@sixb/core 0.1.15 → 0.1.17

package/dist/chunk-4as3wt1c.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../src/storage/ai-limits/errors.ts", "../src/storage/ai-limits/period.ts", "../src/storage/ai-limits/provider.ts"],
+  "sourcesContent": [
+    "export type AiLimitStorageErrorCode =\n  | \"duplicate_policy\"\n  | \"missing_policy\"\n  | \"missing_execution\"\n  | \"missing_reservation\"\n  | \"missing_usage_record\"\n  | \"usage_mismatch\"\n  | \"unavailable_actuals\"\n  | \"reservation_conflict\"\n  | \"reconciliation_conflict\"\n  | \"invalid_reservation_state\"\n\n/** Stable storage failure for AI limit policies and reservations. */\nexport class AiLimitStorageError extends Error {\n  readonly name = \"AiLimitStorageError\"\n\n  constructor(\n    readonly code: AiLimitStorageErrorCode,\n    message: string\n  ) {\n    super(message)\n  }\n}\n",
+    "import type { AiLimitPeriod } from \"./types\"\n\n/** Return the UTC calendar month containing `at`, with an inclusive start and exclusive end. */\nexport function aiLimitCalendarMonth(at: Date): AiLimitPeriod {\n  if (!(at instanceof Date) || !Number.isFinite(at.getTime())) {\n    throw new TypeError(\"[Sixb] AI limit period date must be a valid Date.\")\n  }\n  const start = new Date(Date.UTC(at.getUTCFullYear(), at.getUTCMonth(), 1))\n  const end = new Date(Date.UTC(at.getUTCFullYear(), at.getUTCMonth() + 1, 1))\n  return { kind: \"calendarMonth\", start, end, resetAt: new Date(end) }\n}\n",
+    "import type { ModelKind } from \"../../models/definitions\"\nimport type { AiMoney } from \"../ai-cost\"\nimport { AiLimitStorageError } from \"./errors\"\nimport { aiLimitCalendarMonth } from \"./period\"\nimport type {\n  AiLimitMeter,\n  AiLimitPeriod,\n  AiLimitPolicy,\n  AiLimitQuantity,\n  AiLimitReservationBucket,\n  AiLimitSubject,\n  AiModelCallReservation,\n  AiModelCallReservationIdentity,\n  CreateAiLimitPolicyInput,\n  ReserveAiModelCallInput,\n  UpdateAiLimitPolicyInput,\n} from \"./types\"\n\nconst SIGNED_INT64_MAX = 9_223_372_036_854_775_807n\n\n// These calls are billed per audio second or per search, and their providers report no tokens.\n// Token limits neither admit nor count them; cost limits still do.\nconst TOKENLESS_MODEL_KINDS: ReadonlySet<ModelKind> = new Set([\"transcription\", \"reranking\"])\n\n/** @internal Whether a limit meter governs calls of this kind. Unclassified calls are metered. */\nexport function aiLimitMeterApplies(\n  meter: AiLimitMeter,\n  modelKind: ModelKind | undefined\n): boolean {\n  return (\n    meter !== \"tokens.total\" || modelKind === undefined || !TOKENLESS_MODEL_KINDS.has(modelKind)\n  )\n}\n\n/** @internal Serialize compound limit operations, including within an existing transaction. */\nexport class AiLimitOperationLock {\n  private tail: Promise<void> = Promise.resolve()\n\n  /** Wait for already queued operations before the owning transaction commits or rolls back. */\n  settle(): Promise<void> {\n    return this.tail\n  }\n\n  async run<T>(operation: () => Promise<T> | T): Promise<T> {\n    const previous = this.tail\n    let release!: () => void\n    this.tail = new Promise<void>((resolve) => {\n      release = resolve\n    })\n    await previous\n    try {\n      return await operation()\n    } finally {\n      release()\n    }\n  }\n}\n\n/** @internal Canonical integer quantity used by storage providers. */\nexport interface NormalizedAiLimitAmount {\n  readonly meter: AiLimitQuantity[\"meter\"]\n  readonly currency: string\n  readonly amount: bigint\n}\n\n/** @internal Minimal immutable accounting facts consumed by limit providers. */\nexport interface AiLimitAccountingEntry {\n  readonly projectId: string\n  readonly usageRecordId: string\n  readonly executionId: string\n  readonly attempt: number\n  readonly callId: string\n  readonly occurredAt: Date\n  readonly modelKind?: ModelKind\n  readonly totalTokens?: number\n  readonly requesterGroupIds: readonly string[]\n  readonly requester?:\n    | { readonly type: \"user\"; readonly id: string }\n    | { readonly type: \"serviceAccount\"; readonly id: string }\n  readonly valuation?:\n    | { readonly status: \"rated\"; readonly money: AiMoney }\n    | { readonly status: \"unavailable\" }\n}\n\nexport interface ResolvedAiLimitActual {\n  readonly amount: bigint\n  readonly accountingStatus: \"complete\" | \"unavailable\"\n}\n\nexport function normalizeAiLimitSubject(subject: AiLimitSubject): AiLimitSubject {\n  if (!subject || typeof subject !== \"object\") {\n    throw new TypeError(\"[Sixb] AI limit subject must be an object.\")\n  }\n  if (subject.type === \"project\") return { type: \"project\" }\n  if (subject.type === \"group\" || subject.type === \"user\" || subject.type === \"serviceAccount\") {\n    assertNonBlank(subject.id, \"subject id\")\n    return { type: subject.type, id: subject.id }\n  }\n  throw new TypeError(\"[Sixb] AI limit subject type is unsupported.