAA;AAE9B;AAAA;AAEO,MAAM,+BAA8B,MAAM;AAAA,EACtC,OAAO;AAAA,EACP;AAAA,EACA;AAAA,EAET,WAAW,CAAC,QAA8C;AAAA,IACxD,MAAM,eAAe,OAAO,gCAAgC,OAAO,cAAc;AAAA,IACjF,KAAK,QAAQ,OAAO;AAAA,IACpB,KAAK,YAAY,OAAO;AAAA;AAE5B;;;AC5CO,IAAM,yBAAyB;AAAA,EACpC,uBAAuB;AAAA,IACrB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,wBAAwB;AAAA,IACtB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,0BAA0B;AAAA,IACxB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,2BAA2B;AAAA,IACzB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,8BAA8B;AAAA,IAC5B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,6BAA6B;AAAA,IAC3B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,mCAAmC;AAAA,IACjC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,oCAAoC;AAAA,IAClC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,mCAAmC;AAAA,IACjC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,qCAAqC;AAAA,IACnC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,uBAAuB;AAAA,IACrB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,gCAAgC;AAAA,IAC9B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,mCAAmC;AAAA,IACjC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,6BAA6B;AAAA,IAC3B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,kCAAkC;AAAA,IAChC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,kCAAkC;AAAA,IAChC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,gCAAgC;AAAA,IAC9B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,qBAAqB;AAAA,IACnB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,gCAAgC;AAAA,IAC9B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,6BAA6B;AAAA,IAC3B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,qCAAqC;AAAA,IACnC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,yBAAyB;AAAA,IACvB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,uBAAuB;AAAA,IACrB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,wBAAwB;AAAA,IACtB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,wBAAwB;AAAA,IACtB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,iCAAiC;AAAA,IAC/B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,+BAA+B;AAAA,IAC7B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,wBAAwB;AAAA,IACtB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,mCAAmC;AAAA,IACjC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,oCAAoC;AAAA,IAClC,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,qBAAqB;AAAA,IACnB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,4BAA4B;AAAA,IAC1B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,2BAA2B;AAAA,IACzB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,0BAA0B;AAAA,IACxB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,yBAAyB;AAAA,IACvB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,2BAA2B;AAAA,IACzB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,6BAA6B;AAAA,IAC3B,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AAAA,EACA,wBAAwB;AAAA,IACtB,eAAe;AAAA,IACf,WAAW;AAAA,EACb;AACF;AAKO,IAAM,oBAAmB,OAAO,OAAO,OAAO,KAAK,sBAAsB,CAAC;;;ACvKjF,IAAM,WAAW;AACjB,IAAM,oBAAoB;AAC1B,IAAM,sBAAsB;AAC5B,IAAM,gBACJ;AACF,IAAM,oBACJ;AAEF,SAAS,cAAc,CAAC,KAAsB;AAAA,EAC5C,MAAM,aAAa,IAAI,QAAQ,eAAe,EAAE;AAAA,EAChD,OAAO,cAAc,KAAK,UAAU,KAAK,kBAAkB,KAAK,UAAU;AAAA;AAI5E,SAAS,kBAAkB,GAAa;AAAA,EACtC,OAAO,OAAO,QAAQ,QAAQ,GAAG,EAC9B,OAAO,EAAE,KAAK,WAAW,eAAe,GAAG,KAAK,UAAU,aAAa,MAAM,UAAU,CAAC,EACxF,IAAI,IAAI,WAAW,KAAe,EAClC,KAAK,CAAC,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM;AAAA;AAGhC,SAAS,qBAAqB,GAAG;AAAA,EACtC,MAAM,UAAU,mBAAmB;AAAA,EACnC,IAAI,WAAW;AAAA,EACf,IAAI,YAAY;AAAA,EAChB,IAAI,UAAU;AAAA,EAEd,MAAM,OAAO,CAAC,UAA0B;AAAA,IACtC,IAAI,QAAQ;AAAA,IACZ,WAAW,UAAU,SAAS;AAAA,MAC5B,QAAQ,MACL,MAAM,QAAQ,EACd,IAAI,CAAC,SAAS,KAAK,MAAM,MAAM,EAAE,KAAK,QAAQ,CAAC,EAC/C,KAAK,QAAQ;AAAA,IAClB;AAAA,IACA,QAAQ,MACL,QACC,iFACA,QACF,EACC,QAAQ,8CAA8C,QAAQ,EAC9D,QAAQ,0DAA0D,QAAQ,EAC1E,QACC,0IACA,QACF,EAEC,QAAQ,wCAAwC,QAAQ,EACxD,QACC,iLACA,QACF;AAAA,IACF,IAAI,UAAU;AAAA,MAAO,WAAW;AAAA,IAChC,OAAO;AAAA;AAAA,EAGT,MAAM,UAAU,CAAC,OAA0B,QAAQ,MAAyB;AAAA,IAC1E,IAAI,QAAQ,qBAAqB,aAAa,qBAAqB;AAAA,MACjE,YAAY;AAAA,MACZ,OAAO;AAAA,IACT;AAAA,IACA,IAAI,OAAO,UAAU;AAAA,MAAU,OAAO,KAAK,KAAK;AAAA,IAChD,IAAI,UAAU,QAAQ,OAAO,UAAU;AAAA,MAAU,OAAO;AAAA,IACxD,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,MACxB,MAAM,YAAY,KAAK,IAAI,GAAG,sBAAsB,OAAO;AAAA,MAC3D,IAAI,MAAM,SAAS;AAAA,QAAW,YAAY;AAAA,MAC1C,OAAO,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,CAAC,UAAU,QAAQ,OAAO,QAAQ,CAAC,CAAC;AAAA,IAC3E;AAAA,IACA,MAAM,SAA4C,OAAO,OAAO,IAAI;AAAA,IACpE,YAAY,KAAK,UAAU,OAAO,QAAQ,KAAK,GAAG;AAAA,MAChD,IAAI,WAAW,qBAAqB;AAAA,QAClC,YAAY;AAAA,QACZ;AAAA,MACF;AAAA,MACA,IAAI,eAAe,GAAG,GAAG;AAAA,QACvB,WAAW;AAAA,QACX;AAAA,QACA,OAAO,KAAK,GAAG,KAAK;AAAA,MACtB,EAAO;AAAA,QACL,OAAO,KAAK,GAAG,KAAK,QAAQ,OAAO,QAAQ,CAAC;AAAA;AAAA,IAEhD;AAAA,IACA,OAAO;AAAA;AAAA,EAGT,OAAO;AAAA,IACL;AAAA,IACA;AAAA,QACI,QAAQ,GAAG;AAAA,MACb,OAAO;AAAA;AAAA,QAEL,SAAS,GAAG;AAAA,MACd,OAAO;AAAA;AAAA,EAEX;AAAA;;;ACzFK,IAAM,kCAAiC,IAAI;AAC3C,IAAM,qCAAoC,KAAK;AACtD,IAAM,oBAAoB;AAC1B,IAAM,sBAA2C,IAAI,IAAI,iBAAgB;AA4CzE,MAAM,kBAAkB,MAAgC;AAAA,EAM3C;AAAA,EALO,OAAO;AAAA,EAChB;AAAA,EACA;AAAA,EAET,WAAW,CACA,MACT,SACA,UAA4B,CAAC,GAC7B;AAAA,IACA,MAAM,SAAS,QAAQ,UAAU,YAAY,YAAY,EAAE,OAAO,QAAQ,MAAM,CAAC;AAAA,IAJxE;AAAA,IAKT,KAAK,YAAY,uBAAuB,MAAM;AAAA,IAC9C,IAAI,QAAQ,YAAY,WAAW;AAAA,MACjC,KAAK,UAAU,gBAAe,QAAQ,SAAS,oBAAoB;AAAA,IACrE;AAAA;AAEJ;AAGO,SAAS,gBAAe,CAC7B,MACA,SACA,UAA4B,CAAC,GACb;AAAA,EAChB,OAAO,IAAI,UAAU,MAAM,SAAS,OAAO;AAAA;AAStC,SAAS,mBAA2D,CACzE,OACA,SAC6B;AAAA,EAC7B,MAAM,eAAe,IAAI,IAAmB,QAAQ,YAAY;AAAA,EAChE,MAAM,aACJ,aAAY,KAAK,KAAK,aAAa,IAAI,MAAM,IAAI,IAC7C,QACA,iBAAgB,QAAQ,aAAa,uBAAsB,KAAK,GAAG;AAAA,IACjE,OAAO;AAAA,OACH,QAAQ,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,QAAQ,QAAQ;AAAA,EACtE,CAAC;AAAA,EAEP,OAAO,eAAc,YAAY;AAAA,IAC/B,cAAc,QAAQ;AAAA,OAClB,QAAQ,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,QAAQ,GAAG;AAAA,EACvD,CAAC;AAAA;AAII,SAAS,YAAW,CAAC,OAAyC;AAAA,EACnE,IAAI;AAAA,IACF,OAAO,iBAAiB;AAAA,IACxB,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAcJ,SAAS,cAAa,CAC3B,OACA,UAAiF,CAAC,GACrE;AAAA,EACb,IAAI,CAAC,aAAY,KAAK,GAAG;AAAA,IACvB,MAAM,IAAI,MAAM,uEAAuE;AAAA,EACzF;AAAA,EACA,MAAM,eAAe,kBAAkB,UAAU,IAAI,IAAI,QAAQ,YAAY,IAAI;AAAA,EACjF,IAAI,gBAAgB,CAAC,aAAa,IAAI,MAAM,IAAI,GAAG;AAAA,IACjD,MAAM,IAAI,MAAM,sBAAsB,MAAM,gDAAgD;AAAA,EAC9F;AAAA,EACA,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,WAAW,sBAAsB;AAAA,EACvC,MAAM,UAAU,MAAM,YAAY,YAAY,YAAY,SAAS,QAAQ,MAAM,OAAO;AAAA,EACxF,QAAQ,QAAQ,WAAW,aAAa,kBAAkB,OAAO,IAAI;AAAA,EACrE,MAAM,UAAU,uBAAuB,MAAM;AAAA,EAC7C,MAAM,cAAc,QAAQ,WAAW;AAAA,EACvC,MAAM,UAAU,aACd,SAAS,KACP,gBAAgB,WAAW,YAAY,WAAW,GAAG,UAAU,IAC3D,cACA,GAAG,WAAW,aACpB,GACA,+BACF;AAAA,EACA,MAAM,UAAuB;AAAA,IAC3B;AAAA,IACA,SAAS,QAAQ;AAAA,IACjB,WAAW,uBAAuB,MAAM;AAAA,IACxC,IAAI,iBAAiB,QAAQ,EAAE;AAAA,OAC3B,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,gBAAe,SAAS,sBAAsB,EAAE;AAAA,OACxF,QAAQ,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,OAAO,WAAW;AAAA,OACxE,SAAS,YAAY,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,OACtD,QAAQ,aAAa,aAAa,SAAS,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;AAAA,EACpF;AAAA,EAEA,IAAI,qBAAqB,OAAO,KAAK;AAAA,IAAmC,OAAO;AAAA,EAE/E,OAAO;AAAA,IACL,MAAM,QAAQ;AAAA,IACd,SAAS,QAAQ;AAAA,IACjB,WAAW,QAAQ;AAAA,IACnB,IAAI,QAAQ;AAAA,OACR,QAAQ,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;AAAA,OACzE,QAAQ,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,IAC7C,WAAW;AAAA,EACb;AAAA;AAGF,IAAM,mBAAqD;AAAA,EACzD,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,WAAW;AAAA,EACX,WAAW;AACb;AAEA,SAAS,YAAY,CAAC,OAAiC;AAAA,EACrD,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,SAAS,OAAO,SAAS;AAAA;AAI1F,SAAS,iBAAiB,CACxB,OACA,cAKA;AAAA,EACA,MAAM,OAAO,IAAI;AAAA,EACjB,MAAM,WAAW,IAAI;AAAA,EACrB,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI,YAAY;AAAA,EAChB,IAAI,WAAW;AAAA,EACf,IAAI,UAAmB;AAAA,EACvB,OAAO,OAAO,YAAY,YAAY,YAAY,QAAQ,CAAC,KAAK,IAAI,OAAO,GAAG;AAAA,IAC5E,IAAI,KAAK,SAAS,GAAG;AAAA,MACnB,YAAY;AAAA,MACZ;AAAA,IACF;AAAA,IACA,KAAK,IAAI,OAAO;AAAA,IAChB,MAAM,cAAc,eAAe,OAAO;AAAA,IAC1C,IAAI;AAAA,MAAa,SAAS,IAAI,WAAW;AAAA,IACzC,IAAI;AAAA,MACF,IAAI,mBAAmB,uBAAsB;AAAA,QAG3C,MAAM,QAAQ,kBAAiB,OAAO,yBAAyB,SAAS,OAAO,GAAG,KAAK;AAAA,QACvF,SAAS,IAAI,MAAM,OAAO;AAAA,QAC1B,eAAe,MAAM;AAAA,QACrB,aAAa,MAAM,aAAa;AAAA,QAChC,cAAc,MAAM,cAAc;AAAA,MACpC;AAAA,MACA,IACE,aAAY,OAAO,KACnB,QAAQ,SAAS,gBACjB,QAAQ,SAAS,uBACjB;AAAA,QACA,iBAAiB,uBAAuB,QAAQ,MAAM;AAAA,MACxD;AAAA,MAEA,MAAM,SACJ,OAAO,yBAAyB,SAAS,QAAQ,GAAG,SACpD,OAAO,yBAAyB,SAAS,YAAY,GAAG;AAAA,MAC1D,IAAI,eAAe,aAAa,aAAa,MAAM;AAAA,QAAG,aAAa;AAAA,MACnE,MAAM,OAAO,OAAO,yBAAyB,SAAS,MAAM,GAAG;AAAA,MAC/D,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO,kBAAkB,IAAI,GAAG;AAAA,QACrE,SAAS,IAAI,iBAAiB,KAAK;AAAA,MACrC;AAAA,MACA,UAAU,OAAO,yBAAyB,SAAS,OAAO,GAAG;AAAA,MAC7D,MAAM;AAAA,MACN;AAAA;AAAA,EAEJ;AAAA,EACA,IAAI,SAAS,SAAS,KAAK;AAAA,IAAgB,SAAS,IAAI,cAAc;AAAA,EACtE,IAAI,eAAe,WAAW;AAAA,IAC5B,MAAM,gBAAgB,kCAAkC;AAAA,IACxD,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,YAAY,QAAQ,SAAS,aAAa,CAAC;AAAA,MAClE,SAAS,IAAI,aAAa;AAAA,EAC9B;AAAA,EACA,OAAO;AAAA,OACD,SAAS,SAAS,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,QAAQ,EAAE,KAAK,GAAG,GAAG,WAAW,EAAE;AAAA,IAC1F;AAAA,IACA;AAAA,EACF;AAAA;AASK,SAAS,qBAAoB,CAClC,SACA,cACQ;AAAA,EACR,MAAM,SAAS,eAAe,kBAAiB,SAAS,YAAY,IAAI,kBAAiB,OAAO;AAAA,EAChG,OAAO,KAAK,UAAU,MAAM;AAAA;AAavB,SAAS,iBAAgB,CAC9B,OACA,eAAmC,mBACtB;AAAA,EACb,MAAM,YAAY,wBAAwB,KAAK;AAAA,EAC/C,IAAI,CAAC,cAAc,SAAS,GAAG;AAAA,IAC7B,MAAM,qBAAqB,wBAAwB;AAAA,EACrD;AAAA,EAEA,QAAQ,MAAM,SAAS,WAAW,IAAI,SAAS,YAAY,UAAU,cAAc;AAAA,EACnF,IAAI,OAAO,SAAS,YAAY,CAAC,oBAAoB,IAAI,IAAI,GAAG;AAAA,IAC9D,MAAM,qBAAqB,qCAAqC;AAAA,EAClE;AAAA,EACA,IAAI,CAAE,aAAmC,SAAS,IAAI,GAAG;AAAA,IACvD,MAAM,qBAAqB,8CAA8C;AAAA,EAC3E;AAAA,EACA,IAAI,OAAO,YAAY,UAAU;AAAA,IAC/B,MAAM,qBAAqB,yBAAyB;AAAA,EACtD;AAAA,EACA,IAAI,eAAe,OAAO,IAAI,iCAAgC;AAAA,IAC5D,MAAM,qBAAqB,mBAAmB,6CAA4C;AAAA,EAC5F;AAAA,EACA,IAAI,OAAO,cAAc,WAAW;AAAA,IAClC,MAAM,qBAAqB,4BAA4B;AAAA,EACzD;AAAA,EACA,IAAI,cAAc,uBAAuB,MAAuB,WAAW;AAAA,IACzE,MAAM,qBAAqB,gDAAgD;AAAA,EAC7E;AAAA,EACA,IAAI,OAAO,OAAO,YAAY,CAAC,wBAAwB,EAAE,GAAG;AAAA,IAC1D,MAAM,qBAAqB,0CAA0C;AAAA,EACvE;AAAA,EACA,IAAI,YAAY,aAAa,CAAC,aAAY,OAAO,GAAG;AAAA,IAClD,MAAM,qBAAqB,6BAA6B;AAAA,EAC1D;AAAA,EACA,IAAI,cAAc,aAAa,cAAc,MAAM;AAAA,IACjD,MAAM,qBAAqB,qCAAqC;AAAA,EAClE;AAAA,EAEA,IAAI,aAAa,aAAa,aAAa,MAAM;AAAA,IAC/C,MAAM,qBAAqB,oCAAoC;AAAA,EACjE;AAAA,EACA,IAAI,eAAe,aAAa,CAAC,aAAa,UAAU,GAAG;AAAA,IACzD,MAAM,qBAAqB,2CAA2C;AAAA,EACxE;AAAA,EACA,MAAM,WAAW,sBAAsB;AAAA,EACvC,MAAM,cAAc,aAAa,SAAS,KAAK,OAAO,GAAG,+BAA8B;AAAA,EACvF,MAAM,cACJ,YAAY,YAAY,YAAY,SAAS,QAAQ,OAA4B;AAAA,EAEnF,MAAM,UAAuB;AAAA,IAC3B;AAAA,IACA,SAAS,YAAY;AAAA,IACrB;AAAA,IACA;AAAA,OACI,gBAAgB,YAChB,CAAC,IACD,EAAE,SAAS,gBAAe,aAAa,6BAA6B,EAAE;AAAA,OACtE,eAAe,YAAY,CAAC,IAAI,EAAE,WAAiC;AAAA,OACnE,YAAY,SAAS,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,OACtD,aAAa,SAAS,aAAa,YAAY,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;AAAA,EACxF;AAAA,EACA,IAAI,qBAAqB,OAAO,IAAI,oCAAmC;AAAA,IACrE,MAAM,qBACJ,kBAAkB,2DACpB;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,uBAAuB,CAAC,OAAyB;AAAA,EACxD,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EACtC,IAAI;AAAA,IACF,OAAO,KAAK,MAAM,KAAK;AAAA,IACvB,MAAM;AAAA,IACN,MAAM,qBAAqB,yBAAyB;AAAA;AAAA;AAIxD,SAAS,uBAAuB,CAAC,OAAwB;AAAA,EACvD,MAAM,YAAY,IAAI,KAAK,KAAK;AAAA,EAChC,OAAO,OAAO,SAAS,UAAU,QAAQ,CAAC,KAAK,UAAU,YAAY,MAAM;AAAA;AAG7E,SAAS,oBAAoB,CAAC,QAAuB;AAAA,EACnD,OAAO,IAAI,MAAM,qCAAqC,SAAS;AAAA;AAS1D,SAAS,sBAAqB,CAAC,OAAgB,UAA2B;AAAA,EAC/E,MAAM,UAAU,mBAAmB,OAAO,SAAS;AAAA,EACnD,IAAI,YAAY;AAAA,IAAW,OAAO;AAAA,EAClC,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EACtC,OAAO,YAAY,WAAW,KAAK;AAAA;AAGrC,SAAS,kBAAkB,CAAC,OAAgB,UAAyC;AAAA,EACnF,IAAI,CAAC,aAAa,KAAK;AAAA,IAAG;AAAA,EAC1B,IAAI;AAAA,IACF,MAAM,SAAS,QAAQ,IAAI,OAAO,QAAQ;AAAA,IAC1C,OAAO,OAAO,WAAW,WAAW,SAAS;AAAA,IAC7C,MAAM;AAAA,IACN;AAAA;AAAA;AAIJ,SAAS,YAAY,CAAC,OAAiC;AAAA,EACrD,OAAQ,OAAO,UAAU,YAAY,UAAU,QAAS,OAAO,UAAU;AAAA;AAG3E,SAAS,UAAU,CAAC,OAAwB;AAAA,EAC1C,IAAI;AAAA,IACF,OAAO,OAAO,KAAK;AAAA,IACnB,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIX,SAAS,gBAAgB,CAAC,IAA8B;AAAA,EACtD,MAAM,YAAY,MAAM,IAAI;AAAA,EAC5B,IAAI,CAAC,OAAO,SAAS,UAAU,QAAQ,CAAC,GAAG;AAAA,IACzC,MAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AAAA,EACA,OAAO,UAAU,YAAY;AAAA;AAG/B,SAAS,oBAAoB,CAAC,OAA4B;AAAA,EACxD,OAAO,eAAe,KAAK,UAAU,KAAK,CAAC;AAAA;AAG7C,SAAS,cAAc,CAAC,OAAuB;AAAA,EAC7C,OAAO,IAAI,YAAY,EAAE,OAAO,KAAK,EAAE;AAAA;AAGzC,SAAS,YAAY,CAAC,OAAe,UAAyD;AAAA,EAC5F,IAAI,eAAe,KAAK,KAAK;AAAA,IAAU,OAAO,EAAE,OAAO,WAAW,MAAM;AAAA,EAExE,MAAM,cAAc,eAAe,iBAAiB;AAAA,EACpD,MAAM,aAAa,MAAM,KAAK,KAAK;AAAA,EACnC,IAAI,MAAM;AAAA,EACV,IAAI,OAAO,WAAW;AAAA,EACtB,OAAO,MAAM,MAAM;AAAA,IACjB,MAAM,SAAS,KAAK,MAAM,MAAM,QAAQ,CAAC;AAAA,IACzC,IAAI,eAAe,WAAW,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,IAAI,eAAe,UAAU;AAAA,MAClF,MAAM;AAAA,IACR,EAAO;AAAA,MACL,OAAO,SAAS;AAAA;AAAA,EAEpB;AAAA,EAEA,OAAO,EAAE,OAAO,GAAG,WAAW,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,qBAAqB,WAAW,KAAK;AAAA;",
+  "debugId": "618327CB3FBDBD4A64756E2164756E21",
   "names": []
 }