\")\n}\n\nexport function normalizeAiLimitSubjects(\n  subjects: readonly AiLimitSubject[]\n): readonly AiLimitSubject[] {\n  if (!Array.isArray(subjects)) {\n    throw new TypeError(\"[Sixb] AI limit subjects must be an array.\")\n  }\n  const normalized = [\n    normalizeAiLimitSubject({ type: \"project\" }),\n    ...subjects.map(normalizeAiLimitSubject),\n  ]\n  const byKey = new Map(normalized.map((subject) => [aiLimitSubjectKey(subject), subject]))\n  return [...byKey.values()].sort((left, right) =>\n    aiLimitSubjectKey(left).localeCompare(aiLimitSubjectKey(right))\n  )\n}\n\nexport function aiLimitSubjectKey(subject: AiLimitSubject): string {\n  return subject.type === \"project\" ? \"project:\" : `${subject.type}:${subject.id}`\n}\n\nexport function aiLimitSubjectParts(subject: AiLimitSubject): {\n  readonly type: AiLimitSubject[\"type\"]\n  readonly id: string\n} {\n  return { type: subject.type, id: subject.type === \"project\" ? \"\" : subject.id }\n}\n\nexport function aiLimitSubjectFromParts(type: AiLimitSubject[\"type\"], id: string): AiLimitSubject {\n  return normalizeAiLimitSubject(type === \"project\" ? { type } : { type, id })\n}\n\nexport function normalizeAiLimitQuantity(quantity: AiLimitQuantity): AiLimitQuantity {\n  const normalized = normalizeAiLimitAmount(quantity)\n  return aiLimitQuantityFromAmount(normalized)\n}\n\nexport function normalizeAiLimitQuantities(\n  quantities: readonly AiLimitQuantity[],\n  label: string\n): readonly AiLimitQuantity[] {\n  if (!Array.isArray(quantities) || quantities.length === 0) {\n    throw new TypeError(`[Sixb] AI limit ${label} must contain at least one quantity.`)\n  }\n  const byKey = new Map<string, AiLimitQuantity>()\n  for (const quantity of quantities) {\n    const normalized = normalizeAiLimitQuantity(quantity)\n    const key = aiLimitAmountKey(normalizeAiLimitAmount(normalized))\n    if (byKey.has(key)) {\n      throw new TypeError(`[Sixb] AI limit ${label} contains duplicate meter '${key}'.`)\n    }\n    byKey.set(key, normalized)\n  }\n  return [...byKey.values()].sort((left, right) =>\n    aiLimitAmountKey(normalizeAiLimitAmount(left)).localeCompare(\n      aiLimitAmountKey(normalizeAiLimitAmount(right))\n    )\n  )\n}\n\nexport function normalizeAiLimitAmount(quantity: AiLimitQuantity): NormalizedAiLimitAmount {\n  if (!quantity || typeof quantity !== \"object\") {\n    throw new TypeError(\"[Sixb] AI limit quantity must be an object.\")\n  }\n  if (quantity.meter === \"tokens.total\") {\n    if (!Number.isSafeInteger(quantity.amount) || quantity.amount < 0) {\n      throw new TypeError(\"[Sixb] AI limit token amount must be a non-negative safe integer.\")\n    }\n    return { meter: quantity.meter, currency: \"\", amount: BigInt(quantity.amount) }\n  }\n  if (quantity.meter === \"cost.catalogEstimated\") {\n    const money = normalizeAiMoney(quantity.amount)\n    return { meter: quantity.meter, currency: money.currency, amount: BigInt(money.amountNanos) }\n  }\n  throw new TypeError(\"[Sixb] AI limit meter is unsupported.\")\n}\n\nexport function aiLimitQuantityFromAmount(amount: NormalizedAiLimitAmount): AiLimitQuantity {\n  if (amount.amount < 0n) {\n    throw new TypeError(\"[Sixb] AI limit amount cannot be negative.\")\n  }\n  if (amount.meter === \"tokens.total\") {\n    const tokens = Number(amount.amount)\n    if (!Number.isSafeInteger(tokens)) {\n      throw new RangeError(\"[Sixb] AI limit token amount exceeds JavaScript's safe integer range.\")\n    }\n    return { meter: amount.meter, amount: tokens }\n  }\n  if (amount.currency !== \"USD\") {\n    throw new TypeError(\"[Sixb] AI limit catalog-estimated cost currency must be 'USD'.\")\n  }\n  return {\n    meter: amount.meter,\n    amount: { currency: \"USD\", amountNanos: amount.amount.toString() },\n  }\n}\n\nexport function aiLimitAmountKey(\n  amount: Pick<NormalizedAiLimitAmount, \"meter\" | \"currency\">\n): string {\n  return `${amount.meter}:${amount.currency}`\n}\n\nexport function normalizeCreateAiLimitPolicy(input: CreateAiLimitPolicyInput): AiLimitPolicy {\n  assertNonBlank(input.id, \"policy id\")\n  assertNonBlank(input.projectId, \"projectId\")\n  const createdAt = cloneValidDate(input.createdAt ?? new Date(), \"createdAt\")\n  return {\n    id: input.id,\n    projectId: input.projectId,\n    subject: normalizeAiLimitSubject(input.subject),\n    limit: normalizeAiLimitQuantity(input.limit),\n    period: \"calendarMonth\",\n    enabled: input.enabled ?? true,\n    createdAt,\n    updatedAt: new Date(createdAt),\n  }\n}\n\nexport function normalizeUpdateAiLimitPolicy(input: UpdateAiLimitPolicyInput): {\n  readonly projectId: string\n  readonly id: string\n  readonly limit?: AiLimitQuantity\n  readonly enabled?: boolean\n  readonly updatedAt: Date\n} {\n  assertNonBlank(input.projectId, \"projectId\")\n  assertNonBlank(input.id, \"policy id\")\n  if (input.limit === undefined && input.enabled === undefined) {\n    throw new TypeError(\"[Sixb] AI limit policy update must change limit or enabled.\")\n  }\n  if (input.enabled !== undefined && typeof input.enabled !== \"boolean\") {\n    throw new TypeError(\"[Sixb] AI limit enabled must be a boolean.\")\n  }\n  return {\n    projectId: input.projectId,\n    id: input.id,\n    ...(input.limit === undefined ? {} : { limit: normalizeAiLimitQuantity(input.limit) }),\n    ...(input.enabled === undefined ? {} : { enabled: input.enabled }),\n    updatedAt: cloneValidDate(input.updatedAt ?? new Date(), \"updatedAt\"),\n  }\n}\n\nexport function normalizeReserveAiModelCall(input: ReserveAiModelCallInput): {\n  readonly identity: AiModelCallReservationIdentity\n  readonly subjects: readonly AiLimitSubject[]\n  readonly estimates: readonly AiLimitQuantity[]\n  readonly modelKind?: ModelKind\n  readonly period: AiLimitPeriod\n  readonly reservedAt: Date\n} {\n  const identity = normalizeAiModelCallReservationIdentity(input)\n  const reservedAt = cloneValidDate(input.reservedAt ?? new Date(), \"reservedAt\")\n  return {\n    identity,\n    subjects: normalizeAiLimitSubjects(input.subjects),\n    estimates: normalizeAiLimitQuantities(input.estimates, \"estimates\"),\n    ...(input.modelKind === undefined ? {} : { modelKind: input.modelKind }),\n    period: aiLimitCalendarMonth(reservedAt),\n    reservedAt,\n  }\n}\n\nexport function normalizeAiModelCallReservationIdentity(\n  input: AiModelCallReservationIdentity\n): AiModelCallReservationIdentity {\n  assertNonBlank(input.projectId, \"projectId\")\n  assertNonBlank(input.executionId, \"executionId\")\n  if (!Number.isSafeInteger(input.attempt) || input.attempt <= 0) {\n    throw new TypeError(\"[Sixb] AI limit reservation attempt must be a positive safe integer.\")\n  }\n  assertNonBlank(input.callId, \"callId\")\n  return {\n    projectId: input.projectId,\n    executionId: input.executionId,\n    attempt: input.attempt,\n    callId: input.callId,\n  }\n}\n\nexport function aiModelCallReservationKey(identity: AiModelCallReservationIdentity): string {\n  return JSON.stringify([\n    identity.projectId,\n    identity.executionId,\n    identity.attempt,\n    identity.callId,\n  ])\n}\n\nexport function aiLimitPolicyDimensionKey(\n  policy: Pick<AiLimitPolicy, \"projectId\" | \"subject\" | \"limit\">\n): string {\n  const amount = normalizeAiLimitAmount(policy.limit)\n  return JSON.stringify([\n    policy.projectId,\n    aiLimitSubjectKey(policy.subject),\n    amount.meter,\n    amount.currency,\n  ])\n}\n\nexport function aiLimitReservationRequestMatches(\n  reservation: AiModelCallReservation,\n  request: ReturnType<typeof normalizeReserveAiModelCall>\n): boolean {\n  return reservation.requestKey === aiLimitReservationRequestKey(request)\n}\n\nexport function aiLimitReservationRequestKey(\n  request: ReturnType<typeof normalizeReserveAiModelCall>\n): string {\n  return JSON.stringify([\n    request.period.start.toISOString(),\n    request.subjects.map(aiLimitSubjectKey),\n    request.estimates.map((quantity) => {\n      const amount = normalizeAiLimitAmount(quantity)\n      return [amount.meter, amount.currency, amount.amount.toString()]\n    }),\n    // Appended only when present, so keys of reservations made before model kinds stay valid.\n    ...(request.modelKind === undefined ? [] : [request.modelKind]),\n  ])\n}\n\nexport function aiLimitReservationBuckets(\n  policies: readonly AiLimitPolicy[],\n  subjects: readonly AiLimitSubject[],\n  estimates: readonly AiLimitQuantity[],\n  modelKind?: ModelKind\n): readonly AiLimitReservationBucket[] {\n  const subjectKeys = new Set(subjects.map(aiLimitSubjectKey))\n  const estimatesByDimension = new Map(\n    estimates.map((estimate) => {\n      const amount = normalizeAiLimitAmount(estimate)\n      return [aiLimitAmountKey(amount), estimate] as const\n    })\n  )\n  return policies\n    .filter(\n      (policy) =>\n        subjectKeys.has(aiLimitSubjectKey(policy.subject)) &&\n        aiLimitMeterApplies(policy.limit.meter, modelKind)\n    )\n    .flatMap((policy) => {\n      const estimate = estimatesByDimension.get(\n        aiLimitAmountKey(normalizeAiLimitAmount(policy.limit))\n      )\n      return estimate ? [{ subject: policy.subject, estimate }] : []\n    })\n    .sort((left, right) => {\n      const subject = aiLimitSubjectKey(left.subject).localeCompare(\n        aiLimitSubjectKey(right.subject)\n      )\n      if (subject !== 0) return subject\n      return aiLimitAmountKey(normalizeAiLimitAmount(left.estimate)).localeCompare(\n        aiLimitAmountKey(normalizeAiLimitAmount(right.estimate))\n      )\n    })\n}\n\nexport function aiLimitAccountingEntryAppliesToSubject(\n  entry: AiLimitAccountingEntry,\n  subject: AiLimitSubject\n): boolean {\n  if (subject.type === \"project\") return true\n  if (subject.type === \"group\") return entry.requesterGroupIds.includes(subject.id)\n  return entry.requester?.type === subject.type && entry.requester.id === subject.id\n}\n\nexport function aiLimitSubjectsFromAccountingEntry(\n  entry: AiLimitAccountingEntry\n): readonly AiLimitSubject[] {\n  return normalizeAiLimitSubjects([\n    ...entry.requesterGroupIds.map((id) => ({ type: \"group\" as const, id })),\n    ...