package/dist/{chunk-sfypc7mk.js → chunk-s24qbp32.js}

@@ -6,11 +6,11 @@ import {
   createSixbError2,
   isSixbError2,
   summarizeErrorMessage2
-} from "./chunk-hzw7yv5g.js";
+} from "./chunk-rzkr70gr.js";
 import {
   isActionDefinition2,
   isGroupDefinition
-} from "./chunk-2cxv584m.js";
+} from "./chunk-9pfw47qx.js";
 import {
   isModelReasoning2
 } from "./chunk-pqajwytd.js";
@@ -19,14 +19,14 @@ import {
 } from "./chunk-69266efg.js";
 import {
   isAgentToolDefinition2
-} from "./chunk-7c2g3sz9.js";
+} from "./chunk-dsfw1bdr.js";
 import {
   WorkflowDefinitionError2,
   assertNonEmpty,
   isStepDefinition2,
   isAgentStepDefinition2,
   isInterventionDefinition2
-} from "./chunk-nzsy3xrp.js";
+} from "./chunk-cvrbhvtr.js";
 import {
   isScheduleDefinition2
 } from "./chunk-e1c18xjx.js";

package/dist/{chunk-axndsymr.js → chunk-tw03bsmb.js}

@@ -252,7 +252,7 @@ async function validateCredential(record, lookup) {
   if (!token) {
     throw new ExecutionStorageError2("missing_credential", `[Sixb] Authority access token '${credential.id}' does not exist in project '${record.projectId}'.`);
   }
-  if (token.subjectType !== principal.type || token.subjectId !== principal.id) {
+  if (!principalsEqual(token.subject, principal)) {
     throw new ExecutionStorageError2("invalid_credential", `[Sixb] Authority access token '${credential.id}' does not belong to principal '${principal.id}'.`);
   }
 }
@@ -343,4 +343,4 @@ var TRUSTED_PRIMITIVE_KINDS = new Set([
 
 export { ExecutionStorageError2, prepareExecutionRecord2, normalizeExecutionRecord2, validateExecutionRecordReferences2, cloneExecutionRecord };
 
-//# debugId=44233475F9DA4CC764756E2164756E21
+//# debugId=12B08F503967185464756E2164756E21