(entry.requester ? [entry.requester] : []),\n  ])\n}\n\nexport function resolveAiLimitActual(\n  entries: readonly AiLimitAccountingEntry[],\n  dimension: Pick<NormalizedAiLimitAmount, \"meter\" | \"currency\">\n): ResolvedAiLimitActual {\n  let amount = 0n\n  let accountingStatus: ResolvedAiLimitActual[\"accountingStatus\"] = \"complete\"\n  for (const entry of entries) {\n    if (dimension.meter === \"tokens.total\") {\n      if (!aiLimitMeterApplies(dimension.meter, entry.modelKind)) continue\n      if (entry.totalTokens === undefined) {\n        accountingStatus = \"unavailable\"\n      } else {\n        amount += BigInt(entry.totalTokens)\n      }\n      continue\n    }\n    if (\n      entry.valuation?.status !== \"rated\" ||\n      entry.valuation.money.currency !== dimension.currency\n    ) {\n      accountingStatus = \"unavailable\"\n      continue\n    }\n    amount += BigInt(entry.valuation.money.amountNanos)\n  }\n  return { amount, accountingStatus }\n}\n\nexport function assertAiLimitAccountingMatchesReservation(\n  reservation: AiModelCallReservation,\n  entry: AiLimitAccountingEntry\n): void {\n  if (\n    entry.projectId !== reservation.projectId ||\n    entry.executionId !== reservation.executionId ||\n    entry.attempt !== reservation.attempt ||\n    entry.callId !== reservation.callId\n  ) {\n    throw new AiLimitStorageError(\n      \"usage_mismatch\",\n      `[Sixb] AI usage record '${entry.usageRecordId}' does not belong to reservation '${reservation.callId}'.`\n    )\n  }\n}\n\nexport function cloneAiLimitPolicy(policy: AiLimitPolicy): AiLimitPolicy {\n  return structuredClone(policy)\n}\n\nfunction normalizeAiMoney(money: AiMoney): AiMoney & { readonly currency: \"USD\" } {\n  if (!money || typeof money !== \"object\") {\n    throw new TypeError(\"[Sixb] AI limit cost amount must be AiMoney.\")\n  }\n  assertNonBlank(money.currency, \"cost currency\")\n  if (money.currency !== \"USD\") {\n    throw new TypeError(\"[Sixb] AI limit catalog-estimated cost currency must be 'USD'.\")\n  }\n  if (!/^(0|[1-9][0-9]*)$/.test(money.amountNanos)) {\n    throw new TypeError(\n      \"[Sixb] AI limit cost amountNanos must be a canonical non-negative integer string.\"\n    )\n  }\n  if (BigInt(money.amountNanos) > SIGNED_INT64_MAX) {\n    throw new RangeError(\"[Sixb] AI limit cost amountNanos exceeds the supported range.\")\n  }\n  return { currency: \"USD\", amountNanos: money.amountNanos }\n}\n\nexport function assertNonBlank(value: string, label: string): void {\n  if (typeof value !== \"string\" || value.trim().length === 0) {\n    throw new TypeError(`[Sixb] AI limit ${label} must be nonblank.`)\n  }\n}\n\nexport function cloneValidDate(value: Date, label: string): Date {\n  if (!(value instanceof Date) || !Number.isFinite(value.getTime())) {\n    throw new TypeError(`[Sixb] AI limit ${label} must be a valid Date.`)\n  }\n  return new Date(value)\n}\n"
+  ],
+  "mappings": ";;AAaO,MAAM,6BAA4B,MAAM;AAAA,EAIlC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA;AAAA,IACA,MAAM,OAAO;AAAA,IAHJ;AAAA;AAKb;;;ACnBO,SAAS,qBAAoB,CAAC,IAAyB;AAAA,EAC5D,IAAI,EAAE,cAAc,SAAS,CAAC,OAAO,SAAS,GAAG,QAAQ,CAAC,GAAG;AAAA,IAC3D,MAAM,IAAI,UAAU,mDAAmD;AAAA,EACzE;AAAA,EACA,MAAM,QAAQ,IAAI,KAAK,KAAK,IAAI,GAAG,eAAe,GAAG,GAAG,YAAY,GAAG,CAAC,CAAC;AAAA,EACzE,MAAM,MAAM,IAAI,KAAK,KAAK,IAAI,GAAG,eAAe,GAAG,GAAG,YAAY,IAAI,GAAG,CAAC,CAAC;AAAA,EAC3E,OAAO,EAAE,MAAM,iBAAiB,OAAO,KAAK,SAAS,IAAI,KAAK,GAAG,EAAE;AAAA;;;ACSrE,IAAM,mBAAmB;AAIzB,IAAM,wBAAgD,IAAI,IAAI,CAAC,iBAAiB,WAAW,CAAC;AAGrF,SAAS,oBAAmB,CACjC,OACA,WACS;AAAA,EACT,OACE,UAAU,kBAAkB,cAAc,aAAa,CAAC,sBAAsB,IAAI,SAAS;AAAA;AAAA;AAKxF,MAAM,sBAAqB;AAAA,EACxB,OAAsB,QAAQ,QAAQ;AAAA,EAG9C,MAAM,GAAkB;AAAA,IACtB,OAAO,KAAK;AAAA;AAAA,OAGR,IAAM,CAAC,WAA6C;AAAA,IACxD,MAAM,WAAW,KAAK;AAAA,IACtB,IAAI;AAAA,IACJ,KAAK,OAAO,IAAI,QAAc,CAAC,YAAY;AAAA,MACzC,UAAU;AAAA,KACX;AAAA,IACD,MAAM;AAAA,IACN,IAAI;AAAA,MACF,OAAO,MAAM,UAAU;AAAA,cACvB;AAAA,MACA,QAAQ;AAAA;AAAA;AAGd;AAiCO,SAAS,wBAAuB,CAAC,SAAyC;AAAA,EAC/E,IAAI,CAAC,WAAW,OAAO,YAAY,UAAU;AAAA,IAC3C,MAAM,IAAI,UAAU,4CAA4C;AAAA,EAClE;AAAA,EACA,IAAI,QAAQ,SAAS;AAAA,IAAW,OAAO,EAAE,MAAM,UAAU;AAAA,EACzD,IAAI,QAAQ,SAAS,WAAW,QAAQ,SAAS,UAAU,QAAQ,SAAS,kBAAkB;AAAA,IAC5F,gBAAe,QAAQ,IAAI,YAAY;AAAA,IACvC,OAAO,EAAE,MAAM,QAAQ,MAAM,IAAI,QAAQ,GAAG;AAAA,EAC9C;AAAA,EACA,MAAM,IAAI,UAAU,8CAA8C;AAAA;AAG7D,SAAS,yBAAwB,CACtC,UAC2B;AAAA,EAC3B,IAAI,CAAC,MAAM,QAAQ,QAAQ,GAAG;AAAA,IAC5B,MAAM,IAAI,UAAU,4CAA4C;AAAA,EAClE;AAAA,EACA,MAAM,aAAa;AAAA,IACjB,yBAAwB,EAAE,MAAM,UAAU,CAAC;AAAA,IAC3C,GAAG,SAAS,IAAI,wBAAuB;AAAA,EACzC;AAAA,EACA,MAAM,QAAQ,IAAI,IAAI,WAAW,IAAI,CAAC,YAAY,CAAC,mBAAkB,OAAO,GAAG,OAAO,CAAC,CAAC;AAAA,EACxF,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,UACrC,mBAAkB,IAAI,EAAE,cAAc,mBAAkB,KAAK,CAAC,CAChE;AAAA;AAGK,SAAS,kBAAiB,CAAC,SAAiC;AAAA,EACjE,OAAO,QAAQ,SAAS,YAAY,aAAa,GAAG,QAAQ,QAAQ,QAAQ;AAAA;AAGvE,SAAS,oBAAmB,CAAC,SAGlC;AAAA,EACA,OAAO,EAAE,MAAM,QAAQ,MAAM,IAAI,QAAQ,SAAS,YAAY,KAAK,QAAQ,GAAG;AAAA;AAGzE,SAAS,wBAAuB,CAAC,MAA8B,IAA4B;AAAA,EAChG,OAAO,yBAAwB,SAAS,YAAY,EAAE,KAAK,IAAI,EAAE,MAAM,GAAG,CAAC;AAAA;AAGtE,SAAS,yBAAwB,CAAC,UAA4C;AAAA,EACnF,MAAM,aAAa,wBAAuB,QAAQ;AAAA,EAClD,OAAO,2BAA0B,UAAU;AAAA;AAGtC,SAAS,2BAA0B,CACxC,YACA,OAC4B;AAAA,EAC5B,IAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,GAAG;AAAA,IACzD,MAAM,IAAI,UAAU,mBAAmB,2CAA2C;AAAA,EACpF;AAAA,EACA,MAAM,QAAQ,IAAI;AAAA,EAClB,WAAW,YAAY,YAAY;AAAA,IACjC,MAAM,aAAa,0BAAyB,QAAQ;AAAA,IACpD,MAAM,MAAM,kBAAiB,wBAAuB,UAAU,CAAC;AAAA,IAC/D,IAAI,MAAM,IAAI,GAAG,GAAG;AAAA,MAClB,MAAM,IAAI,UAAU,mBAAmB,mCAAmC,OAAO;AAAA,IACnF;AAAA,IACA,MAAM,IAAI,KAAK,UAAU;AAAA,EAC3B;AAAA,EACA,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,UACrC,kBAAiB,wBAAuB,IAAI,CAAC,EAAE,cAC7C,kBAAiB,wBAAuB,KAAK,CAAC,CAChD,CACF;AAAA;AAGK,SAAS,uBAAsB,CAAC,UAAoD;AAAA,EACzF,IAAI,CAAC,YAAY,OAAO,aAAa,UAAU;AAAA,IAC7C,MAAM,IAAI,UAAU,6CAA6C;AAAA,EACnE;AAAA,EACA,IAAI,SAAS,UAAU,gBAAgB;AAAA,IACrC,IAAI,CAAC,OAAO,cAAc,SAAS,MAAM,KAAK,SAAS,SAAS,GAAG;AAAA,MACjE,MAAM,IAAI,UAAU,mEAAmE;AAAA,IACzF;AAAA,IACA,OAAO,EAAE,OAAO,SAAS,OAAO,UAAU,IAAI,QAAQ,OAAO,SAAS,MAAM,EAAE;AAAA,EAChF;AAAA,EACA,IAAI,SAAS,UAAU,yBAAyB;AAAA,IAC9C,MAAM,QAAQ,iBAAiB,SAAS,MAAM;AAAA,IAC9C,OAAO,EAAE,OAAO,SAAS,OAAO,UAAU,MAAM,UAAU,QAAQ,OAAO,MAAM,WAAW,EAAE;AAAA,EAC9F;AAAA,EACA,MAAM,IAAI,UAAU,uCAAuC;AAAA;AAGtD,SAAS,0BAAyB,CAAC,QAAkD;AAAA,EAC1F,IAAI,OAAO,SAAS,IAAI;AAAA,IACtB,MAAM,IAAI,UAAU,4CAA4C;AAAA,EAClE;AAAA,EACA,IAAI,OAAO,UAAU,gBAAgB;AAAA,IACnC,MAAM,SAAS,OAAO,OAAO,MAAM;AAAA,IACnC,IAAI,CAAC,OAAO,cAAc,MAAM,GAAG;AAAA,MACjC,MAAM,IAAI,WAAW,uEAAuE;AAAA,IAC9F;AAAA,IACA,OAAO,EAAE,OAAO,OAAO,OAAO,QAAQ,OAAO;AAAA,EAC/C;AAAA,EACA,IAAI,OAAO,aAAa,OAAO;AAAA,IAC7B,MAAM,IAAI,UAAU,gEAAgE;AAAA,EACtF;AAAA,EACA,OAAO;AAAA,IACL,OAAO,OAAO;AAAA,IACd,QAAQ,EAAE,UAAU,OAAO,aAAa,OAAO,OAAO,SAAS,EAAE;AAAA,EACnE;AAAA;AAGK,SAAS,iBAAgB,CAC9B,QACQ;AAAA,EACR,OAAO,GAAG,OAAO,SAAS,OAAO;AAAA;AAG5B,SAAS,6BAA4B,CAAC,OAAgD;AAAA,EAC3F,gBAAe,MAAM,IAAI,WAAW;AAAA,EACpC,gBAAe,MAAM,WAAW,WAAW;AAAA,EAC3C,MAAM,YAAY,gBAAe,MAAM,aAAa,IAAI,MAAQ,WAAW;AAAA,EAC3E,OAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,SAAS,yBAAwB,MAAM,OAAO;AAAA,IAC9C,OAAO,0BAAyB,MAAM,KAAK;AAAA,IAC3C,QAAQ;AAAA,IACR,SAAS,MAAM,WAAW;AAAA,IAC1B;AAAA,IACA,WAAW,IAAI,KAAK,SAAS;AAAA,EAC/B;AAAA;AAGK,SAAS,6BAA4B,CAAC,OAM3C;AAAA,EACA,gBAAe,MAAM,WAAW,WAAW;AAAA,EAC3C,gBAAe,MAAM,IAAI,WAAW;AAAA,EACpC,IAAI,MAAM,UAAU,aAAa,MAAM,YAAY,WAAW;AAAA,IAC5D,MAAM,IAAI,UAAU,6DAA6D;AAAA,EACnF;AAAA,EACA,IAAI,MAAM,YAAY,aAAa,OAAO,MAAM,YAAY,WAAW;AAAA,IACrE,MAAM,IAAI,UAAU,4CAA4C;AAAA,EAClE;AAAA,EACA,OAAO;AAAA,IACL,WAAW,MAAM;AAAA,IACjB,IAAI,MAAM;AAAA,OACN,MAAM,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,0BAAyB,MAAM,KAAK,EAAE;AAAA,OAChF,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,IAChE,WAAW,gBAAe,MAAM,aAAa,IAAI,MAAQ,WAAW;AAAA,EACtE;AAAA;AAGK,SAAS,4BAA2B,CAAC,OAO1C;AAAA,EACA,MAAM,WAAW,yCAAwC,KAAK;AAAA,EAC9D,MAAM,aAAa,gBAAe,MAAM,cAAc,IAAI,MAAQ,YAAY;AAAA,EAC9E,OAAO;AAAA,IACL;AAAA,IACA,UAAU,0BAAyB,MAAM,QAAQ;AAAA,IACjD,WAAW,4BAA2B,MAAM,WAAW,WAAW;AAAA,OAC9D,MAAM,cAAc,YAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;AAAA,IACtE,QAAQ,sBAAqB,UAAU;AAAA,IACvC;AAAA,EACF;AAAA;AAGK,SAAS,wCAAuC,CACrD,OACgC;AAAA,EAChC,gBAAe,MAAM,WAAW,WAAW;AAAA,EAC3C,gBAAe,MAAM,aAAa,aAAa;AAAA,EAC/C,IAAI,CAAC,OAAO,cAAc,MAAM,OAAO,KAAK,MAAM,WAAW,GAAG;AAAA,IAC9D,MAAM,IAAI,UAAU,sEAAsE;AAAA,EAC5F;AAAA,EACA,gBAAe,MAAM,QAAQ,QAAQ;AAAA,EACrC,OAAO;AAAA,IACL,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,EAChB;AAAA;AAGK,SAAS,0BAAyB,CAAC,UAAkD;AAAA,EAC1F,OAAO,KAAK,UAAU;AAAA,IACpB,SAAS;AAAA,IACT,SAAS;AAAA,IACT,SAAS;AAAA,IACT,SAAS;AAAA,EACX,CAAC;AAAA;AAGI,SAAS,0BAAyB,CACvC,QACQ;AAAA,EACR,MAAM,SAAS,wBAAuB,OAAO,KAAK;AAAA,EAClD,OAAO,KAAK,UAAU;AAAA,IACpB,OAAO;AAAA,IACP,mBAAkB,OAAO,OAAO;AAAA,IAChC,OAAO;AAAA,IACP,OAAO;AAAA,EACT,CAAC;AAAA;AAGI,SAAS,iCAAgC,CAC9C,aACA,SACS;AAAA,EACT,OAAO,YAAY,eAAe,8BAA6B,OAAO;AAAA;AAGjE,SAAS,6BAA4B,CAC1C,SACQ;AAAA,EACR,OAAO,KAAK,UAAU;AAAA,IACpB,QAAQ,OAAO,MAAM,YAAY;AAAA,IACjC,QAAQ,SAAS,IAAI,kBAAiB;AAAA,IACtC,QAAQ,UAAU,IAAI,CAAC,aAAa;AAAA,MAClC,MAAM,SAAS,wBAAuB,QAAQ;AAAA,MAC9C,OAAO,CAAC,OAAO,OAAO,OAAO,UAAU,OAAO,OAAO,SAAS,CAAC;AAAA,KAChE;AAAA,IAED,GAAI,QAAQ,cAAc,YAAY,CAAC,IAAI,CAAC,QAAQ,SAAS;AAAA,EAC/D,CAAC;AAAA;AAGI,SAAS,0BAAyB,CACvC,UACA,UACA,WACA,WACqC;AAAA,EACrC,MAAM,cAAc,IAAI,IAAI,SAAS,IAAI,kBAAiB,CAAC;AAAA,EAC3D,MAAM,uBAAuB,IAAI,IAC/B,UAAU,IAAI,CAAC,aAAa;AAAA,IAC1B,MAAM,SAAS,wBAAuB,QAAQ;AAAA,IAC9C,OAAO,CAAC,kBAAiB,MAAM,GAAG,QAAQ;AAAA,GAC3C,CACH;AAAA,EACA,OAAO,SACJ,OACC,CAAC,WACC,YAAY,IAAI,mBAAkB,OAAO,OAAO,CAAC,KACjD,qBAAoB,OAAO,MAAM,OAAO,SAAS,CACrD,EACC,QAAQ,CAAC,WAAW;AAAA,IACnB,MAAM,WAAW,qBAAqB,IACpC,kBAAiB,wBAAuB,OAAO,KAAK,CAAC,CACvD;AAAA,IACA,OAAO,WAAW,CAAC,EAAE,SAAS,OAAO,SAAS,SAAS,CAAC,IAAI,CAAC;AAAA,GAC9D,EACA,KAAK,CAAC,MAAM,UAAU;AAAA,IACrB,MAAM,UAAU,mBAAkB,KAAK,OAAO,EAAE,cAC9C,mBAAkB,MAAM,OAAO,CACjC;AAAA,IACA,IAAI,YAAY;AAAA,MAAG,OAAO;AAAA,IAC1B,OAAO,kBAAiB,wBAAuB,KAAK,QAAQ,CAAC,EAAE,cAC7D,kBAAiB,wBAAuB,MAAM,QAAQ,CAAC,CACzD;AAAA,GACD;AAAA;AAGE,SAAS,uCAAsC,CACpD,OACA,SACS;AAAA,EACT,IAAI,QAAQ,SAAS;AAAA,IAAW,OAAO;AAAA,EACvC,IAAI,QAAQ,SAAS;AAAA,IAAS,OAAO,MAAM,kBAAkB,SAAS,QAAQ,EAAE;AAAA,EAChF,OAAO,MAAM,WAAW,SAAS,QAAQ,QAAQ,MAAM,UAAU,OAAO,QAAQ;AAAA;AAG3E,SAAS,mCAAkC,CAChD,OAC2B;AAAA,EAC3B,OAAO,0BAAyB;AAAA,IAC9B,GAAG,MAAM,kBAAkB,IAAI,CAAC,QAAQ,EAAE,MAAM,SAAkB,GAAG,EAAE;AAAA,IACvE,GAAI,MAAM,YAAY,CAAC,MAAM,SAAS,IAAI,CAAC;AAAA,EAC7C,CAAC;AAAA;AAGI,SAAS,qBAAoB,CAClC,SACA,WACuB;AAAA,EACvB,IAAI,SAAS;AAAA,EACb,IAAI,mBAA8D;AAAA,EAClE,WAAW,SAAS,SAAS;AAAA,IAC3B,IAAI,UAAU,UAAU,gBAAgB;AAAA,MACtC,IAAI,CAAC,qBAAoB,UAAU,OAAO,MAAM,SAAS;AAAA,QAAG;AAAA,MAC5D,IAAI,MAAM,gBAAgB,WAAW;AAAA,QACnC,mBAAmB;AAAA,MACrB,EAAO;AAAA,QACL,UAAU,OAAO,MAAM,WAAW;AAAA;AAAA,MAEpC;AAAA,IACF;AAAA,IACA,IACE,MAAM,WAAW,WAAW,WAC5B,MAAM,UAAU,MAAM,aAAa,UAAU,UAC7C;AAAA,MACA,mBAAmB;AAAA,MACnB;AAAA,IACF;AAAA,IACA,UAAU,OAAO,MAAM,UAAU,MAAM,WAAW;AAAA,EACpD;AAAA,EACA,OAAO,EAAE,QAAQ,iBAAiB;AAAA;AAG7B,SAAS,0CAAyC,CACvD,aACA,OACM;AAAA,EACN,IACE,MAAM,cAAc,YAAY,aAChC,MAAM,gBAAgB,YAAY,eAClC,MAAM,YAAY,YAAY,WAC9B,MAAM,WAAW,YAAY,QAC7B;AAAA,IACA,MAAM,IAAI,qBACR,kBACA,2BAA2B,MAAM,kDAAkD,YAAY,UACjG;AAAA,EACF;AAAA;AAGK,SAAS,mBAAkB,CAAC,QAAsC;AAAA,EACvE,OAAO,gBAAgB,MAAM;AAAA;AAG/B,SAAS,gBAAgB,CAAC,OAAwD;AAAA,EAChF,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AAAA,IACvC,MAAM,IAAI,UAAU,8CAA8C;AAAA,EACpE;AAAA,EACA,gBAAe,MAAM,UAAU,eAAe;AAAA,EAC9C,IAAI,MAAM,aAAa,OAAO;AAAA,IAC5B,MAAM,IAAI,UAAU,gEAAgE;AAAA,EACtF;AAAA,EACA,IAAI,CAAC,oBAAoB,KAAK,MAAM,WAAW,GAAG;AAAA,IAChD,MAAM,IAAI,UACR,mFACF;AAAA,EACF;AAAA,EACA,IAAI,OAAO,MAAM,WAAW,IAAI,kBAAkB;AAAA,IAChD,MAAM,IAAI,WAAW,+DAA+D;AAAA,EACtF;AAAA,EACA,OAAO,EAAE,UAAU,OAAO,aAAa,MAAM,YAAY;AAAA;AAGpD,SAAS,eAAc,CAAC,OAAe,OAAqB;AAAA,EACjE,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,IAC1D,MAAM,IAAI,UAAU,mBAAmB,yBAAyB;AAAA,EAClE;AAAA;AAGK,SAAS,eAAc,CAAC,OAAa,OAAqB;AAAA,EAC/D,IAAI,EAAE,iBAAiB,SAAS,CAAC,OAAO,SAAS,MAAM,QAAQ,CAAC,GAAG;AAAA,IACjE,MAAM,IAAI,UAAU,mBAAmB,6BAA6B;AAAA,EACtE;AAAA,EACA,OAAO,IAAI,KAAK,KAAK;AAAA;",
+  "debugId": "DE130C8A66C4C32664756E2164756E21",
+  "names": []
+}

package/dist/chunk-4ra628t7.js

@@ -0,0 +1,88 @@
+// @bun
+import {
+  BlobStorageError2
+} from "./chunk-h8teetr0.js";
+import {
+  isFileRef2
+} from "./chunk-h3v76ams.js";
+
+// src/blob-storage/download-urls.ts
+import { createHash, randomBytes, randomUUID } from "crypto";
+var FILE_DOWNLOAD_ROUTE_PREFIX2 = "/api/files/downloads/";
+var DEFAULT_EXPIRY_MS = 60 * 60 * 1000;
+var LATEST_EXPIRY_MS = Date.UTC(9999, 11, 31, 23, 59, 59, 999);
+var TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+async function createFileDownloadUrl(context, file, options = {}) {
+  if (!isFileRef2(file)) {
+    throw new Error("[Sixb] blobs.createDownloadUrl() requires a valid file reference.");
+  }
+  const createdAt = new Date;
+  const expiresAt = expiryFrom(createdAt, options.expiresInMs ?? DEFAULT_EXPIRY_MS);
+  const grants = requireGrantStorage(context.storage);
+  if (context.apiPublicOrigin === undefined) {
+    throw new Error("[Sixb] blobs.createDownloadUrl() needs the API's public origin. Set SIXB_API_PUBLIC_ORIGIN for the API and every worker.");
+  }
+  const stat = await context.blobStorage.stat(file.blobId);
+  if (!stat || stat.digest !== file.digest || stat.sizeBytes !== file.sizeBytes) {
+    throw new BlobStorageError2(`[Sixb] No stored blob matches file '${file.blobId}'.`);
+  }
+  const token = randomBytes(32).toString("base64url");
+  const { logicalPath: _logicalPath, ...served } = file;
+  const grant = {
+    id: `filedownload_${randomUUID()}`,
+    projectId: context.projectId,
+    tokenHash: hashToken(token),
+    file: served,
+    executionId: context.executionId,
+    createdAt,
+    expiresAt
+  };
+  await grants.create(grant);
+  return {
+    id: grant.id,
+    url: new URL(`${FILE_DOWNLOAD_ROUTE_PREFIX2}${token}`, context.apiPublicOrigin).toString(),
+    expiresAt: grant.expiresAt
+  };
+}
+async function revokeFileDownloadUrl(context, id) {
+  const revoked = await requireGrantStorage(context.storage).revoke({
+    projectId: context.projectId,
+    id,
+    revokedAt: new Date
+  });
+  if (!revoked) {
+    throw new Error(`[Sixb] Download URL '${id}' does not exist.`);
+  }
+}
+async function resolveFileDownload2(host, token) {
+  const grants = host.storage.fileDownloadGrants;
+  if (!grants || !TOKEN_PATTERN.test(token))
+    return null;
+  const grant = await grants.findByTokenHash({ projectId: host.id, tokenHash: hashToken(token) });
+  if (!grant || grant.revokedAt || grant.expiresAt.getTime() <= Date.now())