package/dist/{chunk-axndsymr.js.map → chunk-tw03bsmb.js.map}

@@ -3,9 +3,9 @@
   "sources": ["../src/storage/executions/errors.ts", "../src/storage/executions/validation.ts"],
   "sourcesContent": [
     "export type ExecutionStorageErrorCode =\n  | \"duplicate_execution\"\n  | \"invalid_credential\"\n  | \"invalid_input\"\n  | \"invalid_parent_execution\"\n  | \"missing_credential\"\n  | \"missing_parent_execution\"\n  | \"missing_principal\"\n\n/** Stable error raised when an execution record would violate ledger invariants. */\nexport class ExecutionStorageError extends Error {\n  readonly name = \"ExecutionStorageError\"\n\n  constructor(\n    readonly code: ExecutionStorageErrorCode,\n    message: string,\n    options: ErrorOptions = {}\n  ) {\n    super(message, options)\n  }\n}\n",
-    "import { isDeepStrictEqual } from \"node:util\"\nimport { normalizeRequesterGroupIds, snapshotRequesterGroupIds } from \"../../auth/attribution\"\nimport { kernelOperationId } from \"../../execution/kernel-operation\"\nimport type {\n  AuthorizablePrincipal,\n  AuthorizationRef,\n  KernelOperation,\n} from \"../../execution/types\"\nimport type { AuthStorage } from \"../auth\"\nimport { ExecutionStorageError } from \"./errors\"\nimport type {\n  CreateExecutionInput,\n  DurableExecutionExecutor,\n  DurableExecutionSource,\n  ExecutionRecord,\n} from \"./types\"\n\nexport interface ExecutionValidationLookup {\n  readonly auth: AuthStorage\n  getExecution(params: {\n    readonly projectId: string\n    readonly id: string\n  }): Promise<ExecutionRecord | null>\n  getShareSession(params: {\n    readonly projectId: string\n    readonly id: string\n  }): Promise<{ readonly grantId: string } | null>\n}\n\n/** Capture accounting attribution at the same storage boundary that admits the execution. */\nexport async function prepareExecutionRecord(\n  input: CreateExecutionInput,\n  lookup: ExecutionValidationLookup\n): Promise<ExecutionRecord> {\n  let groups = input.requesterGroupIds\n  if (groups === undefined && input.source.type === \"execution\") {\n    const parent = await lookup.getExecution({\n      projectId: input.projectId,\n      id: input.source.executionId,\n    })\n    groups = parent?.requesterGroupIds\n  } else if (groups === undefined && input.requestedBy) {\n    groups = await snapshotRequesterGroupIds({\n      auth: lookup.auth,\n      projectId: input.projectId,\n      principal: input.requestedBy,\n    })\n  }\n  const record = normalizeExecutionRecord({ ...input, requesterGroupIds: groups ?? [] })\n  await validateExecutionRecordReferences(record, lookup)\n  return record\n}\n\nexport function normalizeExecutionRecord(\n  input: CreateExecutionInput,\n  createdAt: Date = new Date()\n): ExecutionRecord {\n  const record: ExecutionRecord = {\n    id: input.id,\n    projectId: input.projectId,\n    requesterGroupIds: normalizeRequesterGroupIds(input.requesterGroupIds ?? []),\n    ...(input.requestedBy === undefined ? {} : { requestedBy: structuredClone(input.requestedBy) }),\n    executor: structuredClone(input.executor),\n    source: structuredClone(input.source),\n    correlationId: input.correlationId,\n    authorizationRef: structuredClone(input.authorizationRef),\n    createdAt: new Date(createdAt),\n  }\n\n  assertRecordShape(record)\n  assertExecutorAuthority(record)\n  return record\n}\n\nexport async function validateExecutionRecordReferences(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  await validatePrincipal(record.requestedBy, record.projectId, \"Requested-by principal\", lookup)\n\n  if (record.authorizationRef.type === \"principal\") {\n    await validatePrincipal(\n      record.authorizationRef.principal,\n      record.projectId,\n      \"Authority principal\",\n      lookup\n    )\n    await validateCredential(record, lookup)\n  }\n  if (record.authorizationRef.type === \"delegated\") {\n    await validateDelegation(record, lookup)\n  }\n\n  await validateParent(record, lookup)\n}\n\nexport function cloneExecutionRecord(record: ExecutionRecord): ExecutionRecord {\n  return structuredClone(record)\n}\n\nfunction assertRecordShape(record: ExecutionRecord): void {\n  assertNonBlank(record.id, \"Execution id\")\n  assertNonBlank(record.projectId, \"Execution project id\")\n  assertNonBlank(record.correlationId, \"Execution correlation id\")\n  assertValidDate(record.createdAt, \"Execution createdAt\")\n\n  if (record.requestedBy) {\n    assertPrincipal(record.requestedBy, \"Requested-by principal\")\n  }\n\n  assertExecutor(record.executor)\n  assertSource(record.source)\n  assertAuthorizationRef(record.authorizationRef)\n}\n\nfunction assertExecutor(executor: DurableExecutionExecutor): void {\n  switch (executor.type) {\n    case \"request\":\n      assertNonBlank(executor.requestId, \"Executor request id\")\n      return\n    case \"primitive\":\n      assertTrustedPrimitiveKind(executor.kind, \"Executor primitive kind\")\n      assertNonBlank(executor.runId, \"Executor primitive run id\")\n      return\n    case \"agent\":\n      assertNonBlank(executor.runId, \"Executor agent run id\")\n      return\n    case \"kernel\":\n      assertKernelOperation(executor.operation, \"Executor kernel operation\")\n      return\n    default:\n      invalid(`Unknown execution executor type '${String((executor as { type?: unknown }).type)}'.`)\n  }\n}\n\nfunction assertSource(source: DurableExecutionSource): void {\n  switch (source.type) {\n    case \"ontologyCommit\":\n      assertNonBlank(source.commitId, \"Execution source commit id\")\n      return\n    case \"http\":\n      assertNonBlank(source.requestId, \"Execution source request id\")\n      return\n    case \"webhook\":\n      assertNonBlank(source.deliveryId, \"Execution source delivery id\")\n      return\n    case \"schedule\":\n    case \"event\":\n      assertNonBlank(source.eventId, \"Execution source event id\")\n      return\n    case \"datasetVersion\":\n      assertNonBlank(source.datasetId, \"Execution source dataset id\")\n      assertNonBlank(source.versionId, \"Execution source dataset version id\")\n      return\n    case \"execution\":\n      assertNonBlank(source.executionId, \"Execution source execution id\")\n      return\n    default:\n      invalid(\n        `Execution source type '${String((source as { type?: unknown }).type)}' is not durable.`\n      )\n  }\n}\n\nfunction assertAuthorizationRef(ref: AuthorizationRef): void {\n  switch (ref.type) {\n    case \"principal\":\n      assertPrincipal(ref.principal, \"Authority principal\")\n      if (ref.credential) {\n        if (ref.credential.type !== \"session\" && ref.credential.type !== \"accessToken\") {\n          invalid(\n            `Unknown authority credential type '${String(\n              (ref.credential as { type?: unknown }).type\n            )}'.`\n          )\n        }\n        assertNonBlank(ref.credential.id, \"Authority credential id\")\n      }\n      return\n    case \"trustedPrimitive\":\n      assertTrustedPrimitiveKind(ref.primitive.kind, \"Authority primitive kind\")\n      assertNonBlank(ref.primitive.id, \"Authority primitive id\")\n      assertNonBlank(ref.primitive.runId, \"Authority primitive run id\")\n      return\n    case \"delegated\":\n      if (ref.delegation.kind !== \"share\") {\n        invalid(\n          `Unknown authority delegation kind '${String(\n            (ref.delegation as { kind?: unknown }).kind\n          )}'.`\n        )\n      }\n      assertNonBlank(ref.delegation.grantId, \"Authority delegation grant id\")\n      assertNonBlank(ref.delegation.sessionId, \"Authority delegation session id\")\n      return\n    case \"kernel\":\n      assertKernelOperation(ref.operation, \"Authority kernel operation\")\n      return\n    case \"disabled\":\n      return\n    default:\n      invalid(`Unknown authorization reference type '${String((ref as { type?: unknown }).type)}'.`)\n  }\n}\n\nfunction assertExecutorAuthority(record: ExecutionRecord): void {\n  const { executor, authorizationRef, requestedBy, source } = record\n\n  switch (executor.type) {\n    case \"request\": {\n      if (source.type !== \"http\" || source.requestId !== executor.requestId) {\n        invalid(\"Request executions require a matching HTTP source request id.\")\n      }\n      if (authorizationRef.type === \"principal\") {\n        if (!principalsEqual(requestedBy, authorizationRef.principal)) {\n          invalid(\"Request authority must match its requested-by principal.\")\n        }\n        return\n      }\n      if (authorizationRef.type === \"disabled\") {\n        if (requestedBy !== undefined) {\n          invalid(\"Auth-disabled request executions cannot have a requested-by principal.\")\n        }\n        return\n      }\n      if (authorizationRef.type === \"delegated\") {\n        if (requestedBy !== undefined) {\n          invalid(\"Delegated request executions cannot have a requested-by principal.\")\n        }\n        return\n      }\n      invalid(\"Request executions require principal, delegated, or explicitly disabled authority.\")\n      break\n    }\n    case \"primitive\": {\n      if (authorizationRef.type !== \"trustedPrimitive\") {\n        invalid(\"Primitive executions require trusted primitive authority.\")\n      }\n      if (\n        authorizationRef.primitive.kind !== executor.kind ||\n        authorizationRef.primitive.runId !== executor.runId\n      ) {\n        invalid(\"Trusted primitive authority must match the executor kind and run id.\")\n      }\n      return\n    }\n    case \"agent\": {\n      if (source.type !== \"execution\") {\n        invalid(\"Agent executions require a parent execution source.\")\n      }\n      if (\n        authorizationRef.type === \"principal\" &&\n        authorizationRef.principal.type === \"serviceAccount\" &&\n        authorizationRef.credential === undefined\n      ) {\n        return\n      }\n      if (\n        authorizationRef.type === \"principal\" &&\n        authorizationRef.principal.type === \"user\" &&\n        authorizationRef.credential !== undefined\n      ) {\n        return\n      }\n      if (authorizationRef.type === \"disabled\") return\n      invalid(\n        \"Agent executions require managed service-account, credentialed user, or explicitly disabled authority.\"\n      )\n      break\n    }\n    case \"kernel\": {\n      if (\n        authorizationRef.type !== \"kernel\" ||\n        !kernelOperationsEqual(authorizationRef.operation, executor.operation)\n      ) {\n        invalid(\"Kernel authority must match the executor operation.\")\n      }\n      if (requestedBy !== undefined) {\n        invalid(\"Kernel executions cannot have a requested-by principal.\")\n      }\n      return\n    }\n  }\n}\n\nasync function validatePrincipal(\n  principal: AuthorizablePrincipal | undefined,\n  projectId: string,\n  label: string,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (!principal) return\n\n  const record =\n    principal.type === \"user\"\n      ? await lookup.auth.users.getById({ projectId, id: principal.id })\n      : await lookup.auth.serviceAccounts.getById({ projectId, id: principal.id })\n  if (!record) {\n    throw new ExecutionStorageError(\n      \"missing_principal\",\n      `[Sixb] ${label} '${principal.id}' does not exist in project '${projectId}'.`\n    )\n  }\n}\n\nasync function validateCredential(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.authorizationRef.type !== \"principal\" || !record.authorizationRef.credential) return\n\n  const { principal, credential } = record.authorizationRef\n  if (credential.type === \"session\") {\n    const session = await lookup.auth.sessions.getById({\n      projectId: record.projectId,\n      id: credential.id,\n    })\n    if (!session) {\n      throw new ExecutionStorageError(\n        \"missing_credential\",\n        `[Sixb] Authority session '${credential.id}' does not exist in project '${record.projectId}'.`\n      )\n    }\n    if (principal.type !== \"user\" || session.userId !== principal.id) {\n      throw new ExecutionStorageError(\n        \"invalid_credential\",\n        `[Sixb] Authority session '${credential.id}' does not belong to principal '${principal.id}'.`\n      )\n    }\n    return\n  }\n\n  const token = await lookup.auth.accessTokens.getById({\n    projectId: record.projectId,\n    id: credential.id,\n  })\n  if (!token) {\n    throw new ExecutionStorageError(\n      \"missing_credential\",\n      `[Sixb] Authority access token '${credential.id}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (token.subjectType !== principal.type || token.subjectId !