+    return null;
+  return grant.file;
+}
+function hashToken(token) {
+  return createHash("sha256").update(token).digest("hex");
+}
+function requireGrantStorage(storage) {
+  if (!storage.fileDownloadGrants) {
+    throw new Error("[Sixb] Download URLs require storage.fileDownloadGrants.");
+  }
+  return storage.fileDownloadGrants;
+}
+function expiryFrom(createdAt, expiresInMs) {
+  if (!Number.isSafeInteger(expiresInMs) || expiresInMs <= 0) {
+    throw new Error("[Sixb] expiresInMs must be a positive integer.");
+  }
+  const expiresAt = createdAt.getTime() + expiresInMs;
+  if (expiresAt > LATEST_EXPIRY_MS) {
+    throw new Error("[Sixb] expiresInMs must end before the year 10000.");
+  }
+  return new Date(expiresAt);
+}
+
+export { FILE_DOWNLOAD_ROUTE_PREFIX2, createFileDownloadUrl, revokeFileDownloadUrl, resolveFileDownload2 };
+
+//# debugId=0DA1ED5935603AF264756E2164756E21

package/dist/chunk-4ra628t7.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/blob-storage/download-urls.ts"],
+  "sourcesContent": [
+    "import { createHash, randomBytes, randomUUID } from \"node:crypto\"\nimport type { FileDownloadGrantRecord, FileDownloadGrantStorage, Storage } from \"../storage\"\nimport { BlobStorageError } from \"./errors\"\nimport type { BlobStorage, FileRef } from \"./types\"\nimport { isFileRef } from \"./validation\"\n\n/**\n * Download URLs let a third party that cannot hold a Sixb session — a social network fetching\n * media to publish, for instance — read one file for a bounded time.\n *\n * Each URL carries a random token. Storage keeps only its SHA-256, with the file, the expiry, and\n * the execution that issued it. The API looks the token up on every request, so any process\n * sharing the storage can issue a URL, and a URL can be revoked before it expires.\n *\n * The API serves the bytes itself rather than redirecting to the blob provider: fetchers such as\n * TikTok refuse redirects and accept only hosts whose ownership the developer verified.\n */\n\n/** Path prefix of the public route that serves download URLs. */\nexport const FILE_DOWNLOAD_ROUTE_PREFIX = \"/api/files/downloads/\"\n\nconst DEFAULT_EXPIRY_MS = 60 * 60 * 1000\n// SQLite compares ISO timestamps as text, which orders them correctly only for four-digit years.\nconst LATEST_EXPIRY_MS = Date.UTC(9999, 11, 31, 23, 59, 59, 999)\n/** 32 random bytes in base64url. */\nconst TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/\n\nexport interface CreateFileDownloadUrlOptions {\n  /** How long the URL stays valid. Defaults to one hour. */\n  readonly expiresInMs?: number\n}\n\nexport interface FileDownloadUrl {\n  /** Pass to `blobs.revokeDownloadUrl()` to stop the URL before it expires. */\n  readonly id: string\n  readonly url: string\n  readonly expiresAt: Date\n}\n\n/** What issuing and revoking need from the execution that asks. */\nexport interface FileDownloadUrlContext {\n  readonly projectId: string\n  readonly storage: Storage\n  readonly blobStorage: BlobStorage\n  readonly executionId: string\n  readonly apiPublicOrigin: string | undefined\n}\n\nexport async function createFileDownloadUrl(\n  context: FileDownloadUrlContext,\n  file: FileRef,\n  options: CreateFileDownloadUrlOptions = {}\n): Promise<FileDownloadUrl> {\n  if (!isFileRef(file)) {\n    throw new Error(\"[Sixb] blobs.createDownloadUrl() requires a valid file reference.\")\n  }\n  const createdAt = new Date()\n  const expiresAt = expiryFrom(createdAt, options.expiresInMs ?? DEFAULT_EXPIRY_MS)\n  const grants = requireGrantStorage(context.storage)\n  if (context.apiPublicOrigin === undefined) {\n    throw new Error(\n      \"[Sixb] blobs.createDownloadUrl() needs the API's public origin. Set SIXB_API_PUBLIC_ORIGIN for the API and every worker.\"\n    )\n  }\n  // Fail here, not when a third party fetches the URL minutes later and gets a bare 404.\n  const stat = await context.blobStorage.stat(file.blobId)\n  if (!stat || stat.digest !== file.digest || stat.sizeBytes !== file.sizeBytes) {\n    throw new BlobStorageError(`[Sixb] No stored blob matches file '${file.blobId}'.`)\n  }\n\n  const token = randomBytes(32).toString(\"base64url\")\n  const { logicalPath: _logicalPath, ...served } = file\n  const grant: FileDownloadGrantRecord = {\n    id: `filedownload_${randomUUID()}`,\n    projectId: context.projectId,\n    tokenHash: hashToken(token),\n    file: served,\n    executionId: context.executionId,\n    createdAt,\n    expiresAt,\n  }\n  await grants.create(grant)\n\n  return {\n    id: grant.id,\n    url: new URL(`${FILE_DOWNLOAD_ROUTE_PREFIX}${token}`, context.apiPublicOrigin).toString(),\n    expiresAt: grant.expiresAt,\n  }\n}\n\nexport async function revokeFileDownloadUrl(\n  context: FileDownloadUrlContext,\n  id: string\n): Promise<void> {\n  const revoked = await requireGrantStorage(context.storage).revoke({\n    projectId: context.projectId,\n    id,\n    revokedAt: new Date(),\n  })\n  if (!revoked) {\n    throw new Error(`[Sixb] Download URL '${id}' does not exist.