== principal.id) {\n    throw new ExecutionStorageError(\n      \"invalid_credential\",\n      `[Sixb] Authority access token '${credential.id}' does not belong to principal '${principal.id}'.`\n    )\n  }\n}\n\nasync function validateDelegation(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.authorizationRef.type !== \"delegated\") return\n  const { grantId, sessionId } = record.authorizationRef.delegation\n  const session = await lookup.getShareSession({ projectId: record.projectId, id: sessionId })\n  if (!session) {\n    throw new ExecutionStorageError(\n      \"missing_credential\",\n      `[Sixb] Authority shared session '${sessionId}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (session.grantId !== grantId) {\n    throw new ExecutionStorageError(\n      \"invalid_credential\",\n      `[Sixb] Authority shared session '${sessionId}' does not belong to grant '${grantId}'.`\n    )\n  }\n}\n\nasync function validateParent(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.source.type !== \"execution\") return\n  const parentExecutionId = record.source.executionId\n\n  const parent = await lookup.getExecution({\n    projectId: record.projectId,\n    id: parentExecutionId,\n  })\n  if (!parent) {\n    throw new ExecutionStorageError(\n      \"missing_parent_execution\",\n      `[Sixb] Parent execution '${parentExecutionId}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (parent.correlationId !== record.correlationId) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent correlation id.`\n    )\n  }\n  if (!principalsEqual(parent.requestedBy, record.requestedBy)) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent requested-by principal.`\n    )\n  }\n  if (!isDeepStrictEqual(parent.requesterGroupIds, record.requesterGroupIds)) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent requester-group snapshot.`\n    )\n  }\n  if (\n    record.executor.type === \"agent\" &&\n    isInheritedAgentAuthority(record.authorizationRef) &&\n    !isDeepStrictEqual(parent.authorizationRef, record.authorizationRef)\n  ) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child Agent execution '${record.id}' must inherit its parent's authorization reference.`\n    )\n  }\n}\n\nfunction isInheritedAgentAuthority(ref: AuthorizationRef): boolean {\n  return (\n    ref.type === \"disabled\" ||\n    (ref.type === \"principal\" && ref.principal.type === \"user\" && ref.credential !== undefined)\n  )\n}\n\nfunction assertPrincipal(principal: AuthorizablePrincipal, label: string): void {\n  if (principal.type !== \"user\" && principal.type !== \"serviceAccount\") {\n    invalid(`${label} has unsupported type '${String((principal as { type?: unknown }).type)}'.`)\n  }\n  assertNonBlank(principal.id, `${label} id`)\n}\n\nfunction assertKernelOperation(operation: KernelOperation, label: string): void {\n  if (operation.type !== \"ontology.recover\" && operation.type !== \"ontology.indexVectors\") {\n    invalid(`${label} has unsupported type '${String((operation as { type?: unknown }).type)}'.`)\n  }\n  assertNonBlank(kernelOperationId(operation), `${label} operation id`)\n}\n\nfunction assertTrustedPrimitiveKind(value: string, label: string): void {\n  if (!TRUSTED_PRIMITIVE_KINDS.has(value)) {\n    invalid(`${label} '${value}' is not supported.`)\n  }\n}\n\nfunction assertNonBlank(value: string, label: string): void {\n  if (typeof value !== \"string\" || !value.trim()) {\n    invalid(`${label} must be a non-empty string.`)\n  }\n}\n\nfunction assertValidDate(value: Date, label: string): void {\n  if (!(value instanceof Date) || !Number.isFinite(value.getTime())) {\n    invalid(`${label} must be a valid date.`)\n  }\n}\n\nfunction principalsEqual(\n  left: AuthorizablePrincipal | undefined,\n  right: AuthorizablePrincipal | undefined\n): boolean {\n  return left?.type === right?.type && left?.id === right?.id\n}\n\nfunction kernelOperationsEqual(left: KernelOperation, right: KernelOperation): boolean {\n  return left.type === right.type && kernelOperationId(left) === kernelOperationId(right)\n}\n\nfunction invalid(message: string): never {\n  throw new ExecutionStorageError(\"invalid_input\", `[Sixb] ${message}`)\n}\n\nconst TRUSTED_PRIMITIVE_KINDS = new Set([\n  \"action\",\n  \"pipeline\",\n  \"projection\",\n  \"rule\",\n  \"sync\",\n  \"webhook\",\n  \"workflow\",\n])\n"
+    "import { isDeepStrictEqual } from \"node:util\"\nimport { normalizeRequesterGroupIds, snapshotRequesterGroupIds } from \"../../auth/attribution\"\nimport { kernelOperationId } from \"../../execution/kernel-operation\"\nimport type {\n  AuthorizablePrincipal,\n  AuthorizationRef,\n  KernelOperation,\n} from \"../../execution/types\"\nimport type { AuthStorage } from \"../auth\"\nimport { ExecutionStorageError } from \"./errors\"\nimport type {\n  CreateExecutionInput,\n  DurableExecutionExecutor,\n  DurableExecutionSource,\n  ExecutionRecord,\n} from \"./types\"\n\nexport interface ExecutionValidationLookup {\n  readonly auth: AuthStorage\n  getExecution(params: {\n    readonly projectId: string\n    readonly id: string\n  }): Promise<ExecutionRecord | null>\n  getShareSession(params: {\n    readonly projectId: string\n    readonly id: string\n  }): Promise<{ readonly grantId: string } | null>\n}\n\n/** Capture accounting attribution at the same storage boundary that admits the execution. */\nexport async function prepareExecutionRecord(\n  input: CreateExecutionInput,\n  lookup: ExecutionValidationLookup\n): Promise<ExecutionRecord> {\n  let groups = input.requesterGroupIds\n  if (groups === undefined && input.source.type === \"execution\") {\n    const parent = await lookup.getExecution({\n      projectId: input.projectId,\n      id: input.source.executionId,\n    })\n    groups = parent?.requesterGroupIds\n  } else if (groups === undefined && input.requestedBy) {\n    groups = await snapshotRequesterGroupIds({\n      auth: lookup.auth,\n      projectId: input.projectId,\n      principal: input.requestedBy,\n    })\n  }\n  const record = normalizeExecutionRecord({ ...input, requesterGroupIds: groups ?? [] })\n  await validateExecutionRecordReferences(record, lookup)\n  return record\n}\n\nexport function normalizeExecutionRecord(\n  input: CreateExecutionInput,\n  createdAt: Date = new Date()\n): ExecutionRecord {\n  const record: ExecutionRecord = {\n    id: input.id,\n    projectId: input.projectId,\n    requesterGroupIds: normalizeRequesterGroupIds(input.requesterGroupIds ?? []),\n    ...(input.requestedBy === undefined ? {} : { requestedBy: structuredClone(input.requestedBy) }),\n    executor: structuredClone(input.executor),\n    source: structuredClone(input.source),\n    correlationId: input.correlationId,\n    authorizationRef: structuredClone(input.authorizationRef),\n    createdAt: new Date(createdAt),\n  }\n\n  assertRecordShape(record)\n  assertExecutorAuthority(record)\n  return record\n}\n\nexport async function validateExecutionRecordReferences(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  await validatePrincipal(record.requestedBy, record.projectId, \"Requested-by principal\", lookup)\n\n  if (record.authorizationRef.type === \"principal\") {\n    await validatePrincipal(\n      record.authorizationRef.principal,\n      record.projectId,\n      \"Authority principal\",\n      lookup\n    )\n    await validateCredential(record, lookup)\n  }\n  if (record.authorizationRef.type === \"delegated\") {\n    await validateDelegation(record, lookup)\n  }\n\n  await validateParent(record, lookup)\n}\n\nexport function cloneExecutionRecord(record: ExecutionRecord): ExecutionRecord {\n  return structuredClone(record)\n}\n\nfunction assertRecordShape(record: ExecutionRecord): void {\n  assertNonBlank(record.id, \"Execution id\")\n  assertNonBlank(record.projectId, \"Execution project id\")\n  assertNonBlank(record.correlationId, \"Execution correlation id\")\n  assertValidDate(record.createdAt, \"Execution createdAt\")\n\n  if (record.requestedBy) {\n    assertPrincipal(record.requestedBy, \"Requested-by principal\")\n  }\n\n  assertExecutor(record.executor)\n  assertSource(record.source)\n  assertAuthorizationRef(record.authorizationRef)\n}\n\nfunction assertExecutor(executor: DurableExecutionExecutor): void {\n  switch (executor.type) {\n    case \"request\":\n      assertNonBlank(executor.requestId, \"Executor request id\")\n      return\n    case \"primitive\":\n      assertTrustedPrimitiveKind(executor.kind, \"Executor primitive kind\")\n      assertNonBlank(executor.runId, \"Executor primitive run id\")\n      return\n    case \"agent\":\n      assertNonBlank(executor.runId, \"Executor agent run id\")\n      return\n    case \"kernel\":\n      assertKernelOperation(executor.operation, \"Executor kernel operation\")\n      return\n    default:\n      invalid(`Unknown execution executor type '${String((executor as { type?: unknown }).type)}'.`)\n  }\n}\n\nfunction assertSource(source: DurableExecutionSource): void {\n  switch (source.type) {\n    case \"ontologyCommit\":\n      assertNonBlank(source.commitId, \"Execution source commit id\")\n      return\n    case \"http\":\n      assertNonBlank(source.requestId, \"Execution source request id\")\n      return\n    case \"webhook\":\n      assertNonBlank(source.deliveryId, \"Execution source delivery id\")\n      return\n    case \"schedule\":\n    case \"event\":\n      assertNonBlank(source.eventId, \"Execution source event id\")\n      return\n    case \"datasetVersion\":\n      assertNonBlank(source.datasetId, \"Execution source dataset id\")\n      assertNonBlank(source.versionId, \"Execution source dataset version id\")\n      return\n    case \"execution\":\n      assertNonBlank(source.executionId, \"Execution source execution id\")\n      return\n    default:\n      invalid(\n        `Execution source type '${String((source as { type?: unknown }).type)}' is not durable.`\n      )\n  }\n}\n\nfunction assertAuthorizationRef(ref: AuthorizationRef): void {\n  switch (ref.type) {\n    case \"principal\":\n      assertPrincipal(ref.principal, \"Authority principal\")\n      if (ref.credential) {\n        if (ref.credential.type !== \"session\" && ref.credential.type !== \"accessToken\") {\n          invalid(\n            `Unknown authority credential type '${String(\n              (ref.credential as { type?: unknown }).type\n            )}'.`\n          )\n        }\n        assertNonBlank(ref.credential.id, \"Authority credential id\")\n      }\n      return\n    case \"trustedPrimitive\":\n      assertTrustedPrimitiveKind(ref.primitive.kind, \"Authority primitive kind\")\n      assertNonBlank(ref.primitive.id, \"Authority primitive id\")\n      assertNonBlank(ref.primitive.runId, \"Authority primitive run id\")\n      return\n    case \"delegated\":\n      if (ref.delegation.kind !== \"share\") {\n        invalid(\n          `Unknown authority delegation kind '${String(\n            (ref.delegation as { kind?: unknown }).kind\n          )}'.`\n        )\n      }\n      assertNonBlank(ref.delegation.grantId, \"Authority delegation grant id\")\n      assertNonBlank(ref.delegation.sessionId, \"Authority delegation session id\")\n      return\n    case \"kernel\":\n      assertKernelOperation(ref.operation, \"Authority kernel operation\")\n      return\n    case \"disabled\":\n      return\n    default:\n      invalid(`Unknown authorization reference type '${String((ref as { type?: unknown }).type)}'.`)\n  }\n}\n\nfunction assertExecutorAuthority(record: ExecutionRecord): void {\n  const { executor, authorizationRef, requestedBy, source } = record\n\n  switch (executor.type) {\n    case \"request\": {\n      if (source.type !== \"http\" || source.requestId !== executor.requestId) {\n        invalid(\"Request executions require a matching HTTP source request id.\")\n      }\n      if (authorizationRef.type === \"principal\") {\n        if (!principalsEqual(requestedBy, authorizationRef.principal)) {\n          invalid(\"Request authority must match its requested-by principal.\")\n        }\n        return\n      }\n      if (authorizationRef.type === \"disabled\") {\n        if (requestedBy !== undefined) {\n          invalid(\"Auth-disabled request executions cannot have a requested-by principal.\")\n        }\n        return\n      }\n      if (authorizationRef.type === \"delegated\") {\n        if (requestedBy !== undefined) {\n          invalid(\"Delegated request executions cannot have a requested-by principal.\")\n        }\n        return\n      }\n      invalid(\"Request executions require principal, delegated, or explicitly disabled authority.\")\n      break\n    }\n    case \"primitive\": {\n      if (authorizationRef.type !== \"trustedPrimitive\") {\n        invalid(\"Primitive executions require trusted primitive authority.\")\n      }\n      if (\n        authorizationRef.primitive.kind !== executor.kind ||\n        authorizationRef.primitive.runId !== executor.runId\n      ) {\n        invalid(\"Trusted primitive authority must match the executor kind and run id.\")\n      }\n      return\n    }\n    case \"agent\": {\n      if (source.type !== \"execution\") {\n        invalid(\"Agent executions require a parent execution source.\")\n      }\n      if (\n        authorizationRef.type === \"principal\" &&\n        authorizationRef.principal.type === \"serviceAccount\" &&\n        authorizationRef.credential === undefined\n      ) {\n        return\n      }\n      if (\n        authorizationRef.type === \"principal\" &&\n        authorizationRef.principal.type === \"user\" &&\n        authorizationRef.credential !== undefined\n      ) {\n        return\n      }\n      if (authorizationRef.type === \"disabled\") return\n      invalid(\n        \"Agent executions require managed service-account, credentialed user, or explicitly disabled authority.\"\n      )\n      break\n    }\n    case \"kernel\": {\n      if (\n        authorizationRef.type !== \"kernel\" ||\n        !kernelOperationsEqual(authorizationRef.operation, executor.operation)\n      ) {\n        invalid(\"Kernel authority must match the executor operation.\")\n      }\n      if (requestedBy !== undefined) {\n        invalid(\"Kernel executions cannot have a requested-by principal.\")\n      }\n      return\n    }\n  }\n}\n\nasync function validatePrincipal(\n  principal: AuthorizablePrincipal | undefined,\n  projectId: string,\n  label: string,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (!principal) return\n\n  const record =\n    principal.type === \"user\"\n      ? await lookup.auth.users.getById({ projectId, id: principal.id })\n      : await lookup.auth.serviceAccounts.getById({ projectId, id: principal.id })\n  if (!record) {\n    throw new ExecutionStorageError(\n      \"missing_principal\",\n      `[Sixb] ${label} '${principal.id}' does not exist in project '${projectId}'.`\n    )\n  }\n}\n\nasync function validateCredential(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.authorizationRef.type !== \"principal\" || !record.authorizationRef.credential) return\n\n  const { principal, credential } = record.authorizationRef\n  if (credential.type === \"session\") {\n    const session = await lookup.auth.sessions.getById({\n      projectId: record.projectId,\n      id: credential.id,\n    })\n    if (!session) {\n      throw new ExecutionStorageError(\n        \"missing_credential\",\n        `[Sixb] Authority session '${credential.id}' does not exist in project '${record.projectId}'.`\n      )\n    }\n    if (principal.type !== \"user\" || session.userId !== principal.id) {\n      throw new ExecutionStorageError(\n        \"invalid_credential\",\n        `[Sixb] Authority session '${credential.id}' does not belong to principal '${principal.id}'.`\n      )\n    }\n    return\n  }\n\n  const token = await lookup.auth.accessTokens.getById({\n    projectId: record.projectId,\n    id: credential.id,\n  })\n  if (!token) {\n    throw new ExecutionStorageError(\n      \"missing_credential\",\n      `[Sixb] Authority access token '${credential.id}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (!principalsEqual(token.subject, principal)) {\n    throw new ExecutionStorageError(\n      \"invalid_credential\",\n      `[Sixb] Authority access token '${credential.id}' does not belong to principal '${principal.id}'.`\n    )\n  }\n}\n\nasync function validateDelegation(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.authorizationRef.type !== \"delegated\") return\n  const { grantId, sessionId } = record.authorizationRef.delegation\n  const session = await lookup.getShareSession({ projectId: record.projectId, id: sessionId })\n  if (!session) {\n    throw new ExecutionStorageError(\n      \"missing_credential\",\n      `[Sixb] Authority shared session '${sessionId}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (session.grantId !== grantId) {\n    throw new ExecutionStorageError(\n      \"invalid_credential\",\n      `[Sixb] Authority shared session '${sessionId}' does not belong to grant '${grantId}'.`\n    )\n  }\n}\n\nasync function validateParent(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.source.type !== \"execution\") return\n  const parentExecutionId = record.source.executionId\n\n  const parent = await lookup.getExecution({\n    projectId: record.projectId,\n    id: parentExecutionId,\n  })\n  if (!parent) {\n    throw new ExecutionStorageError(\n      \"missing_parent_execution\",\n      `[Sixb] Parent execution '${parentExecutionId}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (parent.correlationId !== record.correlationId) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent correlation id.`\n    )\n  }\n  if (!principalsEqual(parent.requestedBy, record.requestedBy)) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent requested-by principal.`\n    )\n  }\n  if (!isDeepStrictEqual(parent.requesterGroupIds, record.requesterGroupIds)) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent requester-group snapshot.`\n    )\n  }\n  if (\n    record.executor.type === \"agent\" &&\n    isInheritedAgentAuthority(record.authorizationRef) &&\n    !isDeepStrictEqual(parent.authorizationRef, record.authorizationRef)\n  ) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child Agent execution '${record.id}' must inherit its parent's authorization reference.`\n    )\n  }\n}\n\nfunction isInheritedAgentAuthority(ref: AuthorizationRef): boolean {\n  return (\n    ref.type === \"disabled\" ||\n    (ref.type === \"principal\" && ref.principal.type === \"user\" && ref.credential !== undefined)\n  )\n}\n\nfunction assertPrincipal(principal: AuthorizablePrincipal, label: string): void {\n  if (principal.type !== \"user\" && principal.type !== \"serviceAccount\") {\n    invalid(`${label} has unsupported type '${String((principal as { type?: unknown }).type)}'.`)\n  }\n  assertNonBlank(principal.id, `${label} id`)\n}\n\nfunction assertKernelOperation(operation: KernelOperation, label: string): void {\n  if (operation.type !== \"ontology.recover\" && operation.type !== \"ontology.indexVectors\") {\n    invalid(`${label} has unsupported type '${String((operation as { type?: unknown }).type)}'.`)\n  }\n  assertNonBlank(kernelOperationId(operation), `${label} operation id`)\n}\n\nfunction assertTrustedPrimitiveKind(value: string, label: string): void {\n  if (!TRUSTED_PRIMITIVE_KINDS.has(value)) {\n    invalid(`${label} '${value}' is not supported.`)\n  }\n}\n\nfunction assertNonBlank(value: string, label: string): void {\n  if (typeof value !== \"string\" || !value.trim()) {\n    invalid(`${label} must be a non-empty string.`)\n  }\n}\n\nfunction assertValidDate(value: Date, label: string): void {\n  if (!(value instanceof Date) || !Number.isFinite(value.getTime())) {\n    invalid(`${label} must be a valid date.`)\n  }\n}\n\nfunction principalsEqual(\n  left: AuthorizablePrincipal | undefined,\n  right: AuthorizablePrincipal | undefined\n): boolean {\n  return left?.type === right?.type && left?.id === right?.id\n}\n\nfunction kernelOperationsEqual(left: KernelOperation, right: KernelOperation): boolean {\n  return left.type === right.type && kernelOperationId(left) === kernelOperationId(right)\n}\n\nfunction invalid(message: string): never {\n  throw new ExecutionStorageError(\"invalid_input\", `[Sixb] ${message}`)\n}\n\nconst TRUSTED_PRIMITIVE_KINDS = new Set([\n  \"action\",\n  \"pipeline\",\n  \"projection\",\n  \"rule\",\n  \"sync\",\n  \"webhook\",\n  \"workflow\",\n])\n"
   ],
-  "mappings": ";;;;;;;;;;AAUO,MAAM,+BAA8B,MAAM;AAAA,EAIpC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA,UAAwB,CAAC,GACzB;AAAA,IACA,MAAM,SAAS,OAAO;AAAA,IAJb;AAAA;AAMb;;;ACpBA;AA8BA,eAAsB,uBAAsB,CAC1C,OACA,QAC0B;AAAA,EAC1B,IAAI,SAAS,MAAM;AAAA,EACnB,IAAI,WAAW,aAAa,MAAM,OAAO,SAAS,aAAa;AAAA,IAC7D,MAAM,SAAS,MAAM,OAAO,aAAa;AAAA,MACvC,WAAW,MAAM;AAAA,MACjB,IAAI,MAAM,OAAO;AAAA,IACnB,CAAC;AAAA,IACD,SAAS,QAAQ;AAAA,EACnB,EAAO,SAAI,WAAW,aAAa,MAAM,aAAa;AAAA,IACpD,SAAS,MAAM,0BAA0B;AAAA,MACvC,MAAM,OAAO;AAAA,MACb,WAAW,MAAM;AAAA,MACjB,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,EACH;AAAA,EACA,MAAM,SAAS,0BAAyB,KAAK,OAAO,mBAAmB,UAAU,CAAC,EAAE,CAAC;AAAA,EACrF,MAAM,mCAAkC,QAAQ,MAAM;AAAA,EACtD,OAAO;AAAA;AAGF,SAAS,yBAAwB,CACtC,OACA,YAAkB,IAAI,MACL;AAAA,EACjB,MAAM,SAA0B;AAAA,IAC9B,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,mBAAmB,2BAA2B,MAAM,qBAAqB,CAAC,CAAC;AAAA,OACvE,MAAM,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,gBAAgB,MAAM,WAAW,EAAE;AAAA,IAC7F,UAAU,gBAAgB,MAAM,QAAQ;AAAA,IACxC,QAAQ,gBAAgB,MAAM,MAAM;AAAA,IACpC,eAAe,MAAM;AAAA,IACrB,kBAAkB,gBAAgB,MAAM,gBAAgB;AAAA,IACxD,WAAW,IAAI,KAAK,SAAS;AAAA,EAC/B;AAAA,EAEA,kBAAkB,MAAM;AAAA,EACxB,wBAAwB,MAAM;AAAA,EAC9B,OAAO;AAAA;AAGT,eAAsB,kCAAiC,CACrD,QACA,QACe;AAAA,EACf,MAAM,kBAAkB,OAAO,aAAa,OAAO,WAAW,0BAA0B,MAAM;AAAA,EAE9F,IAAI,OAAO,iBAAiB,SAAS,aAAa;AAAA,IAChD,MAAM,kBACJ,OAAO,iBAAiB,WACxB,OAAO,WACP,uBACA,MACF;AAAA,IACA,MAAM,mBAAmB,QAAQ,MAAM;AAAA,EACzC;AAAA,EACA,IAAI,OAAO,iBAAiB,SAAS,aAAa;AAAA,IAChD,MAAM,mBAAmB,QAAQ,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,eAAe,QAAQ,MAAM;AAAA;AAG9B,SAAS,oBAAoB,CAAC,QAA0C;AAAA,EAC7E,OAAO,gBAAgB,MAAM;AAAA;AAG/B,SAAS,iBAAiB,CAAC,QAA+B;AAAA,EACxD,eAAe,OAAO,IAAI,cAAc;AAAA,EACxC,eAAe,OAAO,WAAW,sBAAsB;AAAA,EACvD,eAAe,OAAO,eAAe,0BAA0B;AAAA,EAC/D,gBAAgB,OAAO,WAAW,qBAAqB;AAAA,EAEvD,IAAI,OAAO,aAAa;AAAA,IACtB,gBAAgB,OAAO,aAAa,wBAAwB;AAAA,EAC9D;AAAA,EAEA,eAAe,OAAO,QAAQ;AAAA,EAC9B,aAAa,OAAO,MAAM;AAAA,EAC1B,uBAAuB,OAAO,gBAAgB;AAAA;AAGhD,SAAS,cAAc,CAAC,UAA0C;AAAA,EAChE,QAAQ,SAAS;AAAA,SACV;AAAA,MACH,eAAe,SAAS,WAAW,qBAAqB;AAAA,MACxD;AAAA,SACG;AAAA,MACH,2BAA2B,SAAS,MAAM,yBAAyB;AAAA,MACnE,eAAe,SAAS,OAAO,2BAA2B;AAAA,MAC1D;AAAA,SACG;AAAA,MACH,eAAe,SAAS,OAAO,uBAAuB;AAAA,MACtD;AAAA,SACG;AAAA,MACH,sBAAsB,SAAS,WAAW,2BAA2B;AAAA,MACrE;AAAA;AAAA,MAEA,QAAQ,oCAAoC,OAAQ,SAAgC,IAAI,KAAK;AAAA;AAAA;AAInG,SAAS,YAAY,CAAC,QAAsC;AAAA,EAC1D,QAAQ,OAAO;AAAA,SACR;AAAA,MACH,eAAe,OAAO,UAAU,4BAA4B;AAAA,MAC5D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,WAAW,6BAA6B;AAAA,MAC9D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,YAAY,8BAA8B;AAAA,MAChE;AAAA,SACG;AAAA,SACA;AAAA,MACH,eAAe,OAAO,SAAS,2BAA2B;AAAA,MAC1D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,WAAW,6BAA6B;AAAA,MAC9D,eAAe,OAAO,WAAW,qCAAqC;AAAA,MACtE;AAAA,SACG;AAAA,MACH,eAAe,OAAO,aAAa,+BAA+B;AAAA,MAClE;AAAA;AAAA,MAEA,QACE,0BAA0B,OAAQ,OAA8B,IAAI,oBACtE;AAAA;AAAA;AAIN,SAAS,sBAAsB,CAAC,KAA6B;AAAA,EAC3D,QAAQ,IAAI;AAAA,SACL;AAAA,MACH,gBAAgB,IAAI,WAAW,qBAAqB;AAAA,MACpD,IAAI,IAAI,YAAY;AAAA,QAClB,IAAI,IAAI,WAAW,SAAS,aAAa,IAAI,WAAW,SAAS,eAAe;AAAA,UAC9E,QACE,sCAAsC,OACnC,IAAI,WAAkC,IACzC,KACF;AAAA,QACF;AAAA,QACA,eAAe,IAAI,WAAW,IAAI,yBAAyB;AAAA,MAC7D;AAAA,MACA;AAAA,SACG;AAAA,MACH,2BAA2B,IAAI,UAAU,MAAM,0BAA0B;AAAA,MACzE,eAAe,IAAI,UAAU,IAAI,wBAAwB;AAAA,MACzD,eAAe,IAAI,UAAU,OAAO,4BAA4B;AAAA,MAChE;AAAA,SACG;AAAA,MACH,IAAI,IAAI,WAAW,SAAS,SAAS;AAAA,QACnC,QACE,sCAAsC,OACnC,IAAI,WAAkC,IACzC,KACF;AAAA,MACF;AAAA,MACA,eAAe,IAAI,WAAW,SAAS,+BAA+B;AAAA,MACtE,eAAe,IAAI,WAAW,WAAW,iCAAiC;AAAA,MAC1E;AAAA,SACG;AAAA,MACH,sBAAsB,IAAI,WAAW,4BAA4B;AAAA,MACjE;AAAA,SACG;AAAA,MACH;AAAA;AAAA,MAEA,QAAQ,yCAAyC,OAAQ,IAA2B,IAAI,KAAK;AAAA;AAAA;AAInG,SAAS,uBAAuB,CAAC,QAA+B;AAAA,EAC9D,QAAQ,UAAU,kBAAkB,aAAa,WAAW;AAAA,EAE5D,QAAQ,SAAS;AAAA,SACV,WAAW;AAAA,MACd,IAAI,OAAO,SAAS,UAAU,OAAO,cAAc,SAAS,WAAW;AAAA,QACrE,QAAQ,+DAA+D;AAAA,MACzE;AAAA,MACA,IAAI,iBAAiB,SAAS,aAAa;AAAA,QACzC,IAAI,CAAC,gBAAgB,aAAa,iBAAiB,SAAS,GAAG;AAAA,UAC7D,QAAQ,0DAA0D;AAAA,QACpE;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS,YAAY;AAAA,QACxC,IAAI,gBAAgB,WAAW;AAAA,UAC7B,QAAQ,wEAAwE;AAAA,QAClF;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS,aAAa;AAAA,QACzC,IAAI,gBAAgB,WAAW;AAAA,UAC7B,QAAQ,oEAAoE;AAAA,QAC9E;AAAA,QACA;AAAA,MACF;AAAA,MACA,QAAQ,oFAAoF;AAAA,MAC5F;AAAA,IACF;AAAA,SACK,aAAa;AAAA,MAChB,IAAI,iBAAiB,SAAS,oBAAoB;AAAA,QAChD,QAAQ,2DAA2D;AAAA,MACrE;AAAA,MACA,IACE,iBAAiB,UAAU,SAAS,SAAS,QAC7C,iBAAiB,UAAU,UAAU,SAAS,OAC9C;AAAA,QACA,QAAQ,sEAAsE;AAAA,MAChF;AAAA,MACA;AAAA,IACF;AAAA,SACK,SAAS;AAAA,MACZ,IAAI,OAAO,SAAS,aAAa;AAAA,QAC/B,QAAQ,qDAAqD;AAAA,MAC/D;AAAA,MACA,IACE,iBAAiB,SAAS,eAC1B,iBAAiB,UAAU,SAAS,oBACpC,iBAAiB,eAAe,WAChC;AAAA,QACA;AAAA,MACF;AAAA,MACA,IACE,iBAAiB,SAAS,eAC1B,iBAAiB,UAAU,SAAS,UACpC,iBAAiB,eAAe,WAChC;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS;AAAA,QAAY;AAAA,MAC1C,QACE,wGACF;AAAA,MACA;AAAA,IACF;AAAA,SACK,UAAU;AAAA,MACb,IACE,iBAAiB,SAAS,YAC1B,CAAC,sBAAsB,iBAAiB,WAAW,SAAS,SAAS,GACrE;AAAA,QACA,QAAQ,qDAAqD;AAAA,MAC/D;AAAA,MACA,IAAI,gBAAgB,WAAW;AAAA,QAC7B,QAAQ,yDAAyD;AAAA,MACnE;AAAA,MACA;AAAA,IACF;AAAA;AAAA;AAIJ,eAAe,iBAAiB,CAC9B,WACA,WACA,OACA,QACe;AAAA,EACf,IAAI,CAAC;AAAA,IAAW;AAAA,EAEhB,MAAM,SACJ,UAAU,SAAS,SACf,MAAM,OAAO,KAAK,MAAM,QAAQ,EAAE,WAAW,IAAI,UAAU,GAAG,CAAC,IAC/D,MAAM,OAAO,KAAK,gBAAgB,QAAQ,EAAE,WAAW,IAAI,UAAU,GAAG,CAAC;AAAA,EAC/E,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,uBACR,qBACA,UAAU,UAAU,UAAU,kCAAkC,aAClE;AAAA,EACF;AAAA;AAGF,eAAe,kBAAkB,CAC/B,QACA,QACe;AAAA,EACf,IAAI,OAAO,iBAAiB,SAAS,eAAe,CAAC,OAAO,iBAAiB;AAAA,IAAY;AAAA,EAEzF,QAAQ,WAAW,eAAe,OAAO;AAAA,EACzC,IAAI,WAAW,SAAS,WAAW;AAAA,IACjC,MAAM,UAAU,MAAM,OAAO,KAAK,SAAS,QAAQ;AAAA,MACjD,WAAW,OAAO;AAAA,MAClB,IAAI,WAAW;AAAA,IACjB,CAAC;AAAA,IACD,IAAI,CAAC,SAAS;AAAA,MACZ,MAAM,IAAI,uBACR,sBACA,6BAA6B,WAAW,kCAAkC,OAAO,aACnF;AAAA,IACF;AAAA,IACA,IAAI,UAAU,SAAS,UAAU,QAAQ,WAAW,UAAU,IAAI;AAAA,MAChE,MAAM,IAAI,uBACR,sBACA,6BAA6B,WAAW,qCAAqC,UAAU,MACzF;AAAA,IACF;AAAA,IACA;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,MAAM,OAAO,KAAK,aAAa,QAAQ;AAAA,IACnD,WAAW,OAAO;AAAA,IAClB,IAAI,WAAW;AAAA,EACjB,CAAC;AAAA,EACD,IAAI,CAAC,OAAO;AAAA,IACV,MAAM,IAAI,uBACR,sBACA,kCAAkC,WAAW,kCAAkC,OAAO,aACxF;AAAA,EACF;AAAA,EACA,IAAI,MAAM,gBAAgB,UAAU,QAAQ,MAAM,cAAc,UAAU,IAAI;AAAA,IAC5E,MAAM,IAAI,uBACR,sBACA,kCAAkC,WAAW,qCAAqC,UAAU,MAC9F;AAAA,EACF;AAAA;AAGF,eAAe,kBAAkB,CAC/B,QACA,QACe;AAAA,EACf,IAAI,OAAO,iBAAiB,SAAS;AAAA,IAAa;AAAA,EAClD,QAAQ,SAAS,cAAc,OAAO,iBAAiB;AAAA,EACvD,MAAM,UAAU,MAAM,OAAO,gBAAgB,EAAE,WAAW,OAAO,WAAW,IAAI,UAAU,CAAC;AAAA,EAC3F,IAAI,CAAC,SAAS;AAAA,IACZ,MAAM,IAAI,uBACR,sBACA,oCAAoC,yCAAyC,OAAO,aACtF;AAAA,EACF;AAAA,EACA,IAAI,QAAQ,YAAY,SAAS;AAAA,IAC/B,MAAM,IAAI,uBACR,sBACA,oCAAoC,wCAAwC,WAC9E;AAAA,EACF;AAAA;AAGF,eAAe,cAAc,CAC3B,QACA,QACe;AAAA,EACf,IAAI,OAAO,OAAO,SAAS;AAAA,IAAa;AAAA,EACxC,MAAM,oBAAoB,OAAO,OAAO;AAAA,EAExC,MAAM,SAAS,MAAM,OAAO,aAAa;AAAA,IACvC,WAAW,OAAO;AAAA,IAClB,IAAI;AAAA,EACN,CAAC;AAAA,EACD,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,uBACR,4BACA,4BAA4B,iDAAiD,OAAO,aACtF;AAAA,EACF;AAAA,EACA,IAAI,OAAO,kBAAkB,OAAO,eAAe;AAAA,IACjD,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,8CACpC;AAAA,EACF;AAAA,EACA,IAAI,CAAC,gBAAgB,OAAO,aAAa,OAAO,WAAW,GAAG;AAAA,IAC5D,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,sDACpC;AAAA,EACF;AAAA,EACA,IAAI,CAAC,kBAAkB,OAAO,mBAAmB,OAAO,iBAAiB,GAAG;AAAA,IAC1E,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,wDACpC;AAAA,EACF;AAAA,EACA,IACE,OAAO,SAAS,SAAS,WACzB,0BAA0B,OAAO,gBAAgB,KACjD,CAAC,kBAAkB,OAAO,kBAAkB,OAAO,gBAAgB,GACnE;AAAA,IACA,MAAM,IAAI,uBACR,4BACA,iCAAiC,OAAO,wDAC1C;AAAA,EACF;AAAA;AAGF,SAAS,yBAAyB,CAAC,KAAgC;AAAA,EACjE,OACE,IAAI,SAAS,cACZ,IAAI,SAAS,eAAe,IAAI,UAAU,SAAS,UAAU,IAAI,eAAe;AAAA;AAIrF,SAAS,eAAe,CAAC,WAAkC,OAAqB;AAAA,EAC9E,IAAI,UAAU,SAAS,UAAU,UAAU,SAAS,kBAAkB;AAAA,IACpE,QAAQ,GAAG,+BAA+B,OAAQ,UAAiC,IAAI,KAAK;AAAA,EAC9F;AAAA,EACA,eAAe,UAAU,IAAI,GAAG,UAAU;AAAA;AAG5C,SAAS,qBAAqB,CAAC,WAA4B,OAAqB;AAAA,EAC9E,IAAI,UAAU,SAAS,sBAAsB,UAAU,SAAS,yBAAyB;AAAA,IACvF,QAAQ,GAAG,+BAA+B,OAAQ,UAAiC,IAAI,KAAK;AAAA,EAC9F;AAAA,EACA,eAAe,kBAAkB,SAAS,GAAG,GAAG,oBAAoB;AAAA;AAGtE,SAAS,0BAA0B,CAAC,OAAe,OAAqB;AAAA,EACtE,IAAI,CAAC,wBAAwB,IAAI,KAAK,GAAG;AAAA,IACvC,QAAQ,GAAG,UAAU,0BAA0B;AAAA,EACjD;AAAA;AAGF,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG;AAAA,IAC9C,QAAQ,GAAG,mCAAmC;AAAA,EAChD;AAAA;AAGF,SAAS,eAAe,CAAC,OAAa,OAAqB;AAAA,EACzD,IAAI,EAAE,iBAAiB,SAAS,CAAC,OAAO,SAAS,MAAM,QAAQ,CAAC,GAAG;AAAA,IACjE,QAAQ,GAAG,6BAA6B;AAAA,EAC1C;AAAA;AAGF,SAAS,eAAe,CACtB,MACA,OACS;AAAA,EACT,OAAO,MAAM,SAAS,OAAO,QAAQ,MAAM,OAAO,OAAO;AAAA;AAG3D,SAAS,qBAAqB,CAAC,MAAuB,OAAiC;AAAA,EACrF,OAAO,KAAK,SAAS,MAAM,QAAQ,kBAAkB,IAAI,MAAM,kBAAkB,KAAK;AAAA;AAGxF,SAAS,OAAO,CAAC,SAAwB;AAAA,EACvC,MAAM,IAAI,uBAAsB,iBAAiB,UAAU,SAAS;AAAA;AAGtE,IAAM,0BAA0B,IAAI,IAAI;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;",
-  "debugId": "44233475F9DA4CC764756E2164756E21",
+  "mappings": ";;;;;;;;;;AAUO,MAAM,+BAA8B,MAAM;AAAA,EAIpC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA,UAAwB,CAAC,GACzB;AAAA,IACA,MAAM,SAAS,OAAO;AAAA,IAJb;AAAA;AAMb;;;ACpBA;AA8BA,eAAsB,uBAAsB,CAC1C,OACA,QAC0B;AAAA,EAC1B,IAAI,SAAS,MAAM;AAAA,EACnB,IAAI,WAAW,aAAa,MAAM,OAAO,SAAS,aAAa;AAAA,IAC7D,MAAM,SAAS,MAAM,OAAO,aAAa;AAAA,MACvC,WAAW,MAAM;AAAA,MACjB,IAAI,MAAM,OAAO;AAAA,IACnB,CAAC;AAAA,IACD,SAAS,QAAQ;AAAA,EACnB,EAAO,SAAI,WAAW,aAAa,MAAM,aAAa;AAAA,IACpD,SAAS,MAAM,0BAA0B;AAAA,MACvC,MAAM,OAAO;AAAA,MACb,WAAW,MAAM;AAAA,MACjB,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,EACH;AAAA,EACA,MAAM,SAAS,0BAAyB,KAAK,OAAO,mBAAmB,UAAU,CAAC,EAAE,CAAC;AAAA,EACrF,MAAM,mCAAkC,QAAQ,MAAM;AAAA,EACtD,OAAO;AAAA;AAGF,SAAS,yBAAwB,CACtC,OACA,YAAkB,IAAI,MACL;AAAA,EACjB,MAAM,SAA0B;AAAA,IAC9B,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,mBAAmB,2BAA2B,MAAM,qBAAqB,CAAC,CAAC;AAAA,OACvE,MAAM,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,gBAAgB,MAAM,WAAW,EAAE;AAAA,IAC7F,UAAU,gBAAgB,MAAM,QAAQ;AAAA,IACxC,QAAQ,gBAAgB,MAAM,MAAM;AAAA,IACpC,eAAe,MAAM;AAAA,IACrB,kBAAkB,gBAAgB,MAAM,gBAAgB;AAAA,IACxD,WAAW,IAAI,KAAK,SAAS;AAAA,EAC/B;AAAA,EAEA,kBAAkB,MAAM;AAAA,EACxB,wBAAwB,MAAM;AAAA,EAC9B,OAAO;AAAA;AAGT,eAAsB,kCAAiC,CACrD,QACA,QACe;AAAA,EACf,MAAM,kBAAkB,OAAO,aAAa,OAAO,WAAW,0BAA0B,MAAM;AAAA,EAE9F,IAAI,OAAO,iBAAiB,SAAS,aAAa;AAAA,IAChD,MAAM,kBACJ,OAAO,iBAAiB,WACxB,OAAO,WACP,uBACA,MACF;AAAA,IACA,MAAM,mBAAmB,QAAQ,MAAM;AAAA,EACzC;AAAA,EACA,IAAI,OAAO,iBAAiB,SAAS,aAAa;AAAA,IAChD,MAAM,mBAAmB,QAAQ,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,eAAe,QAAQ,MAAM;AAAA;AAG9B,SAAS,oBAAoB,CAAC,QAA0C;AAAA,EAC7E,OAAO,gBAAgB,MAAM;AAAA;AAG/B,SAAS,iBAAiB,CAAC,QAA+B;AAAA,EACxD,eAAe,OAAO,IAAI,cAAc;AAAA,EACxC,eAAe,OAAO,WAAW,sBAAsB;AAAA,EACvD,eAAe,OAAO,eAAe,0BAA0B;AAAA,EAC/D,gBAAgB,OAAO,WAAW,qBAAqB;AAAA,EAEvD,IAAI,OAAO,aAAa;AAAA,IACtB,gBAAgB,OAAO,aAAa,wBAAwB;AAAA,EAC9D;AAAA,EAEA,eAAe,OAAO,QAAQ;AAAA,EAC9B,aAAa,OAAO,MAAM;AAAA,EAC1B,uBAAuB,OAAO,gBAAgB;AAAA;AAGhD,SAAS,cAAc,CAAC,UAA0C;AAAA,EAChE,QAAQ,SAAS;AAAA,SACV;AAAA,MACH,eAAe,SAAS,WAAW,qBAAqB;AAAA,MACxD;AAAA,SACG;AAAA,MACH,2BAA2B,SAAS,MAAM,yBAAyB;AAAA,MACnE,eAAe,SAAS,OAAO,2BAA2B;AAAA,MAC1D;AAAA,SACG;AAAA,MACH,eAAe,SAAS,OAAO,uBAAuB;AAAA,MACtD;AAAA,SACG;AAAA,MACH,sBAAsB,SAAS,WAAW,2BAA2B;AAAA,MACrE;AAAA;AAAA,MAEA,QAAQ,oCAAoC,OAAQ,SAAgC,IAAI,KAAK;AAAA;AAAA;AAInG,SAAS,YAAY,CAAC,QAAsC;AAAA,EAC1D,QAAQ,OAAO;AAAA,SACR;AAAA,MACH,eAAe,OAAO,UAAU,4BAA4B;AAAA,MAC5D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,WAAW,6BAA6B;AAAA,MAC9D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,YAAY,8BAA8B;AAAA,MAChE;AAAA,SACG;AAAA,SACA;AAAA,MACH,eAAe,OAAO,SAAS,2BAA2B;AAAA,MAC1D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,WAAW,6BAA6B;AAAA,MAC9D,eAAe,OAAO,WAAW,qCAAqC;AAAA,MACtE;AAAA,SACG;AAAA,MACH,eAAe,OAAO,aAAa,+BAA+B;AAAA,MAClE;AAAA;AAAA,MAEA,QACE,0BAA0B,OAAQ,OAA8B,IAAI,oBACtE;AAAA;AAAA;AAIN,SAAS,sBAAsB,CAAC,KAA6B;AAAA,EAC3D,QAAQ,IAAI;AAAA,SACL;AAAA,MACH,gBAAgB,IAAI,WAAW,qBAAqB;AAAA,MACpD,IAAI,IAAI,YAAY;AAAA,QAClB,IAAI,IAAI,WAAW,SAAS,aAAa,IAAI,WAAW,SAAS,eAAe;AAAA,UAC9E,QACE,sCAAsC,OACnC,IAAI,WAAkC,IACzC,KACF;AAAA,QACF;AAAA,QACA,eAAe,IAAI,WAAW,IAAI,yBAAyB;AAAA,MAC7D;AAAA,MACA;AAAA,SACG;AAAA,MACH,2BAA2B,IAAI,UAAU,MAAM,0BAA0B;AAAA,MACzE,eAAe,IAAI,UAAU,IAAI,wBAAwB;AAAA,MACzD,eAAe,IAAI,UAAU,OAAO,4BAA4B;AAAA,MAChE;AAAA,SACG;AAAA,MACH,IAAI,IAAI,WAAW,SAAS,SAAS;AAAA,QACnC,QACE,sCAAsC,OACnC,IAAI,WAAkC,IACzC,KACF;AAAA,MACF;AAAA,MACA,eAAe,IAAI,WAAW,SAAS,+BAA+B;AAAA,MACtE,eAAe,IAAI,WAAW,WAAW,iCAAiC;AAAA,MAC1E;AAAA,SACG;AAAA,MACH,sBAAsB,IAAI,WAAW,4BAA4B;AAAA,MACjE;AAAA,SACG;AAAA,MACH;AAAA;AAAA,MAEA,QAAQ,yCAAyC,OAAQ,IAA2B,IAAI,KAAK;AAAA;AAAA;AAInG,SAAS,uBAAuB,CAAC,QAA+B;AAAA,EAC9D,QAAQ,UAAU,kBAAkB,aAAa,WAAW;AAAA,EAE5D,QAAQ,SAAS;AAAA,SACV,WAAW;AAAA,MACd,IAAI,OAAO,SAAS,UAAU,OAAO,cAAc,SAAS,WAAW;AAAA,QACrE,QAAQ,+DAA+D;AAAA,MACzE;AAAA,MACA,IAAI,iBAAiB,SAAS,aAAa;AAAA,QACzC,IAAI,CAAC,gBAAgB,aAAa,iBAAiB,SAAS,GAAG;AAAA,UAC7D,QAAQ,0DAA0D;AAAA,QACpE;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS,YAAY;AAAA,QACxC,IAAI,gBAAgB,WAAW;AAAA,UAC7B,QAAQ,wEAAwE;AAAA,QAClF;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS,aAAa;AAAA,QACzC,IAAI,gBAAgB,WAAW;AAAA,UAC7B,QAAQ,oEAAoE;AAAA,QAC9E;AAAA,QACA;AAAA,MACF;AAAA,MACA,QAAQ,oFAAoF;AAAA,MAC5F;AAAA,IACF;AAAA,SACK,aAAa;AAAA,MAChB,IAAI,iBAAiB,SAAS,oBAAoB;AAAA,QAChD,QAAQ,2DAA2D;AAAA,MACrE;AAAA,MACA,IACE,iBAAiB,UAAU,SAAS,SAAS,QAC7C,iBAAiB,UAAU,UAAU,SAAS,OAC9C;AAAA,QACA,QAAQ,sEAAsE;AAAA,MAChF;AAAA,MACA;AAAA,IACF;AAAA,SACK,SAAS;AAAA,MACZ,IAAI,OAAO,SAAS,aAAa;AAAA,QAC/B,QAAQ,qDAAqD;AAAA,MAC/D;AAAA,MACA,IACE,iBAAiB,SAAS,eAC1B,iBAAiB,UAAU,SAAS,oBACpC,iBAAiB,eAAe,WAChC;AAAA,QACA;AAAA,MACF;AAAA,MACA,IACE,iBAAiB,SAAS,eAC1B,iBAAiB,UAAU,SAAS,UACpC,iBAAiB,eAAe,WAChC;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS;AAAA,QAAY;AAAA,MAC1C,QACE,wGACF;AAAA,MACA;AAAA,IACF;AAAA,SACK,UAAU;AAAA,MACb,IACE,iBAAiB,SAAS,YAC1B,CAAC,sBAAsB,iBAAiB,WAAW,SAAS,SAAS,GACrE;AAAA,QACA,QAAQ,qDAAqD;AAAA,MAC/D;AAAA,MACA,IAAI,gBAAgB,WAAW;AAAA,QAC7B,QAAQ,yDAAyD;AAAA,MACnE;AAAA,MACA;AAAA,IACF;AAAA;AAAA;AAIJ,eAAe,iBAAiB,CAC9B,WACA,WACA,OACA,QACe;AAAA,EACf,IAAI,CAAC;AAAA,IAAW;AAAA,EAEhB,MAAM,SACJ,UAAU,SAAS,SACf,MAAM,OAAO,KAAK,MAAM,QAAQ,EAAE,WAAW,IAAI,UAAU,GAAG,CAAC,IAC/D,MAAM,OAAO,KAAK,gBAAgB,QAAQ,EAAE,WAAW,IAAI,UAAU,GAAG,CAAC;AAAA,EAC/E,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,uBACR,qBACA,UAAU,UAAU,UAAU,kCAAkC,aAClE;AAAA,EACF;AAAA;AAGF,eAAe,kBAAkB,CAC/B,QACA,QACe;AAAA,EACf,IAAI,OAAO,iBAAiB,SAAS,eAAe,CAAC,OAAO,iBAAiB;AAAA,IAAY;AAAA,EAEzF,QAAQ,WAAW,eAAe,OAAO;AAAA,EACzC,IAAI,WAAW,SAAS,WAAW;AAAA,IACjC,MAAM,UAAU,MAAM,OAAO,KAAK,SAAS,QAAQ;AAAA,MACjD,WAAW,OAAO;AAAA,MAClB,IAAI,WAAW;AAAA,IACjB,CAAC;AAAA,IACD,IAAI,CAAC,SAAS;AAAA,MACZ,MAAM,IAAI,uBACR,sBACA,6BAA6B,WAAW,kCAAkC,OAAO,aACnF;AAAA,IACF;AAAA,IACA,IAAI,UAAU,SAAS,UAAU,QAAQ,WAAW,UAAU,IAAI;AAAA,MAChE,MAAM,IAAI,uBACR,sBACA,6BAA6B,WAAW,qCAAqC,UAAU,MACzF;AAAA,IACF;AAAA,IACA;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,MAAM,OAAO,KAAK,aAAa,QAAQ;AAAA,IACnD,WAAW,OAAO;AAAA,IAClB,IAAI,WAAW;AAAA,EACjB,CAAC;AAAA,EACD,IAAI,CAAC,OAAO;AAAA,IACV,MAAM,IAAI,uBACR,sBACA,kCAAkC,WAAW,kCAAkC,OAAO,aACxF;AAAA,EACF;AAAA,EACA,IAAI,CAAC,gBAAgB,MAAM,SAAS,SAAS,GAAG;AAAA,IAC9C,MAAM,IAAI,uBACR,sBACA,kCAAkC,WAAW,qCAAqC,UAAU,MAC9F;AAAA,EACF;AAAA;AAGF,eAAe,kBAAkB,CAC/B,QACA,QACe;AAAA,EACf,IAAI,OAAO,iBAAiB,SAAS;AAAA,IAAa;AAAA,EAClD,QAAQ,SAAS,cAAc,OAAO,iBAAiB;AAAA,EACvD,MAAM,UAAU,MAAM,OAAO,gBAAgB,EAAE,WAAW,OAAO,WAAW,IAAI,UAAU,CAAC;AAAA,EAC3F,IAAI,CAAC,SAAS;AAAA,IACZ,MAAM,IAAI,uBACR,sBACA,oCAAoC,yCAAyC,OAAO,aACtF;AAAA,EACF;AAAA,EACA,IAAI,QAAQ,YAAY,SAAS;AAAA,IAC/B,MAAM,IAAI,uBACR,sBACA,oCAAoC,wCAAwC,WAC9E;AAAA,EACF;AAAA;AAGF,eAAe,cAAc,CAC3B,QACA,QACe;AAAA,EACf,IAAI,OAAO,OAAO,SAAS;AAAA,IAAa;AAAA,EACxC,MAAM,oBAAoB,OAAO,OAAO;AAAA,EAExC,MAAM,SAAS,MAAM,OAAO,aAAa;AAAA,IACvC,WAAW,OAAO;AAAA,IAClB,IAAI;AAAA,EACN,CAAC;AAAA,EACD,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,uBACR,4BACA,4BAA4B,iDAAiD,OAAO,aACtF;AAAA,EACF;AAAA,EACA,IAAI,OAAO,kBAAkB,OAAO,eAAe;AAAA,IACjD,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,8CACpC;AAAA,EACF;AAAA,EACA,IAAI,CAAC,gBAAgB,OAAO,aAAa,OAAO,WAAW,GAAG;AAAA,IAC5D,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,sDACpC;AAAA,EACF;AAAA,EACA,IAAI,CAAC,kBAAkB,OAAO,mBAAmB,OAAO,iBAAiB,GAAG;AAAA,IAC1E,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,wDACpC;AAAA,EACF;AAAA,EACA,IACE,OAAO,SAAS,SAAS,WACzB,0BAA0B,OAAO,gBAAgB,KACjD,CAAC,kBAAkB,OAAO,kBAAkB,OAAO,gBAAgB,GACnE;AAAA,IACA,MAAM,IAAI,uBACR,4BACA,iCAAiC,OAAO,wDAC1C;AAAA,EACF;AAAA;AAGF,SAAS,yBAAyB,CAAC,KAAgC;AAAA,EACjE,OACE,IAAI,SAAS,cACZ,IAAI,SAAS,eAAe,IAAI,UAAU,SAAS,UAAU,IAAI,eAAe;AAAA;AAIrF,SAAS,eAAe,CAAC,WAAkC,OAAqB;AAAA,EAC9E,IAAI,UAAU,SAAS,UAAU,UAAU,SAAS,kBAAkB;AAAA,IACpE,QAAQ,GAAG,+BAA+B,OAAQ,UAAiC,IAAI,KAAK;AAAA,EAC9F;AAAA,EACA,eAAe,UAAU,IAAI,GAAG,UAAU;AAAA;AAG5C,SAAS,qBAAqB,CAAC,WAA4B,OAAqB;AAAA,EAC9E,IAAI,UAAU,SAAS,sBAAsB,UAAU,SAAS,yBAAyB;AAAA,IACvF,QAAQ,GAAG,+BAA+B,OAAQ,UAAiC,IAAI,KAAK;AAAA,EAC9F;AAAA,EACA,eAAe,kBAAkB,SAAS,GAAG,GAAG,oBAAoB;AAAA;AAGtE,SAAS,0BAA0B,CAAC,OAAe,OAAqB;AAAA,EACtE,IAAI,CAAC,wBAAwB,IAAI,KAAK,GAAG;AAAA,IACvC,QAAQ,GAAG,UAAU,0BAA0B;AAAA,EACjD;AAAA;AAGF,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG;AAAA,IAC9C,QAAQ,GAAG,mCAAmC;AAAA,EAChD;AAAA;AAGF,SAAS,eAAe,CAAC,OAAa,OAAqB;AAAA,EACzD,IAAI,EAAE,iBAAiB,SAAS,CAAC,OAAO,SAAS,MAAM,QAAQ,CAAC,GAAG;AAAA,IACjE,QAAQ,GAAG,6BAA6B;AAAA,EAC1C;AAAA;AAGF,SAAS,eAAe,CACtB,MACA,OACS;AAAA,EACT,OAAO,MAAM,SAAS,OAAO,QAAQ,MAAM,OAAO,OAAO;AAAA;AAG3D,SAAS,qBAAqB,CAAC,MAAuB,OAAiC;AAAA,EACrF,OAAO,KAAK,SAAS,MAAM,QAAQ,kBAAkB,IAAI,MAAM,kBAAkB,KAAK;AAAA;AAGxF,SAAS,OAAO,CAAC,SAAwB;AAAA,EACvC,MAAM,IAAI,uBAAsB,iBAAiB,UAAU,SAAS;AAAA;AAGtE,IAAM,0BAA0B,IAAI,IAAI;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;",
+  "debugId": "12B08F503967185464756E2164756E21",
   "names": []
 }