`)\n  }\n}\n\n/** The file a token serves, or `null` when the token is unknown, expired, or revoked. */\nexport async function resolveFileDownload(\n  host: { readonly id: string; readonly storage: Storage },\n  token: string\n): Promise<FileRef | null> {\n  const grants = host.storage.fileDownloadGrants\n  if (!grants || !TOKEN_PATTERN.test(token)) return null\n\n  const grant = await grants.findByTokenHash({ projectId: host.id, tokenHash: hashToken(token) })\n  if (!grant || grant.revokedAt || grant.expiresAt.getTime() <= Date.now()) return null\n  return grant.file\n}\n\nfunction hashToken(token: string): string {\n  return createHash(\"sha256\").update(token).digest(\"hex\")\n}\n\nfunction requireGrantStorage(storage: Storage): FileDownloadGrantStorage {\n  if (!storage.fileDownloadGrants) {\n    throw new Error(\"[Sixb] Download URLs require storage.fileDownloadGrants.\")\n  }\n  return storage.fileDownloadGrants\n}\n\nfunction expiryFrom(createdAt: Date, expiresInMs: number): Date {\n  if (!Number.isSafeInteger(expiresInMs) || expiresInMs <= 0) {\n    throw new Error(\"[Sixb] expiresInMs must be a positive integer.\")\n  }\n  const expiresAt = createdAt.getTime() + expiresInMs\n  if (expiresAt > LATEST_EXPIRY_MS) {\n    throw new Error(\"[Sixb] expiresInMs must end before the year 10000.\")\n  }\n  return new Date(expiresAt)\n}\n"
+  ],
+  "mappings": ";;;;;;;;;AAAA;AAmBO,IAAM,8BAA6B;AAE1C,IAAM,oBAAoB,KAAK,KAAK;AAEpC,IAAM,mBAAmB,KAAK,IAAI,MAAM,IAAI,IAAI,IAAI,IAAI,IAAI,GAAG;AAE/D,IAAM,gBAAgB;AAuBtB,eAAsB,qBAAqB,CACzC,SACA,MACA,UAAwC,CAAC,GACf;AAAA,EAC1B,IAAI,CAAC,WAAU,IAAI,GAAG;AAAA,IACpB,MAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AAAA,EACA,MAAM,YAAY,IAAI;AAAA,EACtB,MAAM,YAAY,WAAW,WAAW,QAAQ,eAAe,iBAAiB;AAAA,EAChF,MAAM,SAAS,oBAAoB,QAAQ,OAAO;AAAA,EAClD,IAAI,QAAQ,oBAAoB,WAAW;AAAA,IACzC,MAAM,IAAI,MACR,0HACF;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,MAAM,QAAQ,YAAY,KAAK,KAAK,MAAM;AAAA,EACvD,IAAI,CAAC,QAAQ,KAAK,WAAW,KAAK,UAAU,KAAK,cAAc,KAAK,WAAW;AAAA,IAC7E,MAAM,IAAI,kBAAiB,uCAAuC,KAAK,UAAU;AAAA,EACnF;AAAA,EAEA,MAAM,QAAQ,YAAY,EAAE,EAAE,SAAS,WAAW;AAAA,EAClD,QAAQ,aAAa,iBAAiB,WAAW;AAAA,EACjD,MAAM,QAAiC;AAAA,IACrC,IAAI,gBAAgB,WAAW;AAAA,IAC/B,WAAW,QAAQ;AAAA,IACnB,WAAW,UAAU,KAAK;AAAA,IAC1B,MAAM;AAAA,IACN,aAAa,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,EACF;AAAA,EACA,MAAM,OAAO,OAAO,KAAK;AAAA,EAEzB,OAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,KAAK,IAAI,IAAI,GAAG,8BAA6B,SAAS,QAAQ,eAAe,EAAE,SAAS;AAAA,IACxF,WAAW,MAAM;AAAA,EACnB;AAAA;AAGF,eAAsB,qBAAqB,CACzC,SACA,IACe;AAAA,EACf,MAAM,UAAU,MAAM,oBAAoB,QAAQ,OAAO,EAAE,OAAO;AAAA,IAChE,WAAW,QAAQ;AAAA,IACnB;AAAA,IACA,WAAW,IAAI;AAAA,EACjB,CAAC;AAAA,EACD,IAAI,CAAC,SAAS;AAAA,IACZ,MAAM,IAAI,MAAM,wBAAwB,qBAAqB;AAAA,EAC/D;AAAA;AAIF,eAAsB,oBAAmB,CACvC,MACA,OACyB;AAAA,EACzB,MAAM,SAAS,KAAK,QAAQ;AAAA,EAC5B,IAAI,CAAC,UAAU,CAAC,cAAc,KAAK,KAAK;AAAA,IAAG,OAAO;AAAA,EAElD,MAAM,QAAQ,MAAM,OAAO,gBAAgB,EAAE,WAAW,KAAK,IAAI,WAAW,UAAU,KAAK,EAAE,CAAC;AAAA,EAC9F,IAAI,CAAC,SAAS,MAAM,aAAa,MAAM,UAAU,QAAQ,KAAK,KAAK,IAAI;AAAA,IAAG,OAAO;AAAA,EACjF,OAAO,MAAM;AAAA;AAGf,SAAS,SAAS,CAAC,OAAuB;AAAA,EACxC,OAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AAAA;AAGxD,SAAS,mBAAmB,CAAC,SAA4C;AAAA,EACvE,IAAI,CAAC,QAAQ,oBAAoB;AAAA,IAC/B,MAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AAAA,EACA,OAAO,QAAQ;AAAA;AAGjB,SAAS,UAAU,CAAC,WAAiB,aAA2B;AAAA,EAC9D,IAAI,CAAC,OAAO,cAAc,WAAW,KAAK,eAAe,GAAG;AAAA,IAC1D,MAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AAAA,EACA,MAAM,YAAY,UAAU,QAAQ,IAAI;AAAA,EACxC,IAAI,YAAY,kBAAkB;AAAA,IAChC,MAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AAAA,EACA,OAAO,IAAI,KAAK,SAAS;AAAA;",
+  "debugId": "0DA1ED5935603AF264756E2164756E21",
+  "names": []
+}

package/dist/{chunk-mmac1mp6.js → chunk-52c5zb0z.js}

@@ -4,11 +4,11 @@ import {
   createAiModelCallLimitController2,
   AiModelCallRecorder2,
   enqueueAiModelCallRecovery2
-} from "./chunk-py2dw8cw.js";
+} from "./chunk-7ecp4v7a.js";
 import {
   executionRecordInputFromRuntime,
   ensureExecutionRecord2
-} from "./chunk-8w27xf9e.js";
+} from "./chunk-a7er86jd.js";
 
 // src/models/execution/session.ts
 class ModelExecutionSession {

package/dist/{chunk-8fjmqjyx.js → chunk-5be2ath4.js}

@@ -8,7 +8,7 @@ import {
 import {
   findPrimitiveSchema,
   resolveSemanticType2
-} from "./chunk-d8yes9yx.js";
+} from "./chunk-rpxz486p.js";
 import {
   kernelOperationId,
   kernelOperationFromId

package/dist/{chunk-2fv8sajb.js → chunk-5thzcb8g.js}

@@ -2,10 +2,10 @@
 import {
   normalizeSchemaValue2,
   coerceSchemaValueToTyped2
-} from "./chunk-d8yes9yx.js";
+} from "./chunk-rpxz486p.js";
 import {
   validateSchemaOrRefValue2
-} from "./chunk-drz59ve0.js";
+} from "./chunk-rx7h5fdx.js";
 import {
   OntologyValidationError2
 } from "./chunk-cqr3acm1.js";