package/dist/{chunk-y0v18c2j.js → chunk-vef6qa14.js}

@@ -1,11 +1,11 @@
 // @bun
 import {
   assertValidSchema
-} from "./chunk-p6r1ex7t.js";
+} from "./chunk-ffwvdgk1.js";
 import {
   normalizeParams,
   coerceParamsToTyped
-} from "./chunk-y3ev53cq.js";
+} from "./chunk-2fv8sajb.js";
 import {
   isPlainRecord
 } from "./chunk-wy0qdqfm.js";

package/dist/{chunk-gzt6v1ja.js → chunk-vn3yh259.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   parseSixbFailure2
-} from "./chunk-hzw7yv5g.js";
+} from "./chunk-rzkr70gr.js";
 import {
   AGENT_RUN_FAILURE_CODES2
 } from "./chunk-98cw09sw.js";

package/dist/{chunk-bg2bs62d.js → chunk-w9bp61e7.js}

@@ -2,17 +2,17 @@
 import {
   createSixbError2,
   toSixbFailure2
-} from "./chunk-hzw7yv5g.js";
+} from "./chunk-rzkr70gr.js";
 import {
   reportRunFailure2
-} from "./chunk-bet1rb9h.js";
+} from "./chunk-y6vnvayj.js";
 import {
   resolveExecutionScopeAuthorization,
   assertAuthorized2
-} from "./chunk-bbaa1fet.js";
+} from "./chunk-rzcjp5m2.js";
 import {
   PIPELINE_RUN_FAILURE_CODES2
-} from "./chunk-ybhz3j9g.js";
+} from "./chunk-gc226ten.js";
 import {
   PipelineRunError2
 } from "./chunk-mmagke4x.js";
@@ -20,7 +20,7 @@ import {
   executionRecordInputFromRuntime,
   ensureExecutionRecord2,
   createPrimitiveExecutionRecord
-} from "./chunk-0mza4xb2.js";
+} from "./chunk-m8zkvep1.js";
 
 // src/pipelines/errors.ts
 class PipelineError2 extends Error {

package/dist/{chunk-3h7ctayx.js → chunk-xgptywp0.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   parseSixbFailure2
-} from "./chunk-hzw7yv5g.js";
+} from "./chunk-rzkr70gr.js";
 import {
   isPlainRecord
 } from "./chunk-wy0qdqfm.js";
@@ -21,7 +21,8 @@ var ACTION_RUN_FAILURE_CODES2 = [
   "internal.unexpected",
   "runtime.cancelled",
   "queue.enqueue_failed",
-  "action.phase_failed"
+  "action.phase_failed",
+  "action.read_conflict"
 ];
 
 // src/storage/action-runs/failure.ts
@@ -56,4 +57,4 @@ function parseStoredActionRunFailureValue(value) {
 
 export { ACTION_RUN_PHASES2, ACTION_RUN_FAILURE_CODES2, serializeActionRunFailure2, parseActionRunFailure2 };
 
-//# debugId=10E96C378A97739664756E2164756E21
+//# debugId=4C1D77261542AF7164756E2164756E21

package/dist/chunk-xgptywp0.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/storage/action-runs/types.ts", "../src/storage/action-runs/failure.ts"],
+  "sourcesContent": [
+    "import type { ActionSubject } from \"../../actions\"\nimport type { SixbErrorCode, SixbFailure } from \"../../errors/types\"\nimport type { JsonValue } from \"../../json\"\n\nexport type ActionRunStatus = \"queued\" | \"running\" | \"succeeded\" | \"failed\" | \"cancelled\"\n\nexport const ACTION_RUN_PHASES = [\n  \"request\",\n  \"enqueue\",\n  \"validation\",\n  \"writeback\",\n  \"edits\",\n  \"commit\",\n  \"effects\",\n  \"cancelled\",\n] as const\n\nexport type ActionRunPhase = (typeof ACTION_RUN_PHASES)[number]\n\nexport type ActionRunParams = Readonly<Record<string, JsonValue>>\n\nexport type ActionRunPhaseStatus = \"succeeded\" | \"failed\"\n\n/** Error codes an action run or phase record can persist and expose. */\nexport const ACTION_RUN_FAILURE_CODES = [\n  \"internal.unexpected\",\n  \"runtime.cancelled\",\n  \"queue.enqueue_failed\",\n  \"action.phase_failed\",\n  \"action.read_conflict\",\n] as const satisfies readonly [SixbErrorCode, ...SixbErrorCode[]]\n\nexport type ActionRunFailureCode = (typeof ACTION_RUN_FAILURE_CODES)[number]\n\nexport interface ActionRunFailureDetails<TPhase extends ActionRunPhase = ActionRunPhase> {\n  readonly actionId: string\n  readonly runId: string\n  readonly phase: TPhase\n}\n\n/** Portable failure record with Action's required correlation details. */\nexport interface ActionRunFailure<TPhase extends ActionRunPhase = ActionRunPhase>\n  extends Omit<SixbFailure<ActionRunFailureCode>, \"details\"> {\n  readonly details: ActionRunFailureDetails<TPhase>\n}\n\nexport type ActionRunWritebackRecord =\n  | {\n      readonly status: \"succeeded\"\n      readonly completedAt: Date\n      readonly result: JsonValue\n      readonly error?: never\n    }\n  | {\n      readonly status: \"failed\"\n      readonly completedAt: Date\n      readonly result?: never\n      readonly error: ActionRunFailure<\"writeback\">\n    }\n\nexport type ActionRunEffectsRecord =\n  | {\n      readonly status: \"succeeded\"\n      readonly completedAt: Date\n      readonly error?: never\n    }\n  | {\n      readonly status: \"failed\"\n      readonly completedAt: Date\n      readonly error: ActionRunFailure<\"effects\">\n    }\n\nexport interface ActionRunRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly executionId: string\n  readonly actionId: string\n  readonly subject: ActionSubject\n  readonly status: ActionRunStatus\n  readonly phase?: ActionRunPhase\n  readonly queuedAt: Date\n  readonly startedAt?: Date\n  readonly finishedAt?: Date\n  readonly params: ActionRunParams\n  readonly idempotencyKey: string\n  readonly writeback?: ActionRunWritebackRecord\n  readonly effects?: ActionRunEffectsRecord\n  readonly error?: ActionRunFailure\n}\n\nexport interface QueueActionRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly executionId: string\n  readonly actionId: string\n  readonly subject: ActionSubject\n  readonly params: ActionRunParams\n  readonly idempotencyKey: string\n  readonly queuedAt?: Date\n}\n\nexport interface StartActionRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly startedAt?: Date\n  readonly phase?: Extract<ActionRunPhase, \"validation\">\n}\n\nexport interface EnterActionRunPhaseInput {\n  readonly id: string\n  readonly projectId: string\n  readonly phase: Extract<\n    ActionRunPhase,\n    \"validation\" | \"writeback\" | \"edits\" | \"commit\" | \"effects\"\n  >\n}\n\nexport type RecordActionWritebackInput =\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly status: \"succeeded\"\n      readonly completedAt?: Date\n      readonly result: JsonValue\n    }\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly status: \"failed\"\n      readonly completedAt?: Date\n      readonly error: ActionRunFailure<\"writeback\">\n    }\n\nexport type RecordActionEffectsInput =\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly status: \"succeeded\"\n      readonly completedAt?: Date\n    }\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly status: \"failed\"\n      readonly completedAt?: Date\n      readonly error: ActionRunFailure<\"effects\">\n    }\n\nexport type FinishActionRunInput =\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly status: \"succeeded\"\n      readonly finishedAt?: Date\n      readonly phase?: ActionRunPhase\n    }\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly status: \"failed\" | \"cancelled\"\n      readonly finishedAt?: Date\n      readonly error: ActionRunFailure\n    }\n\nexport interface ListActionRunsInput {\n  readonly projectId: string\n  readonly actionId?: string\n  readonly actionIds?: readonly string[]\n  readonly subject?: ActionSubject\n  readonly objectTypeId?: string\n  readonly objectTypeIds?: readonly string[]\n  readonly primaryId?: string\n  readonly statuses?: readonly ActionRunStatus[]\n  readonly startedAfter?: Date\n  readonly startedBefore?: Date\n  readonly limit?: number\n  readonly offset?: number\n  readonly order?: \"asc\" | \"desc\"\n}\n\nexport interface ListActionRunsResult {\n  readonly runs: readonly ActionRunRecord[]\n  readonly hasMore: boolean\n  readonly total: number\n}\n\nexport interface LockActionMaterializationRunInput {\n  readonly projectId: string\n  readonly actionId: string\n  readonly runId: string\n}\n\nexport interface ActionRunStorage {\n  /** Transactional fence for Action identity and running state before a new ontology commit. */\n  lockForMaterialization(input: LockActionMaterializationRunInput): Promise<ActionRunRecord>\n  queue(input: QueueActionRunInput): Promise<ActionRunRecord>\n  start(input: StartActionRunInput): Promise<ActionRunRecord>\n  enterPhase(input: EnterActionRunPhaseInput): Promise<ActionRunRecord>\n  recordWriteback(input: RecordActionWritebackInput): Promise<ActionRunRecord>\n  recordEffects(input: RecordActionEffectsInput): Promise<ActionRunRecord>\n  finish(input: FinishActionRunInput): Promise<ActionRunRecord>\n  getById(params: { projectId: string; id: string }): Promise<ActionRunRecord | null>\n  list(input: ListActionRunsInput): Promise<ListActionRunsResult>\n}\n",
+    "import { parseSixbFailure } from \"../../errors/internal\"\nimport { isPlainRecord } from \"../../json\"\nimport {\n  ACTION_RUN_FAILURE_CODES,\n  ACTION_RUN_PHASES,\n  type ActionRunFailure,\n  type ActionRunFailureDetails,\n  type ActionRunPhase,\n} from \"./types\"\n\n/** Serializes the canonical failure plus Action's typed lifecycle extension. */\nexport function serializeActionRunFailure<TPhase extends ActionRunPhase>(\n  failure: ActionRunFailure<TPhase>,\n  expectedPhase?: TPhase\n): string {\n  const parsed =\n    expectedPhase === undefined\n      ? parseActionRunFailure(failure)\n      : parseActionRunFailure(failure, expectedPhase)\n  return JSON.stringify(parsed)\n}\n\n/** Validates and detaches an Action failure read from a storage boundary. */\nexport function parseActionRunFailure<TPhase extends ActionRunPhase>(\n  value: unknown,\n  expectedPhase: TPhase\n): ActionRunFailure<TPhase>\nexport function parseActionRunFailure(value: unknown): ActionRunFailure\nexport function parseActionRunFailure(\n  value: unknown,\n  expectedPhase?: ActionRunPhase\n): ActionRunFailure {\n  const candidate = parseStoredActionRunFailureValue(value)\n  const failure = parseSixbFailure(candidate, ACTION_RUN_FAILURE_CODES)\n  const details = failure.details\n  if (\n    !isPlainRecord(details) ||\n    typeof details.actionId !== \"string\" ||\n    typeof details.runId !== \"string\" ||\n    typeof details.phase !== \"string\" ||\n    !(ACTION_RUN_PHASES as readonly string[]).includes(details.phase)\n  ) {\n    throw new Error(\n      \"[Sixb] Stored failure is invalid: Action details must contain actionId, runId, and a known phase.\"\n    )\n  }\n  if (expectedPhase !== undefined && details.phase !== expectedPhase) {\n    throw new Error(`[Sixb] Stored Action ${expectedPhase} failure has phase '${details.phase}'.`)\n  }\n\n  return {\n    ...failure,\n    details: details as unknown as ActionRunFailureDetails,\n  }\n}\n\nfunction parseStoredActionRunFailureValue(value: unknown): unknown {\n  if (typeof value !== \"string\") return value\n  try {\n    return JSON.parse(value) as unknown\n  } catch {\n    throw new Error(\"[Sixb] Stored failure is invalid: value is not valid JSON.\")\n  }\n}\n"
+  ],
+  "mappings": ";;;;;;;;;AAMO,IAAM,qBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AASO,IAAM,4BAA2B;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;ACnBO,SAAS,0BAAwD,CACtE,SACA,eACQ;AAAA,EACR,MAAM,SACJ,kBAAkB,YACd,uBAAsB,OAAO,IAC7B,uBAAsB,SAAS,aAAa;AAAA,EAClD,OAAO,KAAK,UAAU,MAAM;AAAA;AASvB,SAAS,sBAAqB,CACnC,OACA,eACkB;AAAA,EAClB,MAAM,YAAY,iCAAiC,KAAK;AAAA,EACxD,MAAM,UAAU,kBAAiB,WAAW,yBAAwB;AAAA,EACpE,MAAM,UAAU,QAAQ;AAAA,EACxB,IACE,CAAC,cAAc,OAAO,KACtB,OAAO,QAAQ,aAAa,YAC5B,OAAO,QAAQ,UAAU,YACzB,OAAO,QAAQ,UAAU,YACzB,CAAE,mBAAwC,SAAS,QAAQ,KAAK,GAChE;AAAA,IACA,MAAM,IAAI,MACR,mGACF;AAAA,EACF;AAAA,EACA,IAAI,kBAAkB,aAAa,QAAQ,UAAU,eAAe;AAAA,IAClE,MAAM,IAAI,MAAM,wBAAwB,oCAAoC,QAAQ,SAAS;AAAA,EAC/F;AAAA,EAEA,OAAO;AAAA,OACF;AAAA,IACH;AAAA,EACF;AAAA;AAGF,SAAS,gCAAgC,CAAC,OAAyB;AAAA,EACjE,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EACtC,IAAI;AAAA,IACF,OAAO,KAAK,MAAM,KAAK;AAAA,IACvB,MAAM;AAAA,IACN,MAAM,IAAI,MAAM,4DAA4D;AAAA;AAAA;",
+  "debugId": "4C1D77261542AF7164756E2164756E21",
+  "names": []
+}

package/dist/{chunk-gswwr35f.js → chunk-y487ywrv.js}

@@ -1,18 +1,18 @@
 // @bun
 import {
   ProjectionValidationError2
-} from "./chunk-bbaa1fet.js";
+} from "./chunk-rzcjp5m2.js";
 import {
   sha256Canonical2
-} from "./chunk-hkw8rykk.js";
+} from "./chunk-ht4a7mjg.js";
 import {
   ProjectionRunError2,
   assertProjectionRunIdentityMatches2,
   assertProjectionRunDurableExecution2
-} from "./chunk-bfjv1adk.js";
+} from "./chunk-znw0zvy4.js";
 import {
   createPrimitiveExecutionRecord
-} from "./chunk-0mza4xb2.js";
+} from "./chunk-m8zkvep1.js";
 import {
   findPrimitiveRunExecution
 } from "./chunk-ey1nk510.js";

package/dist/{chunk-bet1rb9h.js → chunk-y6vnvayj.js}

@@ -6,7 +6,7 @@ import {
   reportEventDeliveryFailure3,
   reportRuleEvaluationFailure3,
   reportVectorIndexingFailure2
-} from "./chunk-y1ahv8b7.js";
+} from "./chunk-bdhfn0ww.js";
 
 // src/error-reporting/capability.ts
 var ERROR_REPORTER = Symbol("sixb.error-reporter");

package/dist/{chunk-x9tmx3fc.js → chunk-ypj2wqtj.js}

@@ -3,14 +3,14 @@ import {
   createSixbError2,
   toSixbFailure2,
   serializeSixbFailure2
-} from "./chunk-hzw7yv5g.js";
+} from "./chunk-rzkr70gr.js";
 import {
   ONTOLOGY_OUTBOX_FAILURE_CODES2
 } from "./chunk-d62kjtbg.js";
 import {
   SixbErrorReporter2,
   reportEventDeliveryFailure3
-} from "./chunk-y1ahv8b7.js";
+} from "./chunk-bdhfn0ww.js";
 import {
   getInvalidJsonValueReason2
 } from "./chunk-wy0qdqfm.js";
@@ -625,7 +625,6 @@ class DomainEventService2 {
     }
     const payloads = input.events.map((event) => toStoredEventPayload({
       projectId: this.projectId,
-      actor: input.actor,
       correlationId: input.correlationId,
       causationId: input.causationId,
       event
@@ -756,7 +755,6 @@ function toStoredEventPayload(params) {
   setIfDefined(payload, "correlationId", params.correlationId);
   setIfDefined(payload, "causationId", params.causationId);
   setIfDefined(payload, "idempotencyKey", params.event.idempotencyKey);
-  setIfDefined(payload, "actor", params.actor);
   setIfDefined(payload, "origin", params.event.origin);
   setIfDefined(payload, "metadata", params.event.metadata);
   return payload;
@@ -815,7 +813,6 @@ function toStoredEvent2(params) {
     correlationId: params.correlationId,
     causationId: params.causationId,
     idempotencyKey: params.event.idempotencyKey,
-    actor: params.actor,
     origin: params.event.origin,
     metadata: params.event.metadata,
     cursor: params.cursor
@@ -831,4 +828,4 @@ function toStoredEvent2(params) {
 }
 export { EventsError2, OBJECT_EVENT_DEFINITIONS2, TELEMETRY_EVENT_DEFINITIONS2, LINK_EVENT_DEFINITIONS2, ACTION_EVENT_DEFINITIONS2, SCHEDULE_EVENT_DEFINITIONS2, RULE_EVENT_DEFINITIONS2, SYNC_EVENT_DEFINITIONS2, PIPELINE_EVENT_DEFINITIONS2, WORKFLOW_EVENT_DEFINITIONS2, DATASET_EVENT_DEFINITIONS2, EVENT_DEFINITIONS2, EVENT_TYPES2, EVENT_TOPICS2, isDomainEventType2, isOntologyFactType2, resolveEventStorage2, OntologyOutboxDispatcher2, DEFAULT_EVENTS_RETENTION_MS2, EVENTS_STREAM2, DomainEventService2, createDomainEventService2, toStoredEvent2 };
 
-//# debugId=D60791393813ED9264756E2164756E21
+//# debugId=0B70DE3369D60A2064756E2